This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: swe2Sd6R84PsMQUO8VucwZj0m/RsiNJtRnqPlQCTAdY= Subject key identifier: 73:54:99:F7:36:AE:7B:4C:E3:3F:CF:FE:8D:DC:D7:55:FF:45:4A:BC Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019B0E24C5D692DC4C673B491F2EA9FB5AF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 1779 Signing time: Thu 11 Dec 2025 16:00:49 +0000 Manifest this update: Thu 11 Dec 2025 16:00:49 +0000 Manifest next update: Fri 12 Dec 2025 16:00:49 +0000 Files and hashes: 1: 0vpioq7e7IBvU0f7txi-wExHAPw.roa (hash: lCvUWIuH8RdERCkztaN1NhfYOchJDmj9ywnhD1WG0qs=) 2: 1-t-clxlx4vHi76xBwGIh0Y5orug.roa (hash: WGphFqEzeHYQfivrVaHRtOvOzzhN/PDKxrZlm3FuIDA=) 3: 4CCEdgNV-fGWUC_aGHxQwbUsOKQ.roa (hash: zTRmkFZkHzwf+QYURy5/v5Sjyovq0HLSmOwtNQ48L/c=) 4: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: 5vTSRzgtqCvig59dCmUXi5b871Y+KlSgZtHWOvoBT2w=) 5: 9oOMh0CjqydkdSKEbK66nXXsu4E.roa (hash: qQJNJWud5A2R6q9LElC5WdsYynVdzga12kQWDH61mWo=) 6: AoQYABlbiRY1s0Gu3McHV58zrpk.roa (hash: 9zDAXKdytFg/3YwoUton7cniFW2Ja9ArE5tJ2skkn+c=) 7: OdGF_e17lYBOCmXmsk6hkXdf7b4.roa (hash: mFKHbPekFFY75D3Eu+1fU9mzEnOZ9+rJaeHup24zW3Q=) 8: PFyByii-LGzRSy90jiJ5mw1207A.roa (hash: gIS/3e5ejAqBGpUPti4f7RxoNdrem0KAE6vwjMubh3s=) 9: Qkq_75MjyviWe2NqgT_-Mwn9gnM.roa (hash: wJb9fi2vDIIR6voDYxFFRDUWuFkEQa98zP1PFmkzpXs=) 10: ScwFXX2rYjT7naQciVMaotJ-UfM.roa (hash: X8Vp96ZEvVObF+OkcOx9P04g9HBNU6my6Pc/b9LR72Y=) 11: rh7_88ku0NVEacOTg4kYRNyhUIs.roa (hash: Uz863y1lKUf+O+OGV8gNQDxIpi4RBI83I9R9FXt5Xp4=) 12: u37q8oxj6d2YnoBLY1VE3CqS2g0.roa (hash: QV9HVDjMgl4TBfOFPjFKF+CTfrUEm6XmvkI/fobJGaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:24:c5:d6:92:dc:4c:67:3b:49:1f:2e:a9:fb:5a:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Dec 11 16:00:49 2025 GMT Not After : Dec 12 16:00:49 2025 GMT Subject: CN=735499f736ae7b4ce33fcffe8ddcd755ff454abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:83:06:ac:78:ed:82:41:1c:09:76:ee:b7:dc: 55:a5:2b:6c:4e:2c:6f:d6:0a:cf:35:f3:e4:f0:e0: ad:a4:4b:df:06:99:71:da:5b:36:8d:c5:a1:5a:d8: 76:1b:6e:c3:e3:1a:76:18:44:ab:7b:74:25:c0:0d: b4:14:eb:30:7b:80:de:b9:53:42:71:2c:27:06:58: 3f:5f:42:95:c1:e1:c8:4d:43:79:b1:c0:68:b9:05: 68:3b:b4:a0:ce:0b:39:67:69:1a:4c:73:90:e2:14: 4a:79:2e:96:51:51:cd:2b:38:d0:b4:c4:d4:c4:8b: 7b:1b:5e:e1:b0:af:31:6c:5b:7b:cf:99:4c:a9:90: 60:ea:93:66:f5:c1:c8:89:cc:26:56:f0:1a:6c:f2: b0:43:17:c3:ea:0f:2f:6d:2c:87:4a:09:8a:13:d9: 