This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft File: B8n9CgjdBL-Yalvahugx34BI8q4.mft (raw, json) Hash identifier: 9rSiGSHa8GWzCtsXyoe7xT9Tn2yZspRakXRWfAlUD50= Subject key identifier: 91:78:A8:E1:D8:1F:2E:9C:12:F0:82:84:84:9F:A3:1A:54:01:C0:59 Authority key identifier: 07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE Certificate issuer: /CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae Certificate serial: 019AF31D4AB478DF209DEACD02DBF0DCE047 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:02:54 +0000 Manifest this update: Sat 06 Dec 2025 10:02:54 +0000 Manifest next update: Sun 07 Dec 2025 10:02:54 +0000 Files and hashes: 1: 8s5jlmVuyTPiRv4H9BvQU42g7nw.roa (hash: Ucu3y8/kR6J85jmowJDRLpHtgn2LtVqQioF1Y1wmZq4=) 2: B8n9CgjdBL-Yalvahugx34BI8q4.crl (hash: e9jIJAP3p8PhwvDyntsmdsPOQSivjiZMldFGielcvUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:4a:b4:78:df:20:9d:ea:cd:02:db:f0:dc:e0:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae Validity Not Before: Dec 6 10:02:54 2025 GMT Not After : Dec 7 10:02:54 2025 GMT Subject: CN=9178a8e1d81f2e9c12f08284849fa31a5401c059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4b:22:f9:23:a1:ac:fb:5f:3a:36:b4:15:2e: ae:0e:a5:5e:df:d7:17:3b:17:24:51:f4:d7:7b:09: ef:7d:7f:15:f4:5e:43:6a:8c:15:73:43:76:58:5a: 16:6c:7f:36:4a:b7:b7:91:9e:39:db:50:ef:98:26: 76:0e:07:cf:da:0d:0b:20:88:d4:70:92:ca:67:d5: 15:17:97:55:e5:d8:53:b3:4c:14:03:9e:a7:a5:8e: a1:c8:3c:76:c0:04:88:19:dd:eb:02:17:74:1d:47: b7:2a:28:6b:5f:4b:04:c4:58:65:b2:a8:3f:fa:4d: 6e:27:41:8d:3f:b9:a6:ab:54:e4:fc:0c:88:45:ff: 30:fd:c6:a4:67:02:b6:27:9e:a1:e2:bc:58:a5:f2: a2:75:05:64:9c:9d:45:96:fd:3f:ee:fc:fc:d6:2b: e4:32:e8:30:93:60:f1:92:76:b6:30:c3:e3:aa:a4: 69:b5:57:ba:7a:38:bb:fb:b7:51:9a:c4:67:d5:2c: 04:a0:fe:3e:81:80:45:4b:36:d4:50:76:99:5f:c8: 4f:12:e4:91:e2:7e:2f:94:7e:b7:a2:a6:cf:b8:f2: 56:8c:85:86:90:1b:0e:fe:a4:76:5d:79:bb:60:69: 74:fe:52:c0:8e:4e:93:b1:36:0a:34:b0:05:b6:d7: 70:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:78:A8:E1:D8:1F:2E:9C:12:F0:82:84:84:9F:A3:1A:54:01:C0:59 X509v3 Authority Key Identifier: keyid:07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:e5:f4:c3:a6:56:97:93:05:a4:53:2a:a0:9c:3e:fd:40:45: 1b:9d:84:3a:46:3b:2f:c3:e8:f1:37:94:2f:29:87:f6:56:93: 06:ca:fa:a3:94:89:2a:49:66:2f:aa:91:50:65:1d:c1:b7:93: 