This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft File: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft (raw, json) Hash identifier: AxxDipo/FuuvizAANMzLefLr8XlylyWUJt6cgCuhjR4= Subject key identifier: E0:D9:DC:79:C9:59:6F:CF:CD:1C:12:8D:47:4F:D9:AD:8A:F3:C5:85 Authority key identifier: 8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83 Certificate issuer: /CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83 Certificate serial: 019AF31C392999A68880A8791CF5CEA5CD27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 10:01:44 +0000 Manifest this update: Sat 06 Dec 2025 10:01:44 +0000 Manifest next update: Sun 07 Dec 2025 10:01:44 +0000 Files and hashes: 1: di6vtJn17ke553wiZoaxDGK1MLE.roa (hash: HpCMH1Ia0lvZ8f3O26OMSYPbId0TPu+1abwCSdtco9A=) 2: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl (hash: oIX3Ix+IhFbtiCXJ6Fr7cqVgFjAc+k0x3FEiwZL15Vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:39:29:99:a6:88:80:a8:79:1c:f5:ce:a5:cd:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83 Validity Not Before: Dec 6 10:01:44 2025 GMT Not After : Dec 7 10:01:44 2025 GMT Subject: CN=e0d9dc79c9596fcfcd1c128d474fd9ad8af3c585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0b:6e:e4:02:1d:75:85:c9:10:58:4b:db:d8: eb:e6:b3:e3:9e:28:0f:35:29:88:02:14:e0:cf:6f: c2:b8:2a:e4:20:11:5d:25:00:12:79:d2:e1:dd:f2: 04:85:6b:fe:2c:5c:24:cd:ef:76:d0:76:ef:7e:c5: 61:68:17:72:2d:c4:d6:1f:74:27:40:cf:e1:bc:43: c2:de:27:ce:6c:f5:1f:57:ed:ae:2e:41:37:f0:1f: 5e:9e:11:7f:50:6b:0f:d4:3d:b0:b5:8a:89:47:18: 26:e5:47:f9:b6:8d:9c:40:a2:50:c1:ec:c9:72:b6: 4c:74:d4:9b:79:f7:25:5d:df:4f:c3:78:53:e8:76: d1:67:4c:59:fd:44:dc:89:4d:b5:4c:52:90:a3:48: e9:cf:63:8d:73:ff:4b:05:ac:f8:db:6c:56:f5:8f: 88:f2:0b:59:d9:ad:12:6c:ab:f8:47:e5:81:9a:64: 59:03:50:c0:f2:b0:84:37:a3:ba:aa:00:0d:24:fd: b1:54:82:38:a0:2a:01:e3:28:a2:7b:70:b8:2a:2d: 1a:02:45:32:76:4a:a1:4e:fc:45:11:2e:bb:35:d9: 54:36:1a:f6:48:de:d0:c0:39:89:0a:f7:cd:0c:77: 85:9e:8f:50:27:3b:9c:f5:47:e8:49:f2:8c:b5:f8: e2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D9:DC:79:C9:59:6F:CF:CD:1C:12:8D:47:4F:D9:AD:8A:F3:C5:85 X509v3 Authority Key Identifier: keyid:8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:77:6b:8a:21:a5:3d:50:85:11:d0:6e:55:92:54:ab:ff:e1: df:d6:68:38:3d:c1:82:c7:9a:e6:e7:13:62:b0:eb:ff:8a:7a: 00:9b:e3:a8:0d:00:90:54:47:40:51:b0:3b:e8:27:ef:37:3e: 0e:b4:e1:d6:61:9f:d1:9c:8e:59:04:0b:34:70:e2:b7:41:53: c0:e3:88:1c:62:b1:fb:86:43:22:54:7f:94:a6:21:35:d9:6a: 95:27:0d:35:b3:1f:ce:0d:bf:ab:3c:45:71:57:92:26:99:4d: 1c:e0:11:91:59:c2:89:22:62:7e:4b:e8:f1:7c:02:96:ff:a8: 1a:ae:11:33:bb:87:56:a2:8a:d6:12:32:41:4e:3b:7b:78:16: f7:f3:41:09:21:13:72:ca:87:0e:d4:28:1a:5e:3e:ff:a2:2b: 0e:57:99:6b:4a:40:12:50:4c:af:39:4a:20:2b:2a:52:7f:4f: eb:c2:b6:6a:38:96:d5:b4:80:59:3d:4c:3c:01:b0:1a:a6:8a: 9a:b1:54:83:53:f2:08:a1:eb:f9:ea:3f:08:b6:4c:64:75:de: f6:b7:9c:27:d9:7e:29:a2:a9:52:11:6a:ad:c8:64:d7:a7:75: d4:d2:f1:17:82:d1:2f:57:35:0c:ce:7e:d0:26:e7:4a:87:4c: aa:d6:85:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHDkpmaaIgKh5HPXOpc0nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiY2JkYjUxZWI4MDIyNmY0MTQ3N2E3YmM1MGUwZjk2MTQ1 NWVkODMwHhcNMjUxMjA2MTAwMTQ0WhcNMjUxMjA3MTAwMTQ0WjAzMTEwLwYDVQQD EyhlMGQ5ZGM3OWM5NTk2ZmNmY2QxYzEyOGQ0NzRmZDlhZDhhZjNjNTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgtu5AIddYXJEFhL29jr5rPjnigP NSmIAhTgz2/CuCrkIBFdJQASedLh3fIEhWv+LFwkze920HbvfsVhaBdyLcTWH3Qn QM/hvEPC3ifObPUfV+2uLkE38B9enhF/UGsP1D2wtYqJRxgm5Uf5to2cQKJQwezJ crZMdNSbefclXd9Pw3hT6HbRZ0xZ/UTciU21TFKQo0jpz2ONc/9LBaz422xW9Y+I 8gtZ2a0SbKv4R+WBmmRZA1DA8rCEN6O6qgANJP2xVII4oCoB4yiie3C4Ki0aAkUy dkqhTvxFES67NdlUNhr2SN7QwDmJCvfNDHeFno9QJzuc9UfoSfKMtfjibwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODZ3HnJWW/PzRwSjUdP2a2K88WFMB8GA1UdIwQY MBaAFIvL21HrgCJvQUd6e8UOD5YUVe2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81NjRmM2EtNTJkNi00ZDA5LTgxZTIt ZWZhOTM5MWY3ZDllLzEvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy81NjRmM2EtNTJkNi00ZDA5LTgxZTItZWZhOTM5MWY3ZDll LzEvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXdriiGl PVCFEdBuVZJUq//h39ZoOD3Bgsea5ucTYrDr/4p6AJvjqA0AkFRHQFGwO+gn7zc+ DrTh1mGf0ZyOWQQLNHDit0FTwOOIHGKx+4ZDIlR/lKYhNdlqlScNNbMfzg2/qzxF cVeSJplNHOARkVnCiSJifkvo8XwClv+oGq4RM7uHVqKK1hIyQU47e3gW9/NBCSET csqHDtQoGl4+/6IrDleZa0pAElBMrzlKICsqUn9P68K2ajiW1bSAWT1MPAGwGqaK mrFUg1PyCKHr+eo/CLZMZHXe9recJ9l+KaKpUhFqrchk16d11NLxF4LRL1c1DM5+ 0CbnSodMqtaFrg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:51:35 2025 by rpki-client