This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft File: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft (raw, json) Hash identifier: maxykdRBhoiONEv/T9qHBh+rP/NX67tF42AnA2XOFGg= Subject key identifier: 12:6A:AC:74:0C:1A:B6:DA:A8:02:F7:A3:ED:C1:38:51:DA:6D:D0:A3 Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5 Certificate issuer: /CN=f2262faf4376420024aad72983ac3e87944ea7a5 Certificate serial: 019AF31C1F240E8B025747D89857B2C2433A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft Manifest number: 0443 Signing time: Sat 06 Dec 2025 10:01:37 +0000 Manifest this update: Sat 06 Dec 2025 10:01:37 +0000 Manifest next update: Sun 07 Dec 2025 10:01:37 +0000 Files and hashes: 1: 8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl (hash: BzSCd1IKM0MTM5JYZzx/om/LjyvhB2+mVVtptlqYbBs=) 2: 9Mc_YHkeRnOleVXlULa1kHSDpsY.roa (hash: vM50N/l+aDNC1xeVIe5zjbI+WcZUV2cPPG76tUoJrmA=) 3: I-0idQ-x8b_iuF_AN1e-P1ZFsto.roa (hash: J959UKPkKfG7mGSEhJQ4lp0ApYm6t4BNil0ibX/rnJ0=) 4: I8X4-fx8YNfYZj3EvfIsATaUGac.roa (hash: c5YWTRrX3QnWTxXe+8t+vVb1UcDfoatadHEMGSgtrjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:1f:24:0e:8b:02:57:47:d8:98:57:b2:c2:43:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5 Validity Not Before: Dec 6 10:01:37 2025 GMT Not After : Dec 7 10:01:37 2025 GMT Subject: CN=126aac740c1ab6daa802f7a3edc13851da6dd0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6d:65:9f:74:6b:91:01:7c:07:3e:37:8d:a4: 11:b9:c0:56:7b:01:c1:f8:cb:41:c6:30:bd:6b:17: 62:5f:29:fd:52:9a:1e:31:42:ad:d1:69:e3:b9:23: 69:da:d4:23:71:93:df:c6:8b:20:87:18:c6:c9:16: 6e:4a:a4:45:fd:45:c0:b6:7d:e3:01:8e:a4:71:22: 9a:51:56:f7:b3:45:04:be:a4:b4:ea:32:7a:bf:44: 30:e7:08:16:d5:26:81:02:5e:07:2e:f2:69:07:ec: e3:02:43:47:f4:08:07:f4:04:bd:62:e5:08:8c:51: 7e:7c:df:c6:df:b8:3e:40:32:87:b9:79:67:a8:e7: 96:13:50:d4:06:eb:a1:75:d8:84:14:d3:de:81:ec: 66:f2:1d:2e:d3:a1:0c:6b:62:21:c3:fe:69:b0:26: c4:e9:39:ea:8a:d1:5d:44:01:bd:36:8f:d4:cf:d7: 69:77:f8:72:1b:b9:c1:a5:e6:25:3e:96:ab:f3:5d: 0c:c5:0c:53:d7:16:06:17:71:d1:70:5d:8b:89:da: f9:a3:a4:b0:35:e4:47:37:ee:e3:c8:34:71:e7:bb: 85:eb:38:d2:63:7c:53:eb:e9:54:8b:63:1f:4f:90: bb:2a:18:b9:19:b9:94:57:2f:61:b5:67:51:3b:61: 44:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6A:AC:74:0C:1A:B6:DA:A8:02:F7:A3:ED:C1:38:51:DA:6D:D0:A3 X509v3 