This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft File: a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json) Hash identifier: LmCumF71sU6kVt3ZeeLlS9JSSjPUira+rvkZjl63bFM= Subject key identifier: 7D:8F:1B:69:43:A0:B7:7B:D0:6A:88:4F:C8:92:E7:A8:77:50:3F:48 Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb Certificate serial: 019B318CFAAD8F85C7072A6962077E405C68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft Manifest number: 167D Signing time: Thu 18 Dec 2025 13:01:21 +0000 Manifest this update: Thu 18 Dec 2025 13:01:21 +0000 Manifest next update: Fri 19 Dec 2025 13:01:21 +0000 Files and hashes: 1: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: G9JvLuWsxXcTqGo6EEVXfUrQ28CfO1/oPpw+I3MSNHk=) 2: cHx9sYkuiAFAjOWcBOb5TDvNls8.roa (hash: ShwHq89MA2jwo160RZTKkKFkHAW0OiQLJH4eT6G+deQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:fa:ad:8f:85:c7:07:2a:69:62:07:7e:40:5c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb Validity Not Before: Dec 18 13:01:21 2025 GMT Not After : Dec 19 13:01:21 2025 GMT Subject: CN=7d8f1b6943a0b77bd06a884fc892e7a877503f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:91:a9:4f:6f:cc:27:c8:a2:aa:d2:2c:21:b4: 32:cc:45:75:a8:73:64:a2:42:77:85:43:f3:42:48: 3c:6f:cd:8b:1a:3f:9b:81:87:f6:90:ef:81:6b:6d: b2:73:5c:df:90:a7:70:a7:15:42:73:bd:a4:31:04: 74:29:78:c3:94:96:99:6d:88:6e:16:54:d7:89:fa: a1:f1:fc:2f:fd:8b:8a:6e:bf:c4:1e:a7:97:e6:fc: 20:2b:91:d8:1d:7e:93:49:6a:fa:b3:57:b2:ee:e9: 9a:1d:38:18:5f:60:3b:1e:1f:83:91:53:76:54:57: 9a:d8:10:cf:f7:97:63:1e:2b:f3:18:f4:60:bf:54: db:34:41:44:0e:8b:52:24:f9:d8:c8:a3:52:f4:77: 85:26:2a:a0:06:48:44:41:77:54:40:e0:83:84:9a: 8a:37:5d:f7:f8:9f:11:d7:01:72:a1:27:cc:b9:4a: 64:84:70:79:8f:8a:68:2b:a4:a9:57:e7:23:7e:a9: e4:37:b0:53:94:74:fa:25:23:b4:cb:f8:c0:23:fd: a5:d2:ce:3a:1f:0a:fb:7b:ce:7d:ff:af:2a:28:1b: 12:8d:8a:d1:db:8f:a1:cd:29:d2:5e:7b:00:67:fd: 69:b1:49:19:a1:5c:bc:99:46:35:d3:56:ec:fe:bc: 19:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8F:1B:69:43:A0:B7:7B:D0:6A:88:4F:C8:92:E7:A8:77:50:3F:48 X509v3 Authority Key Identifier: keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:c6:d4:57:ca:e3:18:5c:24:77:40:c4:37:a5:a4:c1:e4:1d: 45:42:74:10:f1:37:94:07:00:ca:fd:da:51:d1:ce:18:f8:2c: d4:8e:7c:69:e3:f8:c1:65:c8:1b:f0:02:ae:a6:8a:e2:d7:a5: a8:d1:b4:bd:8a:c8:f6:c5:cb:52:a4:b4:6d:76:bf:e6:66:a0: 77:8d:0b:8a:b8:4c:c2:4b:e2:b1:36:f3:a8:67:a0:39:75:fc: 28:26:19:2f:f5:41:9e:de:e9:84:f0:01:fb:94:c2:54:57:bf: 3c:da:90:9f:d3:c1:17:4a:dc:1d:11:31:0f:81:dd:8a:9e:85: b6:99:8c:f2:b7:39:d4:eb:e1:21:9f:32:50:cb:df:7d:db:bd: 65:bf:a8:7e:c8:de:77:17:75:9e:c1:89:b3:da:8c:03:33:ce: 9c:ba:40:b2:65:ec:67:3a:d0:a6:7f:a1:45:cf:d1:b5:c3:13: 55:0a:7f:52:a2:32:67:9d:44:90:f8:fc:ed:3d:37:96:bf:e4: 8f:44:ce:1e:13:9d:56:ea:85:f4:9f:93:e5:dd:85:20:0a:e3: fc:33:0a:9d:e6:e7:84:49:41:58:0d:68:83:95:fc:ce:da:18: 3b:e7:b3:55:12:02:17:f3:56:1d:67:f2:96:32:c3:cc:90:e4: e8:0b:ad:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjPqtj4XHByppYgd+QFxoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiY2JkYjZmZDM5ZTc2ZjAwNDg0MDEyZTEzMTQ2YjIxODc1 NWMzZmIwHhcNMjUxMjE4MTMwMTIxWhcNMjUxMjE5MTMwMTIxWjAzMTEwLwYDVQQD Eyg3ZDhmMWI2OTQzYTBiNzdiZDA2YTg4NGZjODkyZTdhODc3NTAzZjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopGpT2/MJ8iiqtIsIbQyzEV1qHNk okJ3hUPzQkg8b82LGj+bgYf2kO+Ba22yc1zfkKdwpxVCc72kMQR0KXjDlJaZbYhu FlTXifqh8fwv/YuKbr/EHqeX5vwgK5HYHX6TSWr6s1ey7umaHTgYX2A7Hh+DkVN2 VFea2BDP95djHivzGPRgv1TbNEFEDotSJPnYyKNS9HeFJiqgBkhEQXdUQOCDhJqK N133+J8R1wFyoSfMuUpkhHB5j4poK6SpV+cjfqnkN7BTlHT6JSO0y/jAI/2l0s46 Hwr7e859/68qKBsSjYrR24+hzSnSXnsAZ/1psUkZoVy8mUY101bs/rwZ4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2PG2lDoLd70GqIT8iS56h3UD9IMB8GA1UdIwQY MBaAFGvL22/TnnbwBIQBLhMUayGHVcP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83NGQ4NzYtMDVhOC00YjEwLTkwZTIt YzlkYTAzMGFmMzI2LzEvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83NGQ4NzYtMDVhOC00YjEwLTkwZTItYzlkYTAzMGFmMzI2 LzEvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcbUV8rj GFwkd0DEN6WkweQdRUJ0EPE3lAcAyv3aUdHOGPgs1I58aeP4wWXIG/ACrqaK4tel qNG0vYrI9sXLUqS0bXa/5magd40LirhMwkvisTbzqGegOXX8KCYZL/VBnt7phPAB +5TCVFe/PNqQn9PBF0rcHRExD4Hdip6FtpmM8rc51OvhIZ8yUMvffdu9Zb+ofsje dxd1nsGJs9qMAzPOnLpAsmXsZzrQpn+hRc/RtcMTVQp/UqIyZ51EkPj87T03lr/k j0TOHhOdVuqF9J+T5d2FIArj/DMKnebnhElBWA1og5X8ztoYO+ezVRICF/NWHWfy ljLDzJDk6AutcQ== -----END CERTIFICATE-----Generated at Thu Dec 18 22:36:09 2025 by rpki-client