This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft File: 8yyk3zLccfQREE-UtRrBS2Z1gks.mft (raw, json) Hash identifier: Nwwa0A206HYj8GlEnh0Zvniwva2m/OY02bwKOxPXfn4= Subject key identifier: A9:7B:6C:89:40:A3:26:3C:0C:53:CA:E4:F8:DB:C0:1D:0D:93:C5:7A Authority key identifier: F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B Certificate issuer: /CN=f32ca4df32dc71f411104f94b51ac14b6675824b Certificate serial: 019B0EC9581641D89067781D9C901603CAE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft Manifest number: 01AE Signing time: Thu 11 Dec 2025 19:00:34 +0000 Manifest this update: Thu 11 Dec 2025 19:00:34 +0000 Manifest next update: Fri 12 Dec 2025 19:00:34 +0000 Files and hashes: 1: 8yyk3zLccfQREE-UtRrBS2Z1gks.crl (hash: i8R8pNjZgWRtgZE0a6zA5WpdgH1wFDoFHnIMboljcH4=) 2: AhlTJGVn8a8rsbPjwh1Of-tiZ-E.roa (hash: PvYJX4JVcBus78Efd+Q4dFc2SvUKpYf6MzmiID5icj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:58:16:41:d8:90:67:78:1d:9c:90:16:03:ca:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f32ca4df32dc71f411104f94b51ac14b6675824b Validity Not Before: Dec 11 19:00:34 2025 GMT Not After : Dec 12 19:00:34 2025 GMT Subject: CN=a97b6c8940a3263c0c53cae4f8dbc01d0d93c57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:59:ae:47:36:52:44:31:39:17:09:1f:8c:43: d6:f4:6b:20:25:a7:83:54:c1:0b:ca:27:c9:e3:c1: 81:20:2e:00:92:7e:0c:ab:04:8f:2c:f2:88:f6:02: 46:8c:68:28:e9:09:49:dd:df:dc:59:6c:3b:b8:17: b6:04:42:d5:9d:92:7c:61:26:8d:5f:20:1f:80:3a: 93:d4:40:84:2a:cc:f5:5a:f4:b7:48:96:08:76:1c: 4d:ca:45:72:9f:a7:32:46:1a:71:60:8f:f1:e1:c8: 34:9b:e2:6a:47:38:72:36:2a:ab:d5:74:22:ce:c4: 4f:74:12:20:55:c7:db:29:37:44:49:57:94:23:50: be:93:60:4c:aa:9b:0e:75:0a:fb:99:e3:b2:c7:a3: 65:51:43:39:60:c8:16:d8:cd:47:42:65:2a:7b:88: 57:b6:0e:ee:13:7b:10:55:16:7f:f6:32:8d:87:d3: 10:ad:a1:05:ac:17:31:e5:d5:cb:21:83:f6:9b:b8: 9b:25:70:57:a8:d0:f6:ce:7a:04:35:b4:d3:17:c0: 54:5a:42:a2:dc:f9:f0:05:a0:67:7b:37:2c:f3:2d: 4d:3a:a3:48:1d:a1:5e:c7:0e:80:a7:b1:d2:09:34: 8e:c2:fb:a7:f5:b8:b3:04:a5:c1:b3:ec:a4:b7:10: 2c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7B:6C:89:40:A3:26:3C:0C:53:CA:E4:F8:DB:C0:1D:0D:93:C5:7A X509v3 Authority Key Identifier: keyid:F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:7f:ba:9a:70:0c:9d:ca:7f:16:63:4c:d2:b6:b2:52:9e:ab: ba:14:fc:3d:f4:bd:e7:ba:9f:ff:56:06:77:19:d0:69:de:f1: 