This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft File: J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft (raw, json) Hash identifier: b3ebXLZh6woGBUK6JeJ7N6HdKVewYkUVlUiEa1hMAJk= Subject key identifier: B9:74:CB:34:86:1D:6B:BA:9C:58:94:A3:B0:0B:1E:7F:72:66:8C:76 Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Certificate serial: 019B047E04807A06178FA5EA900A98C459DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft Manifest number: 0CCB Signing time: Tue 09 Dec 2025 19:02:06 +0000 Manifest this update: Tue 09 Dec 2025 19:02:06 +0000 Manifest next update: Wed 10 Dec 2025 19:02:06 +0000 Files and hashes: 1: 3N9aZ8zTSdZQ6ZvfIiyQMbKeNPE.roa (hash: VzMo5OEH6WAO4xNi9N0ubLSFEAUrDTWn6IFMnfmYKL4=) 2: 4Q0OMlDeRzDSOzAw8LxkvQaDF7E.roa (hash: U7GjqbV2dOQXajvpmYRAMgZ0b0HIaEV5bZmn2apsyWk=) 3: BhUouDec_qIuL9ykpJ14UlZA-QM.roa (hash: 8yFW2hqVAr5xf6x8b1tEfXwA8rQJPiCbK72VY0EAl8E=) 4: GIpX64dJ6HZBn7pYOJNMhZ7z2Wk.roa (hash: PjZLxgP6snPECokGBM26BsZLn+FL8XwBYAL6/1qDHeI=) 5: IZdk74hSrnh74ZynVfW7EO53suI.roa (hash: 5Lf7wqH7b2uz1cEp7iE8xbZTzdwcRRNn/RAvAhVoRXw=) 6: J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl (hash: yj+fAkqkN8xhnnAUc9PrLGfVtf+6R+d+ufNzSGRf9Ao=) 7: RXaHa7HQXaOor19kJAnyP5kxxU0.roa (hash: 1Jda3owwY018JsVQMIcmSKXtEtxhwgl86WeJsxIjRh4=) 8: dGW1FU7WEhTZHuwZkZW6nRc7oyw.roa (hash: b3jMX68O+rKcLGgMZNQr4ecBhH3oDiVmJuYCs2ww/m4=) 9: oQEA3DnBm500dJBYY9a5KgZXmQQ.roa (hash: TzJe0tF7p07+4ocoJWUSx+pyInMnz9/Rqe/WjvQu6+Q=) 10: sI3owle2SK5hDtoXgnXqvnb2Lig.roa (hash: h/A8g/6518BnZmSBn+Xa4u50/hcauxf7ASYtMTXTA3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:7e:04:80:7a:06:17:8f:a5:ea:90:0a:98:c4:59:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Validity Not Before: Dec 9 19:02:06 2025 GMT Not After : Dec 10 19:02:06 2025 GMT Subject: CN=b974cb34861d6bba9c5894a3b00b1e7f72668c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:ca:db:7a:53:15:9c:ec:76:94:61:38:5b: 2e:f9:5e:55:79:3c:4e:9f:f5:f2:f9:3e:24:2d:0e: 59:78:3a:a9:b9:b4:8f:93:e0:a2:53:a2:b2:d2:cf: 48:76:d7:e1:db:fc:d0:d8:f1:83:e1:88:30:c3:5d: 9a:19:0a:88:a4:d7:23:f5:89:27:69:06:6e:21:48: db:fd:bf:7b:06:ea:02:80:88:71:41:1e:86:e2:e5: d4:be:9e:53:dc:06:41:68:91:03:df:6f:50:19:eb: 74:c9:f4:d0:3d:b8:4f:c8:cf:bf:13:8d:17:a7:56: 21:e5:1f:cb:cf:80:5a:ec:60:ee:a5:83:24:d2:f7: 22:a8:c9:0f:a7:6b:ad:a7:cb:44:98:65:5c:38:79: 64:79:50:81:f7:5c:81:2a:00:7c:10:ac:1d:ba:6f: 5a:06:c4:90:c7:b8:9e:42:c1:01:89:a1:36:cd:d6: 27:89:46:13:e2:92:32:39:7f:ee:e4:22:c8:39:06: a2:c4:d2:fa:a8:ad:d5:2e:cc:c8:e3:d4:84:2c:bb: b0:a6:24:d3:fd:7f:c6:31:0c:4d:d2:34:2c:64:e6: a9:fe:0f:b0:75:4a:29:ae:e1:a8:56:9a:7e:1f:c1: 00:14:fd:46:68:bb:6f:fa:08:16:dd:12:63:07:59: e1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:74:CB:34:86:1D:6B:BA:9C:58:94:A3:B0:0B:1E:7F:72:66:8C:76 X509v3 Authority Key Identifier: keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:05:d7:83:3f:33:ca:a3:58:85:e1:aa:e3:52:4c:03:2d:f1: f3:36:27:a9:8b:4d:5b:68:d4:42:cc:a3:69:92:4a:4c:3c:65: d9:87:4c:cb:c7:86:cb:2a:40:a4:84:05:4d:b2:74:67:87:7d: bf:cc:50:31:53:ab:83:bf:b0:51:d7:ee:f3:67:69:9d:83:9e: e6:9f:57:9e:88:31:85:f8:81:2a:80:a2:0f:69:76:85:9b:19: af:ac:ba:c7:ec:a0:08:08:ee:9c:45:9c:75:8f:b5:c4:2b:af: 43:b0:d9:51:2e:bf:c5:d4:8a:29:28:57:04:1a:c6:e2:c5:0b: c5:d9:2a:f4:f9:8f:ed:03:04:72:b2:22:f4:35:97:b3:59:f2: 96:95:ef:25:1d:a1:c9:e5:74:7b:01:12:9a:c6:61:4c:b1:9c: 66:a2:53:d3:f8:46:a2:19:20:ef:19:bb:98:bd:af:33:be:30: d5:23:a2:fc:83:7b:73:55:07:bd:b6:04:f6:fa:42:69:0a:62: 81:5b:ba:c1:1b:7b:23:ef:34:2b:0a:ee:ab:b6:5a:5e:65:6f: 5a:02:6c:5c:5b:2b:ca:77:75:69:3e:2b:95:0f:ac:de:ca:95: 47:82:8e:39:59:ae:43:cb:1b:0b:ac:12:68:98:b2:db:25:d0: a8:5c:94:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsEfgSAegYXj6XqkAqYxFndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5 ZmMyYzkwHhcNMjUxMjA5MTkwMjA2WhcNMjUxMjEwMTkwMjA2WjAzMTEwLwYDVQQD EyhiOTc0Y2IzNDg2MWQ2YmJhOWM1ODk0YTNiMDBiMWU3ZjcyNjY4Yzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthHK23pTFZzsdpRhOFsu+V5VeTxO n/Xy+T4kLQ5ZeDqpubSPk+CiU6Ky0s9Idtfh2/zQ2PGD4Ygww12aGQqIpNcj9Ykn aQZuIUjb/b97BuoCgIhxQR6G4uXUvp5T3AZBaJED329QGet0yfTQPbhPyM+/E40X p1Yh5R/Lz4Ba7GDupYMk0vciqMkPp2utp8tEmGVcOHlkeVCB91yBKgB8EKwdum9a BsSQx7ieQsEBiaE2zdYniUYT4pIyOX/u5CLIOQaixNL6qK3VLszI49SELLuwpiTT /X/GMQxN0jQsZOap/g+wdUopruGoVpp+H8EAFP1GaLtv+ggW3RJjB1nhDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLl0yzSGHWu6nFiUo7ALHn9yZox2MB8GA1UdIwQY MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct MWM2ZWU0NGUxMWFkLzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQXXgz8z yqNYheGq41JMAy3x8zYnqYtNW2jUQsyjaZJKTDxl2YdMy8eGyypApIQFTbJ0Z4d9 v8xQMVOrg7+wUdfu82dpnYOe5p9XnogxhfiBKoCiD2l2hZsZr6y6x+ygCAjunEWc dY+1xCuvQ7DZUS6/xdSKKShXBBrG4sULxdkq9PmP7QMEcrIi9DWXs1nylpXvJR2h yeV0ewESmsZhTLGcZqJT0/hGohkg7xm7mL2vM74w1SOi/IN7c1UHvbYE9vpCaQpi gVu6wRt7I+80Kwruq7ZaXmVvWgJsXFsrynd1aT4rlQ+s3sqVR4KOOVmuQ8sbC6wS aJiy2yXQqFyUOQ== -----END CERTIFICATE-----Generated at Wed Dec 10 01:25:14 2025 by rpki-client