This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft File: 8M9JYzV925hV-brEx9mVrciaNyo.mft (raw, json) Hash identifier: NrU+ABF2yJ4TCdRGMf4HfP2gSZ8YGU90RN6HUvtQhb4= Subject key identifier: 79:16:F8:09:51:1F:4A:C2:DD:1E:91:2C:13:CE:F2:05:B1:8E:0E:08 Authority key identifier: F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A Certificate issuer: /CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a Certificate serial: 019B50E0E01F7F88329EF0C2CEF537286C7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft Manifest number: 1697 Signing time: Wed 24 Dec 2025 15:01:13 +0000 Manifest this update: Wed 24 Dec 2025 15:01:13 +0000 Manifest next update: Thu 25 Dec 2025 15:01:13 +0000 Files and hashes: 1: 8M9JYzV925hV-brEx9mVrciaNyo.crl (hash: Rr7gYc5Ux2NHAcQ7bz6Ksi3yb/VDnKHLyXdFpF6rEwA=) 2: YuVFbu671lxJtgp8Dd5trr77imo.roa (hash: eoCcK7MisnOAgEVb/tn2NdbeYwDzl1a566p1bHV7AcM=) 3: n5Snke9qrVszV2r6iCOXAr8xpfU.roa (hash: OcodRKZ+v9kxH+amb1gjlja43PdbaBmuEGTA3TTwgu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:e0:1f:7f:88:32:9e:f0:c2:ce:f5:37:28:6c:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0cf4963357ddb9855f9bac4c7d995adc89a372a Validity Not Before: Dec 24 15:01:13 2025 GMT Not After : Dec 25 15:01:13 2025 GMT Subject: CN=7916f809511f4ac2dd1e912c13cef205b18e0e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:27:48:1a:46:13:65:cd:f4:f7:03:b9:47:33: bb:cf:a2:fe:24:ad:45:bf:84:01:b1:c3:ef:2e:10: 85:4b:d2:6a:9e:47:2b:12:cb:18:de:b8:20:82:08: e7:4c:3f:69:ed:f6:54:00:39:4e:72:f2:da:5b:7b: eb:a4:b1:51:fc:03:06:ce:6e:5e:67:00:21:ee:fd: f9:5f:e2:d3:14:3c:97:c7:43:e9:8c:be:e0:17:68: b9:d1:b2:25:86:c8:cc:60:b4:d1:64:f2:2c:58:ab: c8:ec:d2:dd:4d:80:10:8e:98:97:94:d6:67:f6:cc: bf:0e:7b:71:98:bf:0f:75:a4:c3:f2:da:bf:80:6b: dc:a0:01:3c:d5:0d:20:ad:2b:2c:58:69:1a:93:ef: 68:6a:e9:1d:54:00:1e:30:67:7f:11:4f:e4:02:e8: df:e3:c6:9e:83:a9:a9:02:65:f9:f1:3f:f0:29:11: ac:98:f6:c5:fc:cd:eb:83:5c:bb:89:e8:0d:3d:08: f1:e2:e4:36:04:a9:4f:fa:20:ca:0c:36:b1:b4:34: c8:be:57:b5:75:27:2e:fb:22:e3:68:13:b1:43:70: 8a:3f:ce:8c:e5:ff:b9:ed:b4:ad:a0:4c:18:e9:f9: 1d:07:07:a9:70:a9:29:e4:8e:6a:b0:98:8d:83:de: 78:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:16:F8:09:51:1F:4A:C2:DD:1E:91:2C:13:CE:F2:05:B1:8E:0E:08 X509v3 Authority Key Identifier: keyid:F0:CF:49:63:35:7D:DB:98:55:F9:BA:C4:C7:D9:95:AD:C8:9A:37:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M9JYzV925hV-brEx9mVrciaNyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/975912-fd0c-4318-b0b0-6e056b617d2a/1/8M9JYzV925hV-brEx9mVrciaNyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:6e:46:b9:fe:cb:2f:dd:0e:00:c6:d1:ec:37:c0:ea:c8:18: 