This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft File: a8GtFnaioypFoM85L3-cXqaOLeo.mft (raw, json) Hash identifier: HDc1bXsQVPXo3TNDk8nDWqnd8shzyFNpRsw1CfVcl18= Subject key identifier: B1:FF:3F:6C:1D:74:35:13:E4:E7:EA:AC:F6:82:FF:B9:F9:B8:DE:D1 Authority key identifier: 6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA Certificate issuer: /CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea Certificate serial: 019AF4D2B510E309FD6E86D2D55C062462B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 18:00:40 +0000 Manifest this update: Sat 06 Dec 2025 18:00:40 +0000 Manifest next update: Sun 07 Dec 2025 18:00:40 +0000 Files and hashes: 1: CkA5P7l5ePDJ8YtVI5RwljhHN3I.roa (hash: Rv4CNPYpNEer366FC8TAHEAISsXVQ6rJf8w+ppgPPgs=) 2: a8GtFnaioypFoM85L3-cXqaOLeo.crl (hash: siHo/2N9Gsxwk0X10UDFd5abFw1zT3Qh1xEpCppTQks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:b5:10:e3:09:fd:6e:86:d2:d5:5c:06:24:62:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea Validity Not Before: Dec 6 18:00:40 2025 GMT Not After : Dec 7 18:00:40 2025 GMT Subject: CN=b1ff3f6c1d743513e4e7eaacf682ffb9f9b8ded1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d2:61:12:a1:95:49:ec:60:23:b8:22:82:a9: c6:7c:ee:a1:19:f4:b0:3c:b0:5f:d4:f5:93:2a:a1: da:ae:94:42:c4:23:b2:be:1b:d8:bd:4d:f8:0b:f0: 8b:7a:c8:5a:a6:bc:5a:cd:5b:60:c9:14:96:8e:b0: 42:21:da:79:d2:c5:3e:12:c4:0a:fe:1d:62:50:c0: 7b:e4:46:ca:34:77:3b:d7:ec:d3:e6:c5:a9:45:8e: 4a:2b:92:0c:5e:cb:3e:89:04:17:a4:76:78:bc:c9: a8:69:a0:05:d9:cd:0f:0b:a6:9d:ed:c5:12:f2:59: f6:60:3a:bb:81:69:ff:77:a8:da:2e:22:4c:79:c7: f8:ba:0a:cc:dc:eb:03:42:5f:35:b6:30:fa:8f:3f: c2:c7:22:56:df:5a:53:f4:fa:c4:42:a5:46:42:46: 3d:89:48:6c:cb:27:43:ab:e7:e1:21:d9:a8:fc:9f: 07:93:6b:d1:bc:e0:b3:5d:7b:35:11:14:fa:3a:e0: 94:6a:d6:41:e4:df:42:73:80:cd:be:cf:ce:17:3b: ef:a9:e5:6d:dd:17:70:e6:13:0b:cc:2d:5e:cd:8e: 84:3e:80:1f:b9:7d:d5:20:fe:bd:8a:e0:d9:e3:f6: 5b:5d:bc:4f:76:6b:64:4f:6c:a1:07:63:98:d8:2a: 5b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FF:3F:6C:1D:74:35:13:E4:E7:EA:AC:F6:82:FF:B9:F9:B8:DE:D1 X509v3 Authority Key Identifier: keyid:6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:65:41:1c:ee:51:07:7c:f9:a8:ec:28:b5:a3:d4:cc:a8:dc: 83:6b:05:67:c9:fc:8d:d4:7c:e9:22:61:35:96:fb:66:2f:73: ba:10:f3:52:b9:7a:87:36:55:f4:ef:89:a2:89:e0:3b:6d:96: 