This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft File: J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft (raw, json) Hash identifier: QNb/aUM9fLA/5QOWdOBgosdUK3DLWkBNABrF17ewkTY= Subject key identifier: 79:6B:C9:3F:00:F2:CD:05:69:B2:44:2F:E4:E4:E5:57:A1:93:43:06 Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Certificate serial: 019B34C591306B7B235FFA1CE664A8C9B234 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft Manifest number: 0CE4 Signing time: Fri 19 Dec 2025 04:02:01 +0000 Manifest this update: Fri 19 Dec 2025 04:02:01 +0000 Manifest next update: Sat 20 Dec 2025 04:02:01 +0000 Files and hashes: 1: 3N9aZ8zTSdZQ6ZvfIiyQMbKeNPE.roa (hash: VzMo5OEH6WAO4xNi9N0ubLSFEAUrDTWn6IFMnfmYKL4=) 2: 4Q0OMlDeRzDSOzAw8LxkvQaDF7E.roa (hash: U7GjqbV2dOQXajvpmYRAMgZ0b0HIaEV5bZmn2apsyWk=) 3: BhUouDec_qIuL9ykpJ14UlZA-QM.roa (hash: 8yFW2hqVAr5xf6x8b1tEfXwA8rQJPiCbK72VY0EAl8E=) 4: GIpX64dJ6HZBn7pYOJNMhZ7z2Wk.roa (hash: PjZLxgP6snPECokGBM26BsZLn+FL8XwBYAL6/1qDHeI=) 5: IZdk74hSrnh74ZynVfW7EO53suI.roa (hash: 5Lf7wqH7b2uz1cEp7iE8xbZTzdwcRRNn/RAvAhVoRXw=) 6: J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl (hash: yXMj+8kv/ZQ69Tm3y/CwreOHBe3KrEw9uwR+cB4tU6Y=) 7: RXaHa7HQXaOor19kJAnyP5kxxU0.roa (hash: 1Jda3owwY018JsVQMIcmSKXtEtxhwgl86WeJsxIjRh4=) 8: dGW1FU7WEhTZHuwZkZW6nRc7oyw.roa (hash: b3jMX68O+rKcLGgMZNQr4ecBhH3oDiVmJuYCs2ww/m4=) 9: oQEA3DnBm500dJBYY9a5KgZXmQQ.roa (hash: TzJe0tF7p07+4ocoJWUSx+pyInMnz9/Rqe/WjvQu6+Q=) 10: sI3owle2SK5hDtoXgnXqvnb2Lig.roa (hash: h/A8g/6518BnZmSBn+Xa4u50/hcauxf7ASYtMTXTA3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:91:30:6b:7b:23:5f:fa:1c:e6:64:a8:c9:b2:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Validity Not Before: Dec 19 04:02:01 2025 GMT Not After : Dec 20 04:02:01 2025 GMT Subject: CN=796bc93f00f2cd0569b2442fe4e4e557a1934306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:41:99:bf:52:60:f6:56:74:b1:21:b1:5c:7f: 33:1e:23:80:62:6a:e4:d9:7a:82:79:61:35:66:76: 1c:79:5a:20:8a:53:e3:4c:61:f1:9c:a7:79:62:72: 79:ea:f6:50:69:c0:d2:14:b5:f6:fe:be:71:ed:52: 60:8d:9e:3a:19:b8:c4:94:bf:25:5c:34:83:92:dc: fa:04:f8:e6:a9:6d:1f:ed:72:55:14:3c:c3:22:fe: d4:83:90:22:12:af:89:42:aa:54:75:c2:7d:06:64: 5a:a3:3b:1b:40:89:4b:ed:05:00:05:e6:51:ff:b6: c9:0f:d2:e7:92:e1:9e:c7:24:aa:0d:66:16:50:94: e7:4a:c5:39:c1:e9:15:25:9d:2c:eb:7b:d2:42:76: 8d:71:c0:b4:5c:b1:0c:8c:ff:ec:f9:db:d2:52:f2: 11:f2:cf:d1:2d:a2:30:31:02:62:a4:de:fb:f8:7c: 54:5c:f8:23:63:ad:f1:e9:55:8b:48:54:93:4b:c9: