This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft File: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft (raw, json) Hash identifier: wzt/BD77X78vdza0ux8akj2WcjfnFeVrAnNRJ3Nw7cQ= Subject key identifier: 8B:F7:3E:5A:90:73:B5:89:99:3F:08:8C:07:56:F6:83:88:6F:2E:64 Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8 Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8 Certificate serial: 019B2551E7B917A9D7B0791547393258B96F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft Manifest number: 1179 Signing time: Tue 16 Dec 2025 04:01:23 +0000 Manifest this update: Tue 16 Dec 2025 04:01:23 +0000 Manifest next update: Wed 17 Dec 2025 04:01:23 +0000 Files and hashes: 1: 79lt-80txKIWQWCp9jNMLc2IHAs.roa (hash: 8V+u82sHy+GzDpyon/8u7WM8JnJcqgS9AiUeL6z8Iug=) 2: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl (hash: EDbvQpvqf7pZaH5aTEjikaxhm5Zo4lddRjfTRjX8wyw=) 3: AQ7FmuvDz62F8uKHQpuKMEYydQQ.roa (hash: M9DqKPgllLnW8MX9RGkl/xHC2u96Nyjw3cSwX+kD68U=) 4: Vf1RDh-x6BtkmqUI8kQeJAmyoeQ.roa (hash: 1PUOdlU3yqRdUd5Mz1TUUvBo/uRT6+wW9qnbLMW13lU=) 5: lXo95w5iGY2qlCwar4Vb6ngfmUQ.roa (hash: K7cw6ymMs8oJcHolnWrjFvAyiZlrz4VloYZ/Ck1llmM=) 6: nUxTi5H5Wi_nGNCH8VXylwgxdJ0.roa (hash: xSWU06TWSLqiugEcuWmt4LzGgEiH/rhkdBHL5vVX0+0=) 7: omuf2rqv4Sp9P-8ZJZ916fSowyA.roa (hash: UlQgwX4zh3WqyryliD1lENPsPKINDm9DlFR8/vawBBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:e7:b9:17:a9:d7:b0:79:15:47:39:32:58:b9:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8 Validity Not Before: Dec 16 04:01:23 2025 GMT Not After : Dec 17 04:01:23 2025 GMT Subject: CN=8bf73e5a9073b589993f088c0756f683886f2e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:43:c2:74:de:38:4d:e3:89:2b:0c:e1:7f:b0: 7f:56:3c:4d:a3:c3:96:42:4e:8e:69:ea:36:f0:a9: aa:2c:9a:a3:81:dd:24:40:ce:74:d2:92:97:4f:b9: be:d0:24:ed:66:66:41:f4:43:38:17:14:b7:3c:01: 46:e4:e7:17:93:f8:34:cb:41:71:81:1c:36:b7:d1: f4:60:1f:da:84:56:2d:71:77:5a:84:c7:34:f0:96: e7:b7:4a:43:4a:25:01:c2:ee:9a:51:42:1b:db:5a: d4:90:55:a0:d7:07:0e:ba:62:33:60:9a:41:6c:cf: 9c:3e:8c:6b:71:25:88:eb:ca:61:20:eb:8e:af:90: f4:1a:a0:88:28:de:9d:12:13:9d:f5:97:d2:4f:1d: 35:49:02:7b:3e:cc:ac:bc:6a:42:52:81:11:1b:b4: bd:e1:60:5c:41:5d:f0:ea:47:83:86:60:40:4d:84: e9:4a:83:8d:aa:a5:55:08:f7:a9:07:df:06:28:2f: f7:ed:13:07:ef:9d:30:22:b7:c8:55:6b:16:7f:c3: 86:2a:03:01:c6:2b:eb:95:46:a5:7a:f8:33:bf:46: b6:88:ce:d0:32:dd:7f:9b:85:9b:17:5f:7f:60:ba: 75:f2:03:eb:ec:10:13:dd:20:02:b5:f2:be:e0:6a: 