This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json) Hash identifier: WJiC5d+313xZrJvhg5yfxaNnD+Q5sDlVtvDoZ4K+3T4= Subject key identifier: CF:D4:3D:27:92:7A:80:99:E6:1A:E3:EF:4B:8B:63:E6:4C:5B:27:50 Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd Certificate serial: 019AF509AC287CCCAA1C882FC64CB0134B4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft Manifest number: 0E0A Signing time: Sat 06 Dec 2025 19:00:43 +0000 Manifest this update: Sat 06 Dec 2025 19:00:43 +0000 Manifest next update: Sun 07 Dec 2025 19:00:43 +0000 Files and hashes: 1: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: bNoQ+9YoayZ1hOK92RgLNInEv0bCUMsLj8ZlmAP/G64=) 2: f8mNy-1avonS_WiVxLnjQLPSSV8.roa (hash: Zx+TLSuG3LLevKeGkpvoHFC+rwTqCzGzO/bzI3CHmxw=) 3: s6pjMkaUMJH3bmFXp69HLkN6HiA.roa (hash: nbZzfTGEGLYlrEJQFB74A8uRuG/tPptj9lY9KUc17PU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:ac:28:7c:cc:aa:1c:88:2f:c6:4c:b0:13:4b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd Validity Not Before: Dec 6 19:00:43 2025 GMT Not After : Dec 7 19:00:43 2025 GMT Subject: CN=cfd43d27927a8099e61ae3ef4b8b63e64c5b2750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:44:43:fb:1a:78:40:38:d9:f9:52:fe:01:bd: 75:f8:3a:8a:df:cd:81:c9:65:ad:59:ad:33:e4:7b: fc:a9:6a:ad:7b:57:5f:05:a4:c6:f8:56:0f:36:01: 65:d6:f3:54:ec:79:24:f4:a9:35:46:d2:e9:55:12: 6a:b8:4b:70:7e:b0:9a:16:d4:f9:bf:09:d6:0d:41: 70:8f:8d:76:dc:07:50:eb:a2:c7:1e:98:d6:1e:09: 4e:93:02:81:a4:a6:73:63:64:ce:1e:92:fa:e1:33: 86:01:af:be:70:11:23:53:34:98:60:58:ff:17:68: a0:28:cb:b3:3c:ba:ee:50:38:82:6a:5b:bf:9c:6c: 30:09:1e:7d:1e:64:5f:64:bc:ac:cb:33:40:7f:2c: 04:f9:97:e3:41:37:42:ca:e9:e3:ae:66:75:27:76: 50:59:cd:41:cc:5b:75:8b:e2:49:ba:81:d1:94:b5: f6:81:9a:f6:25:e2:50:62:92:ab:89:92:06:82:3b: c2:52:b2:09:ba:58:4c:b6:26:90:ae:bf:76:1c:c3: 89:00:26:31:a5:6d:ff:51:18:e9:ed:3b:fa:7f:b3: 08:d9:8e:1a:24:6c:c0:67:a8:f5:e1:99:c4:96:bb: ea:88:b9:06:50:71:b2:74:c3:2b:8a:1e:07:83:6c: 3a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D4:3D:27:92:7A:80:99:E6:1A:E3:EF:4B:8B:63:E6:4C:5B:27:50 X509v3 Authority Key Identifier: keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:1b:d9:72:27:ec:2c:ea:b6:c8:c4:17:93:e2:83:fe:24:de: 3b:4c:08:3e:42:17:1b:f1:47:29:1f:7e:09:00:15:7a:04:d2: 4b:f1:ff:62:c5:2b:10:45:52:e9:0a:fa:16:5a:0c:e7:28:62: 15:24:ed:6e:de:58:35:65:87:0a:4a:13:46:9d:73:c2:cc:04: 7d:6d:54:ab:ab:c7:eb:20:f9:9f:3a:09:d9:78:a9:25:3a:f4: 48:35:a0:7f:ff:21:1f:fe:15:01:c0:8d:b2:a4:f2:01:01:6d: 6b:11:ff:3f:b3:20:9c:c1:af:42:08:2c:2c:ab:5a:82:6d:13: d3:59:9f:a7:af:d6:c4:93:c1:b5:46:f0:e5:e0:50:7f:27:a6: ec:3e:62:e4:7f:7e:86:99:6f:1f:94:4d:1a:10:0c:5a:de:d9: 8d:0f:f1:2d:39:b4:d4:f8:39:c7:41:9c:57:66:8f:22:7a:e9: aa:7f:71:e7:05:80:b7:05:82:27:a0:e6:55:3f:1d:ea:82:90: d8:0a:a3:65:f6:6a:b1:15:3b:75:7a:b4:db:0a:f1:ea:32:63: 08:2c:28:62:f4:cc:e7:9b:77:85:31:c8:01:a1:86:27:41:06: 61:82:1f:0b:83:c1:c2:a0:a9:ef:34:fc:75:70:0d:5c:ee:ba: 2b:db:5b:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CawofMyqHIgvxkywE0tOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YzE4MjQ3YTUzMjY0NzNhYmM5NmY1YTEwNzFkMTU5YzFl YjdlY2QwHhcNMjUxMjA2MTkwMDQzWhcNMjUxMjA3MTkwMDQzWjAzMTEwLwYDVQQD EyhjZmQ0M2QyNzkyN2E4MDk5ZTYxYWUzZWY0YjhiNjNlNjRjNWIyNzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvERD+xp4QDjZ+VL+Ab11+DqK382B yWWtWa0z5Hv8qWqte1dfBaTG+FYPNgFl1vNU7Hkk9Kk1RtLpVRJquEtwfrCaFtT5 vwnWDUFwj4123AdQ66LHHpjWHglOkwKBpKZzY2TOHpL64TOGAa++cBEjUzSYYFj/ F2igKMuzPLruUDiCalu/nGwwCR59HmRfZLysyzNAfywE+ZfjQTdCyunjrmZ1J3ZQ Wc1BzFt1i+JJuoHRlLX2gZr2JeJQYpKriZIGgjvCUrIJulhMtiaQrr92HMOJACYx pW3/URjp7Tv6f7MI2Y4aJGzAZ6j14ZnElrvqiLkGUHGydMMrih4Hg2w6fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/UPSeSeoCZ5hrj70uLY+ZMWydQMB8GA1UdIwQY MBaAFAfBgkelMmRzq8lvWhBx0VnB637NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNzBkY2YtOTVlNy00NDk1LWE0MTEt M2E1NzE4YjQxZjdiLzEvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kNzBkY2YtOTVlNy00NDk1LWE0MTEtM2E1NzE4YjQxZjdi LzEvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBvZcifs LOq2yMQXk+KD/iTeO0wIPkIXG/FHKR9+CQAVegTSS/H/YsUrEEVS6Qr6FloM5yhi FSTtbt5YNWWHCkoTRp1zwswEfW1Uq6vH6yD5nzoJ2XipJTr0SDWgf/8hH/4VAcCN sqTyAQFtaxH/P7MgnMGvQggsLKtagm0T01mfp6/WxJPBtUbw5eBQfyem7D5i5H9+ hplvH5RNGhAMWt7ZjQ/xLTm01Pg5x0GcV2aPInrpqn9x5wWAtwWCJ6DmVT8d6oKQ 2AqjZfZqsRU7dXq02wrx6jJjCCwoYvTM55t3hTHIAaGGJ0EGYYIfC4PBwqCp7zT8 dXANXO66K9tbJw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:34:03 2025 by rpki-client