This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft File: 8YUnDoMZPTJp983p2ggIse_1Uq4.mft (raw, json) Hash identifier: VxGNdJi57EGGRjW5GNNyRKpegYDLpOo2UkOm9gsIpao= Subject key identifier: 6A:00:9E:68:B2:29:8B:5E:9E:FE:E7:65:87:80:6A:28:C8:00:5E:E9 Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE Certificate issuer: /CN=f185270e83193d3269f7cde9da0808b1eff552ae Certificate serial: 019B112586B03B55167F7E806E846B04B790 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft Manifest number: 06F0 Signing time: Fri 12 Dec 2025 06:00:30 +0000 Manifest this update: Fri 12 Dec 2025 06:00:30 +0000 Manifest next update: Sat 13 Dec 2025 06:00:30 +0000 Files and hashes: 1: 8YUnDoMZPTJp983p2ggIse_1Uq4.crl (hash: mu+C8JJ6y5b1dJOy5UuGVvemVitgelQp7XPya0T6/Cg=) 2: yze2rcJ637RL8GZo48PGt4d8nY8.roa (hash: H8OFKVxMCjsZaNXr8DPY/I8jq0ZMaggP4bkjrXxk6OY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:25:86:b0:3b:55:16:7f:7e:80:6e:84:6b:04:b7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae Validity Not Before: Dec 12 06:00:30 2025 GMT Not After : Dec 13 06:00:30 2025 GMT Subject: CN=6a009e68b2298b5e9efee76587806a28c8005ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:41:e8:e5:7b:08:ca:98:3d:6b:d3:10:4c:1e: b5:48:78:67:74:79:7e:b6:e2:12:13:8b:f6:e5:f4: 06:38:06:fa:f5:5c:92:16:ca:8d:08:8c:b2:ee:cf: 2c:95:46:57:6d:31:d4:4f:10:38:24:30:48:eb:e1: bf:b6:36:0b:7c:45:b2:de:7e:a3:b7:55:ff:22:fe: 73:3a:99:2d:fe:d1:20:cd:3a:71:58:1a:8e:4c:da: 84:21:ee:28:08:d5:29:cf:6b:0e:f0:7e:c1:f5:0d: f1:1c:2a:24:9b:d7:d6:51:59:98:5a:8c:6d:13:ca: f3:10:ac:63:2b:04:92:97:89:d8:b7:3e:e6:a3:22: b3:4e:9e:a9:d8:3b:ca:0c:81:cc:2d:bd:6b:8f:bc: 2c:df:23:20:d1:e9:b3:73:18:51:8f:f2:e9:69:53: 1a:5f:b2:bf:36:1c:f6:ea:de:20:a0:29:50:70:eb: 9b:93:51:a2:13:23:9b:0b:23:5a:47:a0:ad:a0:cb: 90:a4:35:af:f7:5d:8f:05:48:c0:00:08:dc:0d:75: a7:c6:72:ba:a7:db:d9:80:e6:d3:aa:dc:50:16:49: 1a:48:27:93:c9:2b:bc:a6:53:80:f3:f2:c9:f1:f4: 73:55:d1:fa:17:9f:a9:fe:1b:1b:ea:1a:14:a2:fd: 33:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:00:9E:68:B2:29:8B:5E:9E:FE:E7:65:87:80:6A:28:C8:00:5E:E9 X509v3 Authority Key Identifier: keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:25:fc:a8:1b:ab:cb:d0:26:c5:3b:9e:ec:e4:49:dc:de:d0: 84:c2:a6:d7:1e:26:67:3e:64:97:3d:1a:cf:5e:bd:70:02:cb: 14:35:50:d3:93:66:fb:31:42:94:0f:2e:56:0f:1e:d2:98:ce: 75:78:91:3b:de:4d:8c:a3:fc:b6:92:37:d3:a8:b0:9d:aa:05: fa:9c:5e:13:e2:1d:7a:51:4a:80:f1:3c:6b:22:d4:3f:ae:17: e3:56:13:26:9a:1b:e4:42:af:55:c4:5e:4c:0a:fb:1e:71:8c: b1:46:fd:38:d7:a2:a5:b0:f5:70:e7:27:5d:d5:be:cd:93:c5: 00:32:3b:54:42:00:9f:5d:88:b8:eb:4d:a3:f3:2a:a8:da:8d: 3d:30:e2:22:59:63:8e:2b:a5:25:67:a3:2d:8a:a7:c7:bf:08: 6d:43:6f:22:a3:b2:e9:e6:6c:c4:18:45:e3:49:1b:e8:d3:36: ac:83:49:4d:23:24:88:e5:cc:fc:93:0b:29:a2:1d:60:5a:99: 63:06:17:10:63:71:ce:8d:87:fd:17:bd:87:af:bf:de:e8:67: 12:64:ca:7d:b9:ae:55:71:47:70:ac:16:4a:11:9d:45:ab:cd: c0:14:14:b3:93:74:08:09:5b:dd:5b:be:0c:f8:ae:c3:8c:a8: d7:1d:fb:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJYawO1UWf36AboRrBLeQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxODUyNzBlODMxOTNkMzI2OWY3Y2RlOWRhMDgwOGIxZWZm NTUyYWUwHhcNMjUxMjEyMDYwMDMwWhcNMjUxMjEzMDYwMDMwWjAzMTEwLwYDVQQD Eyg2YTAwOWU2OGIyMjk4YjVlOWVmZWU3NjU4NzgwNmEyOGM4MDA1ZWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEHo5XsIypg9a9MQTB61SHhndHl+ tuISE4v25fQGOAb69VySFsqNCIyy7s8slUZXbTHUTxA4JDBI6+G/tjYLfEWy3n6j t1X/Iv5zOpkt/tEgzTpxWBqOTNqEIe4oCNUpz2sO8H7B9Q3xHCokm9fWUVmYWoxt E8rzEKxjKwSSl4nYtz7moyKzTp6p2DvKDIHMLb1rj7ws3yMg0emzcxhRj/LpaVMa X7K/Nhz26t4goClQcOubk1GiEyObCyNaR6CtoMuQpDWv912PBUjAAAjcDXWnxnK6 p9vZgObTqtxQFkkaSCeTySu8plOA8/LJ8fRzVdH6F5+p/hsb6hoUov0zEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoAnmiyKYtenv7nZYeAaijIAF7pMB8GA1UdIwQY MBaAFPGFJw6DGT0yaffN6doICLHv9VKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgt ZmVmOTZlOTVhYmEwLzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgtZmVmOTZlOTVhYmEw LzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSX8qBur y9AmxTue7ORJ3N7QhMKm1x4mZz5klz0az169cALLFDVQ05Nm+zFClA8uVg8e0pjO dXiRO95NjKP8tpI306iwnaoF+pxeE+IdelFKgPE8ayLUP64X41YTJpob5EKvVcRe TAr7HnGMsUb9ONeipbD1cOcnXdW+zZPFADI7VEIAn12IuOtNo/MqqNqNPTDiIllj jiulJWejLYqnx78IbUNvIqOy6eZsxBhF40kb6NM2rINJTSMkiOXM/JMLKaIdYFqZ YwYXEGNxzo2H/Re9h6+/3uhnEmTKfbmuVXFHcKwWShGdRavNwBQUs5N0CAlb3Vu+ DPiuw4yo1x37UQ== -----END CERTIFICATE-----Generated at Fri Dec 12 14:21:21 2025 by rpki-client