This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft File: MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft (raw, json) Hash identifier: hf6IbrXnF1VuQXQk28zgsgehRgZE+O4J1lI/5wO4n08= Subject key identifier: AE:47:66:B2:9C:57:DF:DB:26:18:12:85:4B:E3:E5:E7:4B:5F:EA:93 Authority key identifier: 30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA Certificate issuer: /CN=302f09f265e9b278f8073d6982ff175713a5a0fa Certificate serial: 019B0D800FFB87CA8E8870998AE5B3DAB36B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft Manifest number: 08E5 Signing time: Thu 11 Dec 2025 13:00:55 +0000 Manifest this update: Thu 11 Dec 2025 13:00:55 +0000 Manifest next update: Fri 12 Dec 2025 13:00:55 +0000 Files and hashes: 1: Dz49aMuKRlKMoJhdInbOpT8odb0.roa (hash: eGQZ4ljYZGoi2bWlhPeueYms1SjbBMBvU/96IhPjXeA=) 2: ESyXldKwtms-9as-fPqZA06oJF8.roa (hash: ux8w7uiQ2u3yqvfbtVufiAk64n37yIym0ehvJixmaFU=) 3: MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl (hash: gTG8CeVWtyuOqypCxexy6PW9j8//ZYw1gm0tPaHdwrs=) 4: PmMRDG9xx1iegEvlwTgY94xn0uY.roa (hash: rnYe+7KnzmmrVpmGGJ0sYn/ALtPwvcJTUyQU0nsWM1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:0f:fb:87:ca:8e:88:70:99:8a:e5:b3:da:b3:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=302f09f265e9b278f8073d6982ff175713a5a0fa Validity Not Before: Dec 11 13:00:55 2025 GMT Not After : Dec 12 13:00:55 2025 GMT Subject: CN=ae4766b29c57dfdb261812854be3e5e74b5fea93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9c:1a:4a:43:34:54:d5:5b:8b:7c:4b:ef:25: 2c:cf:57:52:05:50:61:57:5c:1a:bf:09:92:1d:7c: a3:0f:25:c9:2d:af:0b:b9:1c:b8:45:97:66:ef:bf: 89:3c:82:b8:ca:f0:3a:bd:bb:48:43:a7:bb:83:c2: 7a:c7:32:35:b6:b5:a0:08:43:db:51:01:b5:78:81: e4:9b:6f:a0:1e:c5:fc:02:ce:2e:f0:e2:a1:a0:ed: f4:63:1b:a8:85:a9:38:e7:6e:c8:09:89:96:fd:6e: d6:b6:2b:ef:8a:94:4c:09:ab:40:e1:30:7f:d6:29: de:f8:88:4e:35:f5:35:26:02:53:be:f5:02:03:fc: c2:b1:e6:f6:80:84:46:e3:25:ef:8b:3e:d1:ee:4b: 86:ee:38:69:85:b2:6f:8d:86:65:e1:ec:42:50:e5: 2c:76:0c:e1:fd:00:c2:df:46:35:84:fe:02:67:ef: dd:30:43:db:f2:91:90:8e:a1:18:4d:24:b7:bd:2f: 32:7d:20:a2:25:6f:74:36:40:a8:e3:c3:f3:11:18: ec:d3:f7:fd:83:c3:60:6e:b1:b5:58:8a:5c:df:e3: b8:2e:73:82:8a:b0:66:b9:a8:03:c3:d5:80:be:88: 1d:08:31:37:1c:72:6c:ca:c6:ff:92:a3:fa:99:1f: f3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:47:66:B2:9C:57:DF:DB:26:18:12:85:4B:E3:E5:E7:4B:5F:EA:93 