This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft File: 8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json) Hash identifier: i/Hs9iqQxwdXRREtxeu0Dn0Sh56CWbQ7/4vCiHswBEU= Subject key identifier: 8F:56:A4:B2:13:25:3D:24:44:E5:1D:DB:FF:47:88:BD:9D:9D:A1:8A Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 019B484B0752B608C5F2932A529D9F99999A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft Manifest number: 1744 Signing time: Mon 22 Dec 2025 23:00:34 +0000 Manifest this update: Mon 22 Dec 2025 23:00:34 +0000 Manifest next update: Tue 23 Dec 2025 23:00:34 +0000 Files and hashes: 1: 1-jVAuwl23O0NOs1-bK6yeNscKls.roa (hash: Uvxs615yu+WEWoRFMHOzorsioWG8H9U4nAbzC8roX+c=) 2: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: hoWsqt9SFEd/5Wkd1lAWhzdCpl+As4a5QCe8HMXb9Uc=) 3: Hl-LGslDYIhPlAkXHQHVv-RvB0w.roa (hash: O2E13yhrehXyHLH26oeDji6bWmBZEWAoPwvjmCy5UcQ=) 4: KeGOh-2gcusv29keikRHiEVKS4s.roa (hash: QrPYIqt13xYHx5UZtiEmzISVzXSCi7pxjFZqjccXxgI=) 5: PCT5Mgh2BfqwgaWaY02UF5LaLEs.roa (hash: XaBzd5GEKaiXR6sIMeiAlmk2HwlM0MvOxOjSag3QaY4=) 6: asCMHwRsfFwCKLi99bMyFo21krk.roa (hash: utShPNIu2DvLofXXWk5YOZ1a0OQi1aHbqM+BbMHKgoE=) 7: euk47PXoK5T6-tp0xVlaMzoR2zU.roa (hash: ELFMwMZ6NBCdcRDyZO9f72nzLI4WiJG57xVHtBVDcdU=) 8: fs_wxLugKiT_ydUrQOwGSh335rY.roa (hash: Q5dvvgKthsbcb9JzHMCTpI33x4XiWX2kEMaFSL83EKo=) 9: s-NcW6l6hXn5NOmuFXHN7mTAqcY.roa (hash: Ec6KZfarDMvuXKyozJ8ogUajfjL0rcRRpwLDmiHket8=) 10: xs5EMPFexMMDbg6ZozpAr6uWE70.roa (hash: qg/QvTawYThYqecFxjzESCzrgezKdtEVEc1jID0tLZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:07:52:b6:08:c5:f2:93:2a:52:9d:9f:99:99:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: Dec 22 23:00:34 2025 GMT Not After : Dec 23 23:00:34 2025 GMT Subject: CN=8f56a4b213253d2444e51ddbff4788bd9d9da18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9f:66:f9:26:64:71:ee:88:04:47:5b:a3:02: 67:aa:d5:05:96:ab:63:52:9b:96:64:4d:e1:a9:0a: 27:fa:e9:8d:64:d6:93:d0:36:99:89:dd:00:32:91: f3:56:ac:92:4e:8f:86:5e:c7:5b:61:57:c2:fb:ca: 7f:dd:bb:6e:27:c8:e0:1d:ed:44:ce:38:04:6f:3d: 8b:98:d0:ab:4f:c1:d5:2c:11:2c:78:5f:1a:70:e9: fd:09:3b:03:4c:fb:18:17:48:d3:6f:d2:73:bf:c7: e0:75:e8:1a:c6:68:2c:e5:56:2c:3b:6f:83:62:ac: 45:8e:7f:71:20:2b:26:fe:36:0c:2b:e0:4f:46:22: 15:1e:4e:55:93:27:e6:a8:2e:7d:6f:1c:33:c7:b8: cf:12:3e:ca:ab:5f:2f:f6:5a:93:e1:fb:63:c1:8a: af:79:05:7e:cb:64:7b:d3:ec:7c:6b:60:94:70:f2: 