This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft File: c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft (raw, json) Hash identifier: oXnmY/GK103ECAyXwdTJAM3wYoSxn9+RfWekCfxGLPs= Subject key identifier: C2:C9:27:9C:62:D5:D0:9B:07:3E:93:32:BF:BB:31:EB:50:AE:EE:C4 Authority key identifier: 73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC Certificate issuer: /CN=73cbc147eadd81548151f3510e2de09d868ac6cc Certificate serial: 019AF464BF387F6AFAA3221F002604707C2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 16:00:34 +0000 Manifest this update: Sat 06 Dec 2025 16:00:34 +0000 Manifest next update: Sun 07 Dec 2025 16:00:34 +0000 Files and hashes: 1: YlBw5zZMyGmVSKcyUcis3LeoBu4.roa (hash: FNW2TVY99VnemA7lyfpV1rEplwNPKCZ+roIw6UfcWJE=) 2: c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl (hash: z65/GFLioTkPLjKcwzmsFrgTWTPHFNi6iuGlgA5Cieg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:bf:38:7f:6a:fa:a3:22:1f:00:26:04:70:7c:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73cbc147eadd81548151f3510e2de09d868ac6cc Validity Not Before: Dec 6 16:00:34 2025 GMT Not After : Dec 7 16:00:34 2025 GMT Subject: CN=c2c9279c62d5d09b073e9332bfbb31eb50aeeec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ad:ab:89:91:5c:3d:32:d1:98:8e:db:72:09: b3:05:23:ce:d5:dd:16:3d:b8:af:d3:23:6e:25:b6: 27:4c:b5:bc:fb:59:c8:bb:75:e3:b5:d7:20:9d:02: 56:6b:64:1d:11:8e:76:df:ac:d2:40:c2:73:2f:98: 13:b5:eb:a6:ea:3a:8c:bf:2a:5e:b0:d1:00:9f:46: 7d:3a:e1:e3:54:73:8b:59:e4:58:c0:fb:f5:02:a6: b0:16:b6:63:ae:8a:15:86:51:af:17:92:e8:aa:f4: 15:0d:5d:1c:9a:2a:19:af:33:06:c1:70:1f:29:0f: d0:bf:90:bb:c0:3a:bb:36:f7:79:aa:d7:4f:2f:00: 46:be:4b:7c:be:e9:6a:0c:b5:fa:e1:19:19:04:79: 20:7c:4a:39:c2:ed:48:26:82:13:27:af:d2:3c:3c: 94:a6:f7:f7:c3:26:2e:6e:35:fd:0f:e7:42:e3:6c: cd:93:98:11:e5:21:ec:e7:15:32:33:f0:ad:32:18: 22:02:a9:28:7f:13:25:72:5a:e2:6c:0a:9f:29:7b: fa:26:28:43:db:d6:c7:1d:78:91:0c:7b:ec:7b:14: a0:ff:26:f6:81:ba:eb:a0:4c:a1:49:c3:99:71:d9: d4:80:2a:ca:da:b0:c2:07:70:21:8a:f6:8b:32:69: a5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C9:27:9C:62:D5:D0:9B:07:3E:93:32:BF:BB:31:EB:50:AE:EE:C4 X509v3 Authority Key Identifier: keyid:73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:0b:3a:87:38:1a:90:76:0e:85:99:2a:ad:b4:a2:24:55:35: 5e:25:61:09:4a:94:ba:2c:5e:7d:d6:cb:da:e0:9a:03:ca:f2: 