05:7f:02:93:53:05:8e:52:97:03:e1:7e:d6:f0:f6:0d:e6:ea: 36:c9:f0:12:80:19:cd:88:c5:2f:75:cb:a9:6e:4e:ff:d1:25: c4:2f:6d:2a:7f:25:6c:78:a3:bd:16:98:a9:1b:41:d4:ba:02: 27:3c:04:a8:a6:f0:4b:55:eb:b1:13:eb:b0:57:30:a9:e6:33: 37:dc:9b:69:ff:7b:f0:f7:fb:e0:4e:35:e8:51:a0:eb:03:f9: fb:67:e8:bf:27:c4:dc:c4:61:0d:91:68:81:f9:73:5a:cb:c3: 75:41:0e:e4:05:0e:ed:95:66:e6:0c:31:a1:59:fb:44:95:3f: 03:7c:be:f1:9a:79:fc:99:d2:8e:2f:a5:85:01:9e:5d:af:0a: fb:55:7a:b9:81:67:2a:de:ac:63:a1:e7:21:3a:c3:90:91:0d: 27:f2:6e:fd:ae:d5:35:83:de:42:45:83:72:01:87:c9:53:a2: 50:ff:ed:cb:ea:92:bc:f3:e0:ce:60:af:ac:ae:42:bf:2b:d2: 98:0e:0c:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHUq0eN8gnerNAtvw3OBHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YzlmZDBhMDhkZDA0YmY5ODZhNWJkYTg2ZTgzMWRmODA0 OGYyYWUwHhcNMjUxMjA2MTAwMjU0WhcNMjUxMjA3MTAwMjU0WjAzMTEwLwYDVQQD Eyg5MTc4YThlMWQ4MWYyZTljMTJmMDgyODQ4NDlmYTMxYTU0MDFjMDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEsi+SOhrPtfOja0FS6uDqVe39cX OxckUfTXewnvfX8V9F5DaowVc0N2WFoWbH82Sre3kZ4521DvmCZ2DgfP2g0LIIjU cJLKZ9UVF5dV5dhTs0wUA56npY6hyDx2wASIGd3rAhd0HUe3KihrX0sExFhlsqg/ +k1uJ0GNP7mmq1Tk/AyIRf8w/cakZwK2J56h4rxYpfKidQVknJ1Flv0/7vz81ivk Mugwk2Dxkna2MMPjqqRptVe6eji7+7dRmsRn1SwEoP4+gYBFSzbUUHaZX8hPEuSR 4n4vlH63oqbPuPJWjIWGkBsO/qR2XXm7YGl0/lLAjk6TsTYKNLAFttdw7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJF4qOHYHy6cEvCChISfoxpUAcBZMB8GA1UdIwQY MBaAFAfJ/QoI3QS/mGpb2oboMd+ASPKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjhuOUNnamRCTC1ZYWx2YWh1Z3gzNEJJOHE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yMzc2YzUtMTAwOC00YzhlLWEyN2Et ZGU4YTRmMGFhOTU2LzEvQjhuOUNnamRCTC1ZYWx2YWh1Z3gzNEJJOHE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8yMzc2YzUtMTAwOC00YzhlLWEyN2EtZGU4YTRmMGFhOTU2 LzEvQjhuOUNnamRCTC1ZYWx2YWh1Z3gzNEJJOHE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFeX0w6ZW l5MFpFMqoJw+/UBFG52EOkY7L8Po8TeULymH9laTBsr6o5SJKklmL6qRUGUdwbeT BX8Ck1MFjlKXA+F+1vD2DebqNsnwEoAZzYjFL3XLqW5O/9ElxC9tKn8lbHijvRaY qRtB1LoCJzwEqKbwS1XrsRPrsFcwqeYzN9ybaf978Pf74E416FGg6wP5+2fovyfE 3MRhDZFogflzWsvDdUEO5AUO7ZVm5gwxoVn7RJU/A3y+8Zp5/JnSji+lhQGeXa8K +1V6uYFnKt6sY6HnITrDkJENJ/Ju/a7VNYPeQkWDcgGHyVOiUP/ty+qSvPPgzmCv rK5CvyvSmA4MCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:25:44 2025 by rpki-client