This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft File: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft (raw, json) Hash identifier: pgxxXIaC0sRZ5Om1Kr8NSJCDcDibIL/e9R6ENPCHteU= Subject key identifier: C1:8A:6D:E3:D1:34:A9:63:C2:CD:F1:62:C3:A5:3A:C2:DC:F5:B5:FC Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26 Certificate issuer: /CN=f20bf46303ff54a505f533c554251923e41f5926 Certificate serial: 019B5ABFE2686B596CC487F59F827EB4D380 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft Manifest number: 0909 Signing time: Fri 26 Dec 2025 13:01:23 +0000 Manifest this update: Fri 26 Dec 2025 13:01:23 +0000 Manifest next update: Sat 27 Dec 2025 13:01:23 +0000 Files and hashes: 1: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl (hash: ZBv0O1PttQtkI+IJsz7QQn0ft/kI6ghsYVEMMN12uWM=) 2: nJ3bZDTF3klediLdsGzrGEizejI.roa (hash: XOv5pl5Y0ikBc3XP047Nh+8GGnppEmfe5vg+dWr14YI=) 3: qnlY-2XHeoB5T91L-eAv--psw3s.roa (hash: GlcTsLYuOrrcX+rD96Cshdq9OCpUu7GdPBcBG+rwyLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:e2:68:6b:59:6c:c4:87:f5:9f:82:7e:b4:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926 Validity Not Before: Dec 26 13:01:23 2025 GMT Not After : Dec 27 13:01:23 2025 GMT Subject: CN=c18a6de3d134a963c2cdf162c3a53ac2dcf5b5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a9:71:25:1e:5a:22:30:1b:34:11:e5:4b:b5: 0f:ed:85:71:2e:ed:06:84:ab:a5:49:b2:68:cd:27: c5:ac:a6:4c:6b:c8:7c:12:c3:4c:95:e4:22:d8:6d: b4:5e:d3:52:d9:dc:3e:6a:22:7b:00:8b:9d:9e:05: e4:59:e7:f6:e5:98:da:3e:71:32:8f:17:96:6c:ef: ac:21:ae:82:d7:35:1e:e4:c6:42:c2:19:d9:44:40: 99:11:7c:ab:91:ff:81:b6:aa:82:89:b0:0f:8f:49: ba:46:cc:67:b0:05:12:c9:8a:d6:5f:16:05:ae:b6: 40:c7:3b:c9:2b:ce:ab:6b:ba:d8:d3:45:21:9d:6c: 5b:55:40:62:9f:98:b8:40:0a:5f:52:bf:7f:b9:3a: a0:0a:14:70:6f:92:62:dd:55:37:64:5e:9d:d5:0b: c4:89:42:50:71:32:4c:ce:15:2a:0d:c8:ed:d3:eb: 43:79:bc:e4:f2:e5:d8:77:1e:6b:e1:18:0e:49:c2: 5c:e5:9b:db:60:db:09:48:c8:c3:0a:99:12:2e:25: a2:0e:d0:15:95:77:ba:a5:78:7e:8a:c2:34:08:30: 9a:07:55:09:e8:f0:dc:8c:97:26:fa:3b:c3:98:7e: 3c:59:f3:08:90:09:49:e8:40:76:6b:c7:8a:1c:58: 11:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8A:6D:E3:D1:34:A9:63:C2:CD:F1:62:C3:A5:3A:C2:DC:F5:B5:FC X509v3 Authority Key Identifier: keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:7a:ec:32:66:ca:e0:de:ab:09:e7:1f:cb:6a:bd:69:14:88: 