This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft File: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft (raw, json) Hash identifier: fCO9+/AtMlu2PS9McVg7PAz4ksqLAVH84GMl4+xNjis= Subject key identifier: AC:40:87:7E:39:8E:A0:33:7A:B4:0D:EB:22:53:F5:D5:22:68:17:B5 Authority key identifier: F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15 Certificate issuer: /CN=f04e3c322db11c10491e5e835fc66efd42e59015 Certificate serial: 019B30E7C133126CBF01D97E8B85B7CA05A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 10:00:53 +0000 Manifest this update: Thu 18 Dec 2025 10:00:53 +0000 Manifest next update: Fri 19 Dec 2025 10:00:53 +0000 Files and hashes: 1: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl (hash: MNx5zjU0VmRR7RJAh4A1mH9pzKed9EC/rhhwqgoJCJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e7:c1:33:12:6c:bf:01:d9:7e:8b:85:b7:ca:05:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04e3c322db11c10491e5e835fc66efd42e59015 Validity Not Before: Dec 18 10:00:53 2025 GMT Not After : Dec 19 10:00:53 2025 GMT Subject: CN=ac40877e398ea0337ab40deb2253f5d5226817b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cf:7b:69:50:1a:b7:7e:91:ce:b5:a9:10:c2: 4a:ba:30:6e:bb:a3:76:1a:28:29:74:fa:1f:2d:43: 7a:ea:ae:c1:f9:a1:40:2b:49:8d:16:9e:8d:ee:ab: 58:e9:25:19:5f:13:8d:51:e7:2c:10:b3:06:fa:fe: 18:9d:67:2b:ec:d8:58:64:b4:3f:d1:04:33:00:f1: e5:d5:77:63:a9:1e:0a:34:85:9b:62:4b:0c:ac:82: a2:d2:e6:2c:62:d1:e3:f6:39:69:ed:2d:34:e9:b7: 32:9b:c6:4f:a8:16:5d:cc:3b:f3:40:92:e9:f1:5c: ce:29:fc:62:1e:c9:1a:38:96:bd:14:13:29:c7:25: 02:ca:05:b3:26:f0:f7:d7:36:da:3b:40:e7:68:28: 1b:e6:b2:f4:5a:68:41:63:37:3b:d4:15:ef:24:6d: 89:21:03:e2:5f:c1:84:17:81:7f:d8:64:8e:63:83: dc:ea:04:3f:3a:f9:27:27:48:37:d6:25:39:79:01: 2c:7d:78:a6:99:3e:4e:ed:e8:e8:fb:4b:7c:43:ca: d6:88:a8:27:23:db:cf:b5:df:87:f9:b5:07:fa:a8: 15:69:91:7a:0b:cd:e8:aa:8b:27:7f:ba:dd:7d:75: 41:7a:6b:4d:36:b6:9a:93:8f:5c:a9:6c:1b:73:e8: 96:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:40:87:7E:39:8E:A0:33:7A:B4:0D:EB:22:53:F5:D5:22:68:17:B5 X509v3 Authority Key Identifier: keyid:F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e3:a1:f7:d1:19:42:08:06:3a:00:98:7b:71:cd:68:95:07: 43:b4:89:85:ae:6c:0c:4c:7f:ed:1e:36:9e:d2:2a:69:6d:8a: 45:53:9b:c1:93:f2:0f:d7:0e:17:a2:74:a4:87:12:2b:7f:70: 2e:3e:ac:b7:31:2c:52:d7:bc:ed:63:5f:b3:c7:d4:f3:a0:20: bf:59:f2:dd:c6:8e:7d:f3:87:d7:1c:75:18:ed:a7:88:64:e5: e7:41:9c:9b:ef:c1:05:5d:5b:07:8d:d2:65:fc:d4:df:f4:81: 69:a1:02:e5:d4:dd:62:bd:16:a4:57:30:64:a6:fa:9a:96:67: 8f:e9:08:5a:df:1d:f9:ca:1b:e9:29:96:8b:8d:7b:33:91:82: 6e:b3:a2:24:4b:7b:58:4f:ab:9f:10:6d:a1:07:bc:5d:01:c1: bc:fc:bf:f0:50:bf:73:e4:ab:da:bd:ae:62:38:b1:cb:ff:98: f4:69:4f:a7:4f:fd:dd:f1:17:36:3f:27:8f:9f:5b:6b:14:2a: 17:0f:39:51:57:15:da:79:69:12:21:7a:33:d0:99:68:13:cb: 39:05:7c:a4:d4:94:ab:18:a4:66:26:71:df:68:b9:88:95:a7: 4f:17:4a:29:56:43:cb:14:a7:6a:3f:e1:f1:53:13:10:7e:0f: 4b:ae:aa:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw58EzEmy/Adl+i4W3ygWpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGUzYzMyMmRiMTFjMTA0OTFlNWU4MzVmYzY2ZWZkNDJl NTkwMTUwHhcNMjUxMjE4MTAwMDUzWhcNMjUxMjE5MTAwMDUzWjAzMTEwLwYDVQQD EyhhYzQwODc3ZTM5OGVhMDMzN2FiNDBkZWIyMjUzZjVkNTIyNjgxN2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs97aVAat36RzrWpEMJKujBuu6N2 GigpdPofLUN66q7B+aFAK0mNFp6N7qtY6SUZXxONUecsELMG+v4YnWcr7NhYZLQ/ 0QQzAPHl1XdjqR4KNIWbYksMrIKi0uYsYtHj9jlp7S006bcym8ZPqBZdzDvzQJLp 8VzOKfxiHskaOJa9FBMpxyUCygWzJvD31zbaO0DnaCgb5rL0WmhBYzc71BXvJG2J IQPiX8GEF4F/2GSOY4Pc6gQ/OvknJ0g31iU5eQEsfXimmT5O7ejo+0t8Q8rWiKgn I9vPtd+H+bUH+qgVaZF6C83oqosnf7rdfXVBemtNNraak49cqWwbc+iWhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKxAh345jqAzerQN6yJT9dUiaBe1MB8GA1UdIwQY MBaAFPBOPDItsRwQSR5eg1/Gbv1C5ZAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEU0OE1pMnhIQkJKSGw2RFg4WnVfVUxsa0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9mNzZkNGYtZjQxZi00OTA1LWJlYzct ZTY3MGUzZGQ1YzIxLzEvOEU0OE1pMnhIQkJKSGw2RFg4WnVfVUxsa0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9mNzZkNGYtZjQxZi00OTA1LWJlYzctZTY3MGUzZGQ1YzIx LzEvOEU0OE1pMnhIQkJKSGw2RFg4WnVfVUxsa0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeOh99EZ QggGOgCYe3HNaJUHQ7SJha5sDEx/7R42ntIqaW2KRVObwZPyD9cOF6J0pIcSK39w Lj6stzEsUte87WNfs8fU86Agv1ny3caOffOH1xx1GO2niGTl50Gcm+/BBV1bB43S ZfzU3/SBaaEC5dTdYr0WpFcwZKb6mpZnj+kIWt8d+cob6SmWi417M5GCbrOiJEt7 WE+rnxBtoQe8XQHBvPy/8FC/c+Sr2r2uYjixy/+Y9GlPp0/93fEXNj8nj59baxQq Fw85UVcV2nlpEiF6M9CZaBPLOQV8pNSUqxikZiZx32i5iJWnTxdKKVZDyxSnaj/h 8VMTEH4PS66qdg== -----END CERTIFICATE-----Generated at Thu Dec 18 14:22:20 2025 by rpki-client