This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft File: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft (raw, json) Hash identifier: beBrEZ2hpgSG3uiygr8u1jwG2WminjFMpZp0zEYSaWw= Subject key identifier: 20:1E:95:AD:5D:D9:D1:4E:5E:FC:44:23:F6:A0:67:54:E2:E0:6E:9B Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E Certificate issuer: /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e Certificate serial: 019B34FBCFB2737672BBA47D1A4C35145EA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft Manifest number: 172D Signing time: Fri 19 Dec 2025 05:01:16 +0000 Manifest this update: Fri 19 Dec 2025 05:01:16 +0000 Manifest next update: Sat 20 Dec 2025 05:01:16 +0000 Files and hashes: 1: 2_G9MV3MarApcSIaC14zzAbTXto.roa (hash: Xsc0Q6TWSpbouB+us1TXP5dMLNVqwF4nhlITaZf4sco=) 2: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl (hash: qYXweCg2XY6W8uUXFwq7tSNz4eSy8qDUeXN9HdhBo3s=) 3: f4A325yGj48RuMfkjcKdx35IWgg.roa (hash: j8y8oC78Ayis+Zl1DL+FUWPv5N+us3D0FIOg/cZJpDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:cf:b2:73:76:72:bb:a4:7d:1a:4c:35:14:5e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e Validity Not Before: Dec 19 05:01:16 2025 GMT Not After : Dec 20 05:01:16 2025 GMT Subject: CN=201e95ad5dd9d14e5efc4423f6a06754e2e06e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a3:99:80:6f:f2:20:d8:4c:a3:8c:1a:e0:5f: 60:bc:4b:27:8d:62:0e:45:eb:88:5e:23:7a:fb:f8: 28:98:ea:69:0f:51:df:e3:29:c0:f5:12:42:a4:ca: 49:11:39:c9:34:8e:fd:7b:48:07:56:00:96:46:e1: 73:fc:55:7e:76:f0:91:7e:c1:ed:73:97:e1:0a:0b: ee:0a:ff:1b:5a:16:94:1c:51:1b:31:98:5d:89:13: 61:0d:51:61:4a:a9:0e:46:60:41:b4:fd:c5:9d:eb: 48:26:92:aa:74:57:c8:8a:c1:c5:da:77:9e:24:ab: 65:48:ad:6e:d0:bc:d7:a2:db:d6:cc:76:12:99:48: a1:c1:a5:22:70:1e:70:7f:1a:0d:e2:4e:ce:a2:04: 62:dc:1f:16:99:35:2f:79:4e:e7:07:1e:57:f5:01: 99:34:7b:85:b4:f4:bb:eb:2a:ea:c6:73:de:7f:94: d5:3e:6c:52:53:e7:dd:99:d8:86:3d:56:5e:b2:1e: 79:9e:7c:ca:54:4a:6b:ff:2a:8b:87:99:14:a1:97: 44:32:3d:c1:ad:42:eb:7a:4e:9d:12:53:64:bb:2f: dc:1e:4b:bf:3f:ef:ae:57:45:c6:54:d1:2a:4c:3c: c5:0c:ab:aa:be:17:73:36:68:66:8b:c2:2b:9e:5b: a9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1E:95:AD:5D:D9:D1:4E:5E:FC:44:23:F6:A0:67:54:E2:E0:6E:9B X509v3 Authority Key Identifier: keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ae:62:b0:3b:9d:8c:15:08:f5:57:23:50:20:07:e5:be:d7: 