This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft File: aMDy0Hdvfh00kHWIHDXp04dGNAU.mft (raw, json) Hash identifier: EUy68KbYmXKVoZwdwTUYjWR4gpGodNRmJmehaHsMxQI= Subject key identifier: AC:97:C3:BE:D1:AF:3E:44:10:5B:B1:99:53:11:1A:11:05:1B:A2:4A Authority key identifier: 68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05 Certificate issuer: /CN=68c0f2d0776f7e1d349075881c35e9d387463405 Certificate serial: 019B2475E148B0FA191214E2F18807ACD26D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft Manifest number: 08D2 Signing time: Tue 16 Dec 2025 00:01:03 +0000 Manifest this update: Tue 16 Dec 2025 00:01:03 +0000 Manifest next update: Wed 17 Dec 2025 00:01:03 +0000 Files and hashes: 1: 9Cor9nA5STtdeNAPJ4EF2UhIUNY.roa (hash: 2Xypo5/I10KMSVc6sd5OAZl2260JQAWQGDIcFZqWthg=) 2: 9L1jJAO_HMQ73m0y2wPc0NTq508.roa (hash: dppWJh2OxH8+hUL7V9AV0LikKL7kW2xpJmDuGMTyRBM=) 3: BofSOCqR9lVaW3XPh8s-hTi0YA4.roa (hash: GjLb3/wGRJd3Eao5cHxTciBM+9F+oErcKi5PWIvkCug=) 4: aMDy0Hdvfh00kHWIHDXp04dGNAU.crl (hash: XpAD9KAddn6b/e8PAmgIq1oEQOojr1MAdFUOZMxV8kg=) 5: pGJ6hykI0SezIUBll3Bejkc4eK8.roa (hash: LOy2PAU5LyGNlvT8G9Ei0trOR6p2w0dY/EWeeNGTATo=) 6: sid7Fz4p9LsUb435z4rlURheO5M.roa (hash: tKFwC0bd+BEOCIW21NmrzUtEhbV3IutUiWL0BmRO0A8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:75:e1:48:b0:fa:19:12:14:e2:f1:88:07:ac:d2:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c0f2d0776f7e1d349075881c35e9d387463405 Validity Not Before: Dec 16 00:01:03 2025 GMT Not After : Dec 17 00:01:03 2025 GMT Subject: CN=ac97c3bed1af3e44105bb19953111a11051ba24a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:48:31:9c:fd:6b:49:98:e6:ac:b3:33:06:62: 1e:61:72:e4:6d:a6:a8:e1:a8:55:57:d3:1d:ae:08: c1:71:ba:ff:7e:34:c7:2b:72:86:d1:8e:96:6e:ac: 19:66:93:9a:08:99:fc:89:02:85:ac:17:c4:43:b8: e9:67:e2:79:e1:71:17:62:28:57:01:20:ba:ef:2a: 5c:9e:e9:e4:91:08:3f:8a:81:5a:69:c3:90:14:fc: 50:15:c4:94:5f:a0:8d:2a:03:8b:4a:dc:e4:4f:2d: e8:87:f7:77:5e:56:46:26:9a:02:35:5c:22:9d:8a: 30:9e:f8:e5:68:50:71:aa:65:a4:6d:64:24:b2:de: a7:1d:30:53:43:1e:c2:65:6a:ed:da:ad:34:5b:0f: 5d:c9:b7:43:81:d3:e1:a2:ea:2b:a3:47:1e:b0:db: 22:36:d6:1b:cf:0c:d3:9d:cf:74:e6:85:f1:a0:7f: 99:af:c7:06:3f:ba:d6:54:6b:13:7f:53:43:e9:f7: 64:b6:1a:94:a4:ce:73:02:45:fa:e4:f2:e4:78:a7: 1f:7c:8c:90:77:15:45:05:4c:d6:52:4b:d9:21:a0: 69:34:4f:fd:2f:a4:8f:91:c6:9f:bf:1c:f2:40:2c: e7:6d:02:8d:fc:e7:3a:ce:47:a0:32:6f:63:fa:0a: 01:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:97:C3:BE:D1:AF:3E:44:10:5B:B1:99:53:11:1A:11:05:1B:A2:4A X509v3 Authority