This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft File: m8c4G4L5davxnX1QGo2QvNxDnwY.mft (raw, json) Hash identifier: 71r2cMwzGQGBqhcks7F+U02hGqIgRhNNgSeofTsDVW0= Subject key identifier: C4:DB:76:0E:28:26:CB:C6:A2:FD:B3:5F:9D:34:D2:B4:79:D4:BF:75 Authority key identifier: 9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06 Certificate issuer: /CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06 Certificate serial: 019AF1642D1ABB0E55522505DA5B1EDD8183 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft Manifest number: 0AC1 Signing time: Sat 06 Dec 2025 02:01:05 +0000 Manifest this update: Sat 06 Dec 2025 02:01:05 +0000 Manifest next update: Sun 07 Dec 2025 02:01:05 +0000 Files and hashes: 1: 4AyeZ6UgoSX9es2BbU_DizGhUdY.roa (hash: VWKfnEijREHtHZ2eztHBUGUXBqi65LO9HiloDpo6nX4=) 2: m8c4G4L5davxnX1QGo2QvNxDnwY.crl (hash: gZf8+tLfvZZeFC7bG84Bw+4cpvAUK9Iwdhn92BbLU4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:2d:1a:bb:0e:55:52:25:05:da:5b:1e:dd:81:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06 Validity Not Before: Dec 6 02:01:05 2025 GMT Not After : Dec 7 02:01:05 2025 GMT Subject: CN=c4db760e2826cbc6a2fdb35f9d34d2b479d4bf75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f0:be:9f:22:ba:b9:56:41:69:ef:e4:bd:2f: f1:3d:3f:00:ee:35:f5:3e:0c:f4:5e:55:b9:ce:a6: d1:4b:76:9b:b7:47:ea:c9:9f:2f:bd:37:8a:de:74: a8:2b:d7:25:80:8e:b5:5c:d4:1b:cb:00:33:ef:ef: c5:42:75:b2:7e:8f:b1:fd:c1:e7:9d:8c:c9:02:6e: a1:de:87:f3:68:e2:dd:36:15:ab:02:10:db:fa:2b: 55:a1:38:06:1a:21:74:c2:d8:8d:a4:db:27:2a:1f: 13:27:9f:b3:be:3c:05:01:27:83:27:a8:82:15:24: 73:81:0c:21:cd:ff:ee:4b:06:44:e5:bb:c2:b9:c4: d1:6c:61:8a:7f:74:2f:58:53:3d:79:6c:a1:d5:8d: b3:98:61:a4:02:c3:76:71:d5:69:a1:19:b0:46:42: 6b:c8:1a:ff:76:43:3b:7c:b1:78:7b:38:cc:e9:88: 5f:71:f1:59:b5:c6:8e:7d:fa:dd:32:c4:08:15:05: fc:0c:1c:61:64:6c:04:50:12:45:21:5c:8d:76:e9: 2a:c5:db:18:ba:f8:41:a8:1b:a3:03:52:e0:7c:f8: 65:55:c2:58:ce:52:05:8d:c7:4d:4d:d9:76:78:f9: 06:3e:1f:15:9e:fd:a4:7a:9e:0a:89:e1:c2:0d:7c: 2e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DB:76:0E:28:26:CB:C6:A2:FD:B3:5F:9D:34:D2:B4:79:D4:BF:75 X509v3 Authority Key Identifier: keyid:9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:eb:33:d5:35:3a:4f:de:18:69:e1:fd:e5:71:e0:33:b0:21: a0:4f:2f:69:ed:6d:0e:50:f8:33:7f:22:8e:3e:4b:36:7b:bd: 