This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft File: a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json) Hash identifier: FD8rFXhlJTAJ106Epe4Wmk7YQ90KT1hyX6nj4A3wsqQ= Subject key identifier: 66:88:64:15:1E:D8:86:C1:4E:BB:89:44:F7:41:22:4B:6A:44:80:42 Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb Certificate serial: 019B221A16B5BB602C174406B85D713FFA88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft Manifest number: 1675 Signing time: Mon 15 Dec 2025 13:01:33 +0000 Manifest this update: Mon 15 Dec 2025 13:01:33 +0000 Manifest next update: Tue 16 Dec 2025 13:01:33 +0000 Files and hashes: 1: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: bm7503znqNLmbjCosbGsNdhc/xtawWGjXMrJGcz0Ik4=) 2: cHx9sYkuiAFAjOWcBOb5TDvNls8.roa (hash: ShwHq89MA2jwo160RZTKkKFkHAW0OiQLJH4eT6G+deQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:1a:16:b5:bb:60:2c:17:44:06:b8:5d:71:3f:fa:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb Validity Not Before: Dec 15 13:01:33 2025 GMT Not After : Dec 16 13:01:33 2025 GMT Subject: CN=668864151ed886c14ebb8944f741224b6a448042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7e:5f:82:be:29:a5:be:2b:52:3d:d7:7e:fa: 4c:4e:22:0a:fc:06:f1:ae:8c:a7:ce:d0:60:08:81: ef:9d:eb:81:f2:97:dc:a7:1c:a2:32:fe:78:7e:4c: cd:53:c9:01:d0:8d:eb:f8:c3:81:6b:f6:ac:a0:ce: f5:b9:08:6c:c9:52:80:62:d4:1c:40:e4:98:03:f0: 23:b3:a7:93:d3:71:a5:cc:ec:ae:0a:e7:16:65:82: c5:6f:5e:73:f5:fd:cf:0a:d3:1c:cf:a5:5a:a1:85: 38:21:d9:1e:d1:ba:99:ab:a2:39:72:46:5e:8f:27: d8:fa:54:27:b6:bb:72:e8:b2:7f:32:98:94:41:8b: bb:11:2d:41:3d:92:ae:50:53:81:e6:82:5b:63:e5: cb:12:f1:93:f1:25:2d:ee:60:68:13:0f:42:71:04: 46:e0:0b:c7:15:c5:aa:d3:ac:95:1a:0f:05:b0:7c: dc:27:58:be:e9:78:55:ef:bd:5e:a8:1f:82:ef:84: 51:44:09:a6:d5:c5:30:7b:55:67:7d:8b:28:40:2d: 39:51:78:b3:cc:cd:3f:f5:f9:b7:17:0b:4d:a1:eb: 83:29:61:6e:3a:d5:75:26:5e:73:fb:35:b4:f0:5e: 41:b6:65:a6:da:74:0c:d2:ca:6c:af:b4:89:b3:e1: c3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:88:64:15:1E:D8:86:C1:4E:BB:89:44:F7:41:22:4B:6A:44:80:42 X509v3 Authority Key Identifier: keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:7c:6d:4a:da:fc:e1:cd:91:f3:e2:51:ae:29:6e:e0:5f:7f: b3:a1:13:d4:89:a0:33:cf:06:27:e1:58:df:67:cf:b3:8f:f1: d2:b8:44:a5:77:18:d1:db:3a:b6:66:cf:2b:95:8e:9b:2c:40: 1a:4f:c0:d7:c6:17:17:1e:5c:30:d2:d8:7c:23:9c:86:c0:6e: c4:43:f9:ca:e5:39:b0:6c:1e:8a:91:33:ad:15:eb:02:10:ac: b8:9f:08:62:68:00:60:74:45:01:f1:c7:59:a5:c9:e7:b9:db: 1c:c3:98:89:0d:88:0a:71:d2:f6:9a:f0:63:60:83:d1:24:63: 9d:d0:0b:98:62:29:e7:5d:68:82:fb:cb:f5:7a:fc:d2:fc:3e: 23:a4:4b:96:87:8b:f3:8c:27:a9:35:17:51:de:d6:4d:80:8b: e9:4f:4f:0d:d0:e6:aa:89:53:a5:47:25:cc:7d:6d:0d:bf:f8: db:21:ae:0c:83:7c:22:7b:0b:6e:cc:84:3f:18:d5:97:2c:88: e0:1d:59:8a:a3:b1:50:9c:f7:0d:e8:ee:35:79:95:49:51:f5: 5c:86:92:aa:92:31:61:de:d1:92:10:88:ed:52:b6:39:35:98: 7d:d3:fa:0a:97:38:37:3b:ad:e2:8a:21:2f:44:b5:a8:e7:e4: f8:dc:be:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGha1u2AsF0QGuF1xP/qIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiY2JkYjZmZDM5ZTc2ZjAwNDg0MDEyZTEzMTQ2YjIxODc1 NWMzZmIwHhcNMjUxMjE1MTMwMTMzWhcNMjUxMjE2MTMwMTMzWjAzMTEwLwYDVQQD Eyg2Njg4NjQxNTFlZDg4NmMxNGViYjg5NDRmNzQxMjI0YjZhNDQ4MDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp35fgr4ppb4rUj3XfvpMTiIK/Abx roynztBgCIHvneuB8pfcpxyiMv54fkzNU8kB0I3r+MOBa/asoM71uQhsyVKAYtQc QOSYA/Ajs6eT03GlzOyuCucWZYLFb15z9f3PCtMcz6VaoYU4Idke0bqZq6I5ckZe jyfY+lQntrty6LJ/MpiUQYu7ES1BPZKuUFOB5oJbY+XLEvGT8SUt7mBoEw9CcQRG 4AvHFcWq06yVGg8FsHzcJ1i+6XhV771eqB+C74RRRAmm1cUwe1VnfYsoQC05UXiz zM0/9fm3FwtNoeuDKWFuOtV1Jl5z+zW08F5BtmWm2nQM0spsr7SJs+HDTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaIZBUe2IbBTruJRPdBIktqRIBCMB8GA1UdIwQY MBaAFGvL22/TnnbwBIQBLhMUayGHVcP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83NGQ4NzYtMDVhOC00YjEwLTkwZTIt YzlkYTAzMGFmMzI2LzEvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83NGQ4NzYtMDVhOC00YjEwLTkwZTItYzlkYTAzMGFmMzI2 LzEvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnxtStr8 4c2R8+JRrilu4F9/s6ET1ImgM88GJ+FY32fPs4/x0rhEpXcY0ds6tmbPK5WOmyxA Gk/A18YXFx5cMNLYfCOchsBuxEP5yuU5sGweipEzrRXrAhCsuJ8IYmgAYHRFAfHH WaXJ57nbHMOYiQ2ICnHS9prwY2CD0SRjndALmGIp511ogvvL9Xr80vw+I6RLloeL 84wnqTUXUd7WTYCL6U9PDdDmqolTpUclzH1tDb/42yGuDIN8InsLbsyEPxjVlyyI 4B1ZiqOxUJz3DejuNXmVSVH1XIaSqpIxYd7RkhCI7VK2OTWYfdP6Cpc4Nzut4ooh L0S1qOfk+Ny+Qg== -----END CERTIFICATE-----Generated at Mon Dec 15 19:55:19 2025 by rpki-client