This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json) Hash identifier: Jc4z3ic2WrDPQKnzczEgHgjUPiVKEKWjlKxYZ+EJPus= Subject key identifier: DF:B6:BD:88:0A:32:36:28:64:CC:E5:63:5D:F4:63:EA:41:5F:3A:50 Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2 Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2 Certificate serial: 019B2EFA2C9BCD80BC607B8203C435607DB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 01:01:45 +0000 Manifest this update: Thu 18 Dec 2025 01:01:45 +0000 Manifest next update: Fri 19 Dec 2025 01:01:45 +0000 Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: +5jl9K+oP4EKBAJMZXiLLwYUKmrSl/72PNDULr0uCJ0=) 2: a-zhZjuXDc_FsfQbRuaEtluPpHA.roa (hash: 5+3esVT/zzC55YQOAsi2tnDDnrmv1Y7c5U2ef5q3Qdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:2c:9b:cd:80:bc:60:7b:82:03:c4:35:60:7d:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2 Validity Not Before: Dec 18 01:01:45 2025 GMT Not After : Dec 19 01:01:45 2025 GMT Subject: CN=dfb6bd880a32362864cce5635df463ea415f3a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:10:9e:49:70:db:90:0a:4b:8e:2c:f0:57:8f: f5:1f:e2:90:4a:fc:c2:46:66:26:b7:2d:44:8e:2a: e4:a9:5a:cd:0a:31:56:5e:50:4a:8c:2f:23:6e:9a: 47:d4:1d:29:e3:69:b9:ba:60:1f:50:7c:cf:14:d5: 0b:42:dc:6c:4d:e9:5c:cc:67:de:62:5d:52:65:e1: a9:86:04:fd:0b:4c:db:5d:f4:9c:06:1f:df:28:f2: 4c:db:b0:af:2e:1b:bf:dc:c9:17:9b:50:a0:dc:1a: 50:f0:e3:a0:f6:a9:c3:5b:f3:21:47:1c:81:25:b0: 40:95:92:7e:41:22:a7:53:da:7d:79:74:56:13:63: ce:5b:38:46:d5:9a:9d:a7:90:11:9c:43:91:04:93: fb:f5:81:5f:a8:7b:a4:92:14:4a:6d:28:39:d3:ae: a9:26:92:f9:22:8a:e1:c7:17:ea:e9:f6:33:72:cd: 70:76:ac:9b:8e:a8:fa:38:7c:1c:75:5e:b9:22:84: 14:b2:06:25:ce:d2:11:84:78:d2:73:48:4f:16:1d: 19:49:e4:fd:75:0c:f7:5a:80:af:30:79:30:79:9d: 14:f2:b0:29:d7:dc:73:22:a5:9f:fc:5e:32:0b:be: 90:ac:c7:99:3a:f3:43:bd:22:84:21:de:5e:d5:ea: 02:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B6:BD:88:0A:32:36:28:64:CC:E5:63:5D:F4:63:EA:41:5F:3A:50 X509v3 Authority Key Identifier: keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:7a:53:db:74:ee:b2:9a:54:21:bc:dd:fe:a9:68:6f:30:66: 4f:15:fe:d7:33:2e:7c:9a:b7:97:8e:e1:44:38:5f:43:62:7e: fe:13:20:6c:f5:bf:b0:3a:e1:85:90:d7:16:6e:3c:43:a6:01: 60:a1:ad:ad:9e:cf:89:2c:81:65:62:99:b4:36:ff:31:d2:fb: 22:a3:18:10:b6:f3:3a:2a:fe:7b:7f:48:70:49:d0:02:31:93: dc:e0:c2:90:93:20:fc:ea:64:b7:16:49:a1:79:1f:4e:6c:34: c2:94:8d:b7:b5:4d:87:9d:d2:92:d5:d4:35:cc:89:39:e8:02: 0d:7f:d9:96:1a:dc:2c:91:0c:b8:78:5f:a7:2c:2e:59:40:c7: a9:f6:02:1c:2d:57:10:e3:6b:7d:c3:3a:d7:d7:a1:87:da:36: 36:35:b5:ff:4a:24:e0:ed:26:b3:5f:24:1e:1e:1e:c4:b9:81: 71:80:93:37:f3:1b:c3:2f:e2:ee:e1:da:a9:13:86:e8:4a:d8: b9:d8:2f:cf:e7:07:67:bb:15:68:ab:57:44:cf:4d:0a:3d:1c: b9:2e:85:b5:67:85:c0:7e:42:45:52:d7:2b:f6:f0:1c:9a:b7: 2e:81:22:5f:fa:79:ae:dc:c6:6c:ad:0a:bf:45:b7:8c:30:89: af:9c:f4:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+iybzYC8YHuCA8Q1YH23MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjY4MWNhYTFkMzdlNTg5OWJhMjdkZmJjMzY5NjBlMDZi NWQzZjIwHhcNMjUxMjE4MDEwMTQ1WhcNMjUxMjE5MDEwMTQ1WjAzMTEwLwYDVQQD EyhkZmI2YmQ4ODBhMzIzNjI4NjRjY2U1NjM1ZGY0NjNlYTQxNWYzYTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BCeSXDbkApLjizwV4/1H+KQSvzC RmYmty1EjirkqVrNCjFWXlBKjC8jbppH1B0p42m5umAfUHzPFNULQtxsTelczGfe Yl1SZeGphgT9C0zbXfScBh/fKPJM27CvLhu/3MkXm1Cg3BpQ8OOg9qnDW/MhRxyB JbBAlZJ+QSKnU9p9eXRWE2POWzhG1Zqdp5ARnEORBJP79YFfqHukkhRKbSg5066p JpL5Iorhxxfq6fYzcs1wdqybjqj6OHwcdV65IoQUsgYlztIRhHjSc0hPFh0ZSeT9 dQz3WoCvMHkweZ0U8rAp19xzIqWf/F4yC76QrMeZOvNDvSKEId5e1eoCnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+2vYgKMjYoZMzlY130Y+pBXzpQMB8GA1UdIwQY MBaAFPJmgcqh035Ymbon37w2lg4GtdPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jYWVlYjYtODAxNy00YzIyLWE4MWMt NjQwNzVjMmFlNDYzLzEvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jYWVlYjYtODAxNy00YzIyLWE4MWMtNjQwNzVjMmFlNDYz LzEvOG1hQnlxSFRmbGladWlmZnZEYVdEZ2ExMF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl3pT23Tu sppUIbzd/qlobzBmTxX+1zMufJq3l47hRDhfQ2J+/hMgbPW/sDrhhZDXFm48Q6YB YKGtrZ7PiSyBZWKZtDb/MdL7IqMYELbzOir+e39IcEnQAjGT3ODCkJMg/OpktxZJ oXkfTmw0wpSNt7VNh53SktXUNcyJOegCDX/ZlhrcLJEMuHhfpywuWUDHqfYCHC1X EONrfcM619ehh9o2NjW1/0ok4O0ms18kHh4exLmBcYCTN/Mbwy/i7uHaqROG6ErY udgvz+cHZ7sVaKtXRM9NCj0cuS6FtWeFwH5CRVLXK/bwHJq3LoEiX/p5rtzGbK0K v0W3jDCJr5z0jw== -----END CERTIFICATE-----Generated at Thu Dec 18 05:46:43 2025 by rpki-client