This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft File: CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json) Hash identifier: xBgIGp/cPNo5YAl5JM1qPY4VCbZkDZHTkqReSUhwf5M= Subject key identifier: 1F:D4:59:E5:D1:43:47:10:CB:3E:A3:8B:20:3D:27:DB:51:81:6E:AC Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad Certificate serial: 019B1C858852AA4DE43CC4B0E457CFE21681 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft Manifest number: 0A44 Signing time: Sun 14 Dec 2025 11:01:11 +0000 Manifest this update: Sun 14 Dec 2025 11:01:11 +0000 Manifest next update: Mon 15 Dec 2025 11:01:11 +0000 Files and hashes: 1: 1YffucAnrX0zrPGVUVBeyKH78tE.roa (hash: F+0MkZW1rwniUkgJEFMqZDUVPzIQlWc77ANUG11yVk0=) 2: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: wG6qtRiH+zuSC6bPUPVVjTtAcp+ynFIay0hMM4At3+o=) 3: HHgp5sq5yc4_sgJa6AXu1wOFQNM.roa (hash: 7azvHrY82JhsqK3mxuoAki0dX0VXyY18Oolw0K+QPEw=) 4: QIYUcsbQNAYJ49MS9GSzg6HzMws.roa (hash: 25Ipjti12DAizEBm/x19xImh3kKTX0L8ySHToWXRDaw=) 5: b6ZEK46tBFQpFeGihP04dAsRVEs.roa (hash: QgioZFeGRbfakufTGnBIdfmvDS/FUhl+3OYWyWgTaL4=) 6: dntaOaxuIDGd8pI8wGTFAJRgyN0.roa (hash: ZmPkwqzAaYGLrLg5+RqVjoLEOwPFE1N2kmesXzCCUwI=) 7: pM8VKNSiqXyxvrYM2CF2U0Iw0pw.roa (hash: fs4sKC29dVzpn86XWfZbe24a1J4GrvjTCH4XsQbkw6c=) 8: qQrVFVU2zYEeKI_c1sPfgRBsdws.roa (hash: Q0Q6+jTPsyoLSIpvRXxP/rur4NZVUawp72Ly9Y4IL/A=) 9: tstTYn_D9Pn-4nRlBfI2UB_WSGg.roa (hash: ZjiObePgXbEPhVg4yY+Q8sRWmDFO/c82OdQ5TNgpPAM=) 10: zEb6SCNh9IA2ZcmgZWwsmTznbFk.roa (hash: tgHdlVCEN4GvD5zc3JRTYHWhACpqWoQ7O4VCFRbyik4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:88:52:aa:4d:e4:3c:c4:b0:e4:57:cf:e2:16:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08af091858bb99651764399c6565df7a0834dbad Validity Not Before: Dec 14 11:01:11 2025 GMT Not After : Dec 15 11:01:11 2025 GMT Subject: CN=1fd459e5d1434710cb3ea38b203d27db51816eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ea:9b:07:30:2b:71:d6:9a:8c:57:4b:ef:c3: 82:f4:38:29:d0:2e:16:6a:c8:1a:8c:60:54:cb:fd: 47:20:ca:38:cd:4d:ff:a8:92:68:26:06:e8:9f:02: c7:00:9b:a7:34:15:10:c0:a3:b1:0f:50:d4:1d:52: 62:9b:32:f1:31:a4:5f:e2:76:e1:63:83:2f:88:6c: 4d:60:4e:5a:00:39:1b:2b:1b:80:05:d1:ee:ac:93: d8:e3:05:59:43:18:42:8a:21:ee:fc:e6:f8:54:67: 46:00:ca:00:cd:6c:8b:bf:0a:26:2c:c7:b9:b1:f1: 01:39:73:31:28:2a:c8:85:65:70:b4:b6:ce:2d:fa: 3e:c2:6d:11:f0:02:16:e8:8b:cb:28:db:33:56:1c: e2:6f:5e:ca:e5:c9:dd:df:c2:a4:ad:4d:c0:7b:8f: 8d:db:a2:21:d3:89:3e:ef:a2:af:45:0c:ff:e3:ee: b9:08:b3:eb:90:b0:4c:66:fb:4c:60:ab:ca:0c:81: 