This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json) Hash identifier: rL2pazniXeIRa+MK7+yyprJjNpOpITNz+TjW6W+su4M= Subject key identifier: DD:00:8E:3A:9E:D6:C0:8A:B4:F5:CC:BB:F3:04:CE:6F:0F:6C:E1:E6 Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21 Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421 Certificate serial: 019B329EE9629035789650D46EFEB29E8CFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 18:00:33 +0000 Manifest this update: Thu 18 Dec 2025 18:00:33 +0000 Manifest next update: Fri 19 Dec 2025 18:00:33 +0000 Files and hashes: 1: 7XoxbsiH0tvuamwOaZJkHsbncU8.roa (hash: eOLDYEBs+ePiFOo04IA8xxSpoLseLj4knNzwy/AuO7c=) 2: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: wO/i3SLTWmEhxQw/eWC3F8dIRi/si+XN6jw5oyDlFDA=) 3: Jt7bihKghc7zukL52uY8fgD1W-o.roa (hash: 2TGz2CMfaxj9aqkazkTK9wOsLvIeBADGDZnq6/Vnqk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 18:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:9e:e9:62:90:35:78:96:50:d4:6e:fe:b2:9e:8c:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421 Validity Not Before: Dec 18 18:00:33 2025 GMT Not After : Dec 19 18:00:33 2025 GMT Subject: CN=dd008e3a9ed6c08ab4f5ccbbf304ce6f0f6ce1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:85:ac:18:10:38:51:f6:1a:9f:44:ba:37:4e: 7d:d2:a6:91:27:34:25:b4:d2:7a:65:00:7c:b2:29: 8b:31:81:fe:4c:b3:bd:37:38:2d:e5:9e:af:33:01: fd:b1:81:af:12:74:c0:e4:d4:4c:3e:a6:05:6c:bd: 1d:dd:7b:34:ef:78:48:8d:95:74:5b:a6:46:c1:f9: 55:0b:51:3d:bd:ad:cf:3a:af:1a:a1:4e:cf:c2:86: 8c:00:bb:3e:8d:40:f2:3b:28:df:0d:60:49:bb:b8: 4c:44:c9:bb:d5:19:e5:c8:fa:e7:ae:32:55:ff:78: 13:c5:95:ba:c1:81:97:8b:a7:09:9e:18:40:3c:5b: 68:80:b2:df:3c:59:bc:ac:ab:a7:e4:85:b8:9d:12: 4b:9a:30:9b:22:8c:90:50:74:ab:40:91:65:93:23: 27:b3:ba:f2:df:b0:22:c0:1f:e4:15:42:c1:05:56: 84:c4:c9:9d:f7:b3:8c:72:b6:72:9e:80:fc:0f:d9: 3f:84:1e:81:df:bc:0b:87:df:a4:84:90:d7:c2:a7: d9:a2:4c:80:8e:9d:cf:a8:ed:a0:f0:ae:28:dc:88: bb:ad:0c:d3:23:1e:8d:49:63:3f:c3:cf:07:83:d5: 2a:c7:c2:44:68:3d:ce:f6:2c:3c:42:10:25:21:1b: 8d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:00:8E:3A:9E:D6:C0:8A:B4:F5:CC:BB:F3:04:CE:6F:0F:6C:E1:E6 X509v3 Authority Key Identifier: keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:7c:66:3a:d0:ee:56:d7:a8:6b:56:32:48:eb:f0:bd:5c:dc: 92:4a:b0:56:8b:08:d2:7e:76:9b:4e:a7:62:82:f2:7a:53:84: 62:ff:66:35:3f:90:4d:cd:84:30:ca:c8:46:66:9c:a4:fb:b0: f8:9c:c1:5b:1f:61:94:b4:00:e1:d2:38:e8:c0:8a:10:ab:e6: bb:7c:57:dc:be:a6:97:72:57:22:4f:91:3c:5c:95:84:05:7f: 93:4e:a7:5b:bd:5f:00:46:43:cf:5f:4b:3a:64:71:3d:ad:c8: 2a:98:f5:20:c1:d9:d6:e1:0e:8f:9e:ad:21:17:56:3e:b8:b4: 90:a5:38:ef:5f:93:c2:9f:be:bc:00:e7:77:6c:99:11:ef:bf: 25:c0:f1:99:fb:ae:c2:f8:b7:29:4e:77:c2:3d:7b:9d:cb:18: 09:6f:16:9b:fb:c4:2a:12:c2:3e:89:2d:3f:bd:31:bf:a1:9a: e7:b1:18:e2:e0:84:3e:e1:fc:b7:43:f7:dd:43:be:f8:52:54: 6c:1a:00:bf:66:2d:cc:ea:6b:e2:d4:9b:d3:28:d4:f5:cf:4c: 79:48:cc:bd:64:fb:a4:d6:bb:45:d4:1c:44:53:29:2b:4f:80: 86:51:7f:91:9f:53:95:70:be:02:1d:29:3a:98:af:d2:ae:15: f9:4f:22:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsynulikDV4llDUbv6ynoz7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYjE1ZTc3YWY0ZWRkZTExMTkyYzZmZWNkNTBiMjFjZDM3 OWQ0MjEwHhcNMjUxMjE4MTgwMDMzWhcNMjUxMjE5MTgwMDMzWjAzMTEwLwYDVQQD EyhkZDAwOGUzYTllZDZjMDhhYjRmNWNjYmJmMzA0Y2U2ZjBmNmNlMWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoWsGBA4UfYan0S6N0590qaRJzQl tNJ6ZQB8simLMYH+TLO9Nzgt5Z6vMwH9sYGvEnTA5NRMPqYFbL0d3Xs073hIjZV0 W6ZGwflVC1E9va3POq8aoU7PwoaMALs+jUDyOyjfDWBJu7hMRMm71RnlyPrnrjJV /3gTxZW6wYGXi6cJnhhAPFtogLLfPFm8rKun5IW4nRJLmjCbIoyQUHSrQJFlkyMn s7ry37AiwB/kFULBBVaExMmd97OMcrZynoD8D9k/hB6B37wLh9+khJDXwqfZokyA jp3PqO2g8K4o3Ii7rQzTIx6NSWM/w88Hg9Uqx8JEaD3O9iw8QhAlIRuNcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0Ajjqe1sCKtPXMu/MEzm8PbOHmMB8GA1UdIwQY MBaAFPGxXnevTt3hEZLG/s1QshzTedQhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUt MTM0MGNjNWIzZDU3LzEvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy81MDBmYTktNmZiOC00NzY4LTgwZGUtMTM0MGNjNWIzZDU3 LzEvOGJGZWQ2OU8zZUVSa3NiLXpWQ3lITk41MUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXxmOtDu Vteoa1YySOvwvVzckkqwVosI0n52m06nYoLyelOEYv9mNT+QTc2EMMrIRmacpPuw +JzBWx9hlLQA4dI46MCKEKvmu3xX3L6ml3JXIk+RPFyVhAV/k06nW71fAEZDz19L OmRxPa3IKpj1IMHZ1uEOj56tIRdWPri0kKU471+Twp++vADnd2yZEe+/JcDxmfuu wvi3KU53wj17ncsYCW8Wm/vEKhLCPoktP70xv6Ga57EY4uCEPuH8t0P33UO++FJU bBoAv2YtzOpr4tSb0yjU9c9MeUjMvWT7pNa7RdQcRFMpK0+AhlF/kZ9TlXC+Ah0p Opiv0q4V+U8iqQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:42:59 2025 by rpki-client