This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft File: 8TIZIhzAohMmzgBsQoJbrCvjHhc.mft (raw, json) Hash identifier: CVZkOdt1lNt2B97UhnlFTiIZvUulGgtBCpNkAOks2po= Subject key identifier: 54:9E:8F:35:88:EC:5D:5B:FA:4B:98:A1:7B:66:D6:44:04:EC:79:3F Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17 Certificate issuer: /CN=f13219221cc0a21326ce006c42825bac2be31e17 Certificate serial: 019AEE9A4D10F4BC76B340F0D94BB599D7C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft Manifest number: 1884 Signing time: Fri 05 Dec 2025 13:01:20 +0000 Manifest this update: Fri 05 Dec 2025 13:01:20 +0000 Manifest next update: Sat 06 Dec 2025 13:01:20 +0000 Files and hashes: 1: 8TIZIhzAohMmzgBsQoJbrCvjHhc.crl (hash: kuWj8PGiT6uzhI6ohbqNNuivLCQ/cFmPx0lePj7hu5A=) 2: KjLlUbsy5OhkLv0qFbrgPhCDVXc.roa (hash: Y7RFJziGNZvZmqC0fcM/IrDDZFezUSlFPJ8Z47Y2wSc=) 3: ir7-RH8I6LOM7faVYPUvWtPtBkc.roa (hash: c3S12HvLqchLUsT4f7tqk56b2aJYvGDiRT3Sw4rhzw0=) 4: sioOqEQgSdt-Z2nuvjH-ipYeJ0U.roa (hash: e/yGVe5B1VqGg3IGxSr7CYJ11tiQj+M1xaKJk8xaUwo=) 5: wBll80eEVRcCiVNLyafIlwBJOvY.roa (hash: Vrtbp5BA+79ihdsDatt4sH3YRMZYNvpy4CEr3U+1Q18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:9a:4d:10:f4:bc:76:b3:40:f0:d9:4b:b5:99:d7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17 Validity Not Before: Dec 5 13:01:20 2025 GMT Not After : Dec 6 13:01:20 2025 GMT Subject: CN=549e8f3588ec5d5bfa4b98a17b66d64404ec793f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a0:87:c2:98:6a:da:a3:c3:cb:8a:10:dd:ce: bf:c5:d1:67:0e:8f:39:15:99:64:ad:2c:1e:94:b1: 10:6d:c4:58:ba:4e:e3:c5:c3:a4:28:11:e8:e0:0c: 90:06:32:71:5a:83:00:cd:3e:9a:15:10:66:74:d3: 1b:c4:f9:e1:d3:bd:50:e8:a2:ed:2e:6b:6c:fc:1b: c5:3d:cc:1f:ef:26:80:0a:e5:2f:84:3f:57:48:78: 30:2c:5e:e3:7c:3e:57:27:d0:34:3b:5f:3b:ad:98: e4:4c:09:a2:c6:ac:a2:16:8c:a1:9b:cc:29:10:56: 0f:1e:e8:03:a3:56:d0:88:4a:2c:59:13:19:e5:ce: 63:c9:b5:23:da:b8:53:14:24:43:68:1e:e5:ee:e0: b8:00:09:45:8d:f9:1f:9f:8f:d7:4f:be:4c:c8:bd: de:db:14:bc:96:91:cd:c8:d1:b5:b6:5a:95:e6:bd: 65:d0:d0:bb:59:88:20:7c:bc:8e:37:8b:a5:e9:5e: bb:c4:ce:84:9f:49:88:7a:4c:e1:f2:08:f6:87:40: 4d:5b:4b:f1:f7:e9:f0:3a:df:d4:66:a3:61:5e:d4: 45:1a:c9:79:4a:38:6c:a5:dd:e5:33:27:fb:d2:38: 01:43:d8:c4:b3:00:16:a6:ac:28:35:fa:4d:31:49: 8b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9E:8F:35:88:EC:5D:5B:FA:4B:98:A1:7B:66:D6:44:04:EC:79:3F X509v3 Authority Key Identifier: keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:0c:9d:ec:db:b2:14:55:92:97:7b:13:f3:0e:e2:27:91:10: 31:1d:44:7d:d6:2c:80:18:2c:87:f5:e9:db:28:73:15:63:e0: 74:f7:4d:98:1a:0f:10:51:c5:58:1a:05:b5:00:1f:21:6f:95: e0:81:ad:d1:41:28:8a:e7:27:c6:bd:70:9e:e2:f3:45:44:1a: bc:9a:44:2f:71:ad:6e:35:5d:99:56:e6:8c:07:b2:02:0b:b2: 27:b1:c0:cd:f8:20:e2:d0:1b:a2:62:2b:37:84:4b:39:b9:f7: 47:89:95:fc:80:a7:18:5e:6e:ba:85:d3:68:38:84:70:ec:0a: ea:8f:1a:5e:2b:b8:0b:13:29:12:a8:7d:ba:08:c8:90:97:da: 2b:c7:ef:f9:2c:49:6f:f3:c3:f8:32:75:80:89:23:81:4e:fd: e2:39:bd:d0:e0:f9:28:dd:54:bc:e2:14:5c:56:eb:f0:7f:b8: 2d:21:3a:61:75:17:a1:6f:e2:e4:be:9f:25:26:7a:8f:b1:17: f0:ea:71:64:43:01:c8:9d:de:0a:b9:c8:29:95:44:57:41:3a: 66:17:2c:0c:f9:c4:38:4a:d0:b8:b2:81:7e:3d:28:14:21:a6: a1:9e:67:59:7c:a2:8c:cd:16:a2:16:27:43:a6:99:14:a8:3c: bd:ad:9d:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrumk0Q9Lx2s0Dw2Uu1mdfBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzIxOTIyMWNjMGEyMTMyNmNlMDA2YzQyODI1YmFjMmJl MzFlMTcwHhcNMjUxMjA1MTMwMTIwWhcNMjUxMjA2MTMwMTIwWjAzMTEwLwYDVQQD Eyg1NDllOGYzNTg4ZWM1ZDViZmE0Yjk4YTE3YjY2ZDY0NDA0ZWM3OTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKCHwphq2qPDy4oQ3c6/xdFnDo85 FZlkrSwelLEQbcRYuk7jxcOkKBHo4AyQBjJxWoMAzT6aFRBmdNMbxPnh071Q6KLt Lmts/BvFPcwf7yaACuUvhD9XSHgwLF7jfD5XJ9A0O187rZjkTAmixqyiFoyhm8wp EFYPHugDo1bQiEosWRMZ5c5jybUj2rhTFCRDaB7l7uC4AAlFjfkfn4/XT75MyL3e 2xS8lpHNyNG1tlqV5r1l0NC7WYggfLyON4ul6V67xM6En0mIekzh8gj2h0BNW0vx 9+nwOt/UZqNhXtRFGsl5Sjhspd3lMyf70jgBQ9jEswAWpqwoNfpNMUmL/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSejzWI7F1b+kuYoXtm1kQE7Hk/MB8GA1UdIwQY MBaAFPEyGSIcwKITJs4AbEKCW6wr4x4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRJWkloekFvaE1temdCc1FvSmJyQ3ZqSGhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDI0NGQtMDNjOC00NzgwLTg3YzMt NDVlNjk2YTVhZTQ1LzEvOFRJWkloekFvaE1temdCc1FvSmJyQ3ZqSGhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDI0NGQtMDNjOC00NzgwLTg3YzMtNDVlNjk2YTVhZTQ1 LzEvOFRJWkloekFvaE1temdCc1FvSmJyQ3ZqSGhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgyd7Nuy FFWSl3sT8w7iJ5EQMR1EfdYsgBgsh/Xp2yhzFWPgdPdNmBoPEFHFWBoFtQAfIW+V 4IGt0UEoiucnxr1wnuLzRUQavJpEL3GtbjVdmVbmjAeyAguyJ7HAzfgg4tAbomIr N4RLObn3R4mV/ICnGF5uuoXTaDiEcOwK6o8aXiu4CxMpEqh9ugjIkJfaK8fv+SxJ b/PD+DJ1gIkjgU794jm90OD5KN1UvOIUXFbr8H+4LSE6YXUXoW/i5L6fJSZ6j7EX 8OpxZEMByJ3eCrnIKZVEV0E6ZhcsDPnEOErQuLKBfj0oFCGmoZ5nWXyijM0WohYn Q6aZFKg8va2dcA== -----END CERTIFICATE-----Generated at Fri Dec 5 23:07:51 2025 by rpki-client