49:01:bd:ca:45:94:99:3f:d4:6f:a5:db:ef:bf:36: c9:88:7e:22:e0:e1:9b:89:85:4a:81:9e:52:44:09: 1b:cf:6e:18:9d:bb:67:7f:e5:a9:3a:f2:40:a4:64: 37:80:1a:71:d6:1c:12:21:1b:89:6a:fd:57:55:93: 9e:35:24:74:4c:c1:9d:7f:d7:8f:bf:ef:d0:a2:39: d7:48:a5:67:55:dc:70:0f:4c:2e:6d:33:f2:4a:59: 2d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:54:99:F7:36:AE:7B:4C:E3:3F:CF:FE:8D:DC:D7:55:FF:45:4A:BC X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2c:1c:e8:b5:c7:7d:26:cb:af:05:0f:d7:19:88:8c:f6:19: 3a:62:0c:1c:22:ca:96:d8:be:37:98:81:20:dc:7a:96:41:cc: e6:44:c0:e8:d4:c8:96:6b:c0:4d:31:58:25:fa:d1:51:e9:77: e9:19:79:f5:d9:9a:21:f1:1d:ab:d5:c7:35:10:df:05:f1:47: c6:16:5c:4b:f3:67:a1:6b:64:42:ff:72:9f:f0:f9:12:76:53: b8:4b:5c:68:62:26:1b:d0:30:28:b1:4d:de:44:c9:66:2a:58: c1:74:c8:ca:27:43:86:c4:64:84:c4:fb:c4:00:dc:6a:6e:13: 54:0a:f3:df:7e:09:84:fc:21:14:d1:99:9b:a1:50:8a:37:58: 61:38:e0:d0:0b:51:83:a5:c4:d4:ef:d7:48:51:4f:79:5d:d2: 13:1e:6a:90:f4:2c:98:79:39:bd:4c:a1:eb:f9:9e:82:05:da: 98:47:85:81:0f:59:8b:7f:7d:b7:fa:33:0f:78:08:d9:d8:ac: 96:7f:fc:fc:99:9a:48:11:3f:e0:cb:8e:eb:6b:1c:f5:74:f9: 39:e4:7f:f8:42:89:41:f2:25:d8:32:bf:ab:58:e5:0f:29:93: 99:bf:92:be:a0:3e:99:d8:2a:a8:8e:ef:38:1d:b4:09:c8:95: 5b:e8:ab:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJMXWktxMZztJHy6p+1ryMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjUxMjExMTYwMDQ5WhcNMjUxMjEyMTYwMDQ5WjAzMTEwLwYDVQQD Eyg3MzU0OTlmNzM2YWU3YjRjZTMzZmNmZmU4ZGRjZDc1NWZmNDU0YWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oMGrHjtgkEcCXbut9xVpStsTixv 1grPNfPk8OCtpEvfBplx2ls2jcWhWth2G27D4xp2GESre3QlwA20FOswe4DeuVNC cSwnBlg/X0KVweHITUN5scBouQVoO7Sgzgs5Z2kaTHOQ4hRKeS6WUVHNKzjQtMTU xIt7G17hsK8xbFt7z5lMqZBg6pNm9cHIicwmVvAabPKwQxfD6g8vbSyHSgmKE9lJ Ab3KRZSZP9RvpdvvvzbJiH4i4OGbiYVKgZ5SRAkbz24Ynbtnf+WpOvJApGQ3gBpx 1hwSIRuJav1XVZOeNSR0TMGdf9ePv+/QojnXSKVnVdxwD0wubTPySlktdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNUmfc2rntM4z/P/o3c11X/RUq8MB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATSwc6LXH fSbLrwUP1xmIjPYZOmIMHCLKlti+N5iBINx6lkHM5kTA6NTIlmvATTFYJfrRUel3 6Rl59dmaIfEdq9XHNRDfBfFHxhZcS/NnoWtkQv9yn/D5EnZTuEtcaGImG9AwKLFN 3kTJZipYwXTIyidDhsRkhMT7xADcam4TVArz334JhPwhFNGZm6FQijdYYTjg0AtR g6XE1O/XSFFPeV3SEx5qkPQsmHk5vUyh6/meggXamEeFgQ9Zi399t/ozD3gI2dis ln/8/JmaSBE/4MuO62sc9XT5OeR/+EKJQfIl2DK/q1jlDymTmb+SvqA+mdgqqI7v OB20CciVW+irFQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:00:12 2025 by rpki-client