This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft File: 8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft (raw, json) Hash identifier: SygBFzzGTiiV2CqKarurmMrpxCLkb/KzUeAxkJzLsUw= Subject key identifier: E1:A1:2A:3F:3B:8C:AE:83:AE:50:85:E7:F6:79:AA:E4:3C:3E:F6:F3 Authority key identifier: F2:BB:7E:B9:7C:81:30:F8:87:DB:E6:96:B5:79:66:2C:F9:AA:06:A6 Certificate issuer: /CN=f2bb7eb97c8130f887dbe696b579662cf9aa06a6 Certificate serial: 019B59E44C9472DC498305B758AFE971C80B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rt-uXyBMPiH2-aWtXlmLPmqBqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft Manifest number: 12 Signing time: Fri 26 Dec 2025 09:01:32 +0000 Manifest this update: Fri 26 Dec 2025 09:01:32 +0000 Manifest next update: Sat 27 Dec 2025 09:01:32 +0000 Files and hashes: 1: 8rt-uXyBMPiH2-aWtXlmLPmqBqY.crl (hash: f6TfsXzdAAq+taY8PA+gyNQZoneAz9DyPhxuy0yPzng=) 2: XnLaG9PYNz8rUVpjon2kQr4cuFs.asa (hash: JI7fzzmhznUk8hukgTd4y7R4XLhGL1pr/tYt5yPOjXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft rsync://rpki.ripe.net/repository/DEFAULT/8rt-uXyBMPiH2-aWtXlmLPmqBqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:4c:94:72:dc:49:83:05:b7:58:af:e9:71:c8:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2bb7eb97c8130f887dbe696b579662cf9aa06a6 Validity Not Before: Dec 26 09:01:32 2025 GMT Not After : Dec 27 09:01:32 2025 GMT Subject: CN=e1a12a3f3b8cae83ae5085e7f679aae43c3ef6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:63:54:5b:c3:8c:62:70:96:2f:e7:98:2e:d8: f5:6a:d9:ee:26:54:00:14:5d:e8:37:6c:55:4e:a1: 72:8f:22:91:46:3a:8b:d1:db:e7:72:2e:12:49:2a: 07:58:fa:72:ff:43:26:af:f9:06:99:76:72:50:a0: a4:a5:46:28:3f:45:38:fe:6f:37:3c:5a:35:a0:d0: cd:c8:ea:8e:2e:5e:b4:16:b0:83:67:6b:3c:20:b8: 66:f3:f0:ba:07:49:78:1c:65:fd:f8:96:b8:b5:22: a3:25:84:74:ea:58:ba:a7:13:39:8b:93:b2:a1:b6: 2a:35:23:a3:46:12:5a:4f:9b:cb:1b:ac:5d:84:28: 3f:6e:c2:19:a8:f2:f2:6f:e4:51:75:60:5f:3f:5b: ee:a8:25:14:8f:c3:e3:6d:6d:9d:43:0b:4c:4f:b3: 60:6a:e9:e6:dd:42:c6:d0:c8:d2:02:2a:f7:3b:b7: a4:5a:5a:18:53:df:a7:df:98:70:13:68:1a:16:fc: e4:7e:7a:3a:c3:c9:84:00:46:70:45:fb:c6:05:f3: 43:8c:af:e8:9f:bd:c9:c0:18:5c:06:96:46:d5:7c: c0:9a:04:d1:aa:68:b8:64:4c:a3:4f:5e:27:ed:36: 45:4a:b0:e9:04:5f:c1:e8:2e:7e:20:0a:f3:d3:8e: 64:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A1:2A:3F:3B:8C:AE:83:AE:50:85:E7:F6:79:AA:E4:3C:3E:F6:F3 X509v3 Authority Key Identifier: