This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft File: 8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft (raw, json) Hash identifier: 3kIiwYpYTqWgcORJvdoqxZ9FXC3y93+3lbys+TD6b+4= Subject key identifier: 62:6A:3D:39:88:64:0F:46:85:15:D5:95:E9:62:F3:E8:E3:E7:45:F9 Authority key identifier: F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C Certificate issuer: /CN=f0a9005423147453909366c6b4d09c31958acc1c Certificate serial: 019B10EEE0836AF7E1CCBA19D38995F2AE7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft Manifest number: 010A Signing time: Fri 12 Dec 2025 05:00:48 +0000 Manifest this update: Fri 12 Dec 2025 05:00:48 +0000 Manifest next update: Sat 13 Dec 2025 05:00:48 +0000 Files and hashes: 1: 4qVlaSTsE1gXSumcFtIoCSI6_Ds.roa (hash: gxiJkMzAgslpclu4FVxFkwBMuCJhHIk77n6WLMjRt50=) 2: 8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl (hash: T8AxM37L3VATrb+LJovI/eqVhpTJvRVJ999VNfxvFtg=) 3: JPM4YH3p4W-kOC7R4fma0DgmIZQ.roa (hash: 1rs/yihW/LgAGtoac03H1xBXx8dUEUTLq50/L4CH5AA=) 4: kqgGhTxJAHOFMUNL3EFp83GA7Xo.roa (hash: YbWtoAqUQYcbJzxbPZ7TL2mv+/kqmj3HAGafEmcOApM=) 5: zWLkf9J7tc5E8tsLSE-YhUD6XZY.roa (hash: +Totm03QQJ2SJRLIDXG7rNkdSX+/Y9DffvcFrN9L3w4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ee:e0:83:6a:f7:e1:cc:ba:19:d3:89:95:f2:ae:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0a9005423147453909366c6b4d09c31958acc1c Validity Not Before: Dec 12 05:00:48 2025 GMT Not After : Dec 13 05:00:48 2025 GMT Subject: CN=626a3d3988640f468515d595e962f3e8e3e745f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:97:8d:46:ef:f4:2d:70:73:a1:73:82:12:a2: be:e6:50:ec:ba:b9:6f:c6:a7:6d:d8:32:b6:ec:4c: 3f:b5:f7:48:df:07:1c:b8:05:07:b5:48:d9:f4:04: 08:4d:78:c2:6b:05:e4:2c:1e:71:e6:d9:dd:ab:37: 92:b6:5e:cb:39:a5:14:56:9e:f2:c1:24:1a:58:59: 7b:08:0b:1e:90:60:8d:73:d3:2b:25:21:b3:1d:dd: 00:40:db:0f:1a:96:d8:9e:94:6a:f8:3c:fd:03:ca: 24:86:ad:17:87:32:e7:d4:34:cf:ad:35:f5:9b:0d: 84:62:22:38:f6:d7:1c:4a:b0:b8:97:96:a1:f4:d1: 6c:95:51:3d:ad:82:09:37:7e:48:f4:71:20:26:31: bd:9a:96:f7:13:94:a4:66:e5:cd:09:64:d4:c8:1d: 8d:7e:a5:f2:0e:50:fc:47:b4:35:60:26:a6:73:22: 89:f0:14:f9:e8:92:84:fd:68:fc:eb:39:8e:7d:a3: a0:1a:65:e4:7f:8b:09:17:fe:e1:84:55:f6:18:4c: 0a:90:a4:e6:b7:16:e0:65:ec:b6:39:b7:83:cb:6b: 53:b1:a4:05:18:1a:2e:ea:dc:7b:5a:7a:98:cc:05: df:fc:87:6c:78:63:bc:01:a5:38:83:60:d1:3c:1b: 02:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6A:3D:39:88:64:0F:46:85:15:D5:95:E9:62:F3:E8:E3:E7:45:F9 X509v3 Authority Key Identifier: keyid:F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:0d:bd:54:1e:12:1f:b7:56:d4:01:fa:5a:a2:eb:83:ba:b8: 42:0b:18:e2:ee:31:1a:07:6a:56:e8:ea:b1:69:8b:ed:b6:89: 1b:93:75:cf:f3:33:92:8c:16:9c:f5:ff:22:05:9b:d1:54:ef: 80:4e:45:96:ec:42:cb:f2:9c:d1:43:92:9c:c2:ce:a8:46:13: 48:c5:19:fd:42:51:e4:17:97:77:3d:82:de:3b:3e:94:71:0f: fc:e4:78:26:df:f5:e3:ba:59:f3:0c:d6:79:8a:c7:3f:32:15: 2f:f8:78:ff:92:64:42:c5:75:97:e5:c9:3d:be:77:ef:b2:05: e9:89:31:0e:94:cb:fa:e6:2b:38:e1:0c:1b:15:a5:38:29:68: 1c:de:c1:1b:5a:3b:b8:2f:8a:e9:d4:ae:07:76:d4:77:34:57: d5:96:53:ed:dd:a6:c3:cf:fe:fc:26:80:75:9a:5e:13:a9:ad: 31:d5:b0:a5:91:4d:61:4a:ce:e5:e8:77:9b:df:e9:ef:19:3f: 43:86:e2:53:4e:42:c3:62:e3:60:f5:72:a5:47:9b:c8:77:e0: 71:33:2b:a9:13:09:98:9b:b9:59:8e:d7:e3:92:1e:59:d3:bd: 57:79:6f:8b:3d:9f:7f:f4:3f:9c:78:58:bd:ac:9f:ac:66:14: a5:f7:2f:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ7uCDavfhzLoZ04mV8q5/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYTkwMDU0MjMxNDc0NTM5MDkzNjZjNmI0ZDA5YzMxOTU4 YWNjMWMwHhcNMjUxMjEyMDUwMDQ4WhcNMjUxMjEzMDUwMDQ4WjAzMTEwLwYDVQQD Eyg2MjZhM2QzOTg4NjQwZjQ2ODUxNWQ1OTVlOTYyZjNlOGUzZTc0NWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZeNRu/0LXBzoXOCEqK+5lDsurlv xqdt2DK27Ew/tfdI3wccuAUHtUjZ9AQITXjCawXkLB5x5tndqzeStl7LOaUUVp7y wSQaWFl7CAsekGCNc9MrJSGzHd0AQNsPGpbYnpRq+Dz9A8okhq0XhzLn1DTPrTX1 mw2EYiI49tccSrC4l5ah9NFslVE9rYIJN35I9HEgJjG9mpb3E5SkZuXNCWTUyB2N fqXyDlD8R7Q1YCamcyKJ8BT56JKE/Wj86zmOfaOgGmXkf4sJF/7hhFX2GEwKkKTm txbgZey2ObeDy2tTsaQFGBou6tx7WnqYzAXf/IdseGO8AaU4g2DRPBsC3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJqPTmIZA9GhRXVleli8+jj50X5MB8GA1UdIwQY MBaAFPCpAFQjFHRTkJNmxrTQnDGViswcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEtrQVZDTVVkRk9RazJiR3ROQ2NNWldLekJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xNTdhZjYtY2NlMi00ZTZkLWJjMjMt MzBkNzlmOWFhODc3LzEvOEtrQVZDTVVkRk9RazJiR3ROQ2NNWldLekJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8xNTdhZjYtY2NlMi00ZTZkLWJjMjMtMzBkNzlmOWFhODc3 LzEvOEtrQVZDTVVkRk9RazJiR3ROQ2NNWldLekJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfA29VB4S H7dW1AH6WqLrg7q4QgsY4u4xGgdqVujqsWmL7baJG5N1z/MzkowWnPX/IgWb0VTv gE5FluxCy/Kc0UOSnMLOqEYTSMUZ/UJR5BeXdz2C3js+lHEP/OR4Jt/147pZ8wzW eYrHPzIVL/h4/5JkQsV1l+XJPb5377IF6YkxDpTL+uYrOOEMGxWlOCloHN7BG1o7 uC+K6dSuB3bUdzRX1ZZT7d2mw8/+/CaAdZpeE6mtMdWwpZFNYUrO5eh3m9/p7xk/ Q4biU05Cw2LjYPVypUebyHfgcTMrqRMJmJu5WY7X45IeWdO9V3lviz2ff/Q/nHhY vayfrGYUpfcv8A== -----END CERTIFICATE-----Generated at Fri Dec 12 08:02:09 2025 by rpki-client