4a:28:81:35:58:1c:1a:bc:54:60:78:ca:2d:10:53:04:a2:85: 4e:24:15:1d:e7:79:18:22:8b:17:44:f7:2c:c8:b8:d4:85:83: 08:07:6f:c5:b3:13:9c:7a:8c:2b:7a:7f:77:7d:bd:0d:67:4e: 2f:26:93:29:85:ca:9b:17:2e:59:16:c1:85:64:a9:fa:99:a3: 56:ab:51:08:38:6c:d5:55:7c:fd:4b:75:c9:12:24:94:6f:e4: f1:05:fe:6a:c8:d2:1a:9d:43:66:f7:86:a0:35:31:bf:93:d8: d1:ee:cd:2d:dd:0e:84:7e:a8:42:b5:06:64:53:1c:89:3b:30: 86:6a:bb:83:7b:e8:29:64:98:db:f6:03:f8:46:e2:15:67:5b: f0:48:f1:8f:1b:48:36:65:37:8a:c0:1a:d1:04:78:a0:a9:67: ec:0a:78:37:e9:0b:dd:4a:e0:91:22:e1:e0:f6:a8:00:52:22: 7d:0a:a1:a8:2b:d4:4c:b8:21:e4:08:3e:08:f1:74:fe:4d:6b: 40:70:5e:0e:68:eb:40:5f:e4:e3:62:80:94:f6:45:47:91:a4: 5b:c9:cb:3f:68:ae:96:2b:1f:43:77:37:2f:f5:d8:ae:33:7c: 8d:2a:cd:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4OAff4gynvDCzvU3KGx7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwY2Y0OTYzMzU3ZGRiOTg1NWY5YmFjNGM3ZDk5NWFkYzg5 YTM3MmEwHhcNMjUxMjI0MTUwMTEzWhcNMjUxMjI1MTUwMTEzWjAzMTEwLwYDVQQD Eyg3OTE2ZjgwOTUxMWY0YWMyZGQxZTkxMmMxM2NlZjIwNWIxOGUwZTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyydIGkYTZc309wO5RzO7z6L+JK1F v4QBscPvLhCFS9JqnkcrEssY3rggggjnTD9p7fZUADlOcvLaW3vrpLFR/AMGzm5e ZwAh7v35X+LTFDyXx0PpjL7gF2i50bIlhsjMYLTRZPIsWKvI7NLdTYAQjpiXlNZn 9sy/DntxmL8PdaTD8tq/gGvcoAE81Q0grSssWGkak+9oaukdVAAeMGd/EU/kAujf 48aeg6mpAmX58T/wKRGsmPbF/M3rg1y7iegNPQjx4uQ2BKlP+iDKDDaxtDTIvle1 dScu+yLjaBOxQ3CKP86M5f+57bStoEwY6fkdBwepcKkp5I5qsJiNg954jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkW+AlRH0rC3R6RLBPO8gWxjg4IMB8GA1UdIwQY MBaAFPDPSWM1fduYVfm6xMfZla3ImjcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE05Sll6VjkyNWhWLWJyRXg5bVZyY2lhTnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NzU5MTItZmQwYy00MzE4LWIwYjAt NmUwNTZiNjE3ZDJhLzEvOE05Sll6VjkyNWhWLWJyRXg5bVZyY2lhTnlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85NzU5MTItZmQwYy00MzE4LWIwYjAtNmUwNTZiNjE3ZDJh LzEvOE05Sll6VjkyNWhWLWJyRXg5bVZyY2lhTnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAom5Guf7L L90OAMbR7DfA6sgYSiiBNVgcGrxUYHjKLRBTBKKFTiQVHed5GCKLF0T3LMi41IWD CAdvxbMTnHqMK3p/d329DWdOLyaTKYXKmxcuWRbBhWSp+pmjVqtRCDhs1VV8/Ut1 yRIklG/k8QX+asjSGp1DZveGoDUxv5PY0e7NLd0OhH6oQrUGZFMciTswhmq7g3vo KWSY2/YD+EbiFWdb8EjxjxtINmU3isAa0QR4oKln7Ap4N+kL3UrgkSLh4PaoAFIi fQqhqCvUTLgh5Ag+CPF0/k1rQHBeDmjrQF/k42KAlPZFR5GkW8nLP2iulisfQ3c3 L/XYrjN8jSrNJw== -----END CERTIFICATE-----Generated at Wed Dec 24 16:39:51 2025 by rpki-client