This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft File: 8lap7bLZreIE2CMTzOmLZiOp2Kw.mft (raw, json) Hash identifier: ussDi4Abf/9KCa1f+zCtUE4+uQ4DjbwmVfGdOt7TovY= Subject key identifier: 4C:99:9E:9F:53:B4:81:08:A1:9E:43:AA:89:D8:FE:8D:A5:9E:B7:51 Authority key identifier: F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC Certificate issuer: /CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac Certificate serial: 019B2D0BEC2FCA4599C618662D45EEB5C210 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft Manifest number: 1783 Signing time: Wed 17 Dec 2025 16:01:54 +0000 Manifest this update: Wed 17 Dec 2025 16:01:54 +0000 Manifest next update: Thu 18 Dec 2025 16:01:54 +0000 Files and hashes: 1: 8lap7bLZreIE2CMTzOmLZiOp2Kw.crl (hash: NujmkbKEdZ8nVnsNbEBe5KtEfbJKi+CYtEGBxahm030=) 2: m61Skl38qNd_z8iy_icAt6gZ-a0.roa (hash: agPnne36nNKEttk3MarLpGi1Y49vXcfn+4zgZdtH3ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:ec:2f:ca:45:99:c6:18:66:2d:45:ee:b5:c2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f256a9edb2d9ade204d82313cce98b6623a9d8ac Validity Not Before: Dec 17 16:01:54 2025 GMT Not After : Dec 18 16:01:54 2025 GMT Subject: CN=4c999e9f53b48108a19e43aa89d8fe8da59eb751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:91:2b:6c:5f:5a:39:73:19:19:89:76:c8:27: dd:46:a0:82:7f:e1:54:18:31:ff:c8:52:5b:ba:49: d7:bc:20:c4:f6:2d:76:0a:05:d7:37:df:0b:bc:99: 5f:78:de:16:5e:cd:fe:11:38:3a:1d:b7:49:0d:62: df:f6:d8:55:65:85:b1:84:10:05:9e:f2:a4:76:36: 80:fe:65:18:d4:c2:1b:47:f0:ff:a7:ea:82:9a:bc: 93:69:48:7f:08:4d:99:68:fc:0c:e0:49:db:2c:86: 98:39:8f:12:5b:2d:2c:e3:7b:50:1c:05:14:0d:de: be:d5:c6:d9:5e:61:e9:2a:31:b6:f5:a4:39:15:96: bd:c0:1d:45:ec:93:6a:78:d3:c4:07:97:59:0a:7e: fe:38:86:14:99:1d:46:66:ec:2a:b7:7a:bc:41:1e: 9f:05:dd:cd:b8:53:17:e8:66:69:00:36:59:e4:70: 44:ad:11:8b:6b:49:f3:14:36:e1:5b:5d:14:9b:8c: 00:1a:f7:7e:16:fa:0a:33:ad:19:40:41:53:95:3b: cc:0c:52:e5:51:6a:07:18:45:36:81:eb:d3:45:f5: 32:6b:2b:63:ae:be:bd:0c:2d:40:11:72:50:30:fb: a6:48:2d:59:88:21:4d:5e:34:a1:24:25:11:e4:41: 02:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:99:9E:9F:53:B4:81:08:A1:9E:43:AA:89:D8:FE:8D:A5:9E:B7:51 X509v3 Authority Key Identifier: keyid:F2:56:A9:ED:B2:D9:AD:E2:04:D8:23:13:CC:E9:8B:66:23:A9:D8:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lap7bLZreIE2CMTzOmLZiOp2Kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/126c9e-4fa7-49d4-928c-9107c912d7d8/1/8lap7bLZreIE2CMTzOmLZiOp2Kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:16:9f:52:6e:76:64:01:19:7a:2c:10:b1:34:4e:2c:39:ec: 