This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft File: 8AoiTeba0aHtExtflbgyMaKryvE.mft (raw, json) Hash identifier: Vs1UCPjoic9voDIOroxwUzfXzYrRMu9Oo/2vBaPkq60= Subject key identifier: CB:BE:95:9C:E8:C2:6E:38:A5:C8:63:ED:39:7D:95:E8:0C:A3:4B:C1 Authority key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1 Certificate issuer: /CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1 Certificate serial: 019AF164141E52CA2DD330CC18A33CBB9EE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft Manifest number: 046B Signing time: Sat 06 Dec 2025 02:00:59 +0000 Manifest this update: Sat 06 Dec 2025 02:00:59 +0000 Manifest next update: Sun 07 Dec 2025 02:00:59 +0000 Files and hashes: 1: 8AoiTeba0aHtExtflbgyMaKryvE.crl (hash: iuo4H5Q3wp0aocR7xlQhhDDsPA+rlvHMCdxh1KSCnLI=) 2: GWuRNScxtrzO8_nSAwKtJ8krFKo.roa (hash: BtQh9X2ueT8vHmbHjBYpzs9GSTTXkl7BLVZXjmS8mp0=) 3: TBV8XL8EuJ9o9oGzIzm8EoRgBys.roa (hash: 0Cql4kgvd07ySH8Z69IoKjqLLTAd4hRTfVwaM91rMF0=) 4: qHH2o0DyGGvFZsG0UvDbftuaafE.roa (hash: kKq7Omvw8T994nGi5bKJ+ng+xxGY7/jkfWqujpmbzDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:14:1e:52:ca:2d:d3:30:cc:18:a3:3c:bb:9e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1 Validity Not Before: Dec 6 02:00:59 2025 GMT Not After : Dec 7 02:00:59 2025 GMT Subject: CN=cbbe959ce8c26e38a5c863ed397d95e80ca34bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:90:e8:5f:83:66:26:3a:48:ae:e3:cc:8e:99: fd:e8:69:3a:87:86:8c:e8:d5:1a:81:2d:a7:1f:95: 08:03:a3:40:1c:61:a6:de:be:d0:20:e0:fa:a2:a2: e7:51:4e:13:59:82:e6:1c:f8:5b:45:bc:83:4d:64: 71:b0:bc:2a:f9:d9:49:0c:4e:00:cd:af:72:85:a3: fb:5f:8a:d7:20:9b:4b:ed:97:3b:b1:32:a5:81:d4: 35:4d:8a:f1:f7:7a:ef:e7:7e:41:57:e7:f1:ff:b2: c6:94:d7:44:59:02:f6:ee:8a:c0:0b:e8:0e:e1:b2: bd:f1:63:ff:a9:bb:c2:36:de:b0:9a:ec:59:83:36: 85:4a:b6:d0:de:1e:95:df:32:e4:9a:7b:4f:33:d1: 35:5c:3b:c7:3f:8b:a1:68:cb:20:c6:72:89:f6:0f: dc:80:a0:98:3c:cb:2b:c5:f1:20:09:7c:44:5f:24: c9:cd:a0:00:17:17:20:01:be:c8:7c:d6:b5:4f:99: c9:93:de:9c:07:0c:d3:ec:d6:8f:c1:1a:e9:c8:ca: 73:fa:d2:2a:43:75:b9:51:9a:ac:0c:37:59:f9:56: 3e:1c:5c:2c:07:0f:88:5b:98:68:94:5b:c4:53:f6: 64:81:cc:11:08:48:65:23:24:24:f5:3c:99:1f:c6: ff:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BE:95:9C:E8:C2:6E:38:A5:C8:63:ED:39:7D:95:E8:0C:A3:4B:C1 X509v3 Authority Key Identifier: keyid:F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:3e:8e:e6:3b:6e:64:05:04:dc:ff:f6:cf:14:e1:d0:20:7e: c8:da:a9:63:93:30:ed:b5:69:4b:2e:ed:d1:43:a2:52:18:83: d8:0d:1c:7d:65:a6:ed:1d:40:c4:5e:16:6e:8b:99:e9:65:a2: 6c:d6:40:8f:71:55:07:be:d7:db:b7:11:18:9d:b7:22:55:d4: 61:53:57:fa:a6:96:a2:08:06:f7:e3:93:08:7f:fe:e5:e3:cc: 38:47:84:cd:57:03:9b:a6:28:25:9a:43:d1:50:4f:f3:b7:db: f4:cc:e4:51:66:ac:93:55:81:ab:80:08:a0:1c:e2:53:32:12: 69:6c:56:55:d7:b1:96:cb:f8:ba:82:1f:3d:1f:dd:31:3b:44: 0b:0f:4d:97:49:c6:d3:d6:ec:ed:24:c5:71:6c:6a:1b:b9:f0: 41:1d:75:47:b2:3f:00:df:9f:80:ec:d6:a9:61:1f:5e:fd:1c: a8:49:3e:5e:74:d5:04:9f:6e:66:41:b7:15:e3:94:df:3d:bc: 09:e3:d7:51:0e:a1:17:7f:24:1f:e0:98:a2:df:aa:2d:d7:3c: f2:aa:96:ff:a9:82:62:03:81:ea:46:2e:60:2c:de:c0:5d:de: d4:08:7b:ae:89:cf:1b:c8:67:92:3f:cc:22:25:45:4d:27:8e: 67:2c:78:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBQeUsot0zDMGKM8u57jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMGEyMjRkZTZkYWQxYTFlZDEzMWI1Zjk1YjgzMjMxYTJh YmNhZjEwHhcNMjUxMjA2MDIwMDU5WhcNMjUxMjA3MDIwMDU5WjAzMTEwLwYDVQQD EyhjYmJlOTU5Y2U4YzI2ZTM4YTVjODYzZWQzOTdkOTVlODBjYTM0YmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZDoX4NmJjpIruPMjpn96Gk6h4aM 6NUagS2nH5UIA6NAHGGm3r7QIOD6oqLnUU4TWYLmHPhbRbyDTWRxsLwq+dlJDE4A za9yhaP7X4rXIJtL7Zc7sTKlgdQ1TYrx93rv535BV+fx/7LGlNdEWQL27orAC+gO 4bK98WP/qbvCNt6wmuxZgzaFSrbQ3h6V3zLkmntPM9E1XDvHP4uhaMsgxnKJ9g/c gKCYPMsrxfEgCXxEXyTJzaAAFxcgAb7IfNa1T5nJk96cBwzT7NaPwRrpyMpz+tIq Q3W5UZqsDDdZ+VY+HFwsBw+IW5holFvEU/ZkgcwRCEhlIyQk9TyZH8b/sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMu+lZzowm44pchj7Tl9legMo0vBMB8GA1UdIwQY MBaAFPAKIk3m2tGh7RMbX5W4MjGiq8rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEFvaVRlYmEwYUh0RXh0ZmxiZ3lNYUtyeXZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83NWU2NTktMDkyZi00ZWU0LTg3MTgt NzUxOWUxMDVhZWRhLzEvOEFvaVRlYmEwYUh0RXh0ZmxiZ3lNYUtyeXZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83NWU2NTktMDkyZi00ZWU0LTg3MTgtNzUxOWUxMDVhZWRh LzEvOEFvaVRlYmEwYUh0RXh0ZmxiZ3lNYUtyeXZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfz6O5jtu ZAUE3P/2zxTh0CB+yNqpY5Mw7bVpSy7t0UOiUhiD2A0cfWWm7R1AxF4WbouZ6WWi bNZAj3FVB77X27cRGJ23IlXUYVNX+qaWoggG9+OTCH/+5ePMOEeEzVcDm6YoJZpD 0VBP87fb9MzkUWask1WBq4AIoBziUzISaWxWVdexlsv4uoIfPR/dMTtECw9Nl0nG 09bs7STFcWxqG7nwQR11R7I/AN+fgOzWqWEfXv0cqEk+XnTVBJ9uZkG3FeOU3z28 CePXUQ6hF38kH+CYot+qLdc88qqW/6mCYgOB6kYuYCzewF3e1Ah7ronPG8hnkj/M IiVFTSeOZyx4Sw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:36 2025 by rpki-client