This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft File: 8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json) Hash identifier: xTCjWr3QuOmLRy9oHpmBVXtfSiD1hcuKtnMfpwNqIXE= Subject key identifier: 14:46:AB:BD:0F:90:38:70:2A:83:B6:6F:8C:C7:7B:CF:F0:AE:AA:79 Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b Certificate serial: 019B5A88C989ABA7942C9AAD48504FD2B98E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft Manifest number: 0B86 Signing time: Fri 26 Dec 2025 12:01:12 +0000 Manifest this update: Fri 26 Dec 2025 12:01:12 +0000 Manifest next update: Sat 27 Dec 2025 12:01:12 +0000 Files and hashes: 1: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: bdlj/nmZ9Rw7E6OnHUXbUK2xywlK/SvrTUA8/navKMU=) 2: FgbdG0fmPUK0umb6fkCIHBoc4Hk.roa (hash: +cH4y6vUFW9ebAdtQK64RlvVCm6ewXq634ESBVns0pY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:c9:89:ab:a7:94:2c:9a:ad:48:50:4f:d2:b9:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b Validity Not Before: Dec 26 12:01:12 2025 GMT Not After : Dec 27 12:01:12 2025 GMT Subject: CN=1446abbd0f9038702a83b66f8cc77bcff0aeaa79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:11:1f:c8:8e:f7:fb:e5:e5:c6:ad:49:db:26: ff:3e:89:97:99:e5:bc:f9:ab:db:57:83:28:de:36: 45:1f:28:cd:c6:f3:e9:7f:bf:07:08:44:c4:8f:ac: 5a:68:0a:21:c5:b0:15:5e:74:54:5d:5c:3a:ac:d5: 34:5c:56:6e:e7:44:fe:0c:30:72:80:b6:79:33:42: 51:f7:7a:17:6f:83:51:49:ac:0c:7b:4f:69:dc:de: 01:22:6b:a9:d5:c8:e4:61:dd:fe:52:1b:27:38:97: d2:1f:c3:3b:f2:3f:d7:80:a1:47:59:17:8a:49:2b: 21:a3:cd:87:b1:c7:71:b8:76:01:b2:80:4e:37:99: fd:3c:39:92:68:a8:c3:14:29:e8:7d:aa:b7:06:f1: 03:c7:cc:54:36:1a:4d:cf:16:ef:ff:58:c7:31:7e: 0e:4c:4f:0d:f2:c2:dc:11:af:8f:40:a6:5f:35:be: 3d:c5:ec:ae:92:96:55:11:40:db:ed:7c:5a:87:25: 2b:d9:0a:8d:6e:60:11:2d:05:8a:51:7c:94:dd:c7: 0b:7c:99:d3:6a:09:8c:09:0b:cc:00:0c:69:0a:cf: b6:5b:ac:27:a3:78:78:3f:27:19:b3:9c:65:f8:38: ad:18:64:0a:13:b6:65:19:dd:7b:8c:65:a7:19:7d: 37:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:46:AB:BD:0F:90:38:70:2A:83:B6:6F:8C:C7:7B:CF:F0:AE:AA:79 X509v3 Authority Key Identifier: keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:68:7a:62:9e:92:99:df:11:59:71:22:ea:6a:fb:9f:e2:3d: 74:4c:f0:2d:46:38:d8:9d:85:f7:b0:c0:05:75:ca:7e:ba:9c: 6d:1f:be:35:72:f7:60:69:be:be:ef:db:2a:66:0c:ea:28:be: fb:59:68:88:5e:76:9b:76:1d:44:ac:a5:d9:d3:3d:c7:9c:e4: 19:e8:4a:b1:5f:9b:fe:56:15:6c:82:55:b2:10:f6:40:3d:7f: 8b:16:fd:88:78:3a:0f:f0:ee:f0:af:54:29:c8:f4:7e:d7:69: d9:1a:ee:6e:b1:0e:00:63:88:4a:16:42:28:6c:7e:90:a6:bc: 3d:0b:83:a3:84:2e:5b:53:0d:f9:1d:d1:bf:8a:2b:d9:b9:26: 64:c7:10:6b:f2:7a:dd:7f:a5:11:3c:f6:ad:45:40:f1:c3:94: 36:a8:08:b5:9d:64:52:eb:71:e7:44:2d:83:39:29:fa:35:70: 38:4c:3e:f7:a0:da:d0:c8:8a:b5:7b:c4:a3:c5:96:99:e3:df: 37:d8:b9:2e:7b:9e:a7:0a:0a:07:b3:62:13:ec:b0:26:7c:90: 15:78:2a:e5:68:65:8f:c0:2d:a1:f8:ad:ef:62:24:d5:93:00: 34:62:b7:a9:83:bd:fc:bb:19:e0:e8:ea:12:9d:b9:22:5d:09: 04:d4:46:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiMmJq6eULJqtSFBP0rmOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzM2FlNWQyYzFhMzEwN2VmMTJmNGQ2ZGQ5YzkwZjI0OWMy Njc4MWIwHhcNMjUxMjI2MTIwMTEyWhcNMjUxMjI3MTIwMTEyWjAzMTEwLwYDVQQD EygxNDQ2YWJiZDBmOTAzODcwMmE4M2I2NmY4Y2M3N2JjZmYwYWVhYTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixEfyI73++Xlxq1J2yb/PomXmeW8 +avbV4Mo3jZFHyjNxvPpf78HCETEj6xaaAohxbAVXnRUXVw6rNU0XFZu50T+DDBy gLZ5M0JR93oXb4NRSawMe09p3N4BImup1cjkYd3+UhsnOJfSH8M78j/XgKFHWReK SSsho82HscdxuHYBsoBON5n9PDmSaKjDFCnofaq3BvEDx8xUNhpNzxbv/1jHMX4O TE8N8sLcEa+PQKZfNb49xeyukpZVEUDb7XxahyUr2QqNbmARLQWKUXyU3ccLfJnT agmMCQvMAAxpCs+2W6wno3h4PycZs5xl+DitGGQKE7ZlGd17jGWnGX03lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRGq70PkDhwKoO2b4zHe8/wrqp5MB8GA1UdIwQY MBaAFPM65dLBoxB+8S9NbdnJDyScJngbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jYmJkYzgtYTE4MC00ZmQ5LWFkZTQt ZmEyNTY2ZTU4Mjg2LzEvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9jYmJkYzgtYTE4MC00ZmQ5LWFkZTQtZmEyNTY2ZTU4Mjg2 LzEvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2h6Yp6S md8RWXEi6mr7n+I9dEzwLUY42J2F97DABXXKfrqcbR++NXL3YGm+vu/bKmYM6ii+ +1loiF52m3YdRKyl2dM9x5zkGehKsV+b/lYVbIJVshD2QD1/ixb9iHg6D/Du8K9U Kcj0ftdp2RrubrEOAGOIShZCKGx+kKa8PQuDo4QuW1MN+R3Rv4or2bkmZMcQa/J6 3X+lETz2rUVA8cOUNqgItZ1kUutx50Qtgzkp+jVwOEw+96Da0MiKtXvEo8WWmePf N9i5LnuepwoKB7NiE+ywJnyQFXgq5Whlj8Atofit72Ik1ZMANGK3qYO9/LsZ4Ojq Ep25Il0JBNRGSA== -----END CERTIFICATE-----Generated at Fri Dec 26 17:42:45 2025 by rpki-client