This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
File: 8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft (raw, json)
Hash identifier: oqEGPJwKPTJzQDhoPhrSnu17GmJ4cpOlspXTaRwC+aU=
Subject key identifier: 85:2F:A2:2B:A1:AE:D7:68:96:CE:4D:8D:67:19:5D:97:DE:7C:1D:1A
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019AF0510D69C1A69FED254E304E0287EED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
Manifest number: 1832
Signing time: Fri 05 Dec 2025 21:00:34 +0000
Manifest this update: Fri 05 Dec 2025 21:00:34 +0000
Manifest next update: Sat 06 Dec 2025 21:00:34 +0000
Files and hashes: 1: 3nPG-CM1jjEmXF6XDlPgCgntfQg.roa (hash: Sb1ZHVgBDy5ifPkmmrVoXHsKaHLar+3PzllY+7Vhpsc=)
2: 4bHfzm1fuJUKFdFvq81Zj1J7nZ8.roa (hash: cYPYZrlg6fQ6IO6sn0agmIqG6bfzhmVqtlsX+KCd26U=)
3: 4vo2mZ5vkhxU7uSwqosdL3JTchM.roa (hash: lZHVKHYSQoDjaWruIiT3TKxTEHZ6ZEU8I5OK9fcl8f0=)
4: 6wIUZIBC7o21wltDwigx7lx782g.roa (hash: KsD2qATWnlH1JI+kDKAmMhUibT7qf+G28GI+6ncf2G8=)
5: 8LiKyExS9yKyeuuVYA6WBSbIbnY.roa (hash: RB436KqkjHTmxSSzIRYR38pGLg6GsnctCMOI8v0caHw=)
6: 8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl (hash: ejOYPi2L+v660iQu0veu0VqGkgloQpAAAjycoj+X5I0=)
7: 9-Y0aWZrtpwstXXpKAi4n__bel4.roa (hash: GAFuW8iAmDtblZCnA4ow69qvWKaKSY18TY/SvaQs/uE=)
8: 9VNQxMGo2w5-fqVBLCZ6PUiMSr8.roa (hash: r9B2NrNcCL1IbHEMQ2e6VWbR42EMOv3qQYj9s2HeM6o=)
9: CBfKytqpvt0tAB2PjVjEtEOii5Y.roa (hash: i27ozZoSMlAv0My0Jipe0pJfvbBrT7aRoob1vtMvHMc=)
10: DBpPzVAJ7ffd9hRybzp4I24ULrQ.roa (hash: +tGo0Qp78/hxqU6nAPOOfS0khothV/W+YPIlZ6ERGGY=)
11: EvUwB6ZCx4IU6_ZoW6bYlSDCFqk.roa (hash: gmkGHYqKxDCqtYbJRJf1ZjpQV4FPkXqmKecKGoXCqA4=)
12: FKODHcMCbVnlraW8e3pZVW4Jt1U.roa (hash: on2RzMiODWuSmU08fPG+UPwP9nXYGCG9yiUDZkxUHqE=)
13: FxTPp2SnMGGNkJ7P2_Ob53WyM0Y.roa (hash: 9G0u1WX4afGR4k9YBZZfwrLJucjXCIiwYEnAJ/9iwVU=)
14: G9dZ5r4m371OBTQhAUF2j7baz7Y.roa (hash: B7NSm9g64XLALIBjI5GU/NjrZiQcCShIB/93FWdmyPM=)
15: KRkXrh5vqktxAukUYwKEkf01PR4.roa (hash: FhB06ea4PPxnlbrSmHt+yVwcmkem9lE6fs+aLQmy5mg=)
16: KrWDygO_9DtYqIorptYeROl4N3w.roa (hash: k5aiBUndGFKp4OHVpYLdcE+xHBzKpPgtYqzqEoZSL4U=)
17: NYN9WiXGNsG_8fWXEG6QoadN1p0.roa (hash: 83Uc8qCBBqNcIws7dgz2pUX5jtWGpKdkbMsqvj+i/wk=)
18: P2ie-v_e1qakswKBkYe8ZLKWxEc.roa (hash: Pu7A+yMkzaTHEk1fItsWmMW/+SCDTYOw3FWfhMAzaK4=)
19: QXixlGT-IWBWMs-K9puON_m-KlA.roa (hash: hug41wpb3u0mBV1YR0lUs8u3c04vJ26g36R8fCXqj3A=)
20: R62AVX9PSX_LR3e7BXrfaNWa-sk.roa (hash: YzMi859O+qBTTC6gsM6vWbR1mp+LYP/rXN/pWI8xAyk=)
21: UKHZWUb2QMnIeyFceeYsJyNs2dE.roa (hash: R5MOCmFKtRGlB3Py2M6AJaYUWsq318YC7IDgmUdJw+k=)
22: UoGs33ehV6v5YodhN8tTxiWVNtU.roa (hash: E9HM/q71F+Mpfbq04NVikW5FRuRd7qmapJHOZOvHtgo=)
23: ZWCXXdfhMKu44PX-A6YEp2UiZPA.roa (hash: QZ9nw6Rb8b+5Ipz/WfFz/MQUV3NqW6gj+wcTZJ283/A=)
24: bbrVRJCo_Kq0jG62YGVKV5kqDnQ.roa (hash: 0LSMM83OGpO+BicY5IpwKPs75GhmmsY9wivMtlBMixg=)
