This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft File: 8V__itxu51EnLAqR0F3K_36NLWk.mft (raw, json) Hash identifier: L4btTjjNH8BPxUeIUmmmR1dUdBfJPalyrrVr4vfRE7E= Subject key identifier: E6:6A:30:7F:B6:36:FC:70:39:7A:E9:80:66:36:EA:AA:4F:ED:3A:E5 Authority key identifier: F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69 Certificate issuer: /CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69 Certificate serial: 019B25530A4C7EC609E57C58EA5418712665 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft Manifest number: 177A Signing time: Tue 16 Dec 2025 04:02:37 +0000 Manifest this update: Tue 16 Dec 2025 04:02:37 +0000 Manifest next update: Wed 17 Dec 2025 04:02:37 +0000 Files and hashes: 1: 8V__itxu51EnLAqR0F3K_36NLWk.crl (hash: tta51hI/95+dssu8E/zqIq7Tt+rc0h1ROIaN2FnYKUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:53:0a:4c:7e:c6:09:e5:7c:58:ea:54:18:71:26:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69 Validity Not Before: Dec 16 04:02:37 2025 GMT Not After : Dec 17 04:02:37 2025 GMT Subject: CN=e66a307fb636fc70397ae9806636eaaa4fed3ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:84:82:dd:ba:31:e4:10:f4:d0:69:a0:3d:72: ea:bb:74:29:62:d7:ed:87:8d:70:f0:64:8b:59:7d: ea:20:26:2a:47:7d:fb:35:dc:b5:73:6e:c7:96:4e: ec:91:19:09:87:f5:e9:96:11:a8:45:b3:f3:1a:e8: db:33:f9:79:d8:a2:09:e3:da:cb:bb:1e:d8:78:2f: ad:24:ba:cb:2f:7e:47:76:5a:10:0a:17:f9:5b:b9: 64:2c:d7:05:da:a5:a4:f4:df:e6:9d:2e:8f:ee:79: cd:ff:f7:62:45:23:ca:83:c7:2f:6c:04:02:16:f8: 7d:c0:c7:be:f6:dd:2a:91:34:e2:c7:6c:be:1f:89: 77:87:ee:03:d7:c0:6f:c0:85:7e:39:55:8a:7d:6c: 62:36:78:fe:0b:85:c0:a0:e1:0f:87:2f:d2:fb:0f: b0:38:9f:ef:3c:30:48:ad:51:93:95:0d:2e:66:91: 2b:a5:74:8d:bb:b1:c4:d2:4b:b2:df:af:12:0a:cb: 00:6a:48:a0:8e:9e:20:63:bd:98:7e:90:f4:91:10: 7e:53:16:f5:23:23:98:30:40:59:18:65:93:2e:2d: 23:13:0c:2d:1b:8c:ec:56:dd:8c:94:a0:38:bd:02: 1f:01:72:26:19:54:1b:93:63:dc:2f:0c:75:58:60: fa:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:6A:30:7F:B6:36:FC:70:39:7A:E9:80:66:36:EA:AA:4F:ED:3A:E5 X509v3 Authority Key Identifier: keyid:F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:72:7a:c1:24:3c:f2:10:d3:ad:9a:6a:d8:30:94:cc:cc:53: 26:05:cb:cd:b2:7f:56:b2:2e:ef:7a:83:fc:11:3d:0d:f5:7b: 46:cd:89:08:bd:5a:28:05:93:60:ea:8b:b0:2a:46:c3:49:d9: 93:9c:89:e0:24:2e:38:fe:57:24:c9:58:63:da:f4:8e:94:d8: 1f:78:63:80:b9:fc:d2:22:1e:0f:a0:ed:c7:53:33:2a:2e:b0: c2:98:f2:a7:02:78:83:2b:4e:27:49:26:0f:11:80:08:57:aa: 7c:80:73:a2:36:a8:8f:6b:7c:3c:ba:06:ce:9c:3c:26:f0:57: 73:0a:ff:e8:cd:5c:17:d3:ae:05:9d:8b:74:6d:e1:fd:3a:2c: a5:64:39:12:27:c1:55:d0:ba:8c:7d:fb:95:56:92:5a:dd:42: 81:4c:38:a4:b6:2d:3e:90:d0:92:06:22:54:d1:b0:5c:65:7c: 2d:30:0b:c6:52:b6:3b:32:ed:9b:d7:55:4b:e5:89:0c:81:8a: d6:58:62:e2:f8:06:13:7c:39:9c:94:9e:7e:24:ec:d6:0d:61: 1a:12:75:22:0a:53:9d:af:cc:df:63:f3:50:3b:63:2d:ba:f6: 12:13:d2:c6:78:49:51:b1:54:52:73:6c:02:12:b6:0d:86:59: 9d:be:bc:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUwpMfsYJ5XxY6lQYcSZlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNWZmZjhhZGM2ZWU3NTEyNzJjMGE5MWQwNWRjYWZmN2U4 ZDJkNjkwHhcNMjUxMjE2MDQwMjM3WhcNMjUxMjE3MDQwMjM3WjAzMTEwLwYDVQQD EyhlNjZhMzA3ZmI2MzZmYzcwMzk3YWU5ODA2NjM2ZWFhYTRmZWQzYWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ISC3box5BD00GmgPXLqu3QpYtft h41w8GSLWX3qICYqR337Ndy1c27Hlk7skRkJh/XplhGoRbPzGujbM/l52KIJ49rL ux7YeC+tJLrLL35HdloQChf5W7lkLNcF2qWk9N/mnS6P7nnN//diRSPKg8cvbAQC Fvh9wMe+9t0qkTTix2y+H4l3h+4D18BvwIV+OVWKfWxiNnj+C4XAoOEPhy/S+w+w OJ/vPDBIrVGTlQ0uZpErpXSNu7HE0kuy368SCssAakigjp4gY72YfpD0kRB+Uxb1 IyOYMEBZGGWTLi0jEwwtG4zsVt2MlKA4vQIfAXImGVQbk2PcLwx1WGD6wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZqMH+2NvxwOXrpgGY26qpP7TrlMB8GA1UdIwQY MBaAFPFf/4rcbudRJywKkdBdyv9+jS1pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFZfX2l0eHU1MUVuTEFxUjBGM0tfMzZOTFdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wYWM5ZDAtZmU1YS00MDAyLTkyZWQt YzNmNGI5ODU3MTRjLzEvOFZfX2l0eHU1MUVuTEFxUjBGM0tfMzZOTFdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wYWM5ZDAtZmU1YS00MDAyLTkyZWQtYzNmNGI5ODU3MTRj LzEvOFZfX2l0eHU1MUVuTEFxUjBGM0tfMzZOTFdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3J6wSQ8 8hDTrZpq2DCUzMxTJgXLzbJ/VrIu73qD/BE9DfV7Rs2JCL1aKAWTYOqLsCpGw0nZ k5yJ4CQuOP5XJMlYY9r0jpTYH3hjgLn80iIeD6Dtx1MzKi6wwpjypwJ4gytOJ0km DxGACFeqfIBzojaoj2t8PLoGzpw8JvBXcwr/6M1cF9OuBZ2LdG3h/TospWQ5EifB VdC6jH37lVaSWt1CgUw4pLYtPpDQkgYiVNGwXGV8LTALxlK2OzLtm9dVS+WJDIGK 1lhi4vgGE3w5nJSefiTs1g1hGhJ1IgpTna/M32PzUDtjLbr2EhPSxnhJUbFUUnNs AhK2DYZZnb68JQ== -----END CERTIFICATE-----Generated at Tue Dec 16 13:04:35 2025 by rpki-client