17:bb:f4:99:b9:7f:3b:ba:2d:13:06:95:ad:66:b3:ed:44:9e: 56:55:78:36:11:c5:f1:cc:b7:12:5b:76:29:b8:ba:15:71:25: 89:66:e1:3a:77:19:8d:b7:57:09:c1:85:f0:74:83:b3:9e:78: a0:9d:c7:2d:17:58:c8:4e:06:c9:f9:c0:40:3e:bf:a0:ff:40: d8:26:58:7f:b6:51:88:09:c1:5f:1f:19:5c:09:c2:85:1f:c5: cc:ae:a9:a5:a2:ad:69:23:ef:0c:43:59:c0:bf:74:78:9b:72: fd:88:46:9c:cf:9d:dc:56:1c:71:43:98:fe:fe:b9:df:7b:ec: d5:61:e6:92:42:45:53:86:e7:0b:e3:32:4a:14:a0:ce:5d:e9: 7a:d3:65:c8:2f:79:ae:d2:1a:be:c5:15:d2:36:7f:ed:e1:65: 21:09:53:5d:a6:38:55:c2:f2:25:a9:0e:ec:83:35:5d:96:8a: 05:18:23:52:0d:e1:ee:19:3b:a2:6b:b5:2c:ff:27:d3:a8:26: c9:dc:36:15:7a:f1:d5:39:06:f5:aa:86:dc:54:58:7b:a3:61: 1f:85:73:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyVgWQdiQZ3gdnJAWA8rpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMmNhNGRmMzJkYzcxZjQxMTEwNGY5NGI1MWFjMTRiNjY3 NTgyNGIwHhcNMjUxMjExMTkwMDM0WhcNMjUxMjEyMTkwMDM0WjAzMTEwLwYDVQQD EyhhOTdiNmM4OTQwYTMyNjNjMGM1M2NhZTRmOGRiYzAxZDBkOTNjNTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1muRzZSRDE5FwkfjEPW9GsgJaeD VMELyifJ48GBIC4Akn4MqwSPLPKI9gJGjGgo6QlJ3d/cWWw7uBe2BELVnZJ8YSaN XyAfgDqT1ECEKsz1WvS3SJYIdhxNykVyn6cyRhpxYI/x4cg0m+JqRzhyNiqr1XQi zsRPdBIgVcfbKTdESVeUI1C+k2BMqpsOdQr7meOyx6NlUUM5YMgW2M1HQmUqe4hX tg7uE3sQVRZ/9jKNh9MQraEFrBcx5dXLIYP2m7ibJXBXqND2znoENbTTF8BUWkKi 3PnwBaBnezcs8y1NOqNIHaFexw6Ap7HSCTSOwvun9bizBKXBs+yktxAsJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKl7bIlAoyY8DFPK5PjbwB0Nk8V6MB8GA1UdIwQY MBaAFPMspN8y3HH0ERBPlLUawUtmdYJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHl5azN6TGNjZlFSRUUtVXRSckJTMloxZ2tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS80ZWRiZWMtZmZlYS00MDYyLTg5Y2It NjU2NjAwYzllNDQwLzEvOHl5azN6TGNjZlFSRUUtVXRSckJTMloxZ2tzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS80ZWRiZWMtZmZlYS00MDYyLTg5Y2ItNjU2NjAwYzllNDQw LzEvOHl5azN6TGNjZlFSRUUtVXRSckJTMloxZ2tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3+6mnAM ncp/FmNM0rayUp6ruhT8PfS957qf/1YGdxnQad7xF7v0mbl/O7otEwaVrWaz7USe VlV4NhHF8cy3Elt2Kbi6FXEliWbhOncZjbdXCcGF8HSDs554oJ3HLRdYyE4GyfnA QD6/oP9A2CZYf7ZRiAnBXx8ZXAnChR/FzK6ppaKtaSPvDENZwL90eJty/YhGnM+d 3FYccUOY/v6533vs1WHmkkJFU4bnC+MyShSgzl3petNlyC95rtIavsUV0jZ/7eFl IQlTXaY4VcLyJakO7IM1XZaKBRgjUg3h7hk7omu1LP8n06gmydw2FXrx1TkG9aqG 3FRYe6NhH4VzHg== -----END CERTIFICATE-----Generated at Fri Dec 12 04:03:36 2025 by rpki-client