This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft File: b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json) Hash identifier: cAzivgraEqKznEY+Tl0DAmlFfGfGd167+Kjgj7eQYaU= Subject key identifier: 9F:16:13:32:63:08:DD:B5:72:D0:D9:92:97:E5:35:82:3A:2E:41:EB Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019B05FDA25659AA1ACD4DBFA93792BB87BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft Manifest number: 17A2 Signing time: Wed 10 Dec 2025 02:01:06 +0000 Manifest this update: Wed 10 Dec 2025 02:01:06 +0000 Manifest next update: Thu 11 Dec 2025 02:01:06 +0000 Files and hashes: 1: 0Abj6PSR4FyJUqM6LoN6KFa-26E.roa (hash: 3N4/akmiC/u7gL1HF+D/mYuikLJRGoPmYVruDqzajtA=) 2: 1-HYjW61poyKPMhvfx7U4CngkbXQ.roa (hash: FgaQ7pllPxrtYs+K7a4T0YujtsmGhQlX0nAW+eszuLQ=) 3: 3yeC5jM2ksuqKR2Zh5IvhgGT7kM.roa (hash: aly6yVEpJfsikwPOCEOA8sYqzyulJ58cobvGMlp3Pfc=) 4: 4deFTq_ZGU6j5Wvv1x7sF95jtLY.roa (hash: 2TrrPS30sWSSBNdC0ytp9VKstwP0OWe2UIx3Dtm2/JM=) 5: EYPDvxacKnqAiwCcH_eLh5D-wzo.roa (hash: SGm3Pfgt15u6hgkLS+1eCeSmFoagCG2dGfjKmmJu+Tg=) 6: H6AhUHbx8OlryRkBD15AK_97AFI.roa (hash: aVuSxMtEE3jtCIFUPkZzKs9s0u5aGihLcG9skQiW4iU=) 7: K8brr-FPsMEnGF0kbZo88qS6lTk.roa (hash: qW/T11RMV283PJtyNsGcccWeoOYrXus8SlIyII3hPJA=) 8: OQtVR-cBTyQL6VvIXAOtawOW2cA.roa (hash: Y4JxghrLsZ564AFIbmlJP5QHypmTlarb7NM9FNTmN7A=) 9: PYK2EWVjncskVSm_Hdlre_awIFg.roa (hash: VWAN/Yr75jkjvzOpnYs2pejQXpvZbkMRMFEQFcncIVo=) 10: Q0S0vKeH1qE3DztlQsaMZcL_rdM.roa (hash: EfiDKy3AvswJNKh8pdzYyd3VC1uN6AzI3TYPRG8NcaE=) 11: RzzP2UDDSAPrZWNFm6aBz91iMgQ.roa (hash: 1RDkfiEzt2ZEB4LXorNIAFk4fcDKeMEBcQ7w1edzRtU=) 12: XKHgN2jT3_6QMfOgHKrS1JlPtdM.roa (hash: 0/lku7LnO6lIZwW3HNYBW2LCc3aSui+jPA3GCkogDfQ=) 13: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: VNnmKDjmF8h9RJ2NsiVv/IrmwQFigQz1TkRHKrH/BQY=) 14: fzWiDXbeNLJ9JqEUr2_LAAphcxw.roa (hash: MN7pdOMu0NZSssuxNIUp3oYg8Z0kz03GZzmjzEWZlBE=) 15: lzITf7bmOdvZVA80AcSS1I3NVAY.roa (hash: F1iqFLHu9e7lwpyQGB41+XBSS3bALDr+grcLwGFs4dw=) 16: mxHk_x4_7-pXmkuBflFU5C_xuDU.roa (hash: gtzHct2NI5Df3c0cYS0pdqVMvUN2VqKpHBWx5S3TAmU=) 17: wEFBReYub_TeCbtnkjQHEDS6zaQ.roa (hash: 5e2lfQsxA6BsgP6dDtPIK0Ql9foij6lPOeMn2Q1JhkI=) 18: wOU9aMdER98sPekS4MEPyEOSZUM.roa (hash: fyP1+WfbQMjBodG1sjfQbuHrnmZod0aoG3fzD6DGcYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 02:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:fd:a2:56:59:aa:1a:cd:4d:bf:a9:37:92:bb:87:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Dec 10 02:01:06 2025 GMT Not After : Dec 11 02:01:06 2025 GMT Subject: CN=9f1613326308ddb572d0d99297e535823a2e41eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:10:01:02:56:41:c7:5b:ab:68:38:1b:22:77: 8d:80:85:59:e9:ea:0c:8a:fc:ca:e5:b0:33:3f:30: 86:02:c4:57:d9:13:73:21:68:ea:e0:da:f7:76:ee: 7e:0b:f7:c4:7e:80:7b:c8:0f:80:ca:c8:dd:a1:68: