This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft File: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft (raw, json) Hash identifier: 61Jl3h3tVGERnRPaYzEJzhfxKUI4yAjUGXXj6lDafPo= Subject key identifier: A6:E1:17:8D:3A:AE:64:73:08:8C:31:D3:15:0E:C1:0F:A6:09:EF:66 Authority key identifier: F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24 Certificate issuer: /CN=f260075c0944fb1634b628bb10b67f12c873e424 Certificate serial: 019B175F857A661FBD941CF8C84789DD0496 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft Manifest number: CA Signing time: Sat 13 Dec 2025 11:01:34 +0000 Manifest this update: Sat 13 Dec 2025 11:01:34 +0000 Manifest next update: Sun 14 Dec 2025 11:01:34 +0000 Files and hashes: 1: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl (hash: Bn2f2cbyooa9lFf6KBnYAHxljOmY8YLEVTRHWVbqEQw=) 2: Xd7ijHjwtfXf4zZiE_HQf8TmqP0.roa (hash: w9B2n3G58lCmyJiIUIJesOdWt7RmGyJHNmHtEsf7LS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:5f:85:7a:66:1f:bd:94:1c:f8:c8:47:89:dd:04:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f260075c0944fb1634b628bb10b67f12c873e424 Validity Not Before: Dec 13 11:01:34 2025 GMT Not After : Dec 14 11:01:34 2025 GMT Subject: CN=a6e1178d3aae6473088c31d3150ec10fa609ef66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a7:82:5f:37:bc:59:e9:2f:32:a8:c0:11:b8: 24:cf:0d:ff:ab:e9:fe:0f:0f:3f:31:6d:00:37:e8: c5:81:c1:eb:54:da:15:e8:2b:ac:68:c1:1d:c1:74: bf:0b:bc:a6:a1:9a:5d:91:74:e1:c1:74:6e:2c:ef: 10:6f:f7:65:4a:c9:2f:7a:49:07:2f:d8:09:6b:be: d7:33:10:d8:d6:e5:9f:1a:70:93:55:7e:1e:e1:8c: 17:bc:77:55:07:47:ec:1e:ff:2d:4b:47:41:18:79: 85:2c:ce:1e:99:46:c9:7b:92:12:a3:f0:96:74:90: 5e:19:06:82:e8:52:8c:81:a0:21:96:c0:21:2a:18: 65:82:80:6f:d3:94:5a:9e:0a:d3:b2:0f:ab:12:01: 5b:f2:1f:4b:30:0a:3d:24:be:32:a6:e1:c8:67:9a: 4a:22:e6:d7:81:70:c7:fa:47:b7:40:46:35:a9:6e: 3a:b7:3d:80:19:8b:48:f8:d4:44:99:08:8d:f8:d7: d9:3c:a8:f2:1f:ac:ec:79:f2:65:a5:7b:20:5e:aa: 94:5e:9b:92:a5:65:ca:47:8f:fc:3d:b3:3c:d6:0f: 14:61:95:58:3d:cd:d4:be:0a:20:f1:87:75:2c:9d: 44:b8:8c:42:b5:52:44:c1:a7:79:24:2d:34:e5:b7: 54:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E1:17:8D:3A:AE:64:73:08:8C:31:D3:15:0E:C1:0F:A6:09:EF:66 X509v3 Authority Key Identifier: keyid:F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:85:39:8a:3b:a9:db:24:aa:87:4d:38:50:4a:c5:8c:66:aa: 4f:a2:d1:53:0d:08:51:e5:61:2c:19:af:ea:6f:e2:f6:8b:00: 2c:de:0b:86:42:b9:b5:d3:9c:f2:18:29:ee:29:19:f1:96:d0: 18:60:c9:79:e8:62:be:a2:dd:da:f6:8c:3c:1b:87:2e:bf:a4: 8d:7a:56:c3:b4:47:40:6a:98:f5:46:37:41:a4:26:1c:40:b2: 96:d8:38:e3:19:89:21:da:a1:45:d8:ec:7b:66:0c:e0:08:09: 9a:48:7c:45:85:95:01:b4:fb:a1:e1:f9:53:54:7c:cc:e8:fc: 90:10:49:24:52:1c:74:b2:ec:31:d6:18:58:2c:66:fd:e5:4c: 06:08:21:49:44:09:3b:e0:40:a8:06:2e:18:f1:47:39:32:79: 2a:63:77:1d:24:38:91:7d:d7:31:f6:aa:e3:05:a5:e5:d5:5e: 57:e2:0b:37:cb:e2:8d:37:5a:83:dc:3b:7c:78:8f:1e:3f:01: 8f:c5:70:db:87:a8:73:2b:70:96:2b:db:79:83:fc:3e:df:5e: cd:12:e7:a2:4b:03:32:27:34:5a:bf:47:e4:5a:37:65:1f:d0: 61:07:38:34:b9:8a:1a:4b:64:fe:a9:89:f0:67:5c:b1:13:0a: 76:c5:72:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsXX4V6Zh+9lBz4yEeJ3QSWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjAwNzVjMDk0NGZiMTYzNGI2MjhiYjEwYjY3ZjEyYzg3 M2U0MjQwHhcNMjUxMjEzMTEwMTM0WhcNMjUxMjE0MTEwMTM0WjAzMTEwLwYDVQQD EyhhNmUxMTc4ZDNhYWU2NDczMDg4YzMxZDMxNTBlYzEwZmE2MDllZjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6eCXze8WekvMqjAEbgkzw3/q+n+ Dw8/MW0AN+jFgcHrVNoV6CusaMEdwXS/C7ymoZpdkXThwXRuLO8Qb/dlSskvekkH L9gJa77XMxDY1uWfGnCTVX4e4YwXvHdVB0fsHv8tS0dBGHmFLM4emUbJe5ISo/CW dJBeGQaC6FKMgaAhlsAhKhhlgoBv05RangrTsg+rEgFb8h9LMAo9JL4ypuHIZ5pK IubXgXDH+ke3QEY1qW46tz2AGYtI+NREmQiN+NfZPKjyH6zsefJlpXsgXqqUXpuS pWXKR4/8PbM81g8UYZVYPc3Uvgog8Yd1LJ1EuIxCtVJEwad5JC005bdUPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbhF406rmRzCIwx0xUOwQ+mCe9mMB8GA1UdIwQY MBaAFPJgB1wJRPsWNLYouxC2fxLIc+QkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85ZDVjZTUtYjZjOS00OGRhLThlOGEt NmEzYmI5MjQ0M2ZjLzEvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy85ZDVjZTUtYjZjOS00OGRhLThlOGEtNmEzYmI5MjQ0M2Zj LzEvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIU5ijup 2ySqh004UErFjGaqT6LRUw0IUeVhLBmv6m/i9osALN4LhkK5tdOc8hgp7ikZ8ZbQ GGDJeehivqLd2vaMPBuHLr+kjXpWw7RHQGqY9UY3QaQmHECyltg44xmJIdqhRdjs e2YM4AgJmkh8RYWVAbT7oeH5U1R8zOj8kBBJJFIcdLLsMdYYWCxm/eVMBgghSUQJ O+BAqAYuGPFHOTJ5KmN3HSQ4kX3XMfaq4wWl5dVeV+ILN8vijTdag9w7fHiPHj8B j8Vw24eocytwlivbeYP8Pt9ezRLnoksDMic0Wr9H5Fo3ZR/QYQc4NLmKGktk/qmJ 8GdcsRMKdsVy/g== -----END CERTIFICATE-----Generated at Sat Dec 13 20:26:19 2025 by rpki-client