This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json) Hash identifier: Zzv+0BPd8UsmEHeW+bA3Zlw/LJMF+FUkrtO1i7V/+jw= Subject key identifier: 4A:3E:17:4F:6A:9F:9E:19:50:B7:FC:CB:D5:AA:2F:A5:B7:EC:25:94 Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 019B24E339CEE520A2710B4A2ABD54B35AAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft Manifest number: 1758 Signing time: Tue 16 Dec 2025 02:00:29 +0000 Manifest this update: Tue 16 Dec 2025 02:00:29 +0000 Manifest next update: Wed 17 Dec 2025 02:00:29 +0000 Files and hashes: 1: 12ToQcSPt7mcdwlwu8cks0_4omc.roa (hash: Iyr2cE2tf2K+xaBK2dhfD2MWZhPJHAOvhdyF3JqR+/g=) 2: 2sbBAO7ATxHzEchFAB6gArPRZZY.roa (hash: UDJGL7lU9D2x+NFmBhQK2JHOpnmQvd/reJ4wMgvIZq8=) 3: 5ZYhCNxqOm04hmY0BhngKxN9rig.roa (hash: 83J35QD4/t+gUfggZnoS3qCNRY62Cfjrx/Jm442KIdY=) 4: DNFKKqPzY2tTxyq4ZF-e6ESwWBk.roa (hash: ONyXaG/qy9WX6Bit7PbMeuasymNM8i3asJe1STaYw+o=) 5: HQby7lGCxVhcsYrFBxtLvu1Nq1s.roa (hash: OEoyOXMuUI9gzJHQlRaFw5QR3hyZ9zizJ0Zhg109soQ=) 6: KEB7URRNcLIkdHFl8_NaQFzoCUc.roa (hash: 8o0J9qbfKon/Y8q8sQm0uMymQ1kVnwb8u5ia9INGr/U=) 7: RVuh9Ovnia6HGIxuY5C4mqQkVzw.roa (hash: 7MdQXOdkGadK2Vo4n1LYddNyvg9R887clmJN5QnKDO0=) 8: _4iJCnTkrZTLi3Znw6No51nUp0U.roa (hash: q5ypixYuURsWaauidvKopOxQLyMvMh9Ff8agaEGE8Z8=) 9: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: Y0oL41UEuWz4J+nZUW2KL637iE+ZzhHTUy1yM515DQQ=) 10: egyYxAR3bwmsGgeknwOtvs63Vmw.roa (hash: XurIkmwZSfSrHBi1j2SOabRmxdimDBrxAVpSXYwSmK8=) 11: gCwZCj5y4eEHhiE3OdNG143EtPw.roa (hash: bJxdVgp0WUK1yUG+3MFHdMNTBJUCc3SJjDGJmr3bN5s=) 12: icM0VycNV4mt0pTY2afMrLkCQiI.roa (hash: xbGX02cLUgEU+Jz8UpLSB42bp7e4VbRHxCBGvzWAyic=) 13: kWxL8-0FaQ5asnDLfivzWKH4-z8.roa (hash: aTbkIB4IPS1IGAIXN2uxEpuYorOcI3bZmMM6X6TsyjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:39:ce:e5:20:a2:71:0b:4a:2a:bd:54:b3:5a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Dec 16 02:00:29 2025 GMT Not After : Dec 17 02:00:29 2025 GMT Subject: CN=4a3e174f6a9f9e1950b7fccbd5aa2fa5b7ec2594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f9:f6:03:9f:89:22:c3:79:a1:96:97:8d:e6: b9:f4:ae:fe:17:93:df:90:48:27:45:5c:5a:e8:30: 7b:1a:29:d0:4b:2e:4e:f8:4c:13:b8:1c:d7:0c:60: 22:16:51:72:a6:05:73:23:3b:2b:61:c7:3c:6e:f2: 42:5d:3a:38:e4:71:bd:86:b5:4f:25:b4:7a:90:32: d7:97:f4:34:d5:9b:a0:17:9c:42:39:0d:d2:20:c7: 01:f0:fe:a5:73:5b:38:ce:17:90:25:11:0b:fe:43: 57:7e:98:66:a4:e9:0d:8d:2a:e0:ca:45:f6:03:70: d0:2b:32:50:41:eb:3a:94:5b:c0:b8:79:e3:66:9c: 63:e6:c7:f3:61:21:a5:c9:60:ba:bb:9f:40:f2:e7: 