This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft File: 8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft (raw, json) Hash identifier: K61wOn2GmqNylOnedXbT8tJC+LAZeDmqxBZXEcKk/Gs= Subject key identifier: 20:34:DB:9C:41:58:44:B4:1C:96:7C:3A:09:79:97:DC:EA:86:1A:92 Authority key identifier: F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6 Certificate issuer: /CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6 Certificate serial: 019B35D76AECD1E6F0C82012490902015647 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft Manifest number: 10BD Signing time: Fri 19 Dec 2025 09:01:08 +0000 Manifest this update: Fri 19 Dec 2025 09:01:08 +0000 Manifest next update: Sat 20 Dec 2025 09:01:08 +0000 Files and hashes: 1: 0ljyTvQ_d8HoyClfNuv9eO2Q5yA.roa (hash: jw6rtBAELKvNPa562NE5b8O7bUsTaNwLwsoxjTQsK7A=) 2: 8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl (hash: kdby09EzRVoMJhs+3l6furPJ/Z/fc/cyNvFm3RjjHIU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:6a:ec:d1:e6:f0:c8:20:12:49:09:02:01:56:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6 Validity Not Before: Dec 19 09:01:08 2025 GMT Not After : Dec 20 09:01:08 2025 GMT Subject: CN=2034db9c415844b41c967c3a097997dcea861a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:59:78:fb:a3:97:0a:ed:48:02:e3:eb:c7:0d: ce:01:41:a6:d4:a9:70:03:38:45:5d:67:08:87:e1: a8:33:3f:7a:00:b8:ff:07:5e:5b:9f:0c:ed:45:ef: 1e:3c:ae:d5:20:e0:19:a8:cc:5a:76:f1:9a:7e:cd: ae:73:e5:3a:cd:2f:cc:fa:31:c3:34:cd:82:34:5d: 8a:29:72:d3:9b:9e:72:bc:4d:b8:28:ad:bd:90:ff: 5b:f7:49:31:2d:60:36:c9:28:ea:c0:4a:0f:90:80: 4f:16:9d:c2:46:73:22:2f:04:e7:28:d3:bf:17:d7: 05:30:13:22:08:ca:6b:57:0e:76:0d:f7:da:a7:49: 33:bb:b7:b8:1b:8c:ab:18:e0:6e:b8:f3:61:a4:e4: 03:05:cd:46:c0:c2:2b:53:f3:5d:22:b1:53:19:49: e7:a5:94:53:71:03:1f:d0:f6:84:21:f2:24:b1:cc: 1a:f1:af:aa:0f:74:70:3c:1b:76:6a:1f:10:cc:be: 2c:66:81:ca:f1:5e:14:df:5e:65:fa:6b:c2:67:0c: d5:72:f6:95:fc:03:f4:0b:df:82:c3:a1:a4:85:b9: 9e:93:7a:fd:53:6b:21:e9:a4:a4:38:ed:71:be:de: 8d:75:a3:16:56:b2:ad:5b:e4:05:bc:bb:74:1a:3b: 96:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:34:DB:9C:41:58:44:B4:1C:96:7C:3A:09:79:97:DC:EA:86:1A:92 X509v3 Authority Key Identifier: keyid:F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:9b:6d:d9:25:6d:e3:be:84:53:93:c9:8f:4a:d6:03:81:04: 39:54:87:b2:3e:9b:df:b5:4e:22:a1:00:7f:51:40:17:5c:e1: c3:1a:9b:cb:97:23:a8:bd:60:ab:75:ee:af:9a:dd:c8:b8:49: 2f:18:05:6f:98:9f:0c:89:de:d7:05:c2:50:d6:a9:be:9b:51: 1e:7d:2c:52:89:fa:b0:79:16:a8:14:e1:42:d0:13:94:ce:ab: 00:92:3b:d1:b5:70:3a:64:8a:7a:68:76:f7:29:0a:a2:a2:80: 18:1e:19:06:60:d7:19:96:35:86:08:3e:2a:7a:66:28:35:bd: ff:b2:06:17:72:bc:a5:b3:af:dd:33:2c:8f:07:ce:90:e2:04: 84:30:2b:10:b3:62:64:54:36:77:1a:7e:d4:6b:0f:c5:10:08: 34:8e:71:12:23:0d:d4:52:99:de:24:24:27:37:ed:ad:80:6f: d4:e6:a8:5f:ae:fd:93:87:0f:cb:8a:76:5b:6e:16:fb:47:15: ba:a9:7c:b1:e8:9e:a2:cd:bd:e7:25:63:00:7a:b3:e5:08:25: 16:75:5e:b3:03:dd:a9:05:d6:27:b2:cb:a6:3e:cb:ff:c9:17: ea:c5:2e:ef:65:22:0e:28:8b:3d:38:41:a6:26:79:3a:ea:ae: 3a:dd:29:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs112rs0ebwyCASSQkCAVZHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNDY2NmZiYjY0YzRkYThjYjg5OTJiZjBkYTk3YjhiMDEx N2VhYzYwHhcNMjUxMjE5MDkwMTA4WhcNMjUxMjIwMDkwMTA4WjAzMTEwLwYDVQQD EygyMDM0ZGI5YzQxNTg0NGI0MWM5NjdjM2EwOTc5OTdkY2VhODYxYTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1l4+6OXCu1IAuPrxw3OAUGm1Klw AzhFXWcIh+GoMz96ALj/B15bnwztRe8ePK7VIOAZqMxadvGafs2uc+U6zS/M+jHD NM2CNF2KKXLTm55yvE24KK29kP9b90kxLWA2ySjqwEoPkIBPFp3CRnMiLwTnKNO/ F9cFMBMiCMprVw52Dffap0kzu7e4G4yrGOBuuPNhpOQDBc1GwMIrU/NdIrFTGUnn pZRTcQMf0PaEIfIkscwa8a+qD3RwPBt2ah8QzL4sZoHK8V4U315l+mvCZwzVcvaV /AP0C9+Cw6Gkhbmek3r9U2sh6aSkOO1xvt6NdaMWVrKtW+QFvLt0GjuWaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCA025xBWES0HJZ8Ogl5l9zqhhqSMB8GA1UdIwQY MBaAFPFGZvu2TE2oy4mSvw2pe4sBF+rGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFVabS03Wk1UYWpMaVpLX0RhbDdpd0VYNnNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82YThhZDUtMjFkZi00ZGJiLTlhYmQt ZDQ0NjQ1NWRjNWJhLzEvOFVabS03Wk1UYWpMaVpLX0RhbDdpd0VYNnNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82YThhZDUtMjFkZi00ZGJiLTlhYmQtZDQ0NjQ1NWRjNWJh LzEvOFVabS03Wk1UYWpMaVpLX0RhbDdpd0VYNnNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYptt2SVt 476EU5PJj0rWA4EEOVSHsj6b37VOIqEAf1FAF1zhwxqby5cjqL1gq3Xur5rdyLhJ LxgFb5ifDIne1wXCUNapvptRHn0sUon6sHkWqBThQtATlM6rAJI70bVwOmSKemh2 9ykKoqKAGB4ZBmDXGZY1hgg+KnpmKDW9/7IGF3K8pbOv3TMsjwfOkOIEhDArELNi ZFQ2dxp+1GsPxRAINI5xEiMN1FKZ3iQkJzftrYBv1OaoX679k4cPy4p2W24W+0cV uql8seieos295yVjAHqz5QglFnVeswPdqQXWJ7LLpj7L/8kX6sUu72UiDiiLPThB piZ5OuquOt0pxA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:11:54 2025 by rpki-client