This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft File: 8u5baEnIyB9adjWVWIprpoIedns.mft (raw, json) Hash identifier: 48YnTiPcOuGrzl35H/5d4nYIHZH8QeZJJ/S5hhpGJvg= Subject key identifier: 74:6A:E2:22:0D:C8:47:83:89:1D:53:50:66:A3:5B:2F:41:F5:80:9C Authority key identifier: F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B Certificate issuer: /CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b Certificate serial: 019B318C8BE5769D5ECADB6B3813BC120F52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft Manifest number: 0787 Signing time: Thu 18 Dec 2025 13:00:52 +0000 Manifest this update: Thu 18 Dec 2025 13:00:52 +0000 Manifest next update: Fri 19 Dec 2025 13:00:52 +0000 Files and hashes: 1: 8u5baEnIyB9adjWVWIprpoIedns.crl (hash: dRCxnozmdKC6Y6FqtGctyQxUOqfJcA3dIbcNTCi0qfU=) 2: Di0vSgAmdtxn2ZM7Al8L8Zr3oIU.roa (hash: 0Bf0l0DWLnoKx593QVoGlu2x+BD1lYWYH448tSVbn0U=) 3: Tb-8GP8qcCsPrA2Xrleo-iet2HM.roa (hash: yyhoDt89y5+7nL9lVvf4sdS/dAeJY+OT1BrhoMFwMME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:8b:e5:76:9d:5e:ca:db:6b:38:13:bc:12:0f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2ee5b6849c8c81f5a763595588a6ba6821e767b Validity Not Before: Dec 18 13:00:52 2025 GMT Not After : Dec 19 13:00:52 2025 GMT Subject: CN=746ae2220dc84783891d535066a35b2f41f5809c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:5a:c5:66:e6:c9:64:ec:67:8a:ed:e9:7a: 3d:38:e0:3c:0f:d0:83:12:b2:bb:d6:c4:46:14:53: 73:eb:0f:c2:ac:36:d3:4d:08:e7:7d:04:df:a6:6a: 83:1d:11:be:16:da:49:b1:b8:05:ed:0b:34:9c:b2: b4:1e:62:f4:3c:e4:98:d3:ad:84:1b:4f:55:24:3a: b3:dc:2d:86:6e:e4:48:7f:be:92:9d:35:47:f1:81: 8c:9a:61:41:0a:c7:c7:ce:76:fc:cc:a6:4d:d4:ea: e1:a8:21:61:11:ac:70:b1:8d:73:bc:4f:f9:5c:9c: 32:ef:f1:6b:7b:9a:a2:5c:e5:6d:d1:77:32:c5:7e: a2:35:43:d9:a5:e2:c9:4c:cb:c0:ff:4a:f6:85:56: 99:c5:21:8c:9e:8c:e2:8e:ff:b9:0d:21:bb:e4:a5: 74:26:05:82:ad:b7:dd:ed:96:e6:99:3f:91:3a:f2: 06:54:28:8d:f1:5f:fa:f2:86:69:2e:70:b1:6e:c6: 06:77:f6:2f:c5:cc:a9:33:de:3c:7b:aa:a9:71:f7: 92:aa:5d:62:5f:02:d3:b1:09:64:38:cd:c4:e9:f1: d8:63:75:61:95:e3:ee:b9:56:c6:b9:c7:bd:54:68: 2b:4e:99:19:9a:bd:2f:6d:cb:7e:37:fa:54:ce:0c: 1a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:6A:E2:22:0D:C8:47:83:89:1D:53:50:66:A3:5B:2F:41:F5:80:9C X509v3 Authority Key Identifier: keyid:F2:EE:5B:68:49:C8:C8:1F:5A:76:35:95:58:8A:6B:A6:82:1E:76:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8u5baEnIyB9adjWVWIprpoIedns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/002a88-3a85-476f-b452-60a039dd1bca/1/8u5baEnIyB9adjWVWIprpoIedns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:69:bb:c2:23:b0:a4:b3:23:cb:ad:92:d5:9c:a8:2f:7a:80: 