This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: C+arXTqWlPezMtf/G52m6ScAcJHY2OlMvCFzfZe2YjE= Subject key identifier: 64:2B:A9:AB:82:7C:B8:1D:BD:EC:E4:8F:2B:88:C8:0B:7A:01:02:B8 Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 019B09DA750BDF25F1DA04CFF26CA29DBEF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 1772 Signing time: Wed 10 Dec 2025 20:01:10 +0000 Manifest this update: Wed 10 Dec 2025 20:01:10 +0000 Manifest next update: Thu 11 Dec 2025 20:01:10 +0000 Files and hashes: 1: 00x2a7vYcUP_RgzqZlJDShLq9Do.roa (hash: cq08qt5t6pt7+g4zB6xtHZuctjeJqy9pw/L/lk8TYFo=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: OMWfTgbQbFLv3nKbbP7yXqUKbs/LfjIQivElc9/Ti08=) 3: KVMzJG-tiBiXKGfDbX7s-fqSUcs.roa (hash: izdiO/l04uY0Tl9GP7xbaa4HsWMYkrOgbs0SiG0a1K8=) 4: OBC2jp5FIHT7G9c2m1xsJUD2ivs.roa (hash: DrwuyysosoB70lBjSllnHo3rVU0U0NusilzO8tRi9Q0=) 5: OxF-ngX6YGUArZrbAYmh9hpGzkU.roa (hash: zhEaR7GNPbf+2lOaH8uFUPJFKzbpuLS5x4CvU7dkxPs=) 6: Q2Pg2GNHELVKyFoNgxOuT8YFvLY.roa (hash: DsyRU7FSw+3XDKbBM9HrtgkzYSVPnqWwqknbD6CWVSU=) 7: RO-InVXPYoHaB1ZpM-19yr94dQs.roa (hash: 8Y6VcUcgO4alufdIJ4djN2KAnB4AyYetp1VZzDDuyNk=) 8: TbcAJ-7kgZbLEMeBArn-aI2s0Oc.roa (hash: ebCgIhbDpPxtlRtDjitUarjC0W1nxe0ujpocy11Koxs=) 9: _gM5SG_4QQqKocZtcQPCR80SAmI.roa (hash: ee8TJS3VrEj5YXrt15hISXpN3dVXM3P5ROyjlVEMHSs=) 10: fG6If6WZh4pXAVRu1gEQ7wbPbEs.roa (hash: OIBSpF8oXZotrR8RVX6KacBPnJZCoNiFLIZ7aWyayQU=) 11: gfQeyx6Q7sjS4Xpny9IUQ8tQxLY.roa (hash: zrq/geD7ajZHxMLm7OvFbnGGXeIS14GfMNfAscurlR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:da:75:0b:df:25:f1:da:04:cf:f2:6c:a2:9d:be:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Dec 10 20:01:10 2025 GMT Not After : Dec 11 20:01:10 2025 GMT Subject: CN=642ba9ab827cb81dbdece48f2b88c80b7a0102b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:01:14:dc:6d:d8:97:90:89:94:90:f6:0f:e6: ab:5a:96:25:19:62:c9:0a:7f:e8:64:85:67:7e:45: 2c:a8:70:27:d2:ac:b2:6a:e8:8f:fa:70:5b:e2:5a: e3:9f:64:eb:06:06:34:60:17:0b:a7:d9:44:5c:63: d4:73:b6:75:01:27:03:ee:b4:cc:0e:d5:41:2d:75: f0:d5:9e:ec:74:ea:4a:9a:f6:6f:ea:5f:a7:87:e4: 06:96:b4:03:a0:be:17:e8:fe:c7:f8:41:5d:76:0a: 04:64:9b:59:5c:bc:33:86:d2:c7:35:70:23:06:01: 7f:4b:07:4a:db:56:e8:f9:4a:5f:67:15:19:28:25: 40:85:f9:26:ce:c2:b5:aa:63:4f:da:8a:cb:a5:04: a7:f9:3d:3c:e2:3b:97:86:13:ce:f1:1b:a1:c5:d1: e6:35:48:9d:eb:76:d5:d3:51:55:67:f6:81:df:ca: 