This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft File: lB8grdISwODmjj8a6OoqeWSfT0w.mft (raw, json) Hash identifier: Q5TE66vItiFombhwxTYcH5okU6uOIv9imqngdWjI+hk= Subject key identifier: E8:29:4F:45:F1:AC:0B:0E:7B:7B:2C:93:5A:2D:FC:C6:BA:C7:79:CC Authority key identifier: 94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C Certificate issuer: /CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c Certificate serial: 019AFB4312E8C02CCFFAFD2A8A62481FAB76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft Manifest number: 16F6 Signing time: Mon 08 Dec 2025 00:01:08 +0000 Manifest this update: Mon 08 Dec 2025 00:01:08 +0000 Manifest next update: Tue 09 Dec 2025 00:01:08 +0000 Files and hashes: 1: Kvab69Fm55apwC6CNn_puTpqnco.roa (hash: SXQsTZgWdcQi8ndza2+PpabIjMyNvdIkKjFoA2OkVbo=) 2: lB8grdISwODmjj8a6OoqeWSfT0w.crl (hash: uLEO5NFp+S7oDB1kY78JTqsxc887GhUZmQsv7RQ+3oQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 00:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:43:12:e8:c0:2c:cf:fa:fd:2a:8a:62:48:1f:ab:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=941f20add212c0e0e68e3f1ae8ea2a79649f4f4c Validity Not Before: Dec 8 00:01:08 2025 GMT Not After : Dec 9 00:01:08 2025 GMT Subject: CN=e8294f45f1ac0b0e7b7b2c935a2dfcc6bac779cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3b:da:05:61:c5:d4:48:4b:81:8d:fa:b4:12: 9e:07:6a:f1:56:9f:35:7c:ae:c7:e6:5b:a6:4a:62: d4:29:80:83:70:08:c7:ad:55:d2:cb:4d:ce:33:00: 64:9b:78:80:75:bb:82:4e:cc:dc:47:64:be:fd:bd: f2:c2:e1:de:dd:96:df:a0:6d:e7:bc:ec:6a:90:ea: ed:06:6d:c0:01:ae:9b:be:0c:6c:67:d1:e6:1c:a8: 93:a0:a7:d3:32:27:0f:df:ec:df:c1:7b:fe:32:68: 33:e9:ce:be:d5:ab:56:e7:58:7e:d5:56:01:9d:d4: 6c:d2:22:26:a5:7b:90:f8:29:8b:d6:90:1f:38:21: f7:49:f2:58:0c:ac:35:97:59:43:23:04:cd:ba:21: ce:e4:05:67:5c:6f:27:0a:13:f8:9a:b8:18:29:9c: 34:71:af:c8:43:0a:19:3f:61:88:ab:fc:d6:d1:7f: 81:c2:94:0e:3b:eb:e5:24:2b:c9:2a:65:41:eb:df: 6a:d7:7d:05:d9:53:4a:71:13:71:01:d5:02:a8:15: d6:52:16:c8:86:d5:5f:e4:1a:f2:1b:32:c0:b3:22: 20:14:1b:9f:51:b8:f1:eb:2e:63:c9:fc:73:1a:af: 47:08:cd:d0:93:dd:a5:f4:44:6a:aa:32:44:df:b3: 1c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:29:4F:45:F1:AC:0B:0E:7B:7B:2C:93:5A:2D:FC:C6:BA:C7:79:CC X509v3 Authority Key Identifier: keyid:94:1F:20:AD:D2:12:C0:E0:E6:8E:3F:1A:E8:EA:2A:79:64:9F:4F:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB8grdISwODmjj8a6OoqeWSfT0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/192c67-9353-49c3-8a2f-365e13da62ea/1/lB8grdISwODmjj8a6OoqeWSfT0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:f8:a9:c0:8b:09:49:84:ce:ef:3b:58:b4:9b:07:89:09:52: 