bb:aa:77:5d:2b:ab:b6:34:c5:f7:28:b9:30:5a:b1: 29:59:52:3a:d0:12:97:5e:32:72:17:0d:db:86:9e: 14:2a:40:5a:ea:f3:69:03:ba:f2:32:23:0f:c2:94: 30:90:63:16:02:5d:ee:27:df:73:bf:e8:b0:3f:86: 1c:4e:17:cc:04:dd:fc:0a:df:db:bf:fe:97:bf:b3: 6c:f0:f3:c6:c9:7b:1a:54:c7:b7:3d:df:24:f9:64: 8e:d7:69:ae:12:9f:32:30:de:63:eb:c9:ff:e4:92: 9d:4b:65:63:ff:f1:6d:24:9e:b2:4c:d5:d3:9e:58: 06:86:27:f6:6f:25:fa:82:60:e9:75:89:22:e8:8d: 8d:26:48:13:0c:94:75:dd:0b:2e:ef:94:ce:d5:0d: 27:5f:9b:91:c0:f8:7b:17:64:d0:31:0c:df:8c:eb: 9b:25:9c:cc:01:6c:c7:24:9d:d6:f3:ba:de:f1:d2: c5:73:0a:5b:0b:09:05:a0:2c:0f:7d:68:a4:0f:db: d7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:16:13:32:63:08:DD:B5:72:D0:D9:92:97:E5:35:82:3A:2E:41:EB X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:60:3d:3a:48:fd:b7:94:71:61:d7:6a:7b:95:d5:3c:d7:9b: b0:57:d4:0f:22:54:87:c8:d7:61:fb:5c:00:77:8c:1b:6b:ae: a4:ce:fa:08:a9:c2:9b:3a:87:4c:f9:16:3e:2d:57:c8:0b:68: a7:6c:39:3c:65:a4:31:e4:e9:78:fb:ca:76:e5:d7:05:c6:36: 56:a1:74:4a:89:48:b3:86:09:74:2e:62:1c:fe:2a:90:ba:d6: 03:ac:90:a4:2b:ba:a6:41:60:bd:f8:14:9e:0b:a8:31:65:d7: 11:c0:2f:a2:f1:bb:90:45:ce:94:16:c4:60:cd:13:e9:34:b9: ac:ea:a2:d9:2e:54:83:9c:ae:bb:c0:4e:21:b5:6d:bd:d2:0d: 44:56:45:66:df:98:4d:b7:e2:33:2e:d1:ad:74:9c:fd:ee:6c: 1f:73:b5:5a:b3:09:fe:5f:bb:97:95:48:df:cd:2d:8e:62:f4: cb:4a:48:1f:5f:dc:b6:ee:5f:5a:65:8c:f0:b8:9c:40:fc:e2: 8f:a6:17:5f:b8:ae:77:bb:9d:83:b1:3f:ca:b5:7d:46:88:a5: 47:8c:d0:41:2d:6e:e6:3a:1e:1b:c3:c0:43:12:50:c7:29:75: bb:a6:2a:6b:c9:5f:d1:44:f6:93:95:3d:74:d4:a9:1e:21:d3: e0:26:83:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsF/aJWWaoazU2/qTeSu4e9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjUxMjEwMDIwMTA2WhcNMjUxMjExMDIwMTA2WjAzMTEwLwYDVQQD Eyg5ZjE2MTMzMjYzMDhkZGI1NzJkMGQ5OTI5N2U1MzU4MjNhMmU0MWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxABAlZBx1uraDgbIneNgIVZ6eoM ivzK5bAzPzCGAsRX2RNzIWjq4Nr3du5+C/fEfoB7yA+AysjdoWi7qnddK6u2NMX3 KLkwWrEpWVI60BKXXjJyFw3bhp4UKkBa6vNpA7ryMiMPwpQwkGMWAl3uJ99zv+iw P4YcThfMBN38Ct/bv/6Xv7Ns8PPGyXsaVMe3Pd8k+WSO12muEp8yMN5j68n/5JKd S2Vj//FtJJ6yTNXTnlgGhif2byX6gmDpdYki6I2NJkgTDJR13Qsu75TO1Q0nX5uR wPh7F2TQMQzfjOubJZzMAWzHJJ3W87re8dLFcwpbCwkFoCwPfWikD9vXyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8WEzJjCN21ctDZkpflNYI6LkHrMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp2A9Okj9 t5RxYddqe5XVPNebsFfUDyJUh8jXYftcAHeMG2uupM76CKnCmzqHTPkWPi1XyAto p2w5PGWkMeTpePvKduXXBcY2VqF0SolIs4YJdC5iHP4qkLrWA6yQpCu6pkFgvfgU nguoMWXXEcAvovG7kEXOlBbEYM0T6TS5rOqi2S5Ug5yuu8BOIbVtvdINRFZFZt+Y TbfiMy7RrXSc/e5sH3O1WrMJ/l+7l5VI380tjmL0y0pIH1/ctu5fWmWM8LicQPzi j6YXX7iud7udg7E/yrV9RoilR4zQQS1u5joeG8PAQxJQxyl1u6Yqa8lf0UT2k5U9 dNSpHiHT4CaDlg== -----END CERTIFICATE-----Generated at Wed Dec 10 11:59:13 2025 by rpki-client