This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json) Hash identifier: 4dWkAL65jxppmjKX8ZiRuJ/sxFsBAGHOBEudJwZGIsA= Subject key identifier: 2A:6C:BD:F4:22:D5:D3:1A:92:58:53:6A:32:76:85:85:26:5A:60:98 Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51 Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051 Certificate serial: 019B35A02CE7DB43BB0F8F012500AA94347A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft Manifest number: 17A6 Signing time: Fri 19 Dec 2025 08:00:48 +0000 Manifest this update: Fri 19 Dec 2025 08:00:48 +0000 Manifest next update: Sat 20 Dec 2025 08:00:48 +0000 Files and hashes: 1: 19QpkXgghLM3Nv0nEMVJTVhhYlk.roa (hash: J5AzJxFSrkUz6NEqgZpKHFp1Qkuuq+hf2j4tyd26uK8=) 2: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: keyd04QZMzcAoKDpz6G2AnY/Z/RipThPzaNWdSQZyVo=) 3: aUt9STDYB4WpJzoIeOhkBXlmRGY.roa (hash: OBmceRN0cnIIMX2WS5mLBG1wMtaz4OUFUqNkNJhbrA8=) 4: c9sXvnnFKQwKh05j0TaYAQugLQM.roa (hash: eyB+ysjYhGow5lnf5FUGFEiyTh1wZN2qzaaHi/6zhTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:2c:e7:db:43:bb:0f:8f:01:25:00:aa:94:34:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051 Validity Not Before: Dec 19 08:00:48 2025 GMT Not After : Dec 20 08:00:48 2025 GMT Subject: CN=2a6cbdf422d5d31a9258536a32768585265a6098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d8:a9:39:00:a8:77:0a:7e:b3:f8:5f:a5:7e: 4d:43:9c:c6:16:21:62:8a:bd:3f:cd:e4:64:3c:58: de:ca:21:12:82:98:bc:31:6a:bd:f0:86:81:3f:7c: 83:01:06:50:ae:84:5b:4d:b2:ae:48:a3:1f:2a:b5: 2f:b5:5c:f2:cb:58:08:35:7d:49:5c:1c:4f:a3:b9: 7d:ee:1e:0b:e8:4e:c5:81:d6:19:07:00:8e:79:f0: 51:e4:78:7a:a0:21:6d:0e:cd:11:48:ba:9d:14:46: 1d:0f:70:9e:23:08:77:3b:bc:3d:db:30:58:9a:45: 41:09:2b:05:1a:50:73:05:0d:a6:38:f2:4a:4a:29: a6:4f:fc:aa:e9:0d:ee:67:d4:0a:5a:2c:06:dd:34: 77:1c:f0:50:4b:95:8d:01:df:6e:d5:fc:fe:ad:71: f5:e9:c7:51:82:f0:d5:da:fb:12:e0:0b:0a:40:8a: 08:1f:c1:6d:38:0b:4c:d9:5a:2f:d0:17:96:a2:e7: 61:21:e4:f0:dc:39:f2:a8:ad:d9:d0:f4:f3:06:de: 08:0a:a8:29:72:8a:b3:e3:af:06:43:f0:21:1b:c5: 89:02:65:04:56:34:2f:b8:b7:81:fa:2b:ee:e4:af: 06:81:00:84:3b:1b:d7:f9:21:6f:b5:66:90:f8:87: f5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6C:BD:F4:22:D5:D3:1A:92:58:53:6A:32:76:85:85:26:5A:60:98 X509v3 Authority Key Identifier: keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:61:e8:fd:b4:6e:ef:6f:25:7c:fb:fd:0b:db:83:5f:2b:d5: 49:8c:76:a1:f0:da:41:86:58:a1:96:45:09:ba:b4:81:2c:80: 89:47:01:27:aa:61:97:a4:78:e1:a3:e3:e3:51:3d:f9:6a:ac: e9:cb:d3:f5:f5:ca:77:2c:d7:0f:fc:00:04:8c:ff:d3:98:0e: 94:d6:3c:a5:f7:38:aa:1b:3f:5b:ff:59:0a:e1:d7:1a:4f:47: ab:ab:fb:45:ce:61:ff:f3:99:92:ce:82:6e:19:ab:69:02:d6: e1:11:c2:09:98:65:68:bc:6c:e8:e7:19:8f:97:dd:3c:54:5c: 81:4c:bd:4b:ea:95:81:44:96:ce:e0:9a:f6:c5:ef:0f:e0:5a: 90:af:7c:a4:cf:c0:73:2a:90:9b:a0:13:0c:25:bf:84:4a:be: 8e:29:b5:bf:d3:ea:c3:d1:24:be:21:3e:e0:18:06:77:b5:54: 30:2c:53:47:b4:e1:ab:a6:6f:9a:ee:ac:ba:85:04:ac:72:b0: c3:bc:4b:a4:96:99:d9:6a:32:0e:5a:c6:f4:3a:5c:e6:2d:ba: 5c:17:d1:e1:ae:58:6c:48:22:66:93:57:8b:32:ad:14:3f:3f: 3b:c5:d5:a9:c9:06:fe:d5:e5:3f:ac:0a:14:19:23:81:aa:e5: c1:c0:4f:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oCzn20O7D48BJQCqlDR6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYzMzZTQzZWY1NjUyN2ExNjlkNmFjNmQ3ZTYyYzYzZDE5 NzMwNTEwHhcNMjUxMjE5MDgwMDQ4WhcNMjUxMjIwMDgwMDQ4WjAzMTEwLwYDVQQD EygyYTZjYmRmNDIyZDVkMzFhOTI1ODUzNmEzMjc2ODU4NTI2NWE2MDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dipOQCodwp+s/hfpX5NQ5zGFiFi ir0/zeRkPFjeyiESgpi8MWq98IaBP3yDAQZQroRbTbKuSKMfKrUvtVzyy1gINX1J XBxPo7l97h4L6E7FgdYZBwCOefBR5Hh6oCFtDs0RSLqdFEYdD3CeIwh3O7w92zBY mkVBCSsFGlBzBQ2mOPJKSimmT/yq6Q3uZ9QKWiwG3TR3HPBQS5WNAd9u1fz+rXH1 6cdRgvDV2vsS4AsKQIoIH8FtOAtM2Vov0BeWoudhIeTw3DnyqK3Z0PTzBt4ICqgp coqz468GQ/AhG8WJAmUEVjQvuLeB+ivu5K8GgQCEOxvX+SFvtWaQ+If17wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpsvfQi1dMaklhTajJ2hYUmWmCYMB8GA1UdIwQY MBaAFAPDPkPvVlJ6Fp1qxtfmLGPRlzBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUt YTNhM2ViODc5ZjJiLzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUtYTNhM2ViODc5ZjJi LzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGHo/bRu 728lfPv9C9uDXyvVSYx2ofDaQYZYoZZFCbq0gSyAiUcBJ6phl6R44aPj41E9+Wqs 6cvT9fXKdyzXD/wABIz/05gOlNY8pfc4qhs/W/9ZCuHXGk9Hq6v7Rc5h//OZks6C bhmraQLW4RHCCZhlaLxs6OcZj5fdPFRcgUy9S+qVgUSWzuCa9sXvD+BakK98pM/A cyqQm6ATDCW/hEq+jim1v9Pqw9EkviE+4BgGd7VUMCxTR7Thq6Zvmu6suoUErHKw w7xLpJaZ2WoyDlrG9Dpc5i26XBfR4a5YbEgiZpNXizKtFD8/O8XVqckG/tXlP6wK FBkjgarlwcBPGQ== -----END CERTIFICATE-----Generated at Fri Dec 19 15:57:48 2025 by rpki-client