6f:02:68:c0:6f:cd:06:d1:a1:3c:d9:1b:7c:8c:3d: 98:4d:3e:09:17:58:95:3c:c0:14:fd:59:2f:2b:eb: 1e:fa:b8:a8:11:87:52:14:21:77:cc:ae:6f:af:1b: f8:98:29:15:eb:3b:14:2b:ee:59:4b:f2:4e:dd:e2: 48:02:66:f7:39:de:ac:d1:5e:e0:dd:ca:80:3f:5a: 76:32:76:02:f1:21:e8:3b:8e:c5:a3:d7:8c:01:48: ce:8a:33:3f:a1:ea:2c:e7:53:a7:19:54:d0:30:6d: 86:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3E:17:4F:6A:9F:9E:19:50:B7:FC:CB:D5:AA:2F:A5:B7:EC:25:94 X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a4:20:8d:12:8f:56:8b:a6:fd:0f:c5:b0:13:2e:4c:9b:c9: ad:7c:00:32:cf:71:db:af:ef:70:b1:7c:a8:b9:f2:55:05:32: 4e:a5:15:1f:bf:c0:72:64:76:e5:92:b3:8c:b1:3e:25:5b:53: 69:0d:83:71:36:7b:dc:7d:87:9b:8c:38:91:79:a7:fc:b6:29: 86:1c:ec:95:20:d2:2a:ee:49:8a:80:00:3d:1b:06:c4:b1:34: 9d:8f:60:1a:e4:92:0b:27:85:9b:a9:4a:b5:aa:d8:a1:d1:2f: 60:f2:97:11:ca:21:66:23:5b:fb:6d:87:1f:1c:b4:20:cd:bb: 0b:3d:40:32:dd:77:b5:6b:55:1b:ae:da:01:48:69:b1:0d:5c: e4:d6:cd:a2:7e:da:31:f3:56:31:52:f6:fb:cf:7c:79:0a:07: 36:3e:66:8f:e9:a6:d4:b4:c3:aa:b5:2b:d8:a3:65:04:fc:93: 9a:57:9d:d0:b3:ba:c8:6d:e4:81:aa:47:5f:70:28:22:3b:a4: 7a:0d:ae:f3:60:26:fb:9a:6a:c1:71:68:b3:a3:d4:5d:fd:70: 10:16:58:6f:6d:c2:41:dd:88:09:0c:90:b9:42:43:11:26:db: e5:be:92:3e:c0:74:06:2e:48:97:4b:bb:45:79:42:52:fe:27: cd:99:fb:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk4znO5SCicQtKKr1Us1qvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjUxMjE2MDIwMDI5WhcNMjUxMjE3MDIwMDI5WjAzMTEwLwYDVQQD Eyg0YTNlMTc0ZjZhOWY5ZTE5NTBiN2ZjY2JkNWFhMmZhNWI3ZWMyNTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Pn2A5+JIsN5oZaXjea59K7+F5Pf kEgnRVxa6DB7GinQSy5O+EwTuBzXDGAiFlFypgVzIzsrYcc8bvJCXTo45HG9hrVP JbR6kDLXl/Q01ZugF5xCOQ3SIMcB8P6lc1s4zheQJREL/kNXfphmpOkNjSrgykX2 A3DQKzJQQes6lFvAuHnjZpxj5sfzYSGlyWC6u59A8udvAmjAb80G0aE82Rt8jD2Y TT4JF1iVPMAU/VkvK+se+rioEYdSFCF3zK5vrxv4mCkV6zsUK+5ZS/JO3eJIAmb3 Od6s0V7g3cqAP1p2MnYC8SHoO47Fo9eMAUjOijM/oeos51OnGVTQMG2G8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEo+F09qn54ZULf8y9WqL6W37CWUMB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6QgjRKP Voum/Q/FsBMuTJvJrXwAMs9x26/vcLF8qLnyVQUyTqUVH7/AcmR25ZKzjLE+JVtT aQ2DcTZ73H2Hm4w4kXmn/LYphhzslSDSKu5JioAAPRsGxLE0nY9gGuSSCyeFm6lK tarYodEvYPKXEcohZiNb+22HHxy0IM27Cz1AMt13tWtVG67aAUhpsQ1c5NbNon7a MfNWMVL2+898eQoHNj5mj+mm1LTDqrUr2KNlBPyTmled0LO6yG3kgapHX3AoIjuk eg2u82Am+5pqwXFos6PUXf1wEBZYb23CQd2ICQyQuUJDESbb5b6SPsB0Bi5Il0u7 RXlCUv4nzZn7fQ== -----END CERTIFICATE-----Generated at Tue Dec 16 06:27:52 2025 by rpki-client