2b:41:d0:18:b5:68:93:9c:56:5b:b7:24:93:5a:0b:e1:40:18: 1c:59:ca:8c:88:3f:63:cb:bb:6b:5c:13:6b:8f:fb:9a:a7:43: 03:d0:7d:21:01:1e:e8:17:03:35:dd:0e:55:b9:88:c8:06:cb: c8:f9:af:2e:4f:2c:42:dc:06:27:86:bc:ae:a3:5f:86:14:dc: fa:50:66:85:7c:b0:5a:bf:fd:b4:5c:d7:c0:8f:54:bb:08:19: e7:39:d8:6d:93:1c:54:f6:90:4b:64:44:83:ee:06:be:5f:db: eb:a5:54:e3:fd:4a:e8:c9:2a:ad:44:04:d3:df:90:60:1c:a6: 1c:7d:3f:93:1f:d4:f1:2e:14:d9:cf:c9:2e:f4:fa:98:eb:ba: c8:17:ab:32:13:e5:dc:27:bb:a8:ac:17:77:3a:00:b4:a2:93: 9a:12:d9:a5:ed:3d:77:61:42:31:15:f3:4e:b9:af:99:e6:11: 38:3d:95:25:c6:b8:69:6c:10:f5:c7:d7:e6:b6:7f:33:8b:ef: e2:2d:93:3d:ed:63:bc:4a:d8:18:0c:d0:f2:c0:c1:35:3b:10: fd:73:d9:64:d4:52:8a:6e:c7:e6:d4:ba:7c:aa:22:72:35:3d: 0f:07:50:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav+Joa1lsxIf1n4J+tNOAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMGJmNDYzMDNmZjU0YTUwNWY1MzNjNTU0MjUxOTIzZTQx ZjU5MjYwHhcNMjUxMjI2MTMwMTIzWhcNMjUxMjI3MTMwMTIzWjAzMTEwLwYDVQQD EyhjMThhNmRlM2QxMzRhOTYzYzJjZGYxNjJjM2E1M2FjMmRjZjViNWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtalxJR5aIjAbNBHlS7UP7YVxLu0G hKulSbJozSfFrKZMa8h8EsNMleQi2G20XtNS2dw+aiJ7AIudngXkWef25ZjaPnEy jxeWbO+sIa6C1zUe5MZCwhnZRECZEXyrkf+BtqqCibAPj0m6RsxnsAUSyYrWXxYF rrZAxzvJK86ra7rY00UhnWxbVUBin5i4QApfUr9/uTqgChRwb5Ji3VU3ZF6d1QvE iUJQcTJMzhUqDcjt0+tDebzk8uXYdx5r4RgOScJc5ZvbYNsJSMjDCpkSLiWiDtAV lXe6pXh+isI0CDCaB1UJ6PDcjJcm+jvDmH48WfMIkAlJ6EB2a8eKHFgRywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGKbePRNKljws3xYsOlOsLc9bX8MB8GA1UdIwQY MBaAFPIL9GMD/1SlBfUzxVQlGSPkH1kmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGd2MFl3UF9WS1VGOVRQRlZDVVpJLVFmV1NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84MTU1OTAtOTUxYy00YzFmLTg2OTct YzM2OTQwODhmMzRhLzEvOGd2MFl3UF9WS1VGOVRQRlZDVVpJLVFmV1NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS84MTU1OTAtOTUxYy00YzFmLTg2OTctYzM2OTQwODhmMzRh LzEvOGd2MFl3UF9WS1VGOVRQRlZDVVpJLVFmV1NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnrsMmbK 4N6rCecfy2q9aRSIK0HQGLVok5xWW7ckk1oL4UAYHFnKjIg/Y8u7a1wTa4/7mqdD A9B9IQEe6BcDNd0OVbmIyAbLyPmvLk8sQtwGJ4a8rqNfhhTc+lBmhXywWr/9tFzX wI9UuwgZ5znYbZMcVPaQS2REg+4Gvl/b66VU4/1K6MkqrUQE09+QYBymHH0/kx/U 8S4U2c/JLvT6mOu6yBerMhPl3Ce7qKwXdzoAtKKTmhLZpe09d2FCMRXzTrmvmeYR OD2VJca4aWwQ9cfX5rZ/M4vv4i2TPe1jvErYGAzQ8sDBNTsQ/XPZZNRSim7H5tS6 fKoicjU9DwdQKg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:06 2025 by rpki-client