This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft File: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft (raw, json) Hash identifier: pAUZpHk+YgXnOJ0nlEWOMT04KIxorERxsQRticnlL+s= Subject key identifier: DE:C1:C8:42:E0:16:A9:4F:4D:8C:B0:DD:99:9E:47:1D:18:55:1F:4B Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8 Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8 Certificate serial: 019AF12E5E1744E681B3CB7E70DB6A242117 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft Manifest number: 115E Signing time: Sat 06 Dec 2025 01:02:19 +0000 Manifest this update: Sat 06 Dec 2025 01:02:19 +0000 Manifest next update: Sun 07 Dec 2025 01:02:19 +0000 Files and hashes: 1: 79lt-80txKIWQWCp9jNMLc2IHAs.roa (hash: 8V+u82sHy+GzDpyon/8u7WM8JnJcqgS9AiUeL6z8Iug=) 2: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl (hash: NjODLcHfInyTaI615MGFbWIK31joGs6ED6wVqMu0TGE=) 3: AQ7FmuvDz62F8uKHQpuKMEYydQQ.roa (hash: M9DqKPgllLnW8MX9RGkl/xHC2u96Nyjw3cSwX+kD68U=) 4: Vf1RDh-x6BtkmqUI8kQeJAmyoeQ.roa (hash: 1PUOdlU3yqRdUd5Mz1TUUvBo/uRT6+wW9qnbLMW13lU=) 5: lXo95w5iGY2qlCwar4Vb6ngfmUQ.roa (hash: K7cw6ymMs8oJcHolnWrjFvAyiZlrz4VloYZ/Ck1llmM=) 6: nUxTi5H5Wi_nGNCH8VXylwgxdJ0.roa (hash: xSWU06TWSLqiugEcuWmt4LzGgEiH/rhkdBHL5vVX0+0=) 7: omuf2rqv4Sp9P-8ZJZ916fSowyA.roa (hash: UlQgwX4zh3WqyryliD1lENPsPKINDm9DlFR8/vawBBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:5e:17:44:e6:81:b3:cb:7e:70:db:6a:24:21:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8 Validity Not Before: Dec 6 01:02:19 2025 GMT Not After : Dec 7 01:02:19 2025 GMT Subject: CN=dec1c842e016a94f4d8cb0dd999e471d18551f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6c:c2:a2:91:78:01:56:35:89:64:98:aa:3d: 11:cc:3a:cc:63:33:98:08:be:92:9d:cb:79:94:78: 10:0e:38:3a:cf:69:44:2b:a1:2d:39:6b:52:7d:3e: 2d:50:f6:22:16:70:b0:5d:30:cb:ff:94:62:df:2d: 88:35:15:80:10:29:81:fd:84:26:d1:7e:b9:4d:7a: 15:1d:1f:ba:15:ea:12:bd:ac:43:9d:22:ad:fa:8e: 5c:95:37:1a:67:fa:cd:68:5b:0b:bc:40:e5:8d:9f: 29:4f:fa:22:83:d2:5f:53:1e:4a:76:6d:86:0c:bf: 90:06:34:b7:43:9f:eb:66:c5:3a:da:40:74:4c:9c: e2:4b:a5:26:cf:29:13:be:ee:ed:23:43:61:ff:d5: 77:72:5e:ef:80:f9:5e:1b:0c:76:32:2e:91:a1:de: 1a:cb:d2:79:1c:f9:ad:b0:0c:c0:03:bd:23:8b:76: 38:ec:43:83:36:7c:65:fa:76:ab:12:a5:61:3c:60: 38:4f:53:c7:22:19:18:bd:44:16:3b:bb:18:64:86: 4a:0d:0f:d5:3a:4b:ea:f0:96:a1:66:55:79:38:87: 5d:72:33:d2:33:e3:8b:31:e9:3e:1e:7c:e7:f6:29: 8b:12:79:18:12:38:e9:05:2d:a4:33:0e:05:e2:7a: f4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C1:C8:42:E0:16:A9:4F:4D:8C:B0:DD:99:9E:47:1D:18:55:1F:4B X509v3 Authority Key Identifier: keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:5b:f9:b0:d2:9b:ec:ad:d6:2f:63:de:cb:93:c8:4d:48:27: 41:22:80:82:93:c0:bf:c3:0c:bf:0d:92:c5:2f:b7:b4:bc:80: f1:de:8f:31:f9:6d:99:03:eb:2e:da:3d:41:1e:53:d2:aa:4e: 12:05:83:aa:e6:8d:6e:3d:b2:bf:c3:e4:bf:99:5f:b1:d1:f5: db:4a:7a:87:1a:55:ce:bd:2c:b7:66:5b:29:d6:c8:d2:87:f7: 27:f2:78:05:a4:1f:80:9f:85:9c:41:4b:ca:78:b5:c6:8b:73: fb:a7:6e:43:01:02:8a:ca:0c:d8:bb:8f:22:5a:9a:b6:3a:ef: de:b2:0c:18:07:2a:01:d1:59:eb:ab:2a:e1:50:f3:1d:18:72: 15:82:8e:cf:4f:75:9b:fc:32:fd:56:cb:76:b0:3a:df:2c:25: be:0b:68:34:a0:9f:3f:92:39:29:73:7b:95:0b:65:9e:d6:39: 4f:58:57:ff:d0:73:4b:ce:0e:c1:c7:94:ed:25:65:ab:51:3f: c8:b7:04:f5:d9:68:d2:cc:9e:a0:eb:37:f2:56:dd:54:68:32: 4f:05:21:03:64:1c:fe:61:80:46:e0:6b:14:8b:61:50:54:af: 91:7d:ae:8a:85:89:08:16:ce:be:06:fa:8a:9c:ae:ac:73:ba: 51:04:13:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLl4XROaBs8t+cNtqJCEXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxOTkxOGVkMjE5ZTdkM2Q5MjI3MzdlY2RjNzMxZjBjYTYw YTY4YjgwHhcNMjUxMjA2MDEwMjE5WhcNMjUxMjA3MDEwMjE5WjAzMTEwLwYDVQQD EyhkZWMxYzg0MmUwMTZhOTRmNGQ4Y2IwZGQ5OTllNDcxZDE4NTUxZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGzCopF4AVY1iWSYqj0RzDrMYzOY CL6Snct5lHgQDjg6z2lEK6EtOWtSfT4tUPYiFnCwXTDL/5Ri3y2INRWAECmB/YQm 0X65TXoVHR+6FeoSvaxDnSKt+o5clTcaZ/rNaFsLvEDljZ8pT/oig9JfUx5Kdm2G DL+QBjS3Q5/rZsU62kB0TJziS6UmzykTvu7tI0Nh/9V3cl7vgPleGwx2Mi6Rod4a y9J5HPmtsAzAA70ji3Y47EODNnxl+narEqVhPGA4T1PHIhkYvUQWO7sYZIZKDQ/V Okvq8JahZlV5OIddcjPSM+OLMek+Hnzn9imLEnkYEjjpBS2kMw4F4nr0JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7ByELgFqlPTYyw3ZmeRx0YVR9LMB8GA1UdIwQY MBaAFPGZGO0hnn09kic37NxzHwymCmi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzIt MzEzZWZlYjBiMTlkLzEvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzItMzEzZWZlYjBiMTlk LzEvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVv5sNKb 7K3WL2Pey5PITUgnQSKAgpPAv8MMvw2SxS+3tLyA8d6PMfltmQPrLto9QR5T0qpO EgWDquaNbj2yv8Pkv5lfsdH120p6hxpVzr0st2ZbKdbI0of3J/J4BaQfgJ+FnEFL yni1xotz+6duQwECisoM2LuPIlqatjrv3rIMGAcqAdFZ66sq4VDzHRhyFYKOz091 m/wy/VbLdrA63ywlvgtoNKCfP5I5KXN7lQtlntY5T1hX/9BzS84OwceU7SVlq1E/ yLcE9dlo0syeoOs38lbdVGgyTwUhA2Qc/mGARuBrFIthUFSvkX2uioWJCBbOvgb6 ipyurHO6UQQTKA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:15 2025 by rpki-client