This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft File: 8z8ttyqrQ1udqisffhqKMnZ3iL4.mft (raw, json) Hash identifier: c+0LlE3fjnyW9MmAk4opr/f7rtEIZEhj0jrSarglnZY= Subject key identifier: 7E:E3:82:89:ED:36:B5:2B:43:E6:CF:FD:C1:24:07:CA:64:31:E8:67 Authority key identifier: F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE Certificate issuer: /CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be Certificate serial: 019B2175E11C20C4FED30DB6C0B432442E71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft Manifest number: 0224 Signing time: Mon 15 Dec 2025 10:02:11 +0000 Manifest this update: Mon 15 Dec 2025 10:02:11 +0000 Manifest next update: Tue 16 Dec 2025 10:02:11 +0000 Files and hashes: 1: 8z8ttyqrQ1udqisffhqKMnZ3iL4.crl (hash: BgnX63CmFQPJTLAVt56NwvPOso2OucHsM/7oE3zYpsc=) 2: JJIvfjZzCLr-eY_LSqlGpsRo7hw.roa (hash: bxgw5cMXPreloYfdhoWhuj5SGkwaDHEoqsrDfOC485Y=) 3: gLRqMg9LH0l3Bvm_1EaM6nJMhBU.roa (hash: tozY0cG4yyw1J4sRnJzdlyQ67yOL3u+re3wAKQtu0HE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:e1:1c:20:c4:fe:d3:0d:b6:c0:b4:32:44:2e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be Validity Not Before: Dec 15 10:02:11 2025 GMT Not After : Dec 16 10:02:11 2025 GMT Subject: CN=7ee38289ed36b52b43e6cffdc12407ca6431e867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:75:53:96:0a:42:97:cc:a3:ac:0b:85:74:e3: 61:02:97:7f:e1:e4:2d:af:cb:8e:e3:3d:db:f1:ef: 4c:f3:ec:fe:91:dc:1f:3e:fa:a9:7b:5f:7a:11:fb: ee:e4:e0:98:b0:c4:84:8d:37:71:65:86:ab:14:0e: a6:69:ce:1b:5f:f3:04:50:1e:4b:31:80:b8:bc:29: 17:e9:15:cd:aa:83:8f:22:22:b8:6f:79:5a:fb:31: 2f:de:a7:5a:61:b4:14:f3:03:35:34:cd:de:fb:2a: 6a:ea:f2:58:69:5b:5f:97:d5:9c:d7:6d:ec:be:40: b4:bd:16:8f:28:0d:95:8d:cd:39:45:ce:e2:85:09: 13:b8:9b:2f:b7:40:88:fb:f1:6d:e3:ff:0f:a2:73: 8b:91:cd:1b:02:14:c0:9f:8f:a2:33:01:4f:7a:c0: 6e:62:4c:f7:bc:f9:df:69:03:2c:01:aa:30:13:92: 3d:5a:a9:cf:42:9d:89:14:1c:fc:50:89:29:c3:8f: 6d:4e:81:97:cb:13:d7:e9:bd:e7:1d:7e:fa:ec:7b: bb:51:07:c6:1f:60:28:10:14:53:ed:cc:d9:fe:26: 9e:77:fd:3e:bf:cf:8b:fe:7c:7f:91:59:8f:50:d5: 54:02:aa:5b:be:8c:04:84:2b:3a:28:10:cc:36:f8: 17:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E3:82:89:ED:36:B5:2B:43:E6:CF:FD:C1:24:07:CA:64:31:E8:67 X509v3 Authority Key Identifier: