This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft File: b8zf_aakxIkUtejN59pdgguclxg.mft (raw, json) Hash identifier: pNC8PtpDLrj+dTGrvnuLh1znzASOvf/r4fFiOIU2seg= Subject key identifier: A1:D7:AB:F8:29:FE:B0:1D:0B:5F:EC:16:0F:F2:BE:C1:C0:21:5A:6B Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18 Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718 Certificate serial: 019AF1642E92DD07586375097045BA59A49D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft Manifest number: 1774 Signing time: Sat 06 Dec 2025 02:01:05 +0000 Manifest this update: Sat 06 Dec 2025 02:01:05 +0000 Manifest next update: Sun 07 Dec 2025 02:01:05 +0000 Files and hashes: 1: 1YG59nbjYSEp8Dz6f0mC_6gefpg.roa (hash: 5tVXqxotHLEXF9KoqmQT6ylsFbR/apsye3JTV81hRBQ=) 2: DWHdsFsQlnFJcyPewoXT0lDFpvE.roa (hash: V6x8BrWgOBTucNWB1MpK3cn6rjM3I3+oPKM+8Z7R5vA=) 3: GQpZM-fB0ZkxzCRMqCw0f9N7tyU.roa (hash: KTppITpJ7wsyB8SXrbAMqiKKxUwVykbBRMICRs5VO4A=) 4: K221sfSU8a2Lsy0QMVbBz-yAHyg.roa (hash: kybj+mQFwM3CNEIgEWcR7xMFvyhG9N8dFqe0X/0hhYM=) 5: b8zf_aakxIkUtejN59pdgguclxg.crl (hash: iAxW+al/Qo8vX46FcRRn1U8aucS2u/jh3Gu3XobB0EA=) 6: hZBu7FQZVkKtWXL58gH8ufcnrgg.roa (hash: R2fcFnCqnbmbHv/RiPE81tSq/ElozG/l/Ezav5iqgYw=) 7: j93BEME5b_K-Zki214QPN4kzqeg.roa (hash: hcvpDseLA+C6KaXIoA6Bv3d4XdBkZlvTz5OO4bMB8oo=) 8: rqGlBLIWA_KsyY5dvVKcudAzYvY.roa (hash: 5OHCdN2GkrUd/qPuHKRYVHvCHLeex3MBnLChYf7HEzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:2e:92:dd:07:58:63:75:09:70:45:ba:59:a4:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718 Validity Not Before: Dec 6 02:01:05 2025 GMT Not After : Dec 7 02:01:05 2025 GMT Subject: CN=a1d7abf829feb01d0b5fec160ff2bec1c0215a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:95:73:ce:21:d1:95:47:ff:e4:d6:e0:d0:2e: 1f:56:a9:19:ed:a9:d6:ac:24:ec:42:7b:0b:41:41: e8:fa:93:8f:36:f5:d0:46:b4:eb:5a:88:f0:3b:74: bd:dd:a0:4b:d4:ef:0f:64:2a:99:23:5f:bb:e0:a5: 05:f1:0d:75:ba:a4:61:88:44:7d:96:4f:0e:71:da: f7:95:89:00:6a:eb:e7:14:55:1d:e9:1c:a8:90:e0: e2:12:81:df:b7:f1:f4:7a:37:65:d0:a8:1e:e7:ad: 1b:b4:34:bb:89:d0:53:d5:44:bb:7e:9a:3d:2b:88: fb:0a:e7:60:3c:7a:fb:8d:5d:59:7a:9f:8b:ab:39: 58:ec:8d:6f:5c:3e:4d:f2:07:82:bc:c9:15:ce:df: 34:5b:81:fb:c3:7f:49:f6:2e:ec:9f:20:19:2b:23: f2:c1:78:85:ae:0f:41:f0:0c:63:c1:b7:8a:52:4d: 15:7d:1a:8d:51:02:d7:e5:00:a3:13:e8:93:e7:e8: f2:23:a2:d6:c7:4b:29:e1:77:71:d1:f7:58:c3:71: b6:d1:de:53:83:2a:a8:a5:e3:71:2a:2c:3e:fc:80: 81:2d:d8:96:6c:ba:37:fe:b5:88:70:99:96:24:b1: b5:f0:d4:db:1e:4b:dc:19:77:89:cf:93:75:59:59: 96:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D7:AB:F8:29:FE:B0:1D:0B:5F:EC:16:0F:F2:BE:C1:C0:21:5A:6B X509v3 Authority Key Identifier: keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:e9:6a:71:2e:70:7f:aa:26:10:26:37:4f:04:0e:15:12:2d: 1f:ab:11:a2:92:97:89:07:26:21:4e:9d:59:ab:23:7e:c3:e1: 8d:82:1e:4b:b5:c6:e5:40:4d:98:3c:4e:41:51:a4:85:54:d7: 65:a4:a8:30:93:05:7d:98:f9:da:b1:fd:27:08:6d:a7:12:9e: 19:d0:28:c1:2d:5f:70:dd:8c:b6:15:9b:1d:8f:f9:2e:75:59: 43:bd:b5:ba:ed:29:15:95:88:c9:d2:a3:a9:50:44:fd:ff:9e: 63:62:57:ec:f1:c1:69:df:f2:c2:4b:a3:8c:c2:53:c3:0e:34: e3:99:d0:dd:30:1f:06:38:2d:b4:55:5b:7b:8e:b3:5a:1a:3f: c6:f1:e9:be:d2:c2:ec:4e:75:39:6f:5e:d0:f2:7f:b6:b4:bc: 58:d3:81:04:f9:c1:79:83:93:54:70:a5:2f:21:bf:d2:1e:a4: 59:ac:36:8f:f1:7b:54:22:16:9a:f6:b9:9d:53:75:fd:d9:f1: 1f:cf:7b:ea:d6:e5:c9:15:e7:83:8a:9c:be:03:97:8c:1f:44: e6:6b:c7:61:10:ed:db:7f:34:c3:36:5b:10:ba:6e:bf:00:e1: c8:01:38:54:e9:a6:42:aa:3f:59:60:90:95:e5:83:76:ca:13: 32:40:a1:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZC6S3QdYY3UJcEW6WaSdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmY2NkZmZkYTZhNGM0ODkxNGI1ZThjZGU3ZGE1ZDgyMGI5 Yzk3MTgwHhcNMjUxMjA2MDIwMTA1WhcNMjUxMjA3MDIwMTA1WjAzMTEwLwYDVQQD EyhhMWQ3YWJmODI5ZmViMDFkMGI1ZmVjMTYwZmYyYmVjMWMwMjE1YTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspVzziHRlUf/5Nbg0C4fVqkZ7anW rCTsQnsLQUHo+pOPNvXQRrTrWojwO3S93aBL1O8PZCqZI1+74KUF8Q11uqRhiER9 lk8Ocdr3lYkAauvnFFUd6RyokODiEoHft/H0ejdl0Kge560btDS7idBT1US7fpo9 K4j7CudgPHr7jV1Zep+LqzlY7I1vXD5N8geCvMkVzt80W4H7w39J9i7snyAZKyPy wXiFrg9B8AxjwbeKUk0VfRqNUQLX5QCjE+iT5+jyI6LWx0sp4Xdx0fdYw3G20d5T gyqopeNxKiw+/ICBLdiWbLo3/rWIcJmWJLG18NTbHkvcGXeJz5N1WVmWbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHXq/gp/rAdC1/sFg/yvsHAIVprMB8GA1UdIwQY MBaAFG/M3/2mpMSJFLXozefaXYILnJcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQt YTc3NGU0MWQyNjRjLzEvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQtYTc3NGU0MWQyNjRj LzEvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOlqcS5w f6omECY3TwQOFRItH6sRopKXiQcmIU6dWasjfsPhjYIeS7XG5UBNmDxOQVGkhVTX ZaSoMJMFfZj52rH9JwhtpxKeGdAowS1fcN2MthWbHY/5LnVZQ721uu0pFZWIydKj qVBE/f+eY2JX7PHBad/ywkujjMJTww4045nQ3TAfBjgttFVbe46zWho/xvHpvtLC 7E51OW9e0PJ/trS8WNOBBPnBeYOTVHClLyG/0h6kWaw2j/F7VCIWmva5nVN1/dnx H8976tblyRXng4qcvgOXjB9E5mvHYRDt2380wzZbELpuvwDhyAE4VOmmQqo/WWCQ leWDdsoTMkChlA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:23:20 2025 by rpki-client