53:9d:2d:cf:d2:83:81:fe:8e:cc:57:84:38:ff:9b:8d:0f:c2: a8:13:7a:d8:eb:0f:7e:c7:06:79:32:dd:0b:50:2b:12:36:c0: 7e:c9:3f:06:d3:1d:95:79:27:d0:b9:5a:de:b6:c8:bf:04:56: 0f:00:bf:2d:05:4e:8f:c2:19:1b:c2:32:2a:29:c9:74:c0:5c: cd:6c:d3:f8:a7:0e:68:77:85:4a:36:f6:4a:ce:d3:05:09:a0: 46:aa:64:e4:87:b1:08:2e:cb:21:54:0f:52:db:8e:99:10:20: a1:3e:62:81:5a:18:ad:7d:21:9a:43:94:36:dd:54:b8:eb:dd: 9a:92:c1:0d:bc:3f:aa:c7:c1:de:ff:11:f6:9d:9a:52:4f:91: 9b:ff:92:f2:c8:f8:ba:64:7b:fc:8a:96:f0:6b:25:9f:c0:ab: 47:bc:60:91:c3:d1:36:b4:98:4a:cf:12:36:39:fc:5e:f3:cc: 37:38:75:5d:4f:bd:1d:1a:9b:99:eb:a8:e4:6b:97:fe:91:42: dc:03:ea:23:65:21:c1:50:83:19:6a:ad:f6:21:8f:73:aa:93: 31:b0:07:2f:3b:04:3b:77:21:a1:02:99:aa:4a:6c:e8:d7:80: 3b:05:62:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjIvldp1eyttrOBO8Eg9SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZWU1YjY4NDljOGM4MWY1YTc2MzU5NTU4OGE2YmE2ODIx ZTc2N2IwHhcNMjUxMjE4MTMwMDUyWhcNMjUxMjE5MTMwMDUyWjAzMTEwLwYDVQQD Eyg3NDZhZTIyMjBkYzg0NzgzODkxZDUzNTA2NmEzNWIyZjQxZjU4MDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs31axWbmyWTsZ4rt6Xo9OOA8D9CD ErK71sRGFFNz6w/CrDbTTQjnfQTfpmqDHRG+FtpJsbgF7Qs0nLK0HmL0POSY062E G09VJDqz3C2GbuRIf76SnTVH8YGMmmFBCsfHznb8zKZN1OrhqCFhEaxwsY1zvE/5 XJwy7/Fre5qiXOVt0XcyxX6iNUPZpeLJTMvA/0r2hVaZxSGMnozijv+5DSG75KV0 JgWCrbfd7ZbmmT+ROvIGVCiN8V/68oZpLnCxbsYGd/YvxcypM948e6qpcfeSql1i XwLTsQlkOM3E6fHYY3VhlePuuVbGuce9VGgrTpkZmr0vbct+N/pUzgwalQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRq4iINyEeDiR1TUGajWy9B9YCcMB8GA1UdIwQY MBaAFPLuW2hJyMgfWnY1lViKa6aCHnZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHU1YmFFbkl5QjlhZGpXVldJcHJwb0llZG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wMDJhODgtM2E4NS00NzZmLWI0NTIt NjBhMDM5ZGQxYmNhLzEvOHU1YmFFbkl5QjlhZGpXVldJcHJwb0llZG5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8wMDJhODgtM2E4NS00NzZmLWI0NTItNjBhMDM5ZGQxYmNh LzEvOHU1YmFFbkl5QjlhZGpXVldJcHJwb0llZG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGm7wiOw pLMjy62S1ZyoL3qAU50tz9KDgf6OzFeEOP+bjQ/CqBN62OsPfscGeTLdC1ArEjbA fsk/BtMdlXkn0Lla3rbIvwRWDwC/LQVOj8IZG8IyKinJdMBczWzT+KcOaHeFSjb2 Ss7TBQmgRqpk5IexCC7LIVQPUtuOmRAgoT5igVoYrX0hmkOUNt1UuOvdmpLBDbw/ qsfB3v8R9p2aUk+Rm/+S8sj4umR7/IqW8Gsln8CrR7xgkcPRNrSYSs8SNjn8XvPM Nzh1XU+9HRqbmeuo5GuX/pFC3APqI2UhwVCDGWqt9iGPc6qTMbAHLzsEO3choQKZ qkps6NeAOwVi0w== -----END CERTIFICATE-----Generated at Thu Dec 18 14:24:41 2025 by rpki-client