This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft File: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json) Hash identifier: Ez7CM7bYFR76qOeqyX5TuT9jQ/3ROstnHsdPieZLsCw= Subject key identifier: 25:98:23:05:1F:94:BA:F6:9D:31:73:9F:E4:2F:5E:70:B4:53:83:4C Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b Certificate serial: 019B37C536F3F98BBA9536852E40E90380BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft Manifest number: 07AC Signing time: Fri 19 Dec 2025 18:00:29 +0000 Manifest this update: Fri 19 Dec 2025 18:00:29 +0000 Manifest next update: Sat 20 Dec 2025 18:00:29 +0000 Files and hashes: 1: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: MHaxk8a86Oc+C6HtNAmo5yWiqlUfBbbK82cvaj0rnqw=) 2: pEP-pQhZiYbw0SOD31dKWiKIqmI.roa (hash: CfAhs6liLNKygVMpweyGMUtkUgPvkHCadlR7GSV9YRQ=) 3: ytXklMT7Qvg5G08MtY8lphgvXaw.roa (hash: r4Q3NQ10FfDyt/oO/SAMKogjYuHKvOwUOktQVJptRLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:36:f3:f9:8b:ba:95:36:85:2e:40:e9:03:80:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b Validity Not Before: Dec 19 18:00:29 2025 GMT Not After : Dec 20 18:00:29 2025 GMT Subject: CN=259823051f94baf69d31739fe42f5e70b453834c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fc:5f:d6:7a:28:52:ed:1d:cb:0c:77:45:f4: 29:f1:59:80:93:f8:f8:55:6d:cf:64:3c:c7:e1:97: 12:50:bc:e7:b8:70:95:82:17:b1:14:51:9c:5e:68: 5a:71:06:85:c5:69:85:76:eb:3b:57:4b:eb:05:31: 9b:3c:83:83:52:98:bb:de:2b:50:57:1b:64:ca:64: dd:c1:05:7c:d1:ef:55:15:6c:6f:68:06:20:e7:44: 00:1c:b0:db:e5:a3:87:7d:d2:0e:77:4d:b0:cd:1d: 2f:06:2c:25:c4:a1:31:02:07:e6:29:55:ab:e6:d6: 0d:31:ad:58:18:9e:fd:e6:f2:7f:5d:21:a7:e0:fa: 2e:89:69:c1:d7:75:e2:aa:57:33:2f:f9:a8:b1:e0: cb:17:87:98:72:df:41:9d:bd:01:9c:64:20:eb:ad: ba:8c:10:76:cb:45:d2:15:32:c5:33:d8:fe:ca:48: 75:6b:e2:8d:e7:59:c4:ca:2c:09:10:56:d1:ef:4b: bc:aa:58:91:32:2b:e5:ab:2d:aa:c3:ba:46:7d:eb: d5:ed:aa:64:81:1d:b0:ce:08:1d:8f:7c:51:5e:27: de:b2:ae:61:bb:ca:f5:aa:83:17:5a:f0:b4:cd:13: 9c:5a:d9:1f:0b:71:83:3d:f5:02:15:6d:72:66:d8: 29:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:98:23:05:1F:94:BA:F6:9D:31:73:9F:E4:2F:5E:70:B4:53:83:4C X509v3 Authority Key Identifier: keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:98:48:0f:f4:76:52:df:f9:72:b5:93:54:0b:dd:74:1e:7f: 4a:09:aa:db:f4:a3:16:54:d8:3a:2a:47:54:e2:bf:92:34:e6: 33:8c:7e:1f:c2:d3:03:41:29:bb:14:2c:fa:dc:c3:f7:e4:ad: d6:64:c6:dd:48:da:9a:c4:a3:c8:ed:b1:eb:5a:30:e6:0e:96: 2c:25:db:23:32:f8:ee:3b:06:c1:42:58:7e:f2:d5:53:1d:6b: 31:65:1c:e9:62:72:86:07:96:dd:d9:6f:5a:14:fa:50:0c:48: 4e:da:73:48:a7:2b:5b:dc:a3:dd:d6:ee:8c:cf:25:d2:cb:2b: c7:bf:f6:42:59:72:9d:32:64:9d:ff:0f:bc:8c:1c:a0:4e:8c: f9:c4:b9:20:32:0a:0a:a1:ff:f9:68:dd:32:d1:80:72:1a:92: 4c:77:ff:4c:dc:9a:cb:82:0c:cb:c2:e4:46:e3:df:63:1d:fb: 5d:8b:d3:4a:61:0b:23:b8:15:68:16:26:75:a1:47:5b:b4:69: c9:4f:3a:80:35:b6:52:ff:ad:2b:12:eb:f9:a0:da:5a:a2:d3: 08:e9:c0:2f:56:4e:34:5c:0a:4d:d1:50:79:b2:79:e8:6c:19: 87:34:96:b3:81:62:bd:b3:30:15:5a:ad:ad:06:8c:d5:98:37: 05:a8:27:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xTbz+Yu6lTaFLkDpA4C8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzNlNmNiMmViMDJmY2M3NDJiYWY5MWFiODY1YzliMjBk NjQ4NGIwHhcNMjUxMjE5MTgwMDI5WhcNMjUxMjIwMTgwMDI5WjAzMTEwLwYDVQQD EygyNTk4MjMwNTFmOTRiYWY2OWQzMTczOWZlNDJmNWU3MGI0NTM4MzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/xf1nooUu0dywx3RfQp8VmAk/j4 VW3PZDzH4ZcSULznuHCVghexFFGcXmhacQaFxWmFdus7V0vrBTGbPIODUpi73itQ VxtkymTdwQV80e9VFWxvaAYg50QAHLDb5aOHfdIOd02wzR0vBiwlxKExAgfmKVWr 5tYNMa1YGJ795vJ/XSGn4PouiWnB13XiqlczL/moseDLF4eYct9Bnb0BnGQg6626 jBB2y0XSFTLFM9j+ykh1a+KN51nEyiwJEFbR70u8qliRMivlqy2qw7pGfevV7apk gR2wzggdj3xRXifesq5hu8r1qoMXWvC0zROcWtkfC3GDPfUCFW1yZtgp1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWYIwUflLr2nTFzn+QvXnC0U4NMMB8GA1UdIwQY MBaAFGvD5ssusC/MdCuvkauGXJsg1khLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mNWU0NDAtMTAwZi00OTMzLWFhYmYt MTEwOThhYTJlYmMzLzEvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mNWU0NDAtMTAwZi00OTMzLWFhYmYtMTEwOThhYTJlYmMz LzEvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArphID/R2 Ut/5crWTVAvddB5/Sgmq2/SjFlTYOipHVOK/kjTmM4x+H8LTA0EpuxQs+tzD9+St 1mTG3UjamsSjyO2x61ow5g6WLCXbIzL47jsGwUJYfvLVUx1rMWUc6WJyhgeW3dlv WhT6UAxITtpzSKcrW9yj3dbujM8l0ssrx7/2QllynTJknf8PvIwcoE6M+cS5IDIK CqH/+WjdMtGAchqSTHf/TNyay4IMy8LkRuPfYx37XYvTSmELI7gVaBYmdaFHW7Rp yU86gDW2Uv+tKxLr+aDaWqLTCOnAL1ZONFwKTdFQebJ56GwZhzSWs4FivbMwFVqt rQaM1Zg3BagnLQ== -----END CERTIFICATE-----Generated at Fri Dec 19 20:27:00 2025 by rpki-client