7c:19:2a:1e:60:52:69:74:08:b7:b3:33:00:b4:76: 1c:f5:10:1d:af:1c:74:1c:50:8b:ae:56:e0:f4:e5: 2d:a4:22:53:14:e1:44:61:c9:be:59:a9:95:f3:1c: 67:b0:3d:2b:b0:79:30:9c:b6:31:27:35:f9:b8:c3: 9c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D4:59:E5:D1:43:47:10:CB:3E:A3:8B:20:3D:27:DB:51:81:6E:AC X509v3 Authority Key Identifier: keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:1e:65:4c:00:f3:f5:35:e0:7e:07:b7:56:7f:4a:4d:91:ef: 87:3c:0f:2a:1b:6c:29:d2:f1:ab:00:86:7c:d4:f9:56:3a:94: 39:64:d8:e8:bb:c5:9d:0f:44:01:ae:85:eb:5f:06:b8:13:67: 19:1f:54:96:74:07:93:12:c3:2d:6e:cb:12:a2:cc:63:a4:8f: d5:de:84:6c:3b:05:93:e2:55:ef:58:ca:53:b4:01:23:d0:4e: 84:5f:2d:cf:2d:84:04:af:5f:ca:6e:e7:57:32:0b:0d:3c:56: d6:d3:5a:8e:b0:32:b6:99:59:d2:e2:10:da:8d:6e:78:1c:29: 9e:2f:81:fc:f1:1d:6e:3c:ff:3a:dd:e6:e2:9a:03:d1:cf:cc: 57:db:31:df:af:15:d2:be:b3:77:14:96:b0:4a:65:af:55:d9: c8:0c:0f:74:84:49:6e:72:07:a4:9a:ed:79:f5:be:12:05:a3: 96:fc:f6:e9:a3:73:f0:f8:bf:a0:bd:f4:09:f2:e4:a0:7c:3d: e2:1c:bd:39:e7:9c:f4:f4:15:d1:9a:f4:c1:9e:ac:70:5d:0e: 3d:42:ea:f9:97:35:7f:3e:53:72:42:d4:93:34:7a:97:70:02: 19:ee:da:c8:ca:8f:6e:67:99:3e:4f:75:1d:70:4e:5e:4d:47: 1d:f0:fe:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschYhSqk3kPMSw5FfP4haBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz NGRiYWQwHhcNMjUxMjE0MTEwMTExWhcNMjUxMjE1MTEwMTExWjAzMTEwLwYDVQQD EygxZmQ0NTllNWQxNDM0NzEwY2IzZWEzOGIyMDNkMjdkYjUxODE2ZWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeqbBzArcdaajFdL78OC9Dgp0C4W asgajGBUy/1HIMo4zU3/qJJoJgbonwLHAJunNBUQwKOxD1DUHVJimzLxMaRf4nbh Y4MviGxNYE5aADkbKxuABdHurJPY4wVZQxhCiiHu/Ob4VGdGAMoAzWyLvwomLMe5 sfEBOXMxKCrIhWVwtLbOLfo+wm0R8AIW6IvLKNszVhzib17K5cnd38KkrU3Ae4+N 26Ih04k+76KvRQz/4+65CLPrkLBMZvtMYKvKDIF8GSoeYFJpdAi3szMAtHYc9RAd rxx0HFCLrlbg9OUtpCJTFOFEYcm+WamV8xxnsD0rsHkwnLYxJzX5uMOcVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/UWeXRQ0cQyz6jiyA9J9tRgW6sMB8GA1UdIwQY MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt NTYxMjliN2RjMDE4LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4 LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABR5lTADz 9TXgfge3Vn9KTZHvhzwPKhtsKdLxqwCGfNT5VjqUOWTY6LvFnQ9EAa6F618GuBNn GR9UlnQHkxLDLW7LEqLMY6SP1d6EbDsFk+JV71jKU7QBI9BOhF8tzy2EBK9fym7n VzILDTxW1tNajrAytplZ0uIQ2o1ueBwpni+B/PEdbjz/Ot3m4poD0c/MV9sx368V 0r6zdxSWsEplr1XZyAwPdIRJbnIHpJrtefW+EgWjlvz26aNz8Pi/oL30CfLkoHw9 4hy9Oeec9PQV0Zr0wZ6scF0OPULq+Zc1fz5TckLUkzR6l3ACGe7ayMqPbmeZPk91 HXBOXk1HHfD+Ew== -----END CERTIFICATE-----Generated at Sun Dec 14 19:17:34 2025 by rpki-client