8d:57:93:b1:8b:9f:5b:11:5c:99:c4:6a:e3:b3:26:e7:9f:e1: 45:0f:d5:b4:65:7d:26:63:8e:bb:dd:bf:64:a7:6d:0e:4c:92: 33:be:f2:ba:81:92:c4:cc:96:75:cb:a2:d1:7a:c8:9b:f8:e2: 9e:dc:25:fe:49:82:02:c2:69:41:52:aa:89:3f:fd:d5:0b:c2: 0c:73:c1:5b:c6:3a:4e:c4:83:7c:f7:a3:11:10:5d:8a:42:84: 8d:21:0b:9d:45:aa:47:b8:43:5e:a6:e4:48:3b:21:16:7c:b2: a1:a4:21:6d:ea:b5:0b:f6:29:4f:ba:5d:7a:22:be:0e:3e:d0: 7f:0b:ab:c0:0b:68:9f:c1:66:1c:bf:05:79:16:3e:7a:97:3b: 30:fd:a1:ae:a0:42:96:7e:d5:57:29:0c:f9:61:34:d8:12:06: 82:c6:a6:de:69:36:bf:bd:9f:34:85:1f:2d:1d:ea:c5:f5:bb: 78:9f:ee:82:42:44:ac:0f:e2:f3:09:ef:bc:af:87:e6:11:33: 8a:01:cc:28:bd:f1:82:96:fc:0e:3f:c8:8d:a8:1c:6b:e4:49: a1:0f:c4:b1:04:1e:59:87:86:c1:54:93:40:fa:10:1a:ba:ec: 28:73:59:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7QxLowCzP+v0qimJIH6t2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MWYyMGFkZDIxMmMwZTBlNjhlM2YxYWU4ZWEyYTc5NjQ5 ZjRmNGMwHhcNMjUxMjA4MDAwMTA4WhcNMjUxMjA5MDAwMTA4WjAzMTEwLwYDVQQD EyhlODI5NGY0NWYxYWMwYjBlN2I3YjJjOTM1YTJkZmNjNmJhYzc3OWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDvaBWHF1EhLgY36tBKeB2rxVp81 fK7H5lumSmLUKYCDcAjHrVXSy03OMwBkm3iAdbuCTszcR2S+/b3ywuHe3ZbfoG3n vOxqkOrtBm3AAa6bvgxsZ9HmHKiToKfTMicP3+zfwXv+Mmgz6c6+1atW51h+1VYB ndRs0iImpXuQ+CmL1pAfOCH3SfJYDKw1l1lDIwTNuiHO5AVnXG8nChP4mrgYKZw0 ca/IQwoZP2GIq/zW0X+BwpQOO+vlJCvJKmVB699q130F2VNKcRNxAdUCqBXWUhbI htVf5BryGzLAsyIgFBufUbjx6y5jyfxzGq9HCM3Qk92l9ERqqjJE37McdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgpT0XxrAsOe3ssk1ot/Ma6x3nMMB8GA1UdIwQY MBaAFJQfIK3SEsDg5o4/GujqKnlkn09MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xOTJjNjctOTM1My00OWMzLThhMmYt MzY1ZTEzZGE2MmVhLzEvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8xOTJjNjctOTM1My00OWMzLThhMmYtMzY1ZTEzZGE2MmVh LzEvbEI4Z3JkSVN3T0Rtamo4YTZPb3FlV1NmVDB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPipwIsJ SYTO7ztYtJsHiQlSjVeTsYufWxFcmcRq47Mm55/hRQ/VtGV9JmOOu92/ZKdtDkyS M77yuoGSxMyWdcui0XrIm/jintwl/kmCAsJpQVKqiT/91QvCDHPBW8Y6TsSDfPej ERBdikKEjSELnUWqR7hDXqbkSDshFnyyoaQhbeq1C/YpT7pdeiK+Dj7QfwurwAto n8FmHL8FeRY+epc7MP2hrqBCln7VVykM+WE02BIGgsam3mk2v72fNIUfLR3qxfW7 eJ/ugkJErA/i8wnvvK+H5hEzigHMKL3xgpb8Dj/Ijagca+RJoQ/EsQQeWYeGwVST QPoQGrrsKHNZmg== -----END CERTIFICATE-----Generated at Mon Dec 8 09:36:16 2025 by rpki-client