keyid:F2:BB:7E:B9:7C:81:30:F8:87:DB:E6:96:B5:79:66:2C:F9:AA:06:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rt-uXyBMPiH2-aWtXlmLPmqBqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:14:ee:9a:65:30:ae:b7:a4:1d:72:eb:01:ac:67:1f:c5:d0: b9:42:29:81:87:47:47:d0:8d:8e:d6:53:bd:01:05:a7:d4:84: d7:45:45:a6:4c:8b:be:26:ee:9e:f9:54:4f:4d:ee:bf:24:c9: 2e:6f:32:dc:86:b9:96:8b:ec:98:85:54:a0:be:2b:f5:54:ba: c6:90:a8:7f:2e:f3:e9:ec:c5:91:f2:0d:6a:24:4d:b6:ef:67: f8:9a:4c:89:f6:26:ea:60:5a:4e:cc:28:9d:07:66:8f:15:a7: 64:6b:2c:91:11:48:8b:78:73:75:ac:63:65:14:f1:a5:2f:8f: d8:17:9d:d5:93:68:49:ea:c7:d8:f0:65:0a:3c:2d:52:8d:25: b2:cd:11:96:60:5f:07:ef:40:6e:d4:ef:85:a0:f7:5e:b5:16: b5:b2:a7:3b:81:1d:be:ed:0d:fe:fd:4b:7f:33:16:78:f1:53: 42:2f:b8:ff:f5:fe:06:aa:a1:b8:73:4f:6c:c2:19:25:c9:d5: 19:25:ce:89:83:f5:8b:b1:ed:3d:e9:a3:f0:53:63:62:3a:8e: e7:af:08:19:88:93:8d:a8:ee:08:c8:5e:8e:88:9c:6a:56:d7: 9b:3e:ce:e7:b6:26:5a:12:1e:0f:f7:52:3f:36:1c:88:14:21: 07:11:0a:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5EyUctxJgwW3WK/pccgLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYmI3ZWI5N2M4MTMwZjg4N2RiZTY5NmI1Nzk2NjJjZjlh YTA2YTYwHhcNMjUxMjI2MDkwMTMyWhcNMjUxMjI3MDkwMTMyWjAzMTEwLwYDVQQD EyhlMWExMmEzZjNiOGNhZTgzYWU1MDg1ZTdmNjc5YWFlNDNjM2VmNmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2NUW8OMYnCWL+eYLtj1atnuJlQA FF3oN2xVTqFyjyKRRjqL0dvnci4SSSoHWPpy/0Mmr/kGmXZyUKCkpUYoP0U4/m83 PFo1oNDNyOqOLl60FrCDZ2s8ILhm8/C6B0l4HGX9+Ja4tSKjJYR06li6pxM5i5Oy obYqNSOjRhJaT5vLG6xdhCg/bsIZqPLyb+RRdWBfP1vuqCUUj8PjbW2dQwtMT7Ng aunm3ULG0MjSAir3O7ekWloYU9+n35hwE2gaFvzkfno6w8mEAEZwRfvGBfNDjK/o n73JwBhcBpZG1XzAmgTRqmi4ZEyjT14n7TZFSrDpBF/B6C5+IArz045k7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGhKj87jK6DrlCF5/Z5quQ8PvbzMB8GA1UdIwQY MBaAFPK7frl8gTD4h9vmlrV5Ziz5qgamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHJ0LXVYeUJNUGlIMi1hV3RYbG1MUG1xQnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xNjZhZTQtMDljZS00NjYwLWI2OWIt ODM2YzkyOTYzMDM3LzEvOHJ0LXVYeUJNUGlIMi1hV3RYbG1MUG1xQnFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xNjZhZTQtMDljZS00NjYwLWI2OWItODM2YzkyOTYzMDM3 LzEvOHJ0LXVYeUJNUGlIMi1hV3RYbG1MUG1xQnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRTummUw rrekHXLrAaxnH8XQuUIpgYdHR9CNjtZTvQEFp9SE10VFpkyLvibunvlUT03uvyTJ Lm8y3Ia5lovsmIVUoL4r9VS6xpCofy7z6ezFkfINaiRNtu9n+JpMifYm6mBaTswo nQdmjxWnZGsskRFIi3hzdaxjZRTxpS+P2Bed1ZNoSerH2PBlCjwtUo0lss0RlmBf B+9AbtTvhaD3XrUWtbKnO4Edvu0N/v1LfzMWePFTQi+4//X+BqqhuHNPbMIZJcnV GSXOiYP1i7HtPemj8FNjYjqO568IGYiTjajuCMhejoicalbXmz7O57YmWhIeD/dS PzYciBQhBxEKZA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:13 2025 by rpki-client