This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft File: a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json) Hash identifier: fj/wlL9A20Cydsi+I5uT1HKpg0UPbblvNAZaWGmaiO0= Subject key identifier: 8D:6A:B6:56:1C:5E:2A:A3:4E:3A:8B:DF:64:8A:C4:D8:8A:57:E1:3E Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb Certificate serial: 019AF1D1D433473C686C3533A88F9EA7B009 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft Manifest number: 165C Signing time: Sat 06 Dec 2025 04:00:51 +0000 Manifest this update: Sat 06 Dec 2025 04:00:51 +0000 Manifest next update: Sun 07 Dec 2025 04:00:51 +0000 Files and hashes: 1: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: PDq8KnP8LZql6fVmd5saEtEPoUm+Xl7rslHLqUZp2lw=) 2: cHx9sYkuiAFAjOWcBOb5TDvNls8.roa (hash: ShwHq89MA2jwo160RZTKkKFkHAW0OiQLJH4eT6G+deQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d4:33:47:3c:68:6c:35:33:a8:8f:9e:a7:b0:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb Validity Not Before: Dec 6 04:00:51 2025 GMT Not After : Dec 7 04:00:51 2025 GMT Subject: CN=8d6ab6561c5e2aa34e3a8bdf648ac4d88a57e13e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:00:08:41:00:31:11:e1:e2:8e:a1:68:60:a6: 0b:91:cf:71:a2:ff:0a:a3:be:12:93:d6:e9:aa:3b: b2:b2:2e:dc:0d:45:fd:b1:9f:de:c5:05:a8:8e:02: 32:9d:a3:15:86:16:15:65:3b:30:6a:09:78:df:f6: 4a:47:cc:a0:cc:7e:a4:da:36:ea:06:cd:7d:bc:58: 24:72:39:83:a4:8a:d9:94:de:74:07:72:14:eb:32: 15:c5:78:f1:36:a3:e7:c9:79:cf:3a:5f:43:57:32: 55:0a:d0:96:18:7c:cf:b2:67:15:9d:01:df:06:37: 63:0f:9d:ad:57:a7:f6:a5:aa:c2:9e:bc:2d:00:6a: 3d:a8:0c:ce:a7:c2:29:fb:5f:21:11:2d:db:00:ac: fb:d0:f3:60:3f:ed:23:d2:f1:14:12:7b:bd:b3:44: ee:12:99:ed:d9:04:1f:a7:a3:72:97:54:78:d8:a3: 22:c4:a6:f9:8f:11:b5:89:b8:03:19:94:92:64:f2: a8:fb:a0:ec:ba:f1:d5:62:a6:d7:be:28:be:e5:7a: d0:06:39:6a:ce:3b:4d:af:d7:72:bd:6a:81:54:07: 64:35:fc:0f:c2:46:9e:5d:0b:e7:80:aa:c5:a8:e7: 02:79:92:a9:9f:49:c4:98:35:d7:63:e2:06:21:4f: 0a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6A:B6:56:1C:5E:2A:A3:4E:3A:8B:DF:64:8A:C4:D8:8A:57:E1:3E X509v3 Authority Key Identifier: keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:73:d4:ef:67:78:8b:cf:b9:ea:99:16:eb:d9:aa:ed:51:9d: bc:75:66:b9:06:7b:66:b8:19:fa:f8:d4:90:09:12:9a:88:22: 78:44:91:88:a1:d6:0a:be:f4:fc:66:ab:24:73:9d:45:93:16: 9a:e3:1b:5f:15:55:3b:95:6a:12:10:f2:73:59:79:ba:11:40: 9b:32:d5:3b:ec:21:f3:d6:2b:fd:48:67:32:81:c2:0b:9f:37: 0f:d5:5c:06:9c:23:cd:bb:2b:31:e6:97:26:bb:86:e7:ba:ac: 20:ea:00:14:8a:ab:25:a7:5c:e6:67:d9:79:82:be:4e:05:cc: 19:09:88:e6:42:7d:9e:0b:1f:2f:8f:c1:a2:a8:d2:1d:ce:40: 36:f0:91:19:8a:0e:ef:6c:ef:32:6d:ed:31:b3:c9:b5:1c:3e: 1b:43:d0:24:33:88:bc:c9:8c:e8:86:4b:ec:68:0e:5a:f7:be: 7f:1d:f5:81:14:ce:f1:28:83:4f:e8:df:e8:0e:3b:34:ab:91: 6d:ec:19:ad:7a:8a:d2:60:be:02:01:76:30:16:62:9a:c9:04: db:42:c4:bd:38:1d:c2:ae:22:ef:cf:34:5f:dd:9f:72:d8:7c: 75:c6:7e:46:a3:82:b4:71:c1:8d:e5:89:b0:e9:5e:fd:f4:0d: ec:2e:12:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dQzRzxobDUzqI+ep7AJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiY2JkYjZmZDM5ZTc2ZjAwNDg0MDEyZTEzMTQ2YjIxODc1 NWMzZmIwHhcNMjUxMjA2MDQwMDUxWhcNMjUxMjA3MDQwMDUxWjAzMTEwLwYDVQQD Eyg4ZDZhYjY1NjFjNWUyYWEzNGUzYThiZGY2NDhhYzRkODhhNTdlMTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQAIQQAxEeHijqFoYKYLkc9xov8K o74Sk9bpqjuysi7cDUX9sZ/exQWojgIynaMVhhYVZTswagl43/ZKR8ygzH6k2jbq Bs19vFgkcjmDpIrZlN50B3IU6zIVxXjxNqPnyXnPOl9DVzJVCtCWGHzPsmcVnQHf BjdjD52tV6f2parCnrwtAGo9qAzOp8Ip+18hES3bAKz70PNgP+0j0vEUEnu9s0Tu Epnt2QQfp6Nyl1R42KMixKb5jxG1ibgDGZSSZPKo+6DsuvHVYqbXvii+5XrQBjlq zjtNr9dyvWqBVAdkNfwPwkaeXQvngKrFqOcCeZKpn0nEmDXXY+IGIU8KjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1qtlYcXiqjTjqL32SKxNiKV+E+MB8GA1UdIwQY MBaAFGvL22/TnnbwBIQBLhMUayGHVcP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83NGQ4NzYtMDVhOC00YjEwLTkwZTIt YzlkYTAzMGFmMzI2LzEvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83NGQ4NzYtMDVhOC00YjEwLTkwZTItYzlkYTAzMGFmMzI2 LzEvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHPU72d4 i8+56pkW69mq7VGdvHVmuQZ7ZrgZ+vjUkAkSmogieESRiKHWCr70/GarJHOdRZMW muMbXxVVO5VqEhDyc1l5uhFAmzLVO+wh89Yr/UhnMoHCC583D9VcBpwjzbsrMeaX JruG57qsIOoAFIqrJadc5mfZeYK+TgXMGQmI5kJ9ngsfL4/BoqjSHc5ANvCRGYoO 72zvMm3tMbPJtRw+G0PQJDOIvMmM6IZL7GgOWve+fx31gRTO8SiDT+jf6A47NKuR bewZrXqK0mC+AgF2MBZimskE20LEvTgdwq4i7880X92fcth8dcZ+RqOCtHHBjeWJ sOle/fQN7C4S3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:59 2025 by rpki-client