This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
File: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft (raw, json)
Hash identifier: sYfxSWmtNYTCKUPRbJb8Nf5QDzHNxb1RHz23SH46s1E=
Subject key identifier: F8:CE:67:35:B7:43:9B:71:EE:D1:85:39:3E:65:46:28:01:1F:A8:18
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019AECAB8711649E85B3A2C8D7DDB9591347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
Manifest number: 1850
Signing time: Fri 05 Dec 2025 04:00:55 +0000
Manifest this update: Fri 05 Dec 2025 04:00:55 +0000
Manifest next update: Sat 06 Dec 2025 04:00:55 +0000
Files and hashes: 1: 1-pkoPKMCZ9qOJcUpbg4SD3YM82I.roa (hash: fr0BGqmmgkymb/Io2tWlqm6/TRfrQYD5zH4bv2liAY4=)
2: 60lT6E7Hw-SybLa6dCTef8Owqso.roa (hash: kxBaSXQQFFLnQ/jWfDvLC1N4uboGoYMJnKAExPscFWo=)
3: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl (hash: z+F+dVULhL6cujWYKF41N3s2bUFWKnDxG2TZVY6W+KM=)
4: AkeW0dNO6HwoGorE-RVkvkd5lYI.roa (hash: cFEnsrh1nsOvG/GU22O2yZ4HJtAwycOwC2PtRPjLqBI=)
5: B1142MZmoWC79cU7wc6SpTqGiyI.roa (hash: ho8/5G5V6c0C9LD1lAUutQeKnpgOVsvxXS6BHwKivQY=)
6: G9iD8U4QCioeA79cHr2xVSAWeEI.roa (hash: isof3/aO68rNSeHuTbxaBE/zI2rUwZRzXlA4N/t2RR8=)
7: H8YJLWnpWipMvgIr9ji5smf4Tfk.roa (hash: M3PeYVw02zCqgGsGWVEqY9NDqtJ4pOhlFV2aXiG2+JY=)
8: KbXum3tGxYpXO3QIbsz4v0Gc9YE.roa (hash: Xdbf5vp7RPXfCgiOaz1rHhCCOGhSA6vAYCYI/x90YU0=)
9: MNEt8VrSmpVV6QQFZEtFkOb964o.roa (hash: Qp6oqipOgd4f6BqRbUAiNDAjU+YosYUxQPAPrWVqcBE=)
10: Mdp9Kv-Vu7KoI3CAPKr9JqJyQF0.roa (hash: SVNqMzugCbLVwMP8haqTfMrXYGbHl90Ct7rAkwp4GGU=)
11: Nx6plveuESXQK8zHN0saWCNgZtg.roa (hash: QL/uKZ/nr+28xsvZGhgIMqZgRaxPkWfGMmZV7z027VM=)
12: O9cN0ZR3uRs9JZLPjZ_apekO_1o.roa (hash: VyuL/Lcqim34ks+x+bFHqTVYiETL9VCXnibosD6RzqE=)
13: PXz0xECU6TjhYqxiIXtEO5Wt6wc.roa (hash: IQ6HG99adaSd4g8dYN9Tq5G654BtgGfHZKvbtQePiBg=)
14: QUqReStf6TEFnsU1tSixUGPYTuI.roa (hash: K60fCDp86LLBo6obO2VN9uWaTquDob132b4Q/cH5WYU=)
15: S5aHdm30TryFtG2jDVy3wkSOz2Q.roa (hash: gGROgcge0wvbKabdkDSLw/YtICixKaiQd0Hk++1c5Is=)
16: SUo0DyFvECncRbWyydY2boWfDw0.roa (hash: KZ9eDlHCtBK84KWAdJ7YZAtQ8L4glAEpb/0BP5qJVMg=)
17: TW2quqEtMmBMtjFETxrg2LVk9Oo.roa (hash: 63aKh4PjYXwflLNSYPKfmuOdFvd6LVwJFipNOxlRjJI=)
18: WZKLhLcb_14f65w-Gxi0P7Y4PGI.roa (hash: rd8mwsH5vvMfna/I2W08kC0v/oG9b9ll9tJk/Yl4I2o=)
19: XLs5m7yFpYbQixlyQEPtxV_7mOs.roa (hash: Fghw0ZM8qJSM1Rk38Og5x502OtV7xRwTHNOwSJX4CJo=)
20: YJCi9AWh99xuK45xoYGOeQ7CnmE.roa (hash: Ti9BtXIsKFet++HwcTL4uva9A9w4W22YtG5seAitsY8=)
21: ZasgQLj553uShFx9qygvcO1idVY.roa (hash: xV4yVjOGaxnmU8uKE6oE/eSTkUdEZQ/Ub4WuQWWJos0=)
22: _NcltatYeskVsJ2GmWYQEOtBuzU.roa (hash: EFUSsiFNwzbPc+B6nty0bVOEIqERfMB5igPoEOdQ1Ow=)
23: eB2hSV_Hdx6UpXi8AI7IynGR-nU.roa (hash: dc/doO6o1+KWXt12g3TR56aCxeeTLAIL3hhXaij4HvQ=)