keyid:F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:b0:74:7e:c4:89:fb:47:22:41:f8:23:40:5c:93:4c:62:f3: b2:89:d4:de:cb:55:96:07:f3:e1:c4:dd:a4:e9:60:5b:54:51: 22:8c:ff:59:02:03:bd:23:b3:d6:63:57:3e:ce:c1:d5:95:b8: 97:62:a4:23:39:82:22:b6:4b:28:98:1e:fc:60:c4:61:ed:72: a1:0a:85:d6:4c:56:63:24:e5:0e:39:6c:8d:24:b0:b2:81:b8: ec:64:99:39:52:c4:71:c6:ee:ff:cf:51:53:31:00:3e:c8:5f: f2:23:5d:00:88:ce:2f:50:e7:03:62:7e:e1:51:68:f5:3f:6b: a1:dc:16:1c:29:72:5a:7d:5e:cd:d5:cc:c6:b3:f6:d1:91:e6: 2f:b6:7c:30:e0:bc:4c:aa:06:79:26:ee:2a:b8:c0:1f:bf:f5: 8a:54:2f:90:39:6c:57:84:4e:78:5e:a6:5d:73:64:fc:45:46: 5d:f2:a8:91:18:4f:d3:e3:cd:ff:42:a3:e2:62:d7:e2:8f:c8: e5:50:51:7d:53:f4:e0:1f:3a:36:8d:3e:4f:97:77:53:b2:88: 4d:5f:31:44:f6:53:1c:aa:b8:ed:95:ee:2d:52:f8:44:39:d2: e1:a2:ba:d9:d0:f8:7d:33:95:2e:3f:67:b8:11:a2:cd:77:76: 67:89:43:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdeEcIMT+0w22wLQyRC5xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzM2YyZGI3MmFhYjQzNWI5ZGFhMmIxZjdlMWE4YTMyNzY3 Nzg4YmUwHhcNMjUxMjE1MTAwMjExWhcNMjUxMjE2MTAwMjExWjAzMTEwLwYDVQQD Eyg3ZWUzODI4OWVkMzZiNTJiNDNlNmNmZmRjMTI0MDdjYTY0MzFlODY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonVTlgpCl8yjrAuFdONhApd/4eQt r8uO4z3b8e9M8+z+kdwfPvqpe196Efvu5OCYsMSEjTdxZYarFA6mac4bX/MEUB5L MYC4vCkX6RXNqoOPIiK4b3la+zEv3qdaYbQU8wM1NM3e+ypq6vJYaVtfl9Wc123s vkC0vRaPKA2Vjc05Rc7ihQkTuJsvt0CI+/Ft4/8PonOLkc0bAhTAn4+iMwFPesBu Ykz3vPnfaQMsAaowE5I9WqnPQp2JFBz8UIkpw49tToGXyxPX6b3nHX767Hu7UQfG H2AoEBRT7czZ/iaed/0+v8+L/nx/kVmPUNVUAqpbvowEhCs6KBDMNvgX0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7jgontNrUrQ+bP/cEkB8pkMehnMB8GA1UdIwQY MBaAFPM/Lbcqq0NbnaorH34aijJ2d4i+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82YzA5ZDktZGEwYi00ZjViLWJlMjEt YzZjMDZlMmIzYTlmLzEvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS82YzA5ZDktZGEwYi00ZjViLWJlMjEtYzZjMDZlMmIzYTlm LzEvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbB0fsSJ +0ciQfgjQFyTTGLzsonU3stVlgfz4cTdpOlgW1RRIoz/WQIDvSOz1mNXPs7B1ZW4 l2KkIzmCIrZLKJge/GDEYe1yoQqF1kxWYyTlDjlsjSSwsoG47GSZOVLEccbu/89R UzEAPshf8iNdAIjOL1DnA2J+4VFo9T9rodwWHClyWn1ezdXMxrP20ZHmL7Z8MOC8 TKoGeSbuKrjAH7/1ilQvkDlsV4ROeF6mXXNk/EVGXfKokRhP0+PN/0Kj4mLX4o/I 5VBRfVP04B86No0+T5d3U7KITV8xRPZTHKq47ZXuLVL4RDnS4aK62dD4fTOVLj9n uBGizXd2Z4lDhw== -----END CERTIFICATE-----Generated at Mon Dec 15 16:56:46 2025 by rpki-client