This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft File: 8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json) Hash identifier: h75RydUqBUiby6XhqWTWA81HgTVFeYjdKnS+T1ybdsI= Subject key identifier: 63:31:CD:3D:53:A5:F6:2C:18:7C:26:7D:EC:74:56:59:9E:92:BE:B2 Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA Certificate issuer: /CN=f177817124f20772743bd30594a8853b2bdec6aa Certificate serial: 019B3268C9280C0CB8ADF358597A3AE92AC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft Manifest number: 0E7B Signing time: Thu 18 Dec 2025 17:01:26 +0000 Manifest this update: Thu 18 Dec 2025 17:01:26 +0000 Manifest next update: Fri 19 Dec 2025 17:01:26 +0000 Files and hashes: 1: 2jqEixEfH9W4ryTrv4L_xGNFOKw.asa (hash: hl5tj4DAhIdXk+y3UcohqlF6hplYFILm0RmWglWn8No=) 2: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: aBq0CIsw5pH0QGtJQb33PtgpfHEuF2uHhyTnQ0b2jso=) 3: ZfrqB-JhfiqNRWe3zj0YhBh2Vgk.roa (hash: AZkZxydWTOa7MDw2bfdTftJLCSFU1oN9eZ8WQJFQzJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:c9:28:0c:0c:b8:ad:f3:58:59:7a:3a:e9:2a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa Validity Not Before: Dec 18 17:01:26 2025 GMT Not After : Dec 19 17:01:26 2025 GMT Subject: CN=6331cd3d53a5f62c187c267dec7456599e92beb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d5:50:e2:a6:d9:49:33:30:1d:47:fa:44:b4: ad:91:ae:74:3d:12:7e:cf:33:d0:e5:6c:a1:a1:42: 65:d1:f1:0c:09:5c:70:33:ee:be:c5:e5:55:94:3f: fe:6b:5e:dd:47:73:a5:57:bf:ca:c1:63:fc:ab:e9: 4f:27:49:79:b2:f2:0e:2a:da:88:e8:9e:d1:86:63: 7f:d9:7f:ee:87:87:7b:76:1d:40:b3:a5:be:61:1c: 8f:24:98:76:98:fb:52:d6:f5:62:c7:4a:30:ad:43: 7b:94:25:a7:a2:01:f8:2f:95:de:54:6b:d7:6b:46: 28:f8:f0:e9:d7:87:e2:30:24:f4:75:eb:d2:b9:fe: 07:3b:34:e7:fc:eb:71:98:d0:56:2a:da:1e:a5:ad: af:dd:83:9b:a0:40:67:7d:2e:3f:9f:62:5b:d6:88: 03:0c:c7:3d:80:70:ca:fa:21:89:b1:4d:56:9a:34: e7:91:2e:2b:f7:e1:f8:10:e0:06:a4:f1:77:bb:e9: 98:c2:46:57:58:c3:b5:37:ee:bf:bb:3e:c7:7f:5b: fc:6c:7e:d8:9e:92:06:95:9b:20:4a:8b:72:b3:fc: 68:c2:d3:c9:b2:47:dd:07:5b:fd:ae:9d:7a:0a:70: c5:49:2c:4f:fd:80:ca:da:fe:c9:4a:26:a4:9b:b8: 81:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:31:CD:3D:53:A5:F6:2C:18:7C:26:7D:EC:74:56:59:9E:92:BE:B2 X509v3 Authority Key Identifier: keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:f8:0b:a1:53:d2:39:18:41:c5:7b:88:08:7c:e5:52:34:47: 9d:83:a7:6b:84:84:7f:1c:04:9b:64:20:e8:96:c6:bf:e6:a9: a5:5d:c7:8c:dd:c8:9e:b9:79:8f:4d:d2:d5:b1:91:6c:b5:62: ee:32:72:2c:5d:42:b2:5b:b7:98:6d:75:50:65:c0:6a:e9:2c: 25:a7:e4:e9:ee:13:10:0d:b1:70:51:33:b7:8e:bd:c4:e3:ac: 50:d2:86:41:a8:61:0e:7b:27:0e:b1:cb:d3:ac:8b:b3:a3:57: a9:cb:35:ed:0d:7b:cb:83:b2:5a:a2:90:ad:06:10:55:aa:1b: f2:7a:78:8a:52:88:0a:c6:0e:5b:24:f8:d6:7f:71:6c:cf:fb: 1d:b0:f2:ce:15:11:9d:45:e9:cb:8b:52:48:bd:5a:10:62:d2: c6:b6:76:66:1b:53:8c:eb:8b:c0:c3:ea:ed:39:bf:2c:4d:7c: 2d:73:7d:70:d2:f7:1f:3f:f0:92:38:db:80:dd:cb:6b:3f:8c: cb:3f:0a:9b:2e:26:a2:b3:34:9e:3f:ad:43:43:b8:57:63:4c: f8:e8:5e:bf:c4:e7:88:a8:a0:95:14:e8:11:73:0e:23:ea:96: 1c:61:25:56:0f:94:76:79:ca:ef:2e:ca:e8:db:ea:72:f2:f5: a9:62:b5:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaMkoDAy4rfNYWXo66SrHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNzc4MTcxMjRmMjA3NzI3NDNiZDMwNTk0YTg4NTNiMmJk ZWM2YWEwHhcNMjUxMjE4MTcwMTI2WhcNMjUxMjE5MTcwMTI2WjAzMTEwLwYDVQQD Eyg2MzMxY2QzZDUzYTVmNjJjMTg3YzI2N2RlYzc0NTY1OTllOTJiZWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtVQ4qbZSTMwHUf6RLStka50PRJ+ zzPQ5WyhoUJl0fEMCVxwM+6+xeVVlD/+a17dR3OlV7/KwWP8q+lPJ0l5svIOKtqI 6J7RhmN/2X/uh4d7dh1As6W+YRyPJJh2mPtS1vVix0owrUN7lCWnogH4L5XeVGvX a0Yo+PDp14fiMCT0devSuf4HOzTn/OtxmNBWKtoepa2v3YOboEBnfS4/n2Jb1ogD DMc9gHDK+iGJsU1WmjTnkS4r9+H4EOAGpPF3u+mYwkZXWMO1N+6/uz7Hf1v8bH7Y npIGlZsgSotys/xowtPJskfdB1v9rp16CnDFSSxP/YDK2v7JSiakm7iBEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMxzT1TpfYsGHwmfex0Vlmekr6yMB8GA1UdIwQY MBaAFPF3gXEk8gdydDvTBZSohTsr3saqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMDQ0ZTItYTg0Mi00OGFiLWJjNTQt NjI1NDIyMjgyOTFjLzEvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8wMDQ0ZTItYTg0Mi00OGFiLWJjNTQtNjI1NDIyMjgyOTFj LzEvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPgLoVPS ORhBxXuICHzlUjRHnYOna4SEfxwEm2Qg6JbGv+appV3HjN3Inrl5j03S1bGRbLVi 7jJyLF1Cslu3mG11UGXAauksJafk6e4TEA2xcFEzt469xOOsUNKGQahhDnsnDrHL 06yLs6NXqcs17Q17y4OyWqKQrQYQVaob8np4ilKICsYOWyT41n9xbM/7HbDyzhUR nUXpy4tSSL1aEGLSxrZ2ZhtTjOuLwMPq7Tm/LE18LXN9cNL3Hz/wkjjbgN3Laz+M yz8Kmy4morM0nj+tQ0O4V2NM+Ohev8TniKiglRToEXMOI+qWHGElVg+UdnnK7y7K 6NvqcvL1qWK1oQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:08:19 2025 by rpki-client