24: eYe0ntoHsn5C9aoZKH_cB21Bfys.roa (hash: rbiYcU0iwzMDkl2hqOmLPRmcdqv8DqvFIgub7i+wD8o=)
25: f460IPqQlQEG9Ilmybk9LOnau4A.roa (hash: 1vIbZBuCjlKIeaULpU2EaovNh3t6eGRb6tKyHFFkmzQ=)
26: gGO9icMrdD7N9uiJnKWR-Ueytgo.roa (hash: 1RTOeLDADO5dBwjjbWYNNQtq640SgJeezRVf2Hcyp3A=)
27: pAaBglS_ph_lomtz_pi-YWsNz74.roa (hash: +DNf/G42yq93h12+GOLlNd9IxjCcQ12CMJ+kjCCl/Cw=)
28: qq4fM1ObQGyaLMmavbeC_4huAhs.roa (hash: uj3kwNGwI3ye+3/FlFrfR0c/PIhlj04gSoV4ikzeXw8=)
29: sJ8MWzOJrRSDCEy5539zFEW54Fg.roa (hash: SrkAclwJ6pGZe3QnLXmTkQWct0fK9CqayvHKB5l708k=)
30: tIoiJqn_Zw4bkifEyWUceFVpDXE.roa (hash: +3bSV4N3AQ7/Wh4s2xd9vZBKmvEVCXYmroX/aifAP+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:ec:ab:87:11:64:9e:85:b3:a2:c8:d7:dd:b9:59:13:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Dec 5 04:00:55 2025 GMT
Not After : Dec 6 04:00:55 2025 GMT
Subject: CN=f8ce6735b7439b71eed185393e654628011fa818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:08:a4:4b:ed:05:68:4d:a8:2c:19:95:fe:ef:
5d:62:8c:4d:8d:8d:95:e9:54:a8:eb:b4:46:88:11:
e7:68:2f:0d:19:e4:cf:d8:f8:2d:ca:28:40:c9:62:
bb:e6:6d:59:95:22:00:6f:32:57:1e:1e:36:b7:43:
fa:8a:10:be:15:cd:7a:27:3d:52:fd:d1:44:21:44:
57:65:dc:8c:e8:d8:9e:18:b9:70:ef:0f:54:1f:4b:
2d:4f:b7:6c:8f:73:0f:30:7d:46:7e:e5:79:00:29:
81:d3:b8:f2:7d:5d:14:78:f3:65:54:81:1b:ac:af:
ad:7d:27:79:77:49:2d:ab:0d:8f:cf:36:7c:2b:20:
5c:d8:7f:91:f2:d0:09:68:a1:cb:f6:e3:47:e2:4e:
80:f5:1d:aa:5d:63:a8:6e:84:63:67:5e:5d:04:d5:
eb:7d:7c:97:b4:cc:32:14:ea:fd:99:87:cd:99:5d:
c3:ae:a6:79:0c:d7:98:c8:90:d2:f7:13:cb:f9:24:
ad:6e:66:80:79:58:7a:24:f8:34:c3:85:65:eb:ba:
64:ff:ab:bb:ff:ef:1f:bb:1f:3c:fe:08:8c:b6:07:
90:7c:1b:88:de:aa:01:9f:05:c1:cb:82:dd:0f:90:
32:74:5c:28:24:16:c6:6a:14:01:93:5c:6a:5e:1e:
d9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CE:67:35:B7:43:9B:71:EE:D1:85:39:3E:65:46:28:01:1F:A8:18
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:dc:dc:25:e6:30:d1:06:a2:48:cd:5f:38:52:61:ba:a7:e8:
a1:ed:77:45:4a:82:a7:1e:4a:e8:b1:f5:30:99:f8:58:69:a8:
a4:e6:25:72:6e:8c:e3:0b:7f:bc:1c:f7:25:e3:b6:d4:5f:ae:
16:9d:fa:30:0b:47:7b:0e:cc:e8:27:de:92:8d:9e:13:dc:db:
02:b5:c6:2b:41:4a:fb:11:a1:45:bd:ae:fe:7b:50:d0:e8:20:
a5:9c:6f:38:87:a3:f2:7d:2f:46:8e:a1:47:34:b0:ac:c6:ef:
0d:03:da:b7:b0:6f:89:4f:e4:d5:27:f6:39:88:81:90:00:d5:
99:42:fd:ef:74:34:f2:f5:c9:54:a2:41:73:9f:7a:d0:3f:38:
2a:c5:d6:9f:eb:d4:4a:23:31:b9:04:32:a8:a2:8a:c4:03:30:
4b:8e:f8:1b:14:9a:f0:a1:34:db:27:51:90:e3:cd:a2:f1:0f:
69:e6:67:99:3c:73:e8:a8:49:df:0e:fc:0a:a4:ba:05:05:76:
04:81:e5:7c:c0:23:47:9d:03:e8:33:7f:b6:3f:76:7b:57:d1:
a6:7c:bc:2a:70:80:1d:80:8e:bf:3f:1c:cf:41:b4:f4:c0:92:
a6:29:54:1c:54:be:62:d6:e1:bf:d5:0a:13:c3:98:52:23:4a:
89:f3:66:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 09:30:50 2025 by rpki-client