This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
File: 8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json)
Hash identifier: MDC/c7WtIplzpPMbsPkX8QZY8C7cyLN4qGgdnYLG+VY=
Subject key identifier: C8:FD:90:CE:2E:54:11:22:3B:A0:76:A5:FD:DB:F2:0B:1F:53:5B:8A
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 019B06A1F4F97C852F371E6879886AEB6748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
Manifest number: 1722
Signing time: Wed 10 Dec 2025 05:00:35 +0000
Manifest this update: Wed 10 Dec 2025 05:00:35 +0000
Manifest next update: Thu 11 Dec 2025 05:00:35 +0000
Files and hashes: 1: 1-jVAuwl23O0NOs1-bK6yeNscKls.roa (hash: Uvxs615yu+WEWoRFMHOzorsioWG8H9U4nAbzC8roX+c=)
2: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: jrF61AN3OuQ8esV3T/HqXyGD0VQfnRbceGs/0CdMrVs=)
3: Hl-LGslDYIhPlAkXHQHVv-RvB0w.roa (hash: O2E13yhrehXyHLH26oeDji6bWmBZEWAoPwvjmCy5UcQ=)
4: KeGOh-2gcusv29keikRHiEVKS4s.roa (hash: QrPYIqt13xYHx5UZtiEmzISVzXSCi7pxjFZqjccXxgI=)
5: PCT5Mgh2BfqwgaWaY02UF5LaLEs.roa (hash: XaBzd5GEKaiXR6sIMeiAlmk2HwlM0MvOxOjSag3QaY4=)
6: asCMHwRsfFwCKLi99bMyFo21krk.roa (hash: utShPNIu2DvLofXXWk5YOZ1a0OQi1aHbqM+BbMHKgoE=)
7: euk47PXoK5T6-tp0xVlaMzoR2zU.roa (hash: ELFMwMZ6NBCdcRDyZO9f72nzLI4WiJG57xVHtBVDcdU=)
8: fs_wxLugKiT_ydUrQOwGSh335rY.roa (hash: Q5dvvgKthsbcb9JzHMCTpI33x4XiWX2kEMaFSL83EKo=)
9: s-NcW6l6hXn5NOmuFXHN7mTAqcY.roa (hash: Ec6KZfarDMvuXKyozJ8ogUajfjL0rcRRpwLDmiHket8=)
10: xs5EMPFexMMDbg6ZozpAr6uWE70.roa (hash: qg/QvTawYThYqecFxjzESCzrgezKdtEVEc1jID0tLZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:06:a1:f4:f9:7c:85:2f:37:1e:68:79:88:6a:eb:67:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Dec 10 05:00:35 2025 GMT
Not After : Dec 11 05:00:35 2025 GMT
Subject: CN=c8fd90ce2e5411223ba076a5fddbf20b1f535b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:f7:90:5e:3d:90:96:09:7b:55:1f:30:b9:
25:ad:ac:7b:ee:f6:64:98:cd:3b:ec:0c:ff:03:30:
74:2f:c1:8c:29:90:32:55:18:11:33:b2:ec:44:2c:
c6:77:ca:f0:20:b8:4d:9b:d5:ba:e6:53:8a:d0:0d:
94:d4:35:32:6d:94:da:29:bc:11:4c:49:da:9f:6d:
9d:e2:f8:6d:c4:3a:84:1c:10:25:d4:89:58:d3:a2:
fc:3e:3b:29:ce:ee:87:cd:f9:bc:ce:3c:d2:56:52:
89:62:5e:77:81:98:45:d5:b6:2d:d9:67:88:ed:06:
64:e2:b8:22:4b:72:2b:d3:9d:56:d8:ed:7a:db:07:
b9:77:a8:47:9f:d6:11:fe:88:17:71:d2:27:c2:ce:
9b:03:81:f8:86:a0:c0:09:17:1c:fa:a0:1b:84:a5:
35:d6:00:cd:21:13:2e:e7:1c:43:39:c8:bf:a3:37:
67:35:94:85:cb:c4:41:38:93:7c:91:b4:e7:33:5d:
68:d0:9b:42:e0:f1:d8:79:6d:9b:ca:f7:41:c9:6e:
