This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft File: i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft (raw, json) Hash identifier: hz4Xpf0WxZydJLAXF+dZbPOmJv7Nqm5ZxxYBHT8k8FU= Subject key identifier: D1:FE:2D:D7:C8:7B:54:B6:1B:8A:C0:F7:D9:A8:C7:E8:8C:EB:9C:04 Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6 Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6 Certificate serial: 019B1013F6C1D193C09B466AA2EFCC65C317 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft Manifest number: 1787 Signing time: Fri 12 Dec 2025 01:01:42 +0000 Manifest this update: Fri 12 Dec 2025 01:01:42 +0000 Manifest next update: Sat 13 Dec 2025 01:01:42 +0000 Files and hashes: 1: RZK0b0ovThhwOspu5E-ursP21fk.roa (hash: QD9vKhIKNC6G+l7AznXUzzLsXomMDZljRclFB7nn2HQ=) 2: bXyl61NnJFUqVdpbbyJUbKSLOEk.asa (hash: kvt/aU200bfEnw4rYqKdYW9+xb8+wCfFGl6Rty5GK40=) 3: fiISLcTtszje5XVI9V1A5UtzzeY.roa (hash: eVRxObYN5WO+IJLUe7vH/MdccTrSwqFAfOP7RIW37BY=) 4: i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl (hash: ZAr8KI2VDGJ/odhioRdg/4aPhmwyaWH8kprNpV/lHeQ=) 5: jI6BNQdThJo2MEdSZOm1_susYMk.roa (hash: rpQAWWU68zMZ9YE0YNIh6QHC51Xor5PQY1DDvCq8+m8=) 6: uqvRjoImP67-V2pzEWGA2vqwBPY.roa (hash: yGPp5s4cB95t+0hM/KR3osWVzparRNQvZpkZjxE6wzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:f6:c1:d1:93:c0:9b:46:6a:a2:ef:cc:65:c3:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6 Validity Not Before: Dec 12 01:01:42 2025 GMT Not After : Dec 13 01:01:42 2025 GMT Subject: CN=d1fe2dd7c87b54b61b8ac0f7d9a8c7e88ceb9c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:26:e3:aa:b9:db:e7:3a:e6:55:6f:17:8b:71: d8:17:29:2c:27:81:b2:74:6e:40:20:cc:16:d5:28: 97:bf:f8:70:34:59:6f:46:3b:2c:f6:da:00:0b:b1: c4:b7:ca:83:59:2b:21:39:d7:0a:c5:ac:44:77:eb: 1c:0a:a2:82:c7:9c:88:32:18:68:93:56:0e:34:23: 3d:e7:25:ce:26:04:fe:21:93:84:f9:db:a4:e0:76: 7d:61:ae:9b:07:57:5b:5a:a8:a0:95:58:98:50:59: fd:06:2d:b8:b3:fc:77:59:25:1b:82:30:0b:1b:8d: 77:94:31:25:ae:7f:41:d2:d8:56:c9:23:2a:57:a6: d8:1e:36:90:59:5d:2d:ee:73:6c:2f:ff:0d:57:11: a0:d1:0c:1d:ef:10:ec:9d:52:f4:69:09:6d:a4:3f: 31:28:35:57:bd:4b:00:43:70:05:26:24:51:d9:15: 05:f9:60:8f:c2:3d:3a:36:b1:9d:36:b3:a9:18:29: dc:4b:d6:89:4e:72:d5:c8:2a:d3:79:7c:e0:5f:ea: f0:59:0a:75:9c:3b:24:5f:ce:98:3e:53:a5:8f:0b: 10:a3:73:3a:88:ae:e1:20:24:3b:82:56:cd:bd:fe: d6:ba:56:1a:30:fa:d6:a0:ad:39:2a:70:df:ef:aa: 82:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FE:2D:D7:C8:7B:54:B6:1B:8A:C0:F7:D9:A8:C7:E8:8C:EB:9C:04 X509v3 Authority Key Identifier: keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:c9:a1:38:b1:aa:f0:21:ad:bf:29:6e:ff:ed:65:4c:6f:2f: 8e:6a:ba:1e:98:1e:73:fa:4c:1a:f8:d5:3d:a8:33:19:0e:8e: e3:80:61:5b:c8:8d:15:2b:f4:45:03:19:0e:93:23:e1:7a:22: 06:18:72:0c:65:eb:19:ab:0c:f6:ea:12:eb:ce:01:f2:cb:6f: 91:61:3f:57:4c:7e:8f:68:d2:21:9b:d1:d0:9e:58:61:85:0e: 11:3c:5b:63:72:43:fd:71:f9:2a:0f:c8:52:81:b4:a5:81:0a: 75:0b:c2:f7:1f:53:61:05:6f:83:4a:b6:18:8a:db:c7:4d:02: ee:92:9d:25:f1:ab:e4:9d:59:b2:a3:da:bd:d9:b5:a7:cf:40: 0a:0d:be:1f:37:b0:b8:51:9c:dc:d2:75:d9:9a:b1:af:31:f0: d8:73:7e:05:cb:8d:5c:31:86:29:44:3f:5d:f3:a5:43:eb:a7: 3b:ca:f4:c8:76:29:b9:d4:df:d3:0b:17:46:b0:7d:33:38:ce: a1:1b:45:e2:09:45:e3:62:43:2b:d1:52:6c:42:f2:71:bd:d1: 56:26:cd:cf:e6:f0:51:1b:fc:ce:e2:c3:01:6c:55:fc:2b:13: 7a:06:d9:d7:97:f9:80:0e:20:ad:68:f9:6e:05:58:ef:30:ce: 87:45:db:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE/bB0ZPAm0Zqou/MZcMXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNjlmYzYxMjhiZTU5MTQwMWFjZjgyYmMyNDYxYWY2MzZl YmU4ZTYwHhcNMjUxMjEyMDEwMTQyWhcNMjUxMjEzMDEwMTQyWjAzMTEwLwYDVQQD EyhkMWZlMmRkN2M4N2I1NGI2MWI4YWMwZjdkOWE4YzdlODhjZWI5YzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Sbjqrnb5zrmVW8Xi3HYFyksJ4Gy dG5AIMwW1SiXv/hwNFlvRjss9toAC7HEt8qDWSshOdcKxaxEd+scCqKCx5yIMhho k1YONCM95yXOJgT+IZOE+duk4HZ9Ya6bB1dbWqiglViYUFn9Bi24s/x3WSUbgjAL G413lDElrn9B0thWySMqV6bYHjaQWV0t7nNsL/8NVxGg0Qwd7xDsnVL0aQltpD8x KDVXvUsAQ3AFJiRR2RUF+WCPwj06NrGdNrOpGCncS9aJTnLVyCrTeXzgX+rwWQp1 nDskX86YPlOljwsQo3M6iK7hICQ7glbNvf7WulYaMPrWoK05KnDf76qCzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNH+LdfIe1S2G4rA99mox+iM65wEMB8GA1UdIwQY MBaAFItp/GEovlkUAaz4K8JGGvY26+jmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUt MjY1ZjJiZDBmOGYzLzEvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUtMjY1ZjJiZDBmOGYz LzEvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARsmhOLGq 8CGtvylu/+1lTG8vjmq6Hpgec/pMGvjVPagzGQ6O44BhW8iNFSv0RQMZDpMj4Xoi BhhyDGXrGasM9uoS684B8stvkWE/V0x+j2jSIZvR0J5YYYUOETxbY3JD/XH5Kg/I UoG0pYEKdQvC9x9TYQVvg0q2GIrbx00C7pKdJfGr5J1ZsqPavdm1p89ACg2+Hzew uFGc3NJ12ZqxrzHw2HN+BcuNXDGGKUQ/XfOlQ+unO8r0yHYpudTf0wsXRrB9MzjO oRtF4glF42JDK9FSbELycb3RVibNz+bwURv8zuLDAWxV/CsTegbZ15f5gA4grWj5 bgVY7zDOh0Xb/A== -----END CERTIFICATE-----Generated at Fri Dec 12 06:32:58 2025 by rpki-client