15:e2:3a:16:18:f8:a5:3d:fb:d6:7a:9b:61:e8:55: 62:a6:31:cf:2c:d6:a9:77:70:b4:c1:e2:d6:65:93: b5:1e:96:6d:d1:e9:60:79:10:bd:11:c3:86:ca:7f: 37:33:1e:a1:31:c8:73:7b:c8:5a:13:86:79:75:4d: 41:f4:c2:22:50:06:15:ed:cd:ca:1d:14:fc:d0:5a: 6d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2B:A9:AB:82:7C:B8:1D:BD:EC:E4:8F:2B:88:C8:0B:7A:01:02:B8 X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:70:9a:2c:63:b6:8e:e4:3e:89:a1:2a:a6:78:ca:e6:a5:55: f2:7a:4f:0f:60:6f:8b:39:6c:e5:6a:f3:01:54:ac:cc:24:6b: f8:ce:38:de:dd:f4:d0:ed:13:ed:3e:6a:1a:92:60:ea:b1:ec: e6:96:4e:3f:f0:72:83:85:7f:b2:6f:75:fa:28:4c:07:c6:19: 56:18:f0:73:4e:9c:5c:94:1b:54:1e:d5:a3:bc:fa:c7:73:20: c8:62:e1:f0:ab:95:28:b8:8b:ce:3d:12:38:67:7d:d8:e0:7a: 3b:a3:ac:a5:be:05:0c:d9:c6:4f:c9:75:23:98:1b:61:43:a2: 10:68:ef:28:44:2e:42:6f:9a:58:e7:40:ca:1b:79:e6:5f:21: 6e:83:e3:39:c8:10:c4:b3:f5:b1:c1:b5:d5:5c:b4:ad:df:66: 3a:df:f2:ff:16:a2:1f:f6:84:10:21:34:4f:d1:fc:6b:f3:e7: 1a:95:f4:bd:2d:a8:3d:46:78:f1:b3:23:8c:5c:35:31:ed:2a: 46:2f:18:36:78:ad:98:66:65:97:05:d8:5c:01:ad:31:ef:33: 1e:98:73:3d:e7:18:5e:a3:9c:a6:b4:3c:51:83:b9:b0:7d:7e: be:e0:08:49:07:25:c9:36:1b:c5:be:bc:82:d7:46:8c:ce:74: 09:8d:bb:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsJ2nUL3yXx2gTP8myinb73MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjUxMjEwMjAwMTEwWhcNMjUxMjExMjAwMTEwWjAzMTEwLwYDVQQD Eyg2NDJiYTlhYjgyN2NiODFkYmRlY2U0OGYyYjg4YzgwYjdhMDEwMmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQEU3G3Yl5CJlJD2D+arWpYlGWLJ Cn/oZIVnfkUsqHAn0qyyauiP+nBb4lrjn2TrBgY0YBcLp9lEXGPUc7Z1AScD7rTM DtVBLXXw1Z7sdOpKmvZv6l+nh+QGlrQDoL4X6P7H+EFddgoEZJtZXLwzhtLHNXAj BgF/SwdK21bo+UpfZxUZKCVAhfkmzsK1qmNP2orLpQSn+T084juXhhPO8RuhxdHm NUid63bV01FVZ/aB38oV4joWGPilPfvWepth6FVipjHPLNapd3C0weLWZZO1HpZt 0elgeRC9EcOGyn83Mx6hMchze8haE4Z5dU1B9MIiUAYV7c3KHRT80FptZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQrqauCfLgdvezkjyuIyAt6AQK4MB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXCaLGO2 juQ+iaEqpnjK5qVV8npPD2Bvizls5WrzAVSszCRr+M443t300O0T7T5qGpJg6rHs 5pZOP/Byg4V/sm91+ihMB8YZVhjwc06cXJQbVB7Vo7z6x3MgyGLh8KuVKLiLzj0S OGd92OB6O6Ospb4FDNnGT8l1I5gbYUOiEGjvKEQuQm+aWOdAyht55l8hboPjOcgQ xLP1scG11Vy0rd9mOt/y/xaiH/aEECE0T9H8a/PnGpX0vS2oPUZ48bMjjFw1Me0q Ri8YNnitmGZllwXYXAGtMe8zHphzPecYXqOcprQ8UYO5sH1+vuAISQclyTYbxb68 gtdGjM50CY27TQ== -----END CERTIFICATE-----Generated at Wed Dec 10 23:02:41 2025 by rpki-client