2a:18:b9:6b:40:14:65:b0:d3:85:c9:73:94:f5:73:1f:07:2f: 35:50:fa:73:08:1d:8e:09:a4:d3:a1:c5:67:a6:c0:3e:bf:4d: da:c9:33:dc:11:84:7d:3a:0e:ce:de:d8:0d:98:c3:88:f0:a6: 75:99:d3:30:4e:31:0d:90:19:18:85:24:c3:74:a7:74:62:e7: dd:5b:af:f9:fc:db:bc:e3:9c:f0:a0:8a:fb:1c:38:cd:8f:46: c5:52:77:6d:fa:e3:e4:e1:01:71:6b:fe:32:92:e5:e7:50:63: dc:92:28:cd:4a:fa:b4:72:16:bd:6a:dd:20:a4:ed:0d:82:cc: 7e:66:86:65:b7:2a:a6:75:ea:87:7f:9c:f1:6d:95:ed:11:73: 9d:63:e5:be:39:0e:1d:b0:36:cd:e1:3f:7f:20:a3:b0:3d:f1: 9b:04:60:3d:3c:1c:76:21:e8:fe:fe:6f:94:fa:0e:1e:cd:94: ed:54:30:da:77:fd:03:80:2c:c4:62:01:61:62:a5:bd:95:b4: c1:94:fd:bd:5c:52:a8:3d:4a:61:27:0e:67:31:29:f8:4b:89: c9:14:bd:4f:e6:d1:25:5a:e9:f5:be:31:76:0c:5b:3c:48:31: b4:36:60:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC+wvykWZxhhmLUXutcIQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNTZhOWVkYjJkOWFkZTIwNGQ4MjMxM2NjZTk4YjY2MjNh OWQ4YWMwHhcNMjUxMjE3MTYwMTU0WhcNMjUxMjE4MTYwMTU0WjAzMTEwLwYDVQQD Eyg0Yzk5OWU5ZjUzYjQ4MTA4YTE5ZTQzYWE4OWQ4ZmU4ZGE1OWViNzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pErbF9aOXMZGYl2yCfdRqCCf+FU GDH/yFJbuknXvCDE9i12CgXXN98LvJlfeN4WXs3+ETg6HbdJDWLf9thVZYWxhBAF nvKkdjaA/mUY1MIbR/D/p+qCmryTaUh/CE2ZaPwM4EnbLIaYOY8SWy0s43tQHAUU Dd6+1cbZXmHpKjG29aQ5FZa9wB1F7JNqeNPEB5dZCn7+OIYUmR1GZuwqt3q8QR6f Bd3NuFMX6GZpADZZ5HBErRGLa0nzFDbhW10Um4wAGvd+FvoKM60ZQEFTlTvMDFLl UWoHGEU2gevTRfUyaytjrr69DC1AEXJQMPumSC1ZiCFNXjShJCUR5EEC1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyZnp9TtIEIoZ5DqonY/o2lnrdRMB8GA1UdIwQY MBaAFPJWqe2y2a3iBNgjE8zpi2YjqdisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGxhcDdiTFpyZUlFMkNNVHpPbUxaaU9wMkt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8xMjZjOWUtNGZhNy00OWQ0LTkyOGMt OTEwN2M5MTJkN2Q4LzEvOGxhcDdiTFpyZUlFMkNNVHpPbUxaaU9wMkt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8xMjZjOWUtNGZhNy00OWQ0LTkyOGMtOTEwN2M5MTJkN2Q4 LzEvOGxhcDdiTFpyZUlFMkNNVHpPbUxaaU9wMkt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxafUm52 ZAEZeiwQsTROLDnsKhi5a0AUZbDThclzlPVzHwcvNVD6cwgdjgmk06HFZ6bAPr9N 2skz3BGEfToOzt7YDZjDiPCmdZnTME4xDZAZGIUkw3SndGLn3Vuv+fzbvOOc8KCK +xw4zY9GxVJ3bfrj5OEBcWv+MpLl51Bj3JIozUr6tHIWvWrdIKTtDYLMfmaGZbcq pnXqh3+c8W2V7RFznWPlvjkOHbA2zeE/fyCjsD3xmwRgPTwcdiHo/v5vlPoOHs2U 7VQw2nf9A4AsxGIBYWKlvZW0wZT9vVxSqD1KYScOZzEp+EuJyRS9T+bRJVrp9b4x dgxbPEgxtDZgLA== -----END CERTIFICATE-----Generated at Wed Dec 17 17:45:37 2025 by rpki-client