5c:1b:25:2b:cf:a0:c0:b0:30:29:40:5c:66:d9:fc: 18:01:75:4c:00:9f:0c:e9:be:b9:56:be:c0:e0:14: 71:d5:d1:a1:a7:b3:08:8c:65:58:95:63:71:3e:8f: 1f:da:e1:5f:7f:bc:0b:d5:64:81:c4:15:ab:31:56: 6b:1d:5a:dc:22:e1:1c:12:f8:19:0a:f9:17:97:5e: 8a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:56:A4:B2:13:25:3D:24:44:E5:1D:DB:FF:47:88:BD:9D:9D:A1:8A X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:0f:7f:b9:ee:82:de:51:a1:d2:21:7e:f0:6b:f7:cb:14:98: b6:94:2a:9b:cd:e0:e4:62:59:e3:29:87:ff:4a:50:48:d5:1b: 12:35:a6:74:98:06:96:59:ab:41:7d:4e:db:d0:39:24:92:b9: 6e:52:64:a1:f3:28:8e:f4:ea:73:bc:c4:7d:9e:f7:81:03:a1: 87:dc:2b:bc:b1:3d:78:ea:d2:47:54:92:2e:25:9c:4c:bc:a8: c6:06:70:8a:61:23:0b:b4:fd:7a:7a:d3:42:a6:97:18:7b:8b: bd:35:c7:03:eb:fa:58:ab:e5:b6:aa:e6:49:73:12:98:e6:8c: 6e:75:90:83:4d:9b:aa:08:53:36:88:ca:22:11:17:18:7b:c2: 5a:02:7e:cd:94:ff:4a:f5:01:30:9e:47:33:e6:a9:f5:2d:c0: 52:fc:17:a5:bb:30:1d:27:d6:25:30:77:52:22:2b:e5:5a:0b: 74:db:7d:22:56:6a:28:79:ae:41:fb:ca:ce:cf:2c:33:c7:a3: d0:04:17:60:0a:89:b7:77:69:69:e0:58:64:7c:8f:aa:2e:30: 70:2e:2e:9c:62:96:73:81:e0:76:84:4e:f0:75:c1:7d:9d:53: 7f:31:01:89:e6:21:08:fc:04:02:b4:c1:c9:63:9f:05:6c:1f: 60:d0:b1:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtISwdStgjF8pMqUp2fmZmaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjUxMjIyMjMwMDM0WhcNMjUxMjIzMjMwMDM0WjAzMTEwLwYDVQQD Eyg4ZjU2YTRiMjEzMjUzZDI0NDRlNTFkZGJmZjQ3ODhiZDlkOWRhMThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx59m+SZkce6IBEdbowJnqtUFlqtj UpuWZE3hqQon+umNZNaT0DaZid0AMpHzVqySTo+GXsdbYVfC+8p/3btuJ8jgHe1E zjgEbz2LmNCrT8HVLBEseF8acOn9CTsDTPsYF0jTb9Jzv8fgdegaxmgs5VYsO2+D YqxFjn9xICsm/jYMK+BPRiIVHk5VkyfmqC59bxwzx7jPEj7Kq18v9lqT4ftjwYqv eQV+y2R70+x8a2CUcPJcGyUrz6DAsDApQFxm2fwYAXVMAJ8M6b65Vr7A4BRx1dGh p7MIjGVYlWNxPo8f2uFff7wL1WSBxBWrMVZrHVrcIuEcEvgZCvkXl16KjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9WpLITJT0kROUd2/9HiL2dnaGKMB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWg9/ue6C 3lGh0iF+8Gv3yxSYtpQqm83g5GJZ4ymH/0pQSNUbEjWmdJgGllmrQX1O29A5JJK5 blJkofMojvTqc7zEfZ73gQOhh9wrvLE9eOrSR1SSLiWcTLyoxgZwimEjC7T9enrT QqaXGHuLvTXHA+v6WKvltqrmSXMSmOaMbnWQg02bqghTNojKIhEXGHvCWgJ+zZT/ SvUBMJ5HM+ap9S3AUvwXpbswHSfWJTB3UiIr5VoLdNt9IlZqKHmuQfvKzs8sM8ej 0AQXYAqJt3dpaeBYZHyPqi4wcC4unGKWc4HgdoRO8HXBfZ1TfzEBieYhCPwEArTB yWOfBWwfYNCxAg== -----END CERTIFICATE-----Generated at Tue Dec 23 02:00:36 2025 by rpki-client