This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft File: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json) Hash identifier: Y1TVPAmNh8HMaG2HtyYq2jwZonZwDlVqXVuQiliyBnw= Subject key identifier: EA:B1:61:3C:4F:29:EE:BE:35:70:30:FE:DF:C6:F2:7F:67:16:29:E5 Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61 Certificate issuer: /CN=f32220b696e2e766516c05743d137dbbc17fd261 Certificate serial: 019AF12E465D6EAD40AC6B54BF5C2E6A1B75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:02:12 +0000 Manifest this update: Sat 06 Dec 2025 01:02:12 +0000 Manifest next update: Sun 07 Dec 2025 01:02:12 +0000 Files and hashes: 1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: mKgxePwspP/YyhCxG+otClAiQZwpm0dL1qCww0rXZdU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:46:5d:6e:ad:40:ac:6b:54:bf:5c:2e:6a:1b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261 Validity Not Before: Dec 6 01:02:12 2025 GMT Not After : Dec 7 01:02:12 2025 GMT Subject: CN=eab1613c4f29eebe357030fedfc6f27f671629e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:11:d8:a3:56:f9:51:f5:85:45:ae:84:3f:64: 6c:b0:5b:0a:f5:41:bc:0f:89:0e:36:e0:f0:a1:09: 70:13:c2:18:16:82:ab:d7:38:4e:5f:0b:df:76:fa: 9b:68:a9:98:51:48:c0:8d:db:d5:4e:f9:7b:55:fa: 3d:62:ca:fd:01:52:ac:ac:71:1b:98:d0:c8:7b:13: 06:d5:cf:aa:b7:4c:ca:cd:a5:8d:df:47:34:f0:4f: e4:17:21:4e:4f:0f:2d:4b:71:72:18:38:d0:33:eb: 9e:a3:7f:f4:8b:fc:eb:f7:82:f5:aa:ba:ab:b6:88: 2b:9e:26:99:41:63:74:9d:6f:6c:49:26:ef:4b:1e: d0:48:e9:36:1f:19:72:64:76:5b:10:61:b0:27:b5: 8c:14:03:75:61:eb:f5:9e:76:78:cf:c8:a4:d2:fe: e9:22:2d:1b:14:63:5c:ce:a1:08:10:08:ca:07:b5: 38:33:50:da:23:79:21:f5:8d:86:56:87:36:eb:ef: 38:7f:1f:7e:d1:a3:52:f3:de:e9:54:c1:5d:42:c1: a3:c4:66:f9:68:65:71:6d:79:8b:10:26:89:5d:97: 43:e0:7e:73:3b:c4:1f:ba:bd:aa:e8:bd:d1:15:2c: f7:69:d8:c3:6c:3e:fa:eb:5a:e3:92:45:0b:cb:44: 63:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B1:61:3C:4F:29:EE:BE:35:70:30:FE:DF:C6:F2:7F:67:16:29:E5 X509v3 Authority Key Identifier: keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:96:86:54:37:41:58:1d:96:83:5d:7b:13:05:09:5d:5b:56: 41:83:cf:2b:df:76:90:99:53:65:2d:d3:f7:a1:32:c2:51:04: c4:5d:a7:26:62:cf:35:0a:37:08:1e:6f:0a:5e:9f:50:90:b1: c2:ba:62:6d:70:16:c1:83:93:45:ab:63:36:fd:ec:ae:76:3f: 20:b9:f0:d4:d6:70:d3:39:7d:7f:90:93:77:0f:31:2e:27:98: 0f:b1:4a:89:47:3d:4a:80:18:18:52:fa:e4:35:25:d9:b7:34: 44:56:11:45:67:96:20:f2:29:9d:3b:61:a8:7d:d5:9e:e5:f3: 84:18:3a:ba:b2:cf:11:19:7c:73:fa:01:80:c8:d0:80:18:26: fb:11:69:d3:da:7b:82:7c:2b:89:ea:97:24:45:11:e9:57:bd: 6b:69:ca:7f:7a:dd:36:9b:4a:12:d3:a6:96:34:54:c0:ab:5c: 45:91:f2:38:d8:e9:52:22:a2:48:f8:93:67:c3:0c:a6:4d:8b: c5:11:96:71:18:48:fc:d7:39:73:ae:e3:53:e8:98:ca:51:72: 76:22:ed:95:3b:f0:fc:a0:92:67:57:f2:53:f5:b2:a7:02:e9: 2d:eb:f0:13:4b:74:d7:42:52:62:fe:e2:13:46:f0:ea:c2:48: ea:2e:2b:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkZdbq1ArGtUv1wuaht1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjIyMGI2OTZlMmU3NjY1MTZjMDU3NDNkMTM3ZGJiYzE3 ZmQyNjEwHhcNMjUxMjA2MDEwMjEyWhcNMjUxMjA3MDEwMjEyWjAzMTEwLwYDVQQD EyhlYWIxNjEzYzRmMjllZWJlMzU3MDMwZmVkZmM2ZjI3ZjY3MTYyOWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxHYo1b5UfWFRa6EP2RssFsK9UG8 D4kONuDwoQlwE8IYFoKr1zhOXwvfdvqbaKmYUUjAjdvVTvl7Vfo9Ysr9AVKsrHEb mNDIexMG1c+qt0zKzaWN30c08E/kFyFOTw8tS3FyGDjQM+ueo3/0i/zr94L1qrqr togrniaZQWN0nW9sSSbvSx7QSOk2HxlyZHZbEGGwJ7WMFAN1Yev1nnZ4z8ik0v7p Ii0bFGNczqEIEAjKB7U4M1DaI3kh9Y2GVoc26+84fx9+0aNS897pVMFdQsGjxGb5 aGVxbXmLECaJXZdD4H5zO8Qfur2q6L3RFSz3adjDbD7661rjkkULy0RjfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqxYTxPKe6+NXAw/t/G8n9nFinlMB8GA1UdIwQY MBaAFPMiILaW4udmUWwFdD0TfbvBf9JhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlJZ3RwYmk1MlpSYkFWMFBSTjl1OEZfMG1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80OTNlMjAtN2UxNy00NzU5LWIzNDUt MGViMGIyNDBiOWI3LzEvOHlJZ3RwYmk1MlpSYkFWMFBSTjl1OEZfMG1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS80OTNlMjAtN2UxNy00NzU5LWIzNDUtMGViMGIyNDBiOWI3 LzEvOHlJZ3RwYmk1MlpSYkFWMFBSTjl1OEZfMG1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpaGVDdB WB2Wg117EwUJXVtWQYPPK992kJlTZS3T96EywlEExF2nJmLPNQo3CB5vCl6fUJCx wrpibXAWwYOTRatjNv3srnY/ILnw1NZw0zl9f5CTdw8xLieYD7FKiUc9SoAYGFL6 5DUl2bc0RFYRRWeWIPIpnTthqH3VnuXzhBg6urLPERl8c/oBgMjQgBgm+xFp09p7 gnwrieqXJEUR6Ve9a2nKf3rdNptKEtOmljRUwKtcRZHyONjpUiKiSPiTZ8MMpk2L xRGWcRhI/Nc5c67jU+iYylFydiLtlTvw/KCSZ1fyU/WypwLpLevwE0t010JSYv7i E0bw6sJI6i4rtw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:55 2025 by rpki-client