9f:e5:18:9b:7f:74:0d:42:db:4b:ca:f5:f9:e9:d1:8b:12:80: 74:16:e0:ea:2f:67:58:27:50:90:4a:b7:66:e3:ff:5e:eb:b2: d5:90:13:60:71:a3:f2:cd:85:9a:96:5c:ef:ab:69:6e:3e:c0: b6:73:07:be:68:47:7f:8c:f0:34:aa:cc:5d:d7:ef:ee:3d:9f: d8:02:18:61:04:31:30:48:bf:32:b7:59:93:dd:d8:3a:4e:aa: 32:bc:1d:35:4d:2e:5a:42:1e:da:1c:3f:f9:d8:dd:56:a7:eb: 11:13:ef:1a:eb:f6:c7:d7:01:a1:07:80:3a:8d:4b:a7:01:47: 7d:5e:34:a7:04:fc:58:c6:04:7b:07:c9:ed:d6:fb:b2:e8:77: 17:7e:f0:0e:83:ed:5a:ea:14:92:92:b1:8c:e3:4e:31:27:5d: 4d:39:1f:ce:31:11:f5:3c:50:95:de:2d:11:d2:16:18:ca:a0: b7:1b:53:4d:8a:98:f9:22:ae:f9:58:c3:86:28:46:9b:f1:66: 04:03:fa:ce:19:03:17:8b:5f:aa:d1:62:73:de:d5:35:5d:11: 2f:2b:13:b8:39:e4:ba:99:88:33:b2:88:cc:a9:f6:e6:96:5b: 83:8e:53:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+8+yc3Zyu6R9Gkw1FF6kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZmU2ZjJhOTM3ODM4ZGYyYjE1ZGExNzQzYmNkOWZiMGUy OWNmMmUwHhcNMjUxMjE5MDUwMTE2WhcNMjUxMjIwMDUwMTE2WjAzMTEwLwYDVQQD EygyMDFlOTVhZDVkZDlkMTRlNWVmYzQ0MjNmNmEwNjc1NGUyZTA2ZTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqOZgG/yINhMo4wa4F9gvEsnjWIO ReuIXiN6+/gomOppD1Hf4ynA9RJCpMpJETnJNI79e0gHVgCWRuFz/FV+dvCRfsHt c5fhCgvuCv8bWhaUHFEbMZhdiRNhDVFhSqkORmBBtP3FnetIJpKqdFfIisHF2nee JKtlSK1u0LzXotvWzHYSmUihwaUicB5wfxoN4k7OogRi3B8WmTUveU7nBx5X9QGZ NHuFtPS76yrqxnPef5TVPmxSU+fdmdiGPVZesh55nnzKVEpr/yqLh5kUoZdEMj3B rULrek6dElNkuy/cHku/P++uV0XGVNEqTDzFDKuqvhdzNmhmi8IrnlupxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAela1d2dFOXvxEI/agZ1Ti4G6bMB8GA1UdIwQY MBaAFPL+byqTeDjfKxXaF0O82fsOKc8uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHY1dktwTjRPTjhyRmRvWFE3elotdzRwenk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yYWI3ODUtMmY4Ni00ODllLWFjMWMt YjcyNTU3NjY4YjAxLzEvOHY1dktwTjRPTjhyRmRvWFE3elotdzRwenk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8yYWI3ODUtMmY4Ni00ODllLWFjMWMtYjcyNTU3NjY4YjAx LzEvOHY1dktwTjRPTjhyRmRvWFE3elotdzRwenk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeq5isDud jBUI9VcjUCAH5b7Xn+UYm390DULbS8r1+enRixKAdBbg6i9nWCdQkEq3ZuP/Xuuy 1ZATYHGj8s2FmpZc76tpbj7AtnMHvmhHf4zwNKrMXdfv7j2f2AIYYQQxMEi/MrdZ k93YOk6qMrwdNU0uWkIe2hw/+djdVqfrERPvGuv2x9cBoQeAOo1LpwFHfV40pwT8 WMYEewfJ7db7suh3F37wDoPtWuoUkpKxjONOMSddTTkfzjER9TxQld4tEdIWGMqg txtTTYqY+SKu+VjDhihGm/FmBAP6zhkDF4tfqtFic97VNV0RLysTuDnkupmIM7KI zKn25pZbg45TaA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:00:58 2025 by rpki-client