5b:4d:17:b7:91:52:e5:52:78:fd:78:8c:29:77:3b:b5:b8:e7: dc:1b:d3:68:db:7f:fe:93:fe:21:bc:0c:1a:b2:21:43:98:ba: 80:c0:39:60:ea:75:5a:97:3a:25:2f:74:42:4d:b2:ef:e1:dc: 1a:ba:9a:69:df:84:56:30:f5:73:36:9c:0e:9e:b7:9f:63:ce: 4c:78:cc:a1:3b:f4:9e:4b:eb:a9:d6:24:b3:b6:55:72:2f:e6: da:01:51:11:59:e5:1f:29:dc:53:72:4c:00:89:f6:ab:3d:0a: 0d:a5:44:60:bc:16:dd:ed:2d:37:5a:eb:5f:d3:14:fb:07:b3: cc:a1:26:d2:98:c6:76:eb:f0:dd:bc:c9:8a:62:6d:83:6f:35: 2c:b2:21:b6:8a:0b:69:86:21:23:3b:18:d0:c4:98:d2:b2:c7: 78:6b:5c:84:cd:f4:1c:00:3c:05:f7:22:20:30:d2:ae:2d:da: 16:2d:3a:f2:5d:69:01:5f:27:fc:a5:45:60:bc:0f:70:3c:c5: 38:76:74:a0:74:1f:bf:2a:e4:a6:a0:87:c4:56:64:f8:c1:44: 19:2f:8e:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZC0auw5VUiUF2lse3YGDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYzczODFiODJmOTc1YWJmMTlkN2Q1MDFhOGQ5MGJjZGM0 MzlmMDYwHhcNMjUxMjA2MDIwMTA1WhcNMjUxMjA3MDIwMTA1WjAzMTEwLwYDVQQD EyhjNGRiNzYwZTI4MjZjYmM2YTJmZGIzNWY5ZDM0ZDJiNDc5ZDRiZjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/C+nyK6uVZBae/kvS/xPT8A7jX1 Pgz0XlW5zqbRS3abt0fqyZ8vvTeK3nSoK9clgI61XNQbywAz7+/FQnWyfo+x/cHn nYzJAm6h3ofzaOLdNhWrAhDb+itVoTgGGiF0wtiNpNsnKh8TJ5+zvjwFASeDJ6iC FSRzgQwhzf/uSwZE5bvCucTRbGGKf3QvWFM9eWyh1Y2zmGGkAsN2cdVpoRmwRkJr yBr/dkM7fLF4ezjM6YhfcfFZtcaOffrdMsQIFQX8DBxhZGwEUBJFIVyNdukqxdsY uvhBqBujA1LgfPhlVcJYzlIFjcdNTdl2ePkGPh8Vnv2kep4KieHCDXwu5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTbdg4oJsvGov2zX5000rR51L91MB8GA1UdIwQY MBaAFJvHOBuC+XWr8Z19UBqNkLzcQ58GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbThjNEc0TDVkYXZ4blgxUUdvMlF2TnhEbndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82YmYyMzItMWEyOC00YWE0LThlYmQt YmY3ZmE5NGQyYTRlLzEvbThjNEc0TDVkYXZ4blgxUUdvMlF2TnhEbndZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS82YmYyMzItMWEyOC00YWE0LThlYmQtYmY3ZmE5NGQyYTRl LzEvbThjNEc0TDVkYXZ4blgxUUdvMlF2TnhEbndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHusz1TU6 T94YaeH95XHgM7AhoE8vae1tDlD4M38ijj5LNnu9W00Xt5FS5VJ4/XiMKXc7tbjn 3BvTaNt//pP+IbwMGrIhQ5i6gMA5YOp1Wpc6JS90Qk2y7+HcGrqaad+EVjD1czac Dp63n2POTHjMoTv0nkvrqdYks7ZVci/m2gFREVnlHyncU3JMAIn2qz0KDaVEYLwW 3e0tN1rrX9MU+wezzKEm0pjGduvw3bzJimJtg281LLIhtooLaYYhIzsY0MSY0rLH eGtchM30HAA8BfciIDDSri3aFi068l1pAV8n/KVFYLwPcDzFOHZ0oHQfvyrkpqCH xFZk+MFEGS+Ovg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:21 2025 by rpki-client