X509v3 Authority Key Identifier: keyid:30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:37:dd:d7:43:92:0c:a6:5b:24:63:9f:6a:03:9f:a2:fd:e8: a2:ed:13:86:aa:c3:39:54:64:ad:88:0a:dd:a9:2b:25:2d:35: 99:3e:80:d2:50:b5:fc:6e:98:cf:25:2c:fe:7a:2b:2c:72:14: bc:74:a9:67:41:66:28:b6:1c:ed:24:02:3e:a2:07:04:1d:1a: f7:ae:a9:cd:a4:ac:ab:14:7e:4f:76:5d:3a:0f:22:39:1f:6b: 9d:5e:78:fc:e8:67:50:53:5e:7c:3f:d3:2a:de:ef:26:aa:d5: da:e6:52:3f:8d:db:49:08:38:00:ad:2d:1c:36:3e:a8:68:33: b3:6a:93:9e:1d:f7:8c:e6:49:06:e0:2a:cb:4b:19:ea:a1:0b: 43:fe:ec:c8:5d:3e:45:e5:df:d8:c1:1e:5e:13:ac:07:3d:30: d0:34:18:fe:a9:b9:20:0e:d8:54:77:eb:8d:31:79:f9:c4:f6: e8:20:33:af:b4:c2:f8:ad:ba:35:13:04:ee:e3:74:a8:91:ae: 69:f0:c1:00:e4:9d:b4:b8:a3:40:3b:77:23:66:cb:06:68:94: b2:c7:ea:b0:67:43:01:22:d7:14:87:45:9c:68:49:f9:e0:af: 09:41:79:c6:c0:fb:ce:3c:61:89:73:6a:8a:c4:12:56:0b:50: e3:a1:1e:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgA/7h8qOiHCZiuWz2rNrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMmYwOWYyNjVlOWIyNzhmODA3M2Q2OTgyZmYxNzU3MTNh NWEwZmEwHhcNMjUxMjExMTMwMDU1WhcNMjUxMjEyMTMwMDU1WjAzMTEwLwYDVQQD EyhhZTQ3NjZiMjljNTdkZmRiMjYxODEyODU0YmUzZTVlNzRiNWZlYTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZwaSkM0VNVbi3xL7yUsz1dSBVBh V1wavwmSHXyjDyXJLa8LuRy4RZdm77+JPIK4yvA6vbtIQ6e7g8J6xzI1trWgCEPb UQG1eIHkm2+gHsX8As4u8OKhoO30Yxuohak4527ICYmW/W7WtivvipRMCatA4TB/ 1ine+IhONfU1JgJTvvUCA/zCseb2gIRG4yXviz7R7kuG7jhphbJvjYZl4exCUOUs dgzh/QDC30Y1hP4CZ+/dMEPb8pGQjqEYTSS3vS8yfSCiJW90NkCo48PzERjs0/f9 g8NgbrG1WIpc3+O4LnOCirBmuagDw9WAvogdCDE3HHJsysb/kqP6mR/zGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK5HZrKcV9/bJhgShUvj5edLX+qTMB8GA1UdIwQY MBaAFDAvCfJl6bJ4+Ac9aYL/F1cTpaD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lNzVhZDItMWUzMC00NTVlLTk3ODct M2I1NWYyMzI3YjM0LzEvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9lNzVhZDItMWUzMC00NTVlLTk3ODctM2I1NWYyMzI3YjM0 LzEvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTfd10OS DKZbJGOfagOfov3oou0ThqrDOVRkrYgK3akrJS01mT6A0lC1/G6YzyUs/norLHIU vHSpZ0FmKLYc7SQCPqIHBB0a966pzaSsqxR+T3ZdOg8iOR9rnV54/OhnUFNefD/T Kt7vJqrV2uZSP43bSQg4AK0tHDY+qGgzs2qTnh33jOZJBuAqy0sZ6qELQ/7syF0+ ReXf2MEeXhOsBz0w0DQY/qm5IA7YVHfrjTF5+cT26CAzr7TC+K26NRME7uN0qJGu afDBAOSdtLijQDt3I2bLBmiUssfqsGdDASLXFIdFnGhJ+eCvCUF5xsD7zjxhiXNq isQSVgtQ46EeLA== -----END CERTIFICATE-----Generated at Thu Dec 11 22:59:58 2025 by rpki-client