This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft File: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft (raw, json) Hash identifier: JTFq4zb4WIHJuQnJ4lekJOezmCBvtLAhIna7CatucUs= Subject key identifier: 97:1C:E6:47:03:1B:63:DF:32:6F:D1:75:9E:EF:77:1C:F3:55:3B:8F Authority key identifier: 8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83 Certificate issuer: /CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83 Certificate serial: 019B5976915E961B8798DEB2FE3085B783FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft Manifest number: 1729 Signing time: Fri 26 Dec 2025 07:01:41 +0000 Manifest this update: Fri 26 Dec 2025 07:01:41 +0000 Manifest next update: Sat 27 Dec 2025 07:01:41 +0000 Files and hashes: 1: di6vtJn17ke553wiZoaxDGK1MLE.roa (hash: HpCMH1Ia0lvZ8f3O26OMSYPbId0TPu+1abwCSdtco9A=) 2: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl (hash: QEB0TAzDBAR63S3MuzlHJz/+SNGuiGgUrPT1mRTCojE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 07:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:91:5e:96:1b:87:98:de:b2:fe:30:85:b7:83:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83 Validity Not Before: Dec 26 07:01:41 2025 GMT Not After : Dec 27 07:01:41 2025 GMT Subject: CN=971ce647031b63df326fd1759eef771cf3553b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3e:f3:80:00:f4:cf:48:35:9f:70:03:d3:4d: 07:e7:1c:67:44:0d:25:dd:a5:84:9f:ce:bf:e8:97: bf:e2:bf:52:b5:c7:fb:fb:54:c8:db:f5:83:6b:b9: 9f:ab:7a:46:ca:82:ad:d5:50:e4:b2:76:fc:fc:2d: b3:4d:a5:5c:50:9c:09:51:67:5a:ef:fe:d9:37:59: 13:75:e0:41:bb:1d:b7:10:fb:d5:24:d9:f7:3d:af: 60:ad:3c:7a:d3:d8:1a:54:aa:54:a1:ec:57:4f:fa: cf:38:73:37:6d:4b:a3:67:c0:8c:23:99:b4:30:33: 89:47:40:29:0d:a6:6c:dc:a1:58:c2:ae:42:8b:fd: dc:c4:aa:c0:12:46:d2:c0:2d:dc:41:30:4c:2d:ac: 1c:46:90:ff:37:f8:d9:36:01:d1:d7:7b:c2:ef:7c: 65:7e:2b:c5:6b:97:ec:d0:a6:ff:c8:b2:03:f0:91: f2:b8:5c:f6:07:d9:22:04:8d:71:77:42:de:55:49: 7f:67:96:46:8d:b9:6e:d4:ae:fc:98:5b:b1:06:28: 39:90:66:65:e4:e0:10:97:64:58:b0:75:ba:d2:f8: ac:20:5f:63:50:21:6c:e6:2c:c8:c1:13:e8:f6:ce: 0b:52:b0:1d:9c:17:62:0e:a3:06:69:88:c4:77:35: 94:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1C:E6:47:03:1B:63:DF:32:6F:D1:75:9E:EF:77:1C:F3:55:3B:8F X509v3 Authority Key Identifier: keyid:8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ef:6b:59:36:a6:5a:80:79:85:ae:c8:30:78:1e:08:83:1f: e7:a7:f9:27:2a:a6:51:54:ab:ff:19:20:57:d5:3c:45:ab:f3: 53:f1:6d:d8:86:3a:b0:02:14:81:af:ad:56:67:d4:7c:a0:6d: 9e:ee:6a:80:85:f3:ed:0a:c1:3e:a3:49:62:f6:b8:86:34:37: 97:b0:5e:4a:5b:a0:67:d5:67:41:85:e7:49:13:4c:34:3b:60: 48:16:5c:e7:a0:79:7b:e7:cc:4e:a1:59:2e:0f:d0:ed:1f:68: 42:c6:95:20:b6:33:17:85:4c:6e:71:88:6f:1c:54:c4:ba:20: dc:ca:d1:b1:05:ce:e2:76:de:b5:16:d3:ba:62:db:bb:65:aa: 7e:e5:77:50:8e:d8:14:4d:2b:b3:30:67:4b:23:6a:05:06:44: 7b:97:af:13:98:39:79:ed:79:1e:60:65:b4:d6:23:98:55:1a: f8:25:48:d4:a9:c5:63:50:c7:3c:11:b5:83:72:86:71:98:88: 4e:f5:ec:f6:88:f5:59:47:d2:77:07:00:af:b3:8c:1b:0f:75: 6b:b6:99:f4:5d:67:b3:d3:ab:62:7e:93:ae:fd:97:2a:67:b1: 39:3e:c0:34:b6:29:9c:a6:2e:45:8b:af:72:4b:b0:02:04:2a: 29:6b:44:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdpFelhuHmN6y/jCFt4P6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiY2JkYjUxZWI4MDIyNmY0MTQ3N2E3YmM1MGUwZjk2MTQ1 NWVkODMwHhcNMjUxMjI2MDcwMTQxWhcNMjUxMjI3MDcwMTQxWjAzMTEwLwYDVQQD Eyg5NzFjZTY0NzAzMWI2M2RmMzI2ZmQxNzU5ZWVmNzcxY2YzNTUzYjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD7zgAD0z0g1n3AD000H5xxnRA0l 3aWEn86/6Je/4r9Stcf7+1TI2/WDa7mfq3pGyoKt1VDksnb8/C2zTaVcUJwJUWda 7/7ZN1kTdeBBux23EPvVJNn3Pa9grTx609gaVKpUoexXT/rPOHM3bUujZ8CMI5m0 MDOJR0ApDaZs3KFYwq5Ci/3cxKrAEkbSwC3cQTBMLawcRpD/N/jZNgHR13vC73xl fivFa5fs0Kb/yLID8JHyuFz2B9kiBI1xd0LeVUl/Z5ZGjblu1K78mFuxBig5kGZl 5OAQl2RYsHW60visIF9jUCFs5izIwRPo9s4LUrAdnBdiDqMGaYjEdzWUQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcc5kcDG2PfMm/RdZ7vdxzzVTuPMB8GA1UdIwQY MBaAFIvL21HrgCJvQUd6e8UOD5YUVe2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81NjRmM2EtNTJkNi00ZDA5LTgxZTIt ZWZhOTM5MWY3ZDllLzEvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy81NjRmM2EtNTJkNi00ZDA5LTgxZTItZWZhOTM5MWY3ZDll LzEvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMO9rWTam WoB5ha7IMHgeCIMf56f5JyqmUVSr/xkgV9U8RavzU/Ft2IY6sAIUga+tVmfUfKBt nu5qgIXz7QrBPqNJYva4hjQ3l7BeSlugZ9VnQYXnSRNMNDtgSBZc56B5e+fMTqFZ Lg/Q7R9oQsaVILYzF4VMbnGIbxxUxLog3MrRsQXO4nbetRbTumLbu2WqfuV3UI7Y FE0rszBnSyNqBQZEe5evE5g5ee15HmBltNYjmFUa+CVI1KnFY1DHPBG1g3KGcZiI TvXs9oj1WUfSdwcAr7OMGw91a7aZ9F1ns9OrYn6Trv2XKmexOT7ANLYpnKYuRYuv ckuwAgQqKWtEIw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:50 2025 by rpki-client