Key Identifier: keyid:68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:77:f7:01:bc:22:ec:1c:9d:55:af:7e:e9:58:13:f4:5a:65: 79:6d:cf:88:9a:64:0c:66:b1:82:db:9e:bb:5c:7b:8d:77:c2: 18:da:54:6c:ed:6b:88:4f:f9:df:f5:28:09:b8:08:e8:4e:84: e9:18:70:66:4a:6a:fe:44:ef:ea:ed:8e:b0:b1:3e:e9:a3:2e: 58:d9:20:0f:f8:32:ee:cb:6f:1f:c9:38:16:bc:1b:1e:63:2d: 5c:44:b7:ef:5c:8d:7d:dc:3a:91:47:0a:60:a9:53:ef:49:8a: f5:d5:72:52:28:13:33:e9:fe:34:54:49:d0:a6:2a:ac:61:4b: c5:fb:45:8f:29:0c:13:32:65:e1:f9:f6:b1:6b:44:eb:e5:ea: 3f:40:49:7f:16:2a:1f:ad:d2:e1:3f:af:4a:8e:d5:7f:a8:55: 22:fd:e0:41:e9:9a:c0:3c:1e:e7:58:38:b4:fe:ee:cb:14:56: aa:b3:8e:f7:c0:22:6c:08:04:8d:2a:0c:eb:f9:ab:b6:55:df: c5:47:80:ce:e1:08:10:1a:97:32:da:68:b4:2c:c0:8f:67:79: 98:b5:70:0a:e6:e2:6d:8f:61:af:51:56:ea:b5:63:c4:e6:d4: 31:9a:bd:b7:73:ac:6d:7b:d5:74:b8:1c:b1:c3:af:65:72:cd: 2e:b4:77:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdeFIsPoZEhTi8YgHrNJtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzBmMmQwNzc2ZjdlMWQzNDkwNzU4ODFjMzVlOWQzODc0 NjM0MDUwHhcNMjUxMjE2MDAwMTAzWhcNMjUxMjE3MDAwMTAzWjAzMTEwLwYDVQQD EyhhYzk3YzNiZWQxYWYzZTQ0MTA1YmIxOTk1MzExMWExMTA1MWJhMjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUgxnP1rSZjmrLMzBmIeYXLkbaao 4ahVV9MdrgjBcbr/fjTHK3KG0Y6WbqwZZpOaCJn8iQKFrBfEQ7jpZ+J54XEXYihX ASC67ypcnunkkQg/ioFaacOQFPxQFcSUX6CNKgOLStzkTy3oh/d3XlZGJpoCNVwi nYownvjlaFBxqmWkbWQkst6nHTBTQx7CZWrt2q00Ww9dybdDgdPhouoro0cesNsi NtYbzwzTnc905oXxoH+Zr8cGP7rWVGsTf1ND6fdkthqUpM5zAkX65PLkeKcffIyQ dxVFBUzWUkvZIaBpNE/9L6SPkcafvxzyQCznbQKN/Oc6zkegMm9j+goBpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyXw77Rrz5EEFuxmVMRGhEFG6JKMB8GA1UdIwQY MBaAFGjA8tB3b34dNJB1iBw16dOHRjQFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1EeTBIZHZmaDAwa0hXSUhEWHAwNGRHTkFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84NGVlZGMtYTJmNi00YTM5LWE5MTgt ZjlkOWMwM2Q0YjRjLzEvYU1EeTBIZHZmaDAwa0hXSUhEWHAwNGRHTkFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS84NGVlZGMtYTJmNi00YTM5LWE5MTgtZjlkOWMwM2Q0YjRj LzEvYU1EeTBIZHZmaDAwa0hXSUhEWHAwNGRHTkFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3f3Abwi 7BydVa9+6VgT9FpleW3PiJpkDGaxgtueu1x7jXfCGNpUbO1riE/53/UoCbgI6E6E 6RhwZkpq/kTv6u2OsLE+6aMuWNkgD/gy7stvH8k4FrwbHmMtXES371yNfdw6kUcK YKlT70mK9dVyUigTM+n+NFRJ0KYqrGFLxftFjykMEzJl4fn2sWtE6+XqP0BJfxYq H63S4T+vSo7Vf6hVIv3gQemawDwe51g4tP7uyxRWqrOO98AibAgEjSoM6/mrtlXf xUeAzuEIEBqXMtpotCzAj2d5mLVwCubibY9hr1FW6rVjxObUMZq9t3OsbXvVdLgc scOvZXLNLrR3SQ== -----END CERTIFICATE-----Generated at Tue Dec 16 10:49:20 2025 by rpki-client