3d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F7:3E:5A:90:73:B5:89:99:3F:08:8C:07:56:F6:83:88:6F:2E:64 X509v3 Authority Key Identifier: keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:74:a8:3b:ef:f1:50:a1:bd:b1:da:3b:ce:46:cc:fd:f3:9d: 90:37:9d:53:80:db:38:7d:ca:55:28:8b:9a:ab:2a:30:7b:27: c8:47:b9:3c:33:15:15:4d:8a:b0:2d:4f:f2:c2:c4:2f:a4:5b: 30:b0:21:c7:00:b7:bf:1c:96:b3:a9:f8:02:bc:61:21:fa:45: 60:88:d5:60:bb:d0:63:27:1f:e4:00:ff:5a:02:9a:cd:66:41: 6b:c0:81:0c:d6:94:26:b1:6a:7f:52:9e:2e:65:15:82:9a:55: 3d:e4:4e:6c:3f:87:14:fa:31:98:9c:01:19:d6:1b:1b:84:8d: 7e:21:ba:57:34:93:07:cd:0e:69:72:5a:fe:a8:8e:79:38:0c: c1:67:c6:c8:bd:30:61:ad:0a:27:4b:0c:28:d5:5e:f8:6f:23: 29:19:e9:2c:ce:9c:9e:0e:75:48:04:11:ce:df:ca:dd:c8:e8: a2:04:7a:78:81:c8:5b:dc:94:09:bf:e7:5f:87:6f:a5:7e:9d: 01:26:94:10:d0:d3:82:8c:1b:39:08:84:28:d4:d0:dd:4e:0f: ba:92:f9:ed:59:e5:82:ff:8d:61:e8:c3:a9:32:35:9b:e9:66: 2a:9b:6a:77:a4:16:6b:0c:bc:12:ce:c6:73:70:72:85:a6:ab: 2c:c3:0e:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUee5F6nXsHkVRzkyWLlvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxOTkxOGVkMjE5ZTdkM2Q5MjI3MzdlY2RjNzMxZjBjYTYw YTY4YjgwHhcNMjUxMjE2MDQwMTIzWhcNMjUxMjE3MDQwMTIzWjAzMTEwLwYDVQQD Eyg4YmY3M2U1YTkwNzNiNTg5OTkzZjA4OGMwNzU2ZjY4Mzg4NmYyZTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUPCdN44TeOJKwzhf7B/VjxNo8OW Qk6Oaeo28KmqLJqjgd0kQM500pKXT7m+0CTtZmZB9EM4FxS3PAFG5OcXk/g0y0Fx gRw2t9H0YB/ahFYtcXdahMc08Jbnt0pDSiUBwu6aUUIb21rUkFWg1wcOumIzYJpB bM+cPoxrcSWI68phIOuOr5D0GqCIKN6dEhOd9ZfSTx01SQJ7PsysvGpCUoERG7S9 4WBcQV3w6keDhmBATYTpSoONqqVVCPepB98GKC/37RMH750wIrfIVWsWf8OGKgMB xivrlUalevgzv0a2iM7QMt1/m4WbF19/YLp18gPr7BAT3SACtfK+4Go9UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIv3PlqQc7WJmT8IjAdW9oOIby5kMB8GA1UdIwQY MBaAFPGZGO0hnn09kic37NxzHwymCmi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzIt MzEzZWZlYjBiMTlkLzEvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzItMzEzZWZlYjBiMTlk LzEvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS3SoO+/x UKG9sdo7zkbM/fOdkDedU4DbOH3KVSiLmqsqMHsnyEe5PDMVFU2KsC1P8sLEL6Rb MLAhxwC3vxyWs6n4ArxhIfpFYIjVYLvQYycf5AD/WgKazWZBa8CBDNaUJrFqf1Ke LmUVgppVPeRObD+HFPoxmJwBGdYbG4SNfiG6VzSTB80OaXJa/qiOeTgMwWfGyL0w Ya0KJ0sMKNVe+G8jKRnpLM6cng51SAQRzt/K3cjoogR6eIHIW9yUCb/nX4dvpX6d ASaUENDTgowbOQiEKNTQ3U4PupL57Vnlgv+NYejDqTI1m+lmKptqd6QWawy8Es7G c3ByhaarLMMOTw== -----END CERTIFICATE-----Generated at Tue Dec 16 13:42:06 2025 by rpki-client