This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft File: 8YBT6n86t5p16Ph1OGd1VR73Vzk.mft (raw, json) Hash identifier: rkGxtG2CnT+OsCzTd23WtcmUxhBrzYheitgFnZp8KPg= Subject key identifier: 4C:BE:99:E1:58:CA:23:D3:B8:56:44:AC:D4:55:86:94:BB:C9:9F:1C Authority key identifier: F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39 Certificate issuer: /CN=f18053ea7f3ab79a75e8f875386775551ef75739 Certificate serial: 019AF2AD9157BD94F8CD2312B16C50BA6501 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 08:00:52 +0000 Manifest this update: Sat 06 Dec 2025 08:00:52 +0000 Manifest next update: Sun 07 Dec 2025 08:00:52 +0000 Files and hashes: 1: 8YBT6n86t5p16Ph1OGd1VR73Vzk.crl (hash: DzZ6pHOnD/BxLLy0t9gnfaaTIMlFFv4AT+5f8CuGgqc=) 2: yS5FI7nYjFnu1L1Am8Aua4oXXE8.roa (hash: LgnuacZQDPP2J60/EcJiQNzEwvS+wm94uYSyH+Ocir4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:91:57:bd:94:f8:cd:23:12:b1:6c:50:ba:65:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f18053ea7f3ab79a75e8f875386775551ef75739 Validity Not Before: Dec 6 08:00:52 2025 GMT Not After : Dec 7 08:00:52 2025 GMT Subject: CN=4cbe99e158ca23d3b85644acd4558694bbc99f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8f:1a:db:6f:01:f1:c4:54:7f:b3:00:79:a2: bf:3e:05:ab:5c:76:be:39:0b:17:d8:17:47:64:43: 5c:de:3b:8b:06:38:69:50:6a:d8:bd:57:e9:01:93: 9b:8f:e7:e8:82:44:70:8d:d1:99:eb:f8:3f:2e:0a: c7:da:c8:00:1a:62:13:6f:33:77:95:ec:52:31:04: 6a:23:90:89:c0:51:82:b4:e9:11:3f:05:57:dd:ad: d4:23:c7:5f:fd:6e:a1:38:e6:8f:1e:86:3b:9b:bb: e0:b3:36:38:f9:e4:fa:0f:b1:f9:a4:9a:cc:c7:96: 06:1b:be:17:b3:3f:69:22:37:39:27:3e:bc:bb:23: 98:ee:1b:d4:fb:f3:f6:01:eb:78:83:71:21:b9:5c: 06:d7:f7:4b:0e:f0:69:1b:bd:d5:61:a8:d7:4a:b1: 30:93:3c:0b:50:dc:4b:f4:9a:4c:e3:2f:8e:db:dd: 79:9d:da:26:62:e6:25:dc:04:97:a2:7f:d0:52:fa: 8e:86:9e:68:c5:7f:7e:d0:88:ba:33:29:83:1c:ac: 5f:5f:74:a1:46:a5:7f:dd:db:e3:6e:2f:3f:9a:4c: bc:ad:32:0d:94:c7:eb:ff:a2:f9:4c:0d:94:e7:b5: 05:2d:e4:b3:b4:12:4a:08:2b:8b:43:03:51:d4:60: 5e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BE:99:E1:58:CA:23:D3:B8:56:44:AC:D4:55:86:94:BB:C9:9F:1C X509v3 Authority Key Identifier: keyid:F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ac:7a:c0:a0:a2:5a:41:f3:b7:1e:22:96:11:b7:ba:ba:4d: 0d:e4:98:37:18:25:c3:e1:33:a3:f5:16:2f:33:9c:ab:54:55: 