This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft File: 8runwtAt4Uiqno-gmhx6K3cKGdw.mft (raw, json) Hash identifier: 7qNTNmOlgj5J+aL627VlYIJLvAMqlhdkUo7bbNqIsFk= Subject key identifier: A7:0E:40:EF:A0:43:C0:21:F6:39:17:2A:BF:15:25:82:F0:56:D9:4C Authority key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC Certificate issuer: /CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc Certificate serial: 019B4248EC7679B2A685E184CA1B18289296 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 19:00:33 +0000 Manifest this update: Sun 21 Dec 2025 19:00:33 +0000 Manifest next update: Mon 22 Dec 2025 19:00:33 +0000 Files and hashes: 1: 8runwtAt4Uiqno-gmhx6K3cKGdw.crl (hash: j5wkdRgEx3Xg0LSwtocQJ+u5xtG+4JYHM0/F3wwjM6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:48:ec:76:79:b2:a6:85:e1:84:ca:1b:18:28:92:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc Validity Not Before: Dec 21 19:00:33 2025 GMT Not After : Dec 22 19:00:33 2025 GMT Subject: CN=a70e40efa043c021f639172abf152582f056d94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:34:b6:c1:1b:1a:71:98:28:9e:23:56:74:c4: 80:45:f9:b6:04:e3:55:30:c2:a8:ab:83:45:c3:48: c5:bc:00:08:c9:02:dc:9a:f7:41:28:ee:ad:fe:9e: 2c:bd:77:c4:7b:d4:86:94:f1:43:d7:19:71:4d:59: a0:03:0f:ba:0c:03:09:df:0a:e5:1b:96:26:7d:a7: e3:64:a9:33:6e:56:0a:bd:05:60:f9:d8:e7:b9:e7: 2b:5a:bb:11:eb:bb:77:3f:40:2b:09:29:91:2d:db: dd:66:a2:96:48:85:b1:e2:82:00:a9:b9:04:0e:25: bd:1d:33:38:bb:47:1a:85:f6:44:dd:79:01:57:43: 6e:33:13:63:73:81:63:35:06:53:93:28:50:68:81: 69:69:63:41:4b:8f:bb:72:1d:be:2d:d0:37:eb:01: 3b:92:3c:54:4d:ee:43:e2:e8:11:bb:98:05:3d:af: ef:c1:9c:fa:8c:15:af:89:8c:d7:bc:82:6a:08:30: fc:54:97:ba:0a:e5:04:2d:8e:6b:af:ad:d3:df:e8: 9a:8a:94:b8:af:a0:cf:15:27:3e:cb:aa:17:d7:f4: 98:c8:63:94:62:d1:4b:75:40:d8:32:15:83:db:f2: e6:4b:7c:eb:f8:18:e2:77:2b:a9:0f:0d:4f:65:93: 90:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0E:40:EF:A0:43:C0:21:F6:39:17:2A:BF:15:25:82:F0:56:D9:4C X509v3 Authority Key Identifier: keyid:F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:15:4d:19:b6:16:a9:ba:00:97:dc:70:f8:24:a8:23:27:64: c1:03:ad:bb:b2:24:e7:65:a7:a6:86:57:c1:c8:7c:24:26:f0: 78:44:9d:30:ba:0d:1b:45:67:aa:92:e6:b2:5f:d7:ed:63:46: a7:db:33:13:bb:1c:bb:39:59:d1:7a:bd:cc:e0:d2:f6:84:63: a0:2c:44:89:9a:09:86:83:89:ca:45:73:73:64:77:f0:76:7b: e6:4d:6e:62:75:50:b5:5a:82:a5:75:e1:fc:04:b0:1b:6a:08: 37:d4:45:82:ae:0e:14:7e:45:f6:8b:93:dd:63:9d:41:83:c0: 46:69:e3:25:b9:1a:17:50:7a:df:85:da:84:c6:8b:f7:6c:3f: a7:4c:c1:2b:68:d4:87:08:4f:65:54:66:e1:c3:24:63:78:c3: c7:01:6b:1e:ea:86:aa:73:cf:0a:a2:a7:28:af:34:ea:bf:0f: e6:0e:36:4b:59:18:c8:0d:99:32:63:29:ed:ab:bf:3f:c7:f7: af:e3:d0:80:35:63:a9:fa:d9:12:3b:44:f2:5b:be:8a:9f:38: a4:b4:cc:e8:ad:8b:31:90:31:00:20:1d:88:c6:f1:3e:93:e2: c8:be:aa:2a:af:17:b3:75:d2:30:18:a9:07:3a:d0:f9:7d:9e: 9b:b1:ce:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSOx2ebKmheGEyhsYKJKWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYmJhN2MyZDAyZGUxNDhhYTllOGZhMDlhMWM3YTJiNzcw YTE5ZGMwHhcNMjUxMjIxMTkwMDMzWhcNMjUxMjIyMTkwMDMzWjAzMTEwLwYDVQQD EyhhNzBlNDBlZmEwNDNjMDIxZjYzOTE3MmFiZjE1MjU4MmYwNTZkOTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jS2wRsacZgoniNWdMSARfm2BONV MMKoq4NFw0jFvAAIyQLcmvdBKO6t/p4svXfEe9SGlPFD1xlxTVmgAw+6DAMJ3wrl G5YmfafjZKkzblYKvQVg+djnuecrWrsR67t3P0ArCSmRLdvdZqKWSIWx4oIAqbkE DiW9HTM4u0cahfZE3XkBV0NuMxNjc4FjNQZTkyhQaIFpaWNBS4+7ch2+LdA36wE7 kjxUTe5D4ugRu5gFPa/vwZz6jBWviYzXvIJqCDD8VJe6CuUELY5rr63T3+iaipS4 r6DPFSc+y6oX1/SYyGOUYtFLdUDYMhWD2/LmS3zr+BjidyupDw1PZZOQBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcOQO+gQ8Ah9jkXKr8VJYLwVtlMMB8GA1UdIwQY MBaAFPK7p8LQLeFIqp6PoJoceit3ChncMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHJ1bnd0QXQ0VWlxbm8tZ21oeDZLM2NLR2R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85NTcxMDktMzg5Mi00ZGM0LTgxNmEt NWJkZDE0MmJhZTc0LzEvOHJ1bnd0QXQ0VWlxbm8tZ21oeDZLM2NLR2R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy85NTcxMDktMzg5Mi00ZGM0LTgxNmEtNWJkZDE0MmJhZTc0 LzEvOHJ1bnd0QXQ0VWlxbm8tZ21oeDZLM2NLR2R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBVNGbYW qboAl9xw+CSoIydkwQOtu7Ik52WnpoZXwch8JCbweESdMLoNG0VnqpLmsl/X7WNG p9szE7scuzlZ0Xq9zODS9oRjoCxEiZoJhoOJykVzc2R38HZ75k1uYnVQtVqCpXXh /ASwG2oIN9RFgq4OFH5F9ouT3WOdQYPARmnjJbkaF1B634XahMaL92w/p0zBK2jU hwhPZVRm4cMkY3jDxwFrHuqGqnPPCqKnKK806r8P5g42S1kYyA2ZMmMp7au/P8f3 r+PQgDVjqfrZEjtE8lu+ip84pLTM6K2LMZAxACAdiMbxPpPiyL6qKq8Xs3XSMBip BzrQ+X2em7HO6w== -----END CERTIFICATE-----Generated at Mon Dec 22 04:20:43 2025 by rpki-client