This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft File: 8YCPGr745rWc1DWaa0SB_HyWMdE.mft (raw, json) Hash identifier: 3i1nx2mdYglMZgd833FrflRmBjchQVydwf9b+ljNkt8= Subject key identifier: A0:E1:DA:B3:E8:E2:B5:5E:85:23:43:C9:F0:AC:CE:E9:36:15:EE:DD Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1 Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1 Certificate serial: 019AF3F7927DE18085F692F92847A1A16267 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 14:01:19 +0000 Manifest this update: Sat 06 Dec 2025 14:01:19 +0000 Manifest next update: Sun 07 Dec 2025 14:01:19 +0000 Files and hashes: 1: 1-pC8r9w9eHPboI6UQ9SPxm6C-JI.roa (hash: 4/hN4BZtPakrI9kWgmVlEfI4CA36mWdfywhv2fUv0zc=) 2: 8YCPGr745rWc1DWaa0SB_HyWMdE.crl (hash: nuFxm0way8aDuEy1gSNBM2Ol3HAWYet9NFsRNq9K28s=) 3: ewa-i1ZX3x5sx5ypquiCHGcdBZY.roa (hash: oyaoG9o+HMw8UbuIoU2MjdUmgeJrqz7dNC1WMoDWkeM=) 4: f3N3ZaRV0bOdlX13-KIGTXiHS-c.roa (hash: G7D6BUoaKLhAlCeuz2Rq/Eb+8hPzua6dwGFSHRCAqy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:92:7d:e1:80:85:f6:92:f9:28:47:a1:a1:62:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1 Validity Not Before: Dec 6 14:01:19 2025 GMT Not After : Dec 7 14:01:19 2025 GMT Subject: CN=a0e1dab3e8e2b55e852343c9f0accee93615eedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e4:7c:75:5f:9b:7e:cc:32:a5:0e:4f:b1:c3: aa:05:bf:56:60:df:55:36:56:c9:94:d6:22:3a:fb: 11:e7:ba:42:c0:fb:63:e7:03:83:e5:1d:b5:db:ab: 8c:4c:97:28:d7:87:f4:32:8a:ad:e5:41:b2:b3:a1: ba:98:53:11:68:c5:3d:0f:17:81:f8:ce:d8:d5:af: ac:c3:ef:6b:64:6e:5a:11:bf:62:b8:ba:a6:56:a4: d2:f1:47:79:9d:65:2a:43:81:a6:c6:dc:32:1a:cd: b7:b5:20:83:b6:3a:09:6a:1b:57:78:11:19:86:81: bd:e3:03:77:35:0d:2e:a1:bd:48:89:23:fb:8c:ab: a2:31:16:3a:b4:23:71:9d:30:76:ea:8c:9f:85:b1: de:e4:8f:0a:1b:63:d6:2a:9e:40:da:9b:fc:d2:bf: aa:35:41:dc:0a:ef:fc:67:16:7b:37:c5:1a:89:24: ea:60:09:6a:bc:03:37:4c:58:f3:58:c8:25:a3:4b: 94:92:86:5c:20:be:aa:22:d0:a3:5f:26:f7:2a:3b: d7:3f:03:16:f9:3b:88:9c:30:e4:e1:f6:87:a5:8f: c4:d7:d0:98:1a:bc:f1:47:8c:5f:d2:76:7e:88:03: 14:d4:ff:85:23:83:20:59:b3:05:9c:3e:b0:1c:7d: 67:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E1:DA:B3:E8:E2:B5:5E:85:23:43:C9:F0:AC:CE:E9:36:15:EE:DD X509v3 Authority Key Identifier: keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a1:c7:6a:06:3d:18:11:f0:5e:d7:74:12:4c:b0:19:fc:a2: f3:c0:9c:c8:57:9b:22:72:c2:b3:15:8e:10:2a:a7:a8:fa:8b: 4f:54:3f:41:c6:97:89:29:94:d8:1b:67:76:77:39:0c:52:c6: 48:e0:53:c5:13:cc:46:ee:3e:36:fe:c4:13:97:f9:c0:a5:c8: 34:e8:ee:77:7d:33:c2:0f:e3:44:4a:45:b1:c5:80:7b:d8:fc: 0e:14:8a:c2:02:8b:a5:c4:5e:68:3f:38:75:eb:19:65:ef:fe: a2:81:03:d4:e9:96:c3:54:03:f6:51:2a:45:77:3e:57:b5:3e: e1:3c:4b:b5:a8:22:8d:c4:53:96:62:9e:7c:2c:95:0d:a7:95: 85:0c:70:76:25:52:76:3a:35:4c:cb:c9:83:c5:f9:7a:25:c6: 08:09:0f:d2:9f:98:58:85:bf:34:76:38:d6:f2:5c:09:29:04: 90:3f:89:10:37:b1:9f:4d:84:b9:ce:78:ce:d1:c9:6a:93:8a: ac:08:c9:bd:4a:f1:8d:5b:3f:e9:63:78:2e:7a:fd:be:82:b7: 37:c3:04:b6:46:92:da:0c:d1:02:46:1f:f6:20:6b:ba:cd:40: 19:50:70:5a:33:7b:a3:67:49:73:ee:b3:d6:6a:1f:32:4d:5b: 9f:21:a6:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz95J94YCF9pL5KEehoWJnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxODA4ZjFhYmVmOGU2YjU5Y2Q0MzU5YTZiNDQ4MWZjN2M5 NjMxZDEwHhcNMjUxMjA2MTQwMTE5WhcNMjUxMjA3MTQwMTE5WjAzMTEwLwYDVQQD EyhhMGUxZGFiM2U4ZTJiNTVlODUyMzQzYzlmMGFjY2VlOTM2MTVlZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquR8dV+bfswypQ5PscOqBb9WYN9V NlbJlNYiOvsR57pCwPtj5wOD5R2126uMTJco14f0Moqt5UGys6G6mFMRaMU9DxeB +M7Y1a+sw+9rZG5aEb9iuLqmVqTS8Ud5nWUqQ4GmxtwyGs23tSCDtjoJahtXeBEZ hoG94wN3NQ0uob1IiSP7jKuiMRY6tCNxnTB26oyfhbHe5I8KG2PWKp5A2pv80r+q NUHcCu/8ZxZ7N8UaiSTqYAlqvAM3TFjzWMglo0uUkoZcIL6qItCjXyb3KjvXPwMW +TuInDDk4faHpY/E19CYGrzxR4xf0nZ+iAMU1P+FI4MgWbMFnD6wHH1naQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDh2rPo4rVehSNDyfCszuk2Fe7dMB8GA1UdIwQY MBaAFPGAjxq++Oa1nNQ1mmtEgfx8ljHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYt MDMwNzdlMzdjNjFhLzEvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9hZTMyNGYtNTRmNS00MWRhLWJlYmYtMDMwNzdlMzdjNjFh LzEvOFlDUEdyNzQ1cldjMURXYWEwU0JfSHlXTWRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnaHHagY9 GBHwXtd0EkywGfyi88CcyFebInLCsxWOECqnqPqLT1Q/QcaXiSmU2Btndnc5DFLG SOBTxRPMRu4+Nv7EE5f5wKXINOjud30zwg/jREpFscWAe9j8DhSKwgKLpcReaD84 desZZe/+ooED1OmWw1QD9lEqRXc+V7U+4TxLtagijcRTlmKefCyVDaeVhQxwdiVS djo1TMvJg8X5eiXGCAkP0p+YWIW/NHY41vJcCSkEkD+JEDexn02Euc54ztHJapOK rAjJvUrxjVs/6WN4Lnr9voK3N8MEtkaS2gzRAkYf9iBrus1AGVBwWjN7o2dJc+6z 1mofMk1bnyGmpg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:45 2025 by rpki-client