This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft File: 8yyk3zLccfQREE-UtRrBS2Z1gks.mft (raw, json) Hash identifier: 5zVDwj5MIDH7Q1viF/ZcUcMVFNAvMHtyAvN7uVvR63s= Subject key identifier: AD:AE:08:8C:E4:51:87:84:15:32:E4:0E:3B:C4:0C:94:FF:DC:AE:FA Authority key identifier: F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B Certificate issuer: /CN=f32ca4df32dc71f411104f94b51ac14b6675824b Certificate serial: 019AF1D19FB60411676A8669AEAC891E27C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft Manifest number: 019F Signing time: Sat 06 Dec 2025 04:00:38 +0000 Manifest this update: Sat 06 Dec 2025 04:00:38 +0000 Manifest next update: Sun 07 Dec 2025 04:00:38 +0000 Files and hashes: 1: 8yyk3zLccfQREE-UtRrBS2Z1gks.crl (hash: h3QUvfepWFNmqJhwlpYO8kRGGomd6u8iV66RZZBDObo=) 2: AhlTJGVn8a8rsbPjwh1Of-tiZ-E.roa (hash: PvYJX4JVcBus78Efd+Q4dFc2SvUKpYf6MzmiID5icj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:9f:b6:04:11:67:6a:86:69:ae:ac:89:1e:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f32ca4df32dc71f411104f94b51ac14b6675824b Validity Not Before: Dec 6 04:00:38 2025 GMT Not After : Dec 7 04:00:38 2025 GMT Subject: CN=adae088ce45187841532e40e3bc40c94ffdcaefa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:7a:22:28:25:0c:49:d0:f5:9a:c3:de:72:77: ad:e2:b7:b6:77:2e:c9:91:a6:34:06:78:5d:f5:d0: 1b:3d:ca:c4:94:70:5a:4f:b9:9b:f2:65:f1:e3:bd: 54:b4:27:1a:31:c8:a5:51:59:cc:a8:d7:1a:e1:cf: 38:99:49:9e:48:bb:d7:26:66:e1:ef:80:df:19:f0: a1:5d:95:eb:3a:df:47:7e:25:73:ad:33:11:37:92: 40:79:91:25:83:66:ab:3b:09:6f:cd:a1:08:cf:26: 02:42:59:6d:43:31:b4:fe:8e:b4:56:a8:f0:ca:39: 12:02:29:59:d6:83:6b:86:e3:7f:57:ae:c0:1b:b5: ae:d8:86:70:69:8a:c6:58:e8:9d:1f:0f:10:52:78: fa:00:33:2c:69:d7:5f:a3:9f:1e:b2:db:f5:e7:ac: a8:fb:9f:d0:2c:37:8b:30:ec:89:63:7c:ba:d6:2a: 6c:3d:58:f1:2b:e1:87:36:ff:66:47:39:30:8c:af: dc:b5:0e:be:fb:53:9b:5b:71:ff:8e:f1:e5:e0:8a: 07:3f:10:48:a7:61:7c:ac:53:9e:22:c0:3d:00:16: 96:4f:7c:e7:f2:45:8b:88:96:86:f2:e7:e8:89:14: 65:37:55:75:c8:c9:09:d8:21:16:9a:a6:23:d7:9a: 58:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AE:08:8C:E4:51:87:84:15:32:E4:0E:3B:C4:0C:94:FF:DC:AE:FA X509v3 Authority Key Identifier: keyid:F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:14:d0:ee:ce:67:5a:9d:9e:0f:ea:cc:96:4e:9b:79:bf:fd: a5:34:c1:22:76:f6:6a:b5:7b:ce:a9:80:a6:44:7a:71:fa:0c: 