25: cQXbLD3t1saXEnISbFZ-Z9wBcuo.roa (hash: BitU7YdfmBPoL8mPTYZZ6Qt04sbtc1LwooL1j4vtw7k=)
26: en2dnDKYTzj8JiV39_-BCieoTM4.roa (hash: t2tGanJVvoRZN18O65CZXHL2kvHFCeOL9VB4L5jlOl0=)
27: evNnHKfdE81fV-2dA-Pl5eqaGHo.roa (hash: ywmWM1qUYAMtn//4pTN8Jv+BIv75cg5QrP0+2AUgN78=)
28: mn_AZLEAiiU2qaQy6aQbNLhTx3M.roa (hash: tI/D+AW7xVeXQ1wV3rmgIy+tmP/yt57p+h1QtJmdkzA=)
29: opGiqd1EaZ4LjFf_mBRxRWMEJ9I.roa (hash: nszAzu935HQlCyZMmDgpA9FbHtuxCNO+fnERnO7qyoI=)
30: oz8WuNequXvsoaSrfyjDTnTQW3k.roa (hash: xlVm6Ij0YZyImV9HgneJ0I8dGPn1CBP8GzwgQHOUY74=)
31: z4-0mMmoIyejZQvLscU0F3zOajE.roa (hash: vANNj2jxJfRqckJm7O1qZBEwtb2B5XjYC24oRQYqHmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f0:51:0d:69:c1:a6:9f:ed:25:4e:30:4e:02:87:ee:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Dec 5 21:00:34 2025 GMT
Not After : Dec 6 21:00:34 2025 GMT
Subject: CN=852fa22ba1aed76896ce4d8d67195d97de7c1d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:ca:7b:0c:fe:4e:b5:c4:bf:31:63:35:cc:
b6:e0:c5:88:6e:16:79:39:14:05:bc:bf:3f:4e:61:
dc:3c:33:80:8d:03:e7:62:4c:03:e6:d1:fc:e5:6c:
86:6e:94:b1:a3:cd:32:33:a5:db:0a:11:0c:a9:1a:
da:05:e1:94:f7:aa:a7:4b:2e:3c:c9:d5:b7:ca:e5:
df:c9:1b:ee:2b:84:b3:64:fc:12:e2:7d:b8:83:54:
5a:ff:2a:b2:fc:81:b2:e2:8b:80:88:4f:22:fa:b0:
f7:d6:3d:32:46:23:ed:7d:9f:f1:85:d7:b1:d4:68:
82:c6:06:3b:73:ac:1b:21:3e:d2:24:c6:ff:78:4d:
e0:8c:f9:ec:b9:79:cf:e5:55:e7:4d:0e:3d:f5:1d:
02:3d:5b:27:ee:b8:0b:89:89:ff:d5:b0:0e:a1:24:
94:9a:44:ae:13:ca:cb:3a:6e:49:7f:64:22:3a:50:
2a:47:c5:ef:ad:3a:35:79:3f:c9:e0:2e:49:3a:17:
21:7d:64:db:5c:e1:21:74:a7:59:68:79:2d:ac:e6:
ed:57:77:e6:a0:ae:6b:58:9d:d3:c0:b2:e4:b8:a1:
75:98:23:a6:54:ae:f6:1e:f6:4c:5b:3a:82:a2:26:
c8:ea:70:16:c3:a8:6f:4e:c2:dd:bc:50:a9:ff:df:
dc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2F:A2:2B:A1:AE:D7:68:96:CE:4D:8D:67:19:5D:97:DE:7C:1D:1A
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:a9:53:a9:0f:7e:df:3d:b7:3d:fd:15:d6:7f:65:6a:dd:a1:
e2:f7:83:78:c5:e7:68:1a:cd:d8:73:39:72:16:c0:e9:b0:0d:
62:53:95:25:b9:94:66:d9:28:76:4d:4d:2b:55:c8:65:b5:01:
30:f4:7e:7f:d3:50:d5:7f:f0:02:8f:33:82:be:ce:c3:8c:06:
03:10:f8:b7:4e:79:d0:a8:cf:bc:be:7b:30:55:f2:38:bd:bf:
ad:1c:08:6c:7b:4f:f2:ff:e0:6c:41:9e:0d:50:68:71:1a:be:
62:89:26:cb:2b:a0:c9:0a:9b:2b:af:cc:94:55:65:8e:72:05:
b1:85:5c:51:2f:4e:11:88:cd:75:2f:63:e7:a8:8e:25:a9:d7:
65:a7:19:2c:06:72:1d:3d:a1:b7:4a:45:f3:47:20:b2:9c:6a:
df:4b:fd:4b:35:96:cb:b5:26:20:d8:bd:38:f1:cb:61:68:b6:
f4:fa:8f:86:13:86:2f:a8:c0:96:73:aa:9c:b0:51:a8:a2:7e:
7e:9d:81:57:14:ac:2c:0e:47:9f:39:df:5b:96:07:93:af:f7:
9b:44:41:a9:ad:d4:00:0b:60:50:9f:41:49:e6:f7:de:45:93:
5d:81:b0:ef:fd:fe:6b:76:00:92:3f:a3:cb:1e:21:84:74:4e:
64:e7:1a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:09:51 2025 by rpki-client