This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft File: 8D9771R9ACUziqa2rueqHb4Urio.mft (raw, json) Hash identifier: x8t2nZjzGZXQi8XvUp+SFJaJOfpXPDJzetzuqHaJlg8= Subject key identifier: 02:AD:1E:C2:DA:84:97:79:4D:D5:3B:29:20:99:6C:8D:40:BC:F2:15 Authority key identifier: F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A Certificate issuer: /CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a Certificate serial: 019B38A28BE83F546EE94DE69C73716B1D0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 22:02:15 +0000 Manifest this update: Fri 19 Dec 2025 22:02:15 +0000 Manifest next update: Sat 20 Dec 2025 22:02:15 +0000 Files and hashes: 1: 8D9771R9ACUziqa2rueqHb4Urio.crl (hash: 8ubjNzWgXKH2e5eZhpmrmD8F9m/Neq/eC1yhpA1OoEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:8b:e8:3f:54:6e:e9:4d:e6:9c:73:71:6b:1d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a Validity Not Before: Dec 19 22:02:15 2025 GMT Not After : Dec 20 22:02:15 2025 GMT Subject: CN=02ad1ec2da8497794dd53b2920996c8d40bcf215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4e:ab:33:4e:fd:b1:e7:71:95:57:2c:79:ae: ac:df:35:21:0e:de:92:2d:62:bf:bc:de:66:a3:a5: 64:79:e3:54:17:bb:1c:88:d2:8e:48:e8:42:7e:f7: 6e:21:57:e8:73:76:dc:75:ca:de:c2:2c:8b:76:ac: eb:20:93:f6:f5:2a:25:1e:83:cf:55:0f:0d:5f:f1: d1:c4:f1:ac:39:f3:c5:0d:e7:e7:73:a0:d9:7b:ed: a9:9d:da:4b:0a:bf:fc:71:eb:50:a7:83:15:d5:7d: dc:85:64:d7:d4:aa:2c:f0:b1:cc:9b:8c:cc:85:e5: 74:fb:e6:a7:9e:40:3e:e0:82:35:42:6f:31:e1:37: d9:c0:08:8e:7c:b4:9a:f6:3a:2b:44:86:c3:7a:c1: a5:19:4b:1e:ed:39:55:ac:df:1a:44:03:b4:82:8a: 35:26:3a:fb:16:05:03:c5:a7:1f:4a:ae:29:47:41: a8:22:9a:39:35:b5:5e:5e:53:e5:bb:54:bc:4a:a8: 50:00:64:48:32:0a:76:7e:c2:4f:96:7d:a7:43:92: 8f:c3:41:29:17:d6:a2:e2:e6:8a:55:f2:e9:cf:71: 3e:68:7e:94:67:6c:77:ef:9e:97:be:48:7f:06:d9: 17:b0:74:87:a0:7e:97:05:cf:07:61:04:23:bb:9f: 0a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AD:1E:C2:DA:84:97:79:4D:D5:3B:29:20:99:6C:8D:40:BC:F2:15 X509v3 Authority Key Identifier: keyid:F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:2d:d1:dd:84:6e:e2:51:1a:1b:4d:a9:f7:d9:6a:e9:d3:9a: 2e:0d:6d:9c:2d:a9:95:20:92:08:76:85:63:dd:19:c8:33:7d: 2d:e9:9c:df:b0:73:a0:b1:1c:e9:28:f0:ab:a7:de:ff:b6:a3: a1:cc:17:bd:5f:55:16:ac:09:f6:1a:14:67:d5:44:10:57:d9: 61:e4:17:d8:01:9d:87:0b:14:42:9c:f9:75:7d:e4:19:5b:fb: a5:1d:03:17:55:aa:32:e7:0c:53:5d:5a:56:73:cf:c6:1f:d7: 9a:21:71:51:49:91:bc:d7:52:b3:dd:9d:ac:e4:11:c2:15:e8: f4:e4:95:fd:bf:7a:62:07:62:d6:d0:fb:2e:63:9b:72:0e:f9: 1f:4b:18:78:96:b8:c3:9f:74:f3:4a:30:8e:52:4f:58:7e:96: e4:86:84:15:e2:7a:d7:ff:82:c2:c9:fc:30:f0:7a:5f:b0:4c: c5:48:12:f4:56:c8:a7:8d:c9:1b:ed:7b:1b:20:43:b2:39:43: a3:c5:fd:57:0b:a5:ae:8e:56:12:ce:d3:29:0c:5c:48:d1:02: be:b2:d6:82:84:05:ba:af:56:ed:9c:6f:2b:ae:37:ba:52:29: 0a:2f:18:a7:b0:c8:1d:a2:fb:28:04:77:90:c6:34:8e:cc:ae: 0c:b1:4a:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oovoP1Ru6U3mnHNxax0LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwM2Y3YmVmNTQ3ZDAwMjUzMzhhYTZiNmFlZTdhYTFkYmUx NGFlMmEwHhcNMjUxMjE5MjIwMjE1WhcNMjUxMjIwMjIwMjE1WjAzMTEwLwYDVQQD EygwMmFkMWVjMmRhODQ5Nzc5NGRkNTNiMjkyMDk5NmM4ZDQwYmNmMjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA006rM079sedxlVcsea6s3zUhDt6S LWK/vN5mo6VkeeNUF7sciNKOSOhCfvduIVfoc3bcdcrewiyLdqzrIJP29SolHoPP VQ8NX/HRxPGsOfPFDefnc6DZe+2pndpLCr/8cetQp4MV1X3chWTX1Kos8LHMm4zM heV0++annkA+4II1Qm8x4TfZwAiOfLSa9jorRIbDesGlGUse7TlVrN8aRAO0goo1 Jjr7FgUDxacfSq4pR0GoIpo5NbVeXlPlu1S8SqhQAGRIMgp2fsJPln2nQ5KPw0Ep F9ai4uaKVfLpz3E+aH6UZ2x3756Xvkh/BtkXsHSHoH6XBc8HYQQju58KuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKtHsLahJd5TdU7KSCZbI1AvPIVMB8GA1UdIwQY MBaAFPA/e+9UfQAlM4qmtq7nqh2+FK4qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEQ5NzcxUjlBQ1V6aXFhMnJ1ZXFIYjRVcmlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84ODFhNDgtOGFmMy00N2FjLThlYTgt ZDVjMjc0ZmVmOTY0LzEvOEQ5NzcxUjlBQ1V6aXFhMnJ1ZXFIYjRVcmlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC84ODFhNDgtOGFmMy00N2FjLThlYTgtZDVjMjc0ZmVmOTY0 LzEvOEQ5NzcxUjlBQ1V6aXFhMnJ1ZXFIYjRVcmlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeC3R3YRu 4lEaG02p99lq6dOaLg1tnC2plSCSCHaFY90ZyDN9Lemc37BzoLEc6Sjwq6fe/7aj ocwXvV9VFqwJ9hoUZ9VEEFfZYeQX2AGdhwsUQpz5dX3kGVv7pR0DF1WqMucMU11a VnPPxh/XmiFxUUmRvNdSs92drOQRwhXo9OSV/b96Ygdi1tD7LmObcg75H0sYeJa4 w59080owjlJPWH6W5IaEFeJ61/+Cwsn8MPB6X7BMxUgS9FbIp43JG+17GyBDsjlD o8X9Vwulro5WEs7TKQxcSNECvrLWgoQFuq9W7ZxvK643ulIpCi8Yp7DIHaL7KAR3 kMY0jsyuDLFKGQ== -----END CERTIFICATE-----Generated at Sat Dec 20 00:13:13 2025 by rpki-client