94:86:20:ee:fd:6c:c3:d7:59:03:1f:75:58:15:21:41:ce:6f: 5c:68:79:34:00:8b:c1:d9:f8:2a:7c:73:7d:eb:46:57:7c:c8: 6b:77:cc:48:c2:ce:8d:a2:0d:b4:0e:2c:a3:bd:13:7d:8b:2c: 05:d1:b0:7b:7b:77:b3:bc:45:ec:45:cd:93:43:b3:bf:83:d4: 2e:41:78:42:21:06:bd:a0:7a:0b:ff:e1:7e:36:fe:f5:16:ed: ea:5c:56:c0:a6:d9:fa:bb:d9:55:a4:29:e5:68:13:b4:e0:16: 24:2e:28:c8:58:f5:16:c8:46:78:40:ef:54:91:b2:60:3f:20: 89:bf:d1:18:75:5f:89:ef:c2:a5:3a:f4:aa:6c:8b:92:d8:ff: 89:b9:34:53:1b:6c:7e:68:ec:5a:75:4d:12:8d:cc:5f:14:51: 71:9d:06:ba:e4:7b:c7:6c:9c:48:ab:76:f4:0b:3b:ff:78:8d: 8f:bb:d0:44:8a:34:e5:73:d5:21:0d:3d:8f:e1:39:c0:a8:29: 3d:91:39:9b:75:07:11:bd:d4:cc:de:d2:52:17:fe:7d:0a:fa: 40:ff:da:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZFXvZT4zSMSsWxQumUBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxODA1M2VhN2YzYWI3OWE3NWU4Zjg3NTM4Njc3NTU1MWVm NzU3MzkwHhcNMjUxMjA2MDgwMDUyWhcNMjUxMjA3MDgwMDUyWjAzMTEwLwYDVQQD Eyg0Y2JlOTllMTU4Y2EyM2QzYjg1NjQ0YWNkNDU1ODY5NGJiYzk5ZjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI8a228B8cRUf7MAeaK/PgWrXHa+ OQsX2BdHZENc3juLBjhpUGrYvVfpAZObj+fogkRwjdGZ6/g/LgrH2sgAGmITbzN3 lexSMQRqI5CJwFGCtOkRPwVX3a3UI8df/W6hOOaPHoY7m7vgszY4+eT6D7H5pJrM x5YGG74Xsz9pIjc5Jz68uyOY7hvU+/P2Aet4g3EhuVwG1/dLDvBpG73VYajXSrEw kzwLUNxL9JpM4y+O2915ndomYuYl3ASXon/QUvqOhp5oxX9+0Ii6MymDHKxfX3Sh RqV/3dvjbi8/mky8rTINlMfr/6L5TA2U57UFLeSztBJKCCuLQwNR1GBeuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEy+meFYyiPTuFZErNRVhpS7yZ8cMB8GA1UdIwQY MBaAFPGAU+p/Oreadej4dThndVUe91c5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFlCVDZuODZ0NXAxNlBoMU9HZDFWUjczVnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZDRjMGMtMTU4Zi00MzQ0LTk2NDEt NzQ3Y2VkMGI3NDg2LzEvOFlCVDZuODZ0NXAxNlBoMU9HZDFWUjczVnprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85ZDRjMGMtMTU4Zi00MzQ0LTk2NDEtNzQ3Y2VkMGI3NDg2 LzEvOFlCVDZuODZ0NXAxNlBoMU9HZDFWUjczVnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqx6wKCi WkHztx4ilhG3urpNDeSYNxglw+Ezo/UWLzOcq1RVlIYg7v1sw9dZAx91WBUhQc5v XGh5NACLwdn4KnxzfetGV3zIa3fMSMLOjaINtA4so70TfYssBdGwe3t3s7xF7EXN k0Ozv4PULkF4QiEGvaB6C//hfjb+9Rbt6lxWwKbZ+rvZVaQp5WgTtOAWJC4oyFj1 FshGeEDvVJGyYD8gib/RGHVfie/CpTr0qmyLktj/ibk0UxtsfmjsWnVNEo3MXxRR cZ0GuuR7x2ycSKt29As7/3iNj7vQRIo05XPVIQ09j+E5wKgpPZE5m3UHEb3UzN7S Uhf+fQr6QP/a0g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:16 2025 by rpki-client