0c:a9:3c:d3:31:e7:1e:e2:f3:fc:89:47:10:eb:b2:7c:79:12: 36:02:d1:f5:1f:1d:94:e4:ac:a8:9b:3c:4d:af:4e:fc:9a:27: 32:1c:1b:54:60:ae:00:55:00:26:2b:e1:18:5c:be:d8:c9:40: af:b3:a0:21:9d:6e:67:e9:66:2c:9d:a7:60:71:6f:31:2c:e6: de:6e:05:52:7d:9b:14:54:9e:c0:a4:d2:5b:7a:da:9d:89:52: a1:53:bc:52:9a:b4:55:bf:9e:5b:c2:ea:d1:9f:e9:0e:4a:d6: 13:3c:88:7d:98:55:05:37:fe:49:81:20:e4:0f:3b:c1:48:9b: 7c:89:98:58:84:2a:6b:8f:e7:7a:fa:48:68:be:58:9d:bc:d0: b4:1e:a0:de:64:30:c3:fd:3c:cf:1b:cd:a1:ee:fc:3c:f1:e6: bd:fc:5f:dd:7d:bc:ae:ff:8b:18:fc:ba:b0:64:65:26:7e:6c: b5:4e:cf:86:27:f6:40:f4:db:2b:99:35:ef:1a:4c:ca:ce:92: d2:55:60:29:2d:18:92:62:24:88:33:94:33:9d:b5:65:a7:3a: 4c:6e:30:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZL84f2r6oyIfACYEcHwrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczY2JjMTQ3ZWFkZDgxNTQ4MTUxZjM1MTBlMmRlMDlkODY4 YWM2Y2MwHhcNMjUxMjA2MTYwMDM0WhcNMjUxMjA3MTYwMDM0WjAzMTEwLwYDVQQD EyhjMmM5Mjc5YzYyZDVkMDliMDczZTkzMzJiZmJiMzFlYjUwYWVlZWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq62riZFcPTLRmI7bcgmzBSPO1d0W Pbiv0yNuJbYnTLW8+1nIu3XjtdcgnQJWa2QdEY5236zSQMJzL5gTteum6jqMvype sNEAn0Z9OuHjVHOLWeRYwPv1AqawFrZjrooVhlGvF5LoqvQVDV0cmioZrzMGwXAf KQ/Qv5C7wDq7Nvd5qtdPLwBGvkt8vulqDLX64RkZBHkgfEo5wu1IJoITJ6/SPDyU pvf3wyYubjX9D+dC42zNk5gR5SHs5xUyM/CtMhgiAqkofxMlclribAqfKXv6JihD 29bHHXiRDHvsexSg/yb2gbrroEyhScOZcdnUgCrK2rDCB3AhivaLMmmlXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLJJ5xi1dCbBz6TMr+7MetQru7EMB8GA1UdIwQY MBaAFHPLwUfq3YFUgVHzUQ4t4J2GisbMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzh2QlItcmRnVlNCVWZOUkRpM2duWWFLeHN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hNjMwNGItNmM1OS00ZjVmLWI2NDYt NWYwZDkxZjRmOTA4LzEvYzh2QlItcmRnVlNCVWZOUkRpM2duWWFLeHN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hNjMwNGItNmM1OS00ZjVmLWI2NDYtNWYwZDkxZjRmOTA4 LzEvYzh2QlItcmRnVlNCVWZOUkRpM2duWWFLeHN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZws6hzga kHYOhZkqrbSiJFU1XiVhCUqUuixefdbL2uCaA8ryDKk80zHnHuLz/IlHEOuyfHkS NgLR9R8dlOSsqJs8Ta9O/JonMhwbVGCuAFUAJivhGFy+2MlAr7OgIZ1uZ+lmLJ2n YHFvMSzm3m4FUn2bFFSewKTSW3ranYlSoVO8Upq0Vb+eW8Lq0Z/pDkrWEzyIfZhV BTf+SYEg5A87wUibfImYWIQqa4/nevpIaL5YnbzQtB6g3mQww/08zxvNoe78PPHm vfxf3X28rv+LGPy6sGRlJn5stU7Phif2QPTbK5k17xpMys6S0lVgKS0YkmIkiDOU M521Zac6TG4wSg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:16:44 2025 by rpki-client