This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft File: v8qNbiIJkMc424yExmshnwNFVgw.mft (raw, json) Hash identifier: yegR1kZhq/LgH58yHVJx4JxY3FuzSd0BN7SYXQbN8Vs= Subject key identifier: B4:C2:8C:17:05:CF:75:0F:99:12:70:1A:D6:6C:97:A9:C1:8D:03:5D Authority key identifier: BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C Certificate issuer: /CN=bfca8d6e220990c738db8c84c66b219f0345560c Certificate serial: 019AF12E8931FBE183351F79EAE0A7F89B06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft Manifest number: 1159 Signing time: Sat 06 Dec 2025 01:02:30 +0000 Manifest this update: Sat 06 Dec 2025 01:02:30 +0000 Manifest next update: Sun 07 Dec 2025 01:02:30 +0000 Files and hashes: 1: v8qNbiIJkMc424yExmshnwNFVgw.crl (hash: wlTbhwi8kVYJ5mxT0msCbkDGixZ0o0zv4LBpTjQmXKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:89:31:fb:e1:83:35:1f:79:ea:e0:a7:f8:9b:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfca8d6e220990c738db8c84c66b219f0345560c Validity Not Before: Dec 6 01:02:30 2025 GMT Not After : Dec 7 01:02:30 2025 GMT Subject: CN=b4c28c1705cf750f9912701ad66c97a9c18d035d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:74:6d:08:30:9e:da:16:fe:ef:56:09:a9:2b: 07:49:51:64:41:71:f7:b3:ed:d7:4a:37:75:48:ca: 56:5d:37:73:fb:a8:9a:e3:51:89:87:71:3c:57:65: 10:c3:10:65:9c:02:65:23:24:25:69:b8:81:2b:fd: 1c:67:da:d9:57:96:e4:c6:b7:b4:3d:3a:dd:57:b3: 86:25:ef:63:5d:4c:0a:f8:27:2e:43:b2:6a:0a:97: 54:21:ef:6e:a7:02:86:d4:07:bb:f9:3f:d2:ae:b9: bf:e9:4c:8d:e4:cf:11:a3:d5:17:49:27:a2:e6:ff: 77:b2:ed:e7:83:60:ea:e9:8f:05:27:d6:f8:b6:1f: a3:89:44:d7:84:eb:f8:2a:25:4d:76:c7:d9:80:3e: 95:c8:2a:53:59:2e:2e:d5:f7:f9:96:dd:45:a2:33: d2:1b:81:53:4d:ad:9c:fa:00:f7:6c:33:fb:77:98: 56:38:a3:42:fc:00:b6:d1:be:22:68:b3:f6:29:fc: 06:30:7d:72:bb:4d:ae:06:9b:4d:58:1b:54:fd:00: a8:d8:c8:dc:a6:01:06:c9:65:74:8b:ae:b9:0a:c8: 97:e6:e9:ce:e0:fe:81:7d:70:b9:3e:61:6d:c1:46: c3:69:e5:73:89:c8:72:ab:17:ea:75:89:85:ca:bb: a7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C2:8C:17:05:CF:75:0F:99:12:70:1A:D6:6C:97:A9:C1:8D:03:5D X509v3 Authority Key Identifier: keyid:BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:81:66:8a:b6:fa:bd:24:6e:0d:eb:15:27:08:62:8a:b6:4f: 2a:48:9f:c4:b8:94:68:25:6d:52:84:4d:28:09:6f:51:92:72: 7d:e7:e4:1a:2d:b1:dd:16:6f:3c:e9:a6:32:bb:16:64:3c:f4: f8:67:15:c1:eb:77:52:c0:36:47:25:12:44:0f:30:df:d7:4f: 5d:57:a1:cd:4f:8f:c6:1f:13:41:9b:fc:01:eb:6d:84:a2:e5: 0c:a5:75:00:d6:87:47:74:2d:41:eb:dd:1d:a2:6b:49:14:7e: 43:b7:1a:75:81:64:33:da:22:d2:46:00:f6:52:f1:bd:7a:1c: fe:cd:a5:1e:fb:9c:91:00:e6:a4:d6:2e:2e:6a:00:a9:17:22: 8d:7e:fa:2b:d6:7a:42:61:87:05:ad:ec:24:f2:4a:e0:fa:68: 63:84:1f:b5:2c:e5:75:a2:54:e3:3f:4b:f4:b0:1e:c2:88:04: 63:b6:96:29:39:0a:8c:c1:a4:a5:f4:80:bc:b0:0d:41:7b:da: 60:68:4c:33:0d:ec:48:33:5b:d0:ae:e6:16:d7:56:16:12:98: bd:d4:12:ad:d5:65:f3:25:d6:c6:c8:08:e4:be:af:fe:81:e5: 52:aa:57:4c:46:02:67:5f:60:a1:e7:fc:9d:7e:92:84:2a:f1: 96:b2:5d:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLokx++GDNR956uCn+JsGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmY2E4ZDZlMjIwOTkwYzczOGRiOGM4NGM2NmIyMTlmMDM0 NTU2MGMwHhcNMjUxMjA2MDEwMjMwWhcNMjUxMjA3MDEwMjMwWjAzMTEwLwYDVQQD EyhiNGMyOGMxNzA1Y2Y3NTBmOTkxMjcwMWFkNjZjOTdhOWMxOGQwMzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nRtCDCe2hb+71YJqSsHSVFkQXH3 s+3XSjd1SMpWXTdz+6ia41GJh3E8V2UQwxBlnAJlIyQlabiBK/0cZ9rZV5bkxre0 PTrdV7OGJe9jXUwK+CcuQ7JqCpdUIe9upwKG1Ae7+T/Srrm/6UyN5M8Ro9UXSSei 5v93su3ng2Dq6Y8FJ9b4th+jiUTXhOv4KiVNdsfZgD6VyCpTWS4u1ff5lt1FojPS G4FTTa2c+gD3bDP7d5hWOKNC/AC20b4iaLP2KfwGMH1yu02uBptNWBtU/QCo2Mjc pgEGyWV0i665CsiX5unO4P6BfXC5PmFtwUbDaeVzichyqxfqdYmFyrun4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTCjBcFz3UPmRJwGtZsl6nBjQNdMB8GA1UdIwQY MBaAFL/KjW4iCZDHONuMhMZrIZ8DRVYMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjhxTmJpSUprTWM0MjR5RXhtc2hud05GVmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lNDMxOTQtYzM3Yi00ZTdhLTkxNTAt MjBlMjdmODc5YWU3LzEvdjhxTmJpSUprTWM0MjR5RXhtc2hud05GVmd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lNDMxOTQtYzM3Yi00ZTdhLTkxNTAtMjBlMjdmODc5YWU3 LzEvdjhxTmJpSUprTWM0MjR5RXhtc2hud05GVmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4Fmirb6 vSRuDesVJwhiirZPKkifxLiUaCVtUoRNKAlvUZJyfefkGi2x3RZvPOmmMrsWZDz0 +GcVwet3UsA2RyUSRA8w39dPXVehzU+Pxh8TQZv8AetthKLlDKV1ANaHR3QtQevd HaJrSRR+Q7cadYFkM9oi0kYA9lLxvXoc/s2lHvuckQDmpNYuLmoAqRcijX76K9Z6 QmGHBa3sJPJK4PpoY4QftSzldaJU4z9L9LAewogEY7aWKTkKjMGkpfSAvLANQXva YGhMMw3sSDNb0K7mFtdWFhKYvdQSrdVl8yXWxsgI5L6v/oHlUqpXTEYCZ19goef8 nX6ShCrxlrJdFw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:14:01 2025 by rpki-client