45:b9:1f:2d:1d:20:6d:4f:a9:b5:ac:db:16:a1:ac:7a:85:2d: 81:3e:57:92:a2:17:2f:74:d7:9c:e7:1d:3e:17:17:f8:e8:47: 9f:a2:72:1b:9c:3b:f3:4d:2d:e7:e5:16:6b:2b:ea:a7:8e:f0: 9d:a5:dc:ea:e7:46:56:8a:6d:40:98:64:ec:61:b6:e7:bc:c3: 47:a1:45:25:f0:50:7b:e9:2c:52:0a:b4:6f:61:f0:ee:a9:5e: 8a:b5:93:4e:cc:bb:b9:de:f6:f4:98:59:da:bd:37:88:fd:cd: b3:f1:56:53:72:4a:4f:fe:d4:c7:8c:d6:6d:f0:5c:f3:d9:ce: 99:2b:c8:78:34:18:70:bc:47:1d:b9:d1:c5:9a:8d:08:e7:59: 43:40:89:7a:1a:5d:98:33:4b:c2:b9:4c:41:2f:c7:ee:26:1d: 8a:07:2f:64:1a:29:c4:b6:97:e2:5f:bb:c9:ad:b5:88:f8:a4: 3c:22:87:76:fd:dd:51:3f:40:a4:91:a5:23:84:95:2f:06:07: e2:d5:31:a4:f3:b4:13:52:b6:93:0e:a9:81:f3:8d:54:af:1c: e6:d5:e6:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Z+2BBFnaoZprqyJHifAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMmNhNGRmMzJkYzcxZjQxMTEwNGY5NGI1MWFjMTRiNjY3 NTgyNGIwHhcNMjUxMjA2MDQwMDM4WhcNMjUxMjA3MDQwMDM4WjAzMTEwLwYDVQQD EyhhZGFlMDg4Y2U0NTE4Nzg0MTUzMmU0MGUzYmM0MGM5NGZmZGNhZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9XoiKCUMSdD1msPecnet4re2dy7J kaY0Bnhd9dAbPcrElHBaT7mb8mXx471UtCcaMcilUVnMqNca4c84mUmeSLvXJmbh 74DfGfChXZXrOt9HfiVzrTMRN5JAeZElg2arOwlvzaEIzyYCQlltQzG0/o60Vqjw yjkSAilZ1oNrhuN/V67AG7Wu2IZwaYrGWOidHw8QUnj6ADMsaddfo58estv156yo +5/QLDeLMOyJY3y61ipsPVjxK+GHNv9mRzkwjK/ctQ6++1ObW3H/jvHl4IoHPxBI p2F8rFOeIsA9ABaWT3zn8kWLiJaG8ufoiRRlN1V1yMkJ2CEWmqYj15pYCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2uCIzkUYeEFTLkDjvEDJT/3K76MB8GA1UdIwQY MBaAFPMspN8y3HH0ERBPlLUawUtmdYJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHl5azN6TGNjZlFSRUUtVXRSckJTMloxZ2tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS80ZWRiZWMtZmZlYS00MDYyLTg5Y2It NjU2NjAwYzllNDQwLzEvOHl5azN6TGNjZlFSRUUtVXRSckJTMloxZ2tzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS80ZWRiZWMtZmZlYS00MDYyLTg5Y2ItNjU2NjAwYzllNDQw LzEvOHl5azN6TGNjZlFSRUUtVXRSckJTMloxZ2tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAURTQ7s5n Wp2eD+rMlk6beb/9pTTBInb2arV7zqmApkR6cfoMRbkfLR0gbU+ptazbFqGseoUt gT5XkqIXL3TXnOcdPhcX+OhHn6JyG5w7800t5+UWayvqp47wnaXc6udGVoptQJhk 7GG257zDR6FFJfBQe+ksUgq0b2Hw7qleirWTTsy7ud729JhZ2r03iP3Ns/FWU3JK T/7Ux4zWbfBc89nOmSvIeDQYcLxHHbnRxZqNCOdZQ0CJehpdmDNLwrlMQS/H7iYd igcvZBopxLaX4l+7ya21iPikPCKHdv3dUT9ApJGlI4SVLwYH4tUxpPO0E1K2kw6p gfONVK8c5tXmrw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:14:55 2025 by rpki-client