cf:1d:5d:04:a8:85:19:35:20:cf:18:ac:e6:8f:37:
3f:91:b7:f5:35:cb:25:1b:fa:b6:d6:0b:82:74:c5:
44:18:49:b1:fa:c0:37:e7:2a:d0:29:df:b2:cc:17:
de:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FD:90:CE:2E:54:11:22:3B:A0:76:A5:FD:DB:F2:0B:1F:53:5B:8A
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:83:e0:72:9b:00:11:cb:d8:6c:fa:a0:a1:57:37:1e:56:9f:
6e:e1:4d:f7:e3:1f:f2:a9:24:ef:69:f4:73:fc:7b:58:28:21:
41:a4:cc:8d:a4:23:d3:4e:b6:19:7d:3e:24:13:e0:cc:e6:24:
33:20:1f:e3:d8:24:ac:75:f0:4f:02:54:e6:6d:97:68:ce:36:
d6:fc:3f:d1:d0:22:a0:c9:d1:16:a0:d2:82:5a:47:cc:ba:a4:
b8:81:09:41:ed:ab:7c:b0:59:91:cb:d5:38:3f:4a:86:70:63:
8f:62:30:ea:af:b2:51:84:29:96:10:f6:60:90:4b:d1:27:ef:
7c:19:29:1a:c6:74:54:81:2f:e3:d2:b8:37:f7:26:2d:78:aa:
bf:9a:43:56:1e:98:cb:c8:dc:d7:6a:8f:fd:bb:69:75:e9:f3:
65:64:08:c1:55:43:6b:3c:22:7f:f9:59:4b:d4:9a:fa:0f:9b:
44:26:4e:fb:14:27:f6:a8:c4:39:a4:e5:25:15:0d:0b:3d:76:
ae:c2:63:e5:43:8e:e2:3a:38:f7:6d:17:d4:c9:6f:04:95:6e:
87:40:66:13:c7:d4:60:b7:16:a8:0c:15:26:44:42:08:99:d6:
c8:9d:c3:16:cc:26:31:c6:dd:80:32:aa:48:89:82:18:87:4f:
23:52:eb:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsGofT5fIUvNx5oeYhq62dIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl
YTZkYWYwHhcNMjUxMjEwMDUwMDM1WhcNMjUxMjExMDUwMDM1WjAzMTEwLwYDVQQD
EyhjOGZkOTBjZTJlNTQxMTIyM2JhMDc2YTVmZGRiZjIwYjFmNTM1YjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhj3kF49kJYJe1UfMLklrax77vZk
mM077Az/AzB0L8GMKZAyVRgRM7LsRCzGd8rwILhNm9W65lOK0A2U1DUybZTaKbwR
TEnan22d4vhtxDqEHBAl1IlY06L8Pjspzu6Hzfm8zjzSVlKJYl53gZhF1bYt2WeI
7QZk4rgiS3Ir051W2O162we5d6hHn9YR/ogXcdInws6bA4H4hqDACRcc+qAbhKU1
1gDNIRMu5xxDOci/ozdnNZSFy8RBOJN8kbTnM11o0JtC4PHYeW2byvdByW7PHV0E
qIUZNSDPGKzmjzc/kbf1NcslG/q21guCdMVEGEmx+sA35yrQKd+yzBfeVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMj9kM4uVBEiO6B2pf3b8gsfU1uKMB8GA1UdIwQY
MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt
NjkxNDIyMzExNzI5LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5
LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoPgcpsA
EcvYbPqgoVc3HlafbuFN9+Mf8qkk72n0c/x7WCghQaTMjaQj0062GX0+JBPgzOYk
MyAf49gkrHXwTwJU5m2XaM421vw/0dAioMnRFqDSglpHzLqkuIEJQe2rfLBZkcvV
OD9KhnBjj2Iw6q+yUYQplhD2YJBL0SfvfBkpGsZ0VIEv49K4N/cmLXiqv5pDVh6Y
y8jc12qP/btpdenzZWQIwVVDazwif/lZS9Sa+g+bRCZO+xQn9qjEOaTlJRUNCz12
rsJj5UOO4jo4920X1MlvBJVuh0BmE8fUYLcWqAwVJkRCCJnWyJ3DFswmMcbdgDKq
SImCGIdPI1Lriw==
-----END CERTIFICATE-----
Generated at Wed Dec 10 11:23:50 2025 by rpki-client