This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json) Hash identifier: 8+I0MIyeGOpMpfxVWdNukWVv0GcQWHHTLTGFeTCRcEA= Subject key identifier: 5D:21:DA:B3:8A:1B:A8:7E:1D:E2:D8:95:73:17:3D:CF:94:67:36:67 Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0 Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0 Certificate serial: 019B34C6226A2A6E39C517F39EB9E8B1E3AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft Manifest number: 1048 Signing time: Fri 19 Dec 2025 04:02:38 +0000 Manifest this update: Fri 19 Dec 2025 04:02:38 +0000 Manifest next update: Sat 20 Dec 2025 04:02:38 +0000 Files and hashes: 1: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: KpOZXtxFKKINDVjkyNrFVeICacXLhMH5RhZ93+bJUMg=) 2: FSVMQ4pJCPFoKLSJXQ6SN5sd20I.roa (hash: fn+/BnxEhFcy9tBiYyHkUVxuspdk8dmiFltXF8v88aI=) 3: Z9i6om7Xm-VJTFYr4Gx0uAR_icw.roa (hash: ANNmvdhb68U9bMYUn5YDoB+t5R72eGhNlvH1jCjqt5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:22:6a:2a:6e:39:c5:17:f3:9e:b9:e8:b1:e3:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0 Validity Not Before: Dec 19 04:02:38 2025 GMT Not After : Dec 20 04:02:38 2025 GMT Subject: CN=5d21dab38a1ba87e1de2d89573173dcf94673667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:92:39:9b:c5:86:2e:92:27:ee:ab:43:14:32: c8:44:c0:7c:50:fb:e0:38:46:e6:c2:60:66:f4:ff: 13:f5:3e:1b:81:3f:01:c2:ee:e3:bf:4f:87:19:5f: c0:eb:19:e5:84:9a:2f:c4:f6:ea:c3:16:df:77:c4: da:99:2a:c4:d7:28:80:38:cb:47:a3:1f:86:25:7b: 0d:d8:2a:02:de:fd:5f:04:39:be:38:9b:ad:55:c7: 53:66:14:e4:27:7d:ec:18:72:cd:91:f3:dd:4b:21: 2b:a8:06:5c:96:48:88:60:63:88:df:69:ac:bf:2e: f3:39:9a:af:b1:4b:25:8d:2b:5a:22:7d:3e:b8:ae: a0:93:ae:49:2d:00:1d:af:44:79:99:fb:68:46:bf: a4:48:5e:30:07:8a:b9:54:5e:b0:16:81:2f:b2:71: fb:98:60:2c:af:4b:32:00:9a:20:8a:6e:08:68:73: da:a9:09:27:50:2f:5b:1a:91:1c:3d:28:8b:02:e6: dd:3d:f4:20:ab:a9:2a:f8:74:a4:d8:4e:e0:a6:41: 29:1a:f9:c5:1e:ad:2f:d0:5c:f0:20:c9:e7:b4:dd: 45:6d:b0:c5:33:04:6f:9e:9a:85:2b:cf:f8:ff:ba: fc:55:a9:7a:8f:3c:82:da:f7:63:13:3e:c9:20:d3: ab:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:21:DA:B3:8A:1B:A8:7E:1D:E2:D8:95:73:17:3D:CF:94:67:36:67 X509v3 Authority Key Identifier: keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:7a:0e:37:a4:2b:47:57:ec:4e:17:30:ca:4f:03:39:6f:40: 93:6a:66:37:ae:df:c4:8f:99:ad:45:ff:da:02:6a:16:2b:65: 66:c3:22:19:37:f6:3e:50:2b:e2:f4:60:26:14:b3:36:03:a7: e6:bf:52:52:b2:43:3e:ca:a2:22:b1:6d:2d:e1:82:0c:fa:da: 1f:ba:34:73:84:ab:2f:e6:0c:b1:b9:65:59:5d:c5:c5:45:3c: d1:50:73:39:ad:f6:c6:3f:e8:b6:76:65:95:98:c8:70:f4:87: 8a:6b:30:cd:d7:1e:c9:6a:09:07:19:a7:6d:58:bc:7c:50:f8: 7b:99:22:dc:02:5f:fe:87:a2:c7:05:e3:c3:72:fb:86:4d:b2: 37:89:84:d7:60:44:a5:3c:14:79:46:6a:e0:7d:6c:d4:d5:1f: c4:de:87:84:77:10:87:a4:83:99:fb:44:51:3b:22:39:57:f7: 99:7a:cb:c5:76:21:4f:c6:39:7a:cd:71:42:d1:86:a1:aa:ac: 22:fc:f4:7b:11:46:98:41:c0:4b:d7:2d:6a:85:43:26:ed:b9: 74:74:1b:64:cc:2c:d7:4e:47:ce:25:fe:f8:3b:0c:8e:12:1f: ce:60:2c:a5:e6:32:ba:29:b4:e4:1c:f8:e8:a3:c1:a9:d0:8e: 4c:92:44:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xiJqKm45xRfznrnoseOvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwOGZiYTUyNjM1MTliN2MzYTIxNTVjNjk4NzgyMTc3NzZk ZWZiYTAwHhcNMjUxMjE5MDQwMjM4WhcNMjUxMjIwMDQwMjM4WjAzMTEwLwYDVQQD Eyg1ZDIxZGFiMzhhMWJhODdlMWRlMmQ4OTU3MzE3M2RjZjk0NjczNjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pI5m8WGLpIn7qtDFDLIRMB8UPvg OEbmwmBm9P8T9T4bgT8Bwu7jv0+HGV/A6xnlhJovxPbqwxbfd8TamSrE1yiAOMtH ox+GJXsN2CoC3v1fBDm+OJutVcdTZhTkJ33sGHLNkfPdSyErqAZclkiIYGOI32ms vy7zOZqvsUsljStaIn0+uK6gk65JLQAdr0R5mftoRr+kSF4wB4q5VF6wFoEvsnH7 mGAsr0syAJogim4IaHPaqQknUC9bGpEcPSiLAubdPfQgq6kq+HSk2E7gpkEpGvnF Hq0v0FzwIMnntN1FbbDFMwRvnpqFK8/4/7r8Val6jzyC2vdjEz7JINOrZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0h2rOKG6h+HeLYlXMXPc+UZzZnMB8GA1UdIwQY MBaAFPCPulJjUZt8OiFVxph4IXd23vugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xYmIxYTItNjc2My00YjI0LWFkODgt MDY0MTNjZWVmY2UwLzEvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8xYmIxYTItNjc2My00YjI0LWFkODgtMDY0MTNjZWVmY2Uw LzEvOEktNlVtTlJtM3c2SVZYR21IZ2hkM2JlLTZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3oON6Qr R1fsThcwyk8DOW9Ak2pmN67fxI+ZrUX/2gJqFitlZsMiGTf2PlAr4vRgJhSzNgOn 5r9SUrJDPsqiIrFtLeGCDPraH7o0c4SrL+YMsbllWV3FxUU80VBzOa32xj/otnZl lZjIcPSHimswzdceyWoJBxmnbVi8fFD4e5ki3AJf/oeixwXjw3L7hk2yN4mE12BE pTwUeUZq4H1s1NUfxN6HhHcQh6SDmftEUTsiOVf3mXrLxXYhT8Y5es1xQtGGoaqs Ivz0exFGmEHAS9ctaoVDJu25dHQbZMws105HziX++DsMjhIfzmAspeYyuim05Bz4 6KPBqdCOTJJE/w== -----END CERTIFICATE-----Generated at Fri Dec 19 11:37:09 2025 by rpki-client