da:e0:1a:a4:69:07:7d:db:98:44:26:6e:4d:71:a9: 55:c4:00:d8:77:06:8d:c6:6f:5e:a8:a8:c9:d3:3f: f8:63:bd:bf:27:dd:cd:f2:1f:ec:04:b4:42:9c:4f: d5:e1:99:89:70:f2:5d:e0:c5:de:dd:75:7c:c8:be: c5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6B:C9:3F:00:F2:CD:05:69:B2:44:2F:E4:E4:E5:57:A1:93:43:06 X509v3 Authority Key Identifier: keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:22:6c:d5:fd:98:d6:9e:f4:09:93:16:72:05:60:db:ee:a5: 17:2a:5b:b0:16:e1:44:68:86:dc:ce:25:96:f8:36:53:d5:e6: 9a:49:c0:f0:cc:24:9c:fc:db:81:7f:89:ed:97:c7:6a:e7:d7: 70:3f:ff:84:ac:b4:02:1a:fd:8e:a0:9d:20:be:3b:fb:1f:e8: c7:98:e2:ab:e0:4b:05:73:bc:47:75:00:dd:fb:a1:51:63:3b: 85:ee:b2:da:23:af:e6:0e:47:99:84:df:5f:dc:ed:e7:6c:36: 8f:25:ab:e3:6b:56:dc:71:91:c5:b7:0f:63:8f:ee:da:86:6b: 38:95:99:70:e1:48:dd:ae:4a:d0:92:0e:6e:e3:d9:80:99:f8: 9f:f7:65:92:c9:5c:80:b5:b9:0e:8d:68:bc:ce:87:15:d9:c5: 48:d5:9c:23:54:d5:b1:71:04:ab:40:e2:e2:3d:e9:fe:b6:8b: 09:d4:43:70:42:2a:b2:f0:9f:9b:9e:b9:dc:2f:47:be:52:2e: 8c:ac:52:cb:19:0c:d5:33:41:ab:9c:a5:20:7d:99:1e:84:fd: b5:c4:3c:91:00:ed:03:95:ed:ce:6d:9e:78:38:88:c5:0e:42: 56:54:66:c0:08:53:6c:92:0c:56:22:28:7c:11:e1:91:56:bf: d6:da:35:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xZEwa3sjX/oc5mSoybI0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5 ZmMyYzkwHhcNMjUxMjE5MDQwMjAxWhcNMjUxMjIwMDQwMjAxWjAzMTEwLwYDVQQD Eyg3OTZiYzkzZjAwZjJjZDA1NjliMjQ0MmZlNGU0ZTU1N2ExOTM0MzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEGZv1Jg9lZ0sSGxXH8zHiOAYmrk 2XqCeWE1ZnYceVogilPjTGHxnKd5YnJ56vZQacDSFLX2/r5x7VJgjZ46GbjElL8l XDSDktz6BPjmqW0f7XJVFDzDIv7Ug5AiEq+JQqpUdcJ9BmRaozsbQIlL7QUABeZR /7bJD9LnkuGexySqDWYWUJTnSsU5wekVJZ0s63vSQnaNccC0XLEMjP/s+dvSUvIR 8s/RLaIwMQJipN77+HxUXPgjY63x6VWLSFSTS8na4BqkaQd925hEJm5NcalVxADY dwaNxm9eqKjJ0z/4Y72/J93N8h/sBLRCnE/V4ZmJcPJd4MXe3XV8yL7FCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlryT8A8s0FabJEL+Tk5Vehk0MGMB8GA1UdIwQY MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct MWM2ZWU0NGUxMWFkLzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiJs1f2Y 1p70CZMWcgVg2+6lFypbsBbhRGiG3M4llvg2U9XmmknA8MwknPzbgX+J7ZfHaufX cD//hKy0Ahr9jqCdIL47+x/ox5jiq+BLBXO8R3UA3fuhUWM7he6y2iOv5g5HmYTf X9zt52w2jyWr42tW3HGRxbcPY4/u2oZrOJWZcOFI3a5K0JIObuPZgJn4n/dlkslc gLW5Do1ovM6HFdnFSNWcI1TVsXEEq0Di4j3p/raLCdRDcEIqsvCfm5653C9HvlIu jKxSyxkM1TNBq5ylIH2ZHoT9tcQ8kQDtA5Xtzm2eeDiIxQ5CVlRmwAhTbJIMViIo fBHhkVa/1to1rw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:49:03 2025 by rpki-client