04:bf:69:47:2c:01:d1:62:9d:21:84:39:e9:6b:07:50:97:c2: ef:80:c2:ea:c2:ac:76:b6:25:21:4c:4a:07:df:10:af:99:78: ed:1c:04:d7:2e:32:c7:53:15:1a:ba:e1:af:a1:33:f5:ab:3f: 80:b5:83:00:06:4a:60:e9:d1:2f:a5:53:90:8c:f8:4b:d9:94: 28:dd:c3:ae:9e:c1:a6:5e:e7:b3:7c:e0:02:8b:57:6f:84:79: fc:94:c3:2e:92:a6:3a:15:01:34:15:1d:bc:e6:cc:69:4d:ec: 23:b7:c5:3f:52:ca:d9:77:8f:2e:14:a1:23:c6:79:b1:83:83: cc:01:76:ae:0e:ec:2c:1d:65:ca:86:86:98:bc:b2:97:60:b6: ad:ee:19:40:71:1b:bc:a3:2d:96:62:13:7e:45:2b:14:a3:94: bd:02:fc:6e:05:3b:f9:eb:cf:a7:2a:9a:8f:0e:f2:55:15:5e: 01:da:6e:56:47:28:e4:37:c3:14:a5:97:5c:e7:b7:ef:80:ba: c3:e0:8f:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00rUQ4wn9bobS1VwGJGK1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzFhZDE2NzZhMmEzMmE0NWEwY2YzOTJmN2Y5YzVlYTY4 ZTJkZWEwHhcNMjUxMjA2MTgwMDQwWhcNMjUxMjA3MTgwMDQwWjAzMTEwLwYDVQQD EyhiMWZmM2Y2YzFkNzQzNTEzZTRlN2VhYWNmNjgyZmZiOWY5YjhkZWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9JhEqGVSexgI7gigqnGfO6hGfSw PLBf1PWTKqHarpRCxCOyvhvYvU34C/CLeshaprxazVtgyRSWjrBCIdp50sU+EsQK /h1iUMB75EbKNHc71+zT5sWpRY5KK5IMXss+iQQXpHZ4vMmoaaAF2c0PC6ad7cUS 8ln2YDq7gWn/d6jaLiJMecf4ugrM3OsDQl81tjD6jz/CxyJW31pT9PrEQqVGQkY9 iUhsyydDq+fhIdmo/J8Hk2vRvOCzXXs1ERT6OuCUatZB5N9Cc4DNvs/OFzvvqeVt 3Rdw5hMLzC1ezY6EPoAfuX3VIP69iuDZ4/ZbXbxPdmtkT2yhB2OY2CpbBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLH/P2wddDUT5OfqrPaC/7n5uN7RMB8GA1UdIwQY MBaAFGvBrRZ2oqMqRaDPOS9/nF6mji3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThHdEZuYWlveXBGb004NUwzLWNYcWFPTGVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8yMjM5MmUtYWE2Ny00NTg4LWI4MDkt ZWYxYWFhYWJmZTJiLzEvYThHdEZuYWlveXBGb004NUwzLWNYcWFPTGVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8yMjM5MmUtYWE2Ny00NTg4LWI4MDktZWYxYWFhYWJmZTJi LzEvYThHdEZuYWlveXBGb004NUwzLWNYcWFPTGVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGVBHO5R B3z5qOwotaPUzKjcg2sFZ8n8jdR86SJhNZb7Zi9zuhDzUrl6hzZV9O+JoongO22W BL9pRywB0WKdIYQ56WsHUJfC74DC6sKsdrYlIUxKB98Qr5l47RwE1y4yx1MVGrrh r6Ez9as/gLWDAAZKYOnRL6VTkIz4S9mUKN3Drp7Bpl7ns3zgAotXb4R5/JTDLpKm OhUBNBUdvObMaU3sI7fFP1LK2XePLhShI8Z5sYODzAF2rg7sLB1lyoaGmLyyl2C2 re4ZQHEbvKMtlmITfkUrFKOUvQL8bgU7+evPpyqajw7yVRVeAdpuVkco5DfDFKWX XOe374C6w+CPTg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:02:37 2025 by rpki-client