Authority Key Identifier: keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:00:0f:c8:0a:e5:23:3c:5f:5e:6c:93:d4:74:e3:8d:f2:f2: 9c:5e:23:82:6f:44:9f:86:72:d5:28:3b:e9:73:65:15:8b:63: 0b:aa:c7:23:0f:6c:0b:37:f8:cc:53:99:9c:cf:b7:84:27:c5: 12:d6:db:7c:10:62:2f:2c:99:90:52:fb:28:c1:31:15:31:40: d8:68:72:65:31:ed:21:1b:1d:f2:a4:8f:05:29:83:fd:f6:50: 84:9b:7a:51:0b:69:5d:4b:a3:ce:86:cb:fd:fc:fc:fd:33:96: 44:9d:3f:9c:fd:94:ed:fc:e6:80:eb:ad:af:f3:94:24:15:68: 98:85:d4:14:17:35:60:18:a6:9e:15:60:3c:9c:50:51:06:32: 53:24:58:7f:0b:89:29:a6:4d:01:f8:28:81:60:e1:51:54:7e: 03:2e:37:38:48:c2:db:f1:f7:79:fe:e3:6e:1c:9d:bf:d9:b4: 7c:bd:b8:bb:1f:a5:2a:74:f8:7f:86:80:e0:82:4b:8d:dd:7f: 9b:dd:ec:a0:20:f4:90:2e:8b:7b:c2:64:73:1a:54:91:90:4a: 7f:af:59:bd:56:e0:07:9d:08:36:30:8c:2a:ab:a2:93:2a:fa: 9a:af:96:8c:12:92:aa:46:eb:07:84:62:84:95:9b:53:2f:10: 90:6c:bd:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHB8kDosCV0fYmFeywkM6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMjYyZmFmNDM3NjQyMDAyNGFhZDcyOTgzYWMzZTg3OTQ0 ZWE3YTUwHhcNMjUxMjA2MTAwMTM3WhcNMjUxMjA3MTAwMTM3WjAzMTEwLwYDVQQD EygxMjZhYWM3NDBjMWFiNmRhYTgwMmY3YTNlZGMxMzg1MWRhNmRkMGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG1ln3RrkQF8Bz43jaQRucBWewHB +MtBxjC9axdiXyn9UpoeMUKt0WnjuSNp2tQjcZPfxosghxjGyRZuSqRF/UXAtn3j AY6kcSKaUVb3s0UEvqS06jJ6v0Qw5wgW1SaBAl4HLvJpB+zjAkNH9AgH9AS9YuUI jFF+fN/G37g+QDKHuXlnqOeWE1DUBuuhddiEFNPegexm8h0u06EMa2Ihw/5psCbE 6TnqitFdRAG9No/Uz9dpd/hyG7nBpeYlPpar810MxQxT1xYGF3HRcF2Lidr5o6Sw NeRHN+7jyDRx57uF6zjSY3xT6+lUi2MfT5C7Khi5GbmUVy9htWdRO2FERQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJqrHQMGrbaqAL3o+3BOFHabdCjMB8GA1UdIwQY MBaAFPImL69DdkIAJKrXKYOsPoeUTqelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMt YmFkYWZjYTM5NDRmLzEvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMtYmFkYWZjYTM5NDRm LzEvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlAAPyArl IzxfXmyT1HTjjfLynF4jgm9En4Zy1Sg76XNlFYtjC6rHIw9sCzf4zFOZnM+3hCfF EtbbfBBiLyyZkFL7KMExFTFA2GhyZTHtIRsd8qSPBSmD/fZQhJt6UQtpXUujzobL /fz8/TOWRJ0/nP2U7fzmgOutr/OUJBVomIXUFBc1YBimnhVgPJxQUQYyUyRYfwuJ KaZNAfgogWDhUVR+Ay43OEjC2/H3ef7jbhydv9m0fL24ux+lKnT4f4aA4IJLjd1/ m93soCD0kC6Le8JkcxpUkZBKf69ZvVbgB50INjCMKquikyr6mq+WjBKSqkbrB4Ri hJWbUy8QkGy9Ow== -----END CERTIFICATE-----Generated at Sat Dec 6 17:51:51 2025 by rpki-client