This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json) Hash identifier: FgYRlB1sd//kVaWXZeu3C1KYLF3sXxy2XM+xcwkbYDg= Subject key identifier: EA:FA:C2:B7:2F:A9:53:DD:D3:15:5C:E8:4B:A7:FD:A0:04:53:48:8A Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 019AF0BF6AB536A401BCFE5C09D8DBA58AB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft Manifest number: 173D Signing time: Fri 05 Dec 2025 23:01:07 +0000 Manifest this update: Fri 05 Dec 2025 23:01:07 +0000 Manifest next update: Sat 06 Dec 2025 23:01:07 +0000 Files and hashes: 1: 12ToQcSPt7mcdwlwu8cks0_4omc.roa (hash: Iyr2cE2tf2K+xaBK2dhfD2MWZhPJHAOvhdyF3JqR+/g=) 2: 2sbBAO7ATxHzEchFAB6gArPRZZY.roa (hash: UDJGL7lU9D2x+NFmBhQK2JHOpnmQvd/reJ4wMgvIZq8=) 3: 5ZYhCNxqOm04hmY0BhngKxN9rig.roa (hash: 83J35QD4/t+gUfggZnoS3qCNRY62Cfjrx/Jm442KIdY=) 4: DNFKKqPzY2tTxyq4ZF-e6ESwWBk.roa (hash: ONyXaG/qy9WX6Bit7PbMeuasymNM8i3asJe1STaYw+o=) 5: HQby7lGCxVhcsYrFBxtLvu1Nq1s.roa (hash: OEoyOXMuUI9gzJHQlRaFw5QR3hyZ9zizJ0Zhg109soQ=) 6: KEB7URRNcLIkdHFl8_NaQFzoCUc.roa (hash: 8o0J9qbfKon/Y8q8sQm0uMymQ1kVnwb8u5ia9INGr/U=) 7: RVuh9Ovnia6HGIxuY5C4mqQkVzw.roa (hash: 7MdQXOdkGadK2Vo4n1LYddNyvg9R887clmJN5QnKDO0=) 8: _4iJCnTkrZTLi3Znw6No51nUp0U.roa (hash: q5ypixYuURsWaauidvKopOxQLyMvMh9Ff8agaEGE8Z8=) 9: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: he89C/xuKH622SNu7+Tr6MNqE6UzadiBj5et+8PZjTQ=) 10: egyYxAR3bwmsGgeknwOtvs63Vmw.roa (hash: XurIkmwZSfSrHBi1j2SOabRmxdimDBrxAVpSXYwSmK8=) 11: gCwZCj5y4eEHhiE3OdNG143EtPw.roa (hash: bJxdVgp0WUK1yUG+3MFHdMNTBJUCc3SJjDGJmr3bN5s=) 12: icM0VycNV4mt0pTY2afMrLkCQiI.roa (hash: xbGX02cLUgEU+Jz8UpLSB42bp7e4VbRHxCBGvzWAyic=) 13: kWxL8-0FaQ5asnDLfivzWKH4-z8.roa (hash: aTbkIB4IPS1IGAIXN2uxEpuYorOcI3bZmMM6X6TsyjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:6a:b5:36:a4:01:bc:fe:5c:09:d8:db:a5:8a:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Dec 5 23:01:07 2025 GMT Not After : Dec 6 23:01:07 2025 GMT Subject: CN=eafac2b72fa953ddd3155ce84ba7fda00453488a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:b7:27:54:54:9c:83:b1:a0:e0:3a:60:89: 02:14:a0:bf:43:bb:25:5d:f2:64:34:7d:d8:2e:1a: 28:b1:92:f0:44:fb:5e:23:ec:79:f0:be:1c:fe:5a: e2:97:f1:ea:42:1a:80:32:7c:32:24:8d:b6:d6:d3: 48:96:2b:9b:d3:77:3a:bc:07:b8:14:d7:cb:4b:25: a6:58:99:58:db:6c:7d:fd:aa:a8:d8:05:bb:12:f5: 8b:1b:0f:98:f5:43:7c:7e:8e:f4:9d:fd:bf:4d:7e: 7f:10:d4:02:5a:92:f0:77:5d:56:77:33:c4:5d:0c: e2:62:ee:c4:d3:ec:30:d3:97:c8:f9:27:60:ab:e7: 1c:8d:e0:c1:2b:bf:2c:76:60:70:b7:10:96:03:ae: cb:45:06:22:60:48:97:9a:ae:f1:51:ac:f2:f0:51: 9e:ec:00:3c:60:c3:f0:dd:44:23:52:2d:28:33:82: 98:e6:1f:75:99:fe:32:53:34:d8:04:45:da:16:26: 28:da:e6:b5:89:55:37:6c:cc:db:88:59:4c:33:e2: 5c:4b:c1:9f:0e:19:08:95:06:52:9c:47:10:30:0e: ea:6d:80:7f:33:b2:d4:4d:b4:e2:6a:93:85:1a:bc: 87:b6:5d:65:1b:62:30:ea:a7:0d:ca:c6:d7:82:0e: 01:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FA:C2:B7:2F:A9:53:DD:D3:15:5C:E8:4B:A7:FD:A0:04:53:48:8A X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:35:a9:8e:c3:90:a9:25:70:2c:4e:d8:ce:8b:d6:1d:48:e2: c0:15:0d:69:fd:fc:fd:9d:5b:6f:55:37:4b:14:14:84:df:57: ba:ce:48:89:a5:bd:93:39:80:59:50:30:fa:f4:3e:e8:39:0d: 6d:e7:8b:15:5b:3f:fa:c3:3a:02:68:eb:e0:3f:bf:0a:58:77: 83:ab:34:6c:08:8e:a5:4b:a3:50:f2:92:e9:d0:93:5e:b8:24: ea:b8:78:3c:05:81:ce:ea:57:9d:68:5f:85:5e:86:e3:a7:8f: 9b:5a:d3:8b:f1:ee:f7:98:b1:c1:bb:16:3d:e8:fc:2b:58:13: 8c:cc:01:57:9a:cc:d7:ee:09:c4:03:c2:30:dd:ae:04:33:b9: 1a:69:e3:09:a7:16:25:67:14:ab:bf:bc:53:92:46:a6:b3:f3: d8:6e:c3:59:10:74:a2:b2:c7:71:31:52:a7:90:ed:34:a5:7a: fc:be:7c:5f:8b:90:9c:1e:cb:37:6c:5f:94:1f:2c:25:f3:80: 64:a4:6e:88:2d:da:be:06:ed:36:44:e2:f8:7b:c2:37:9e:a6: 93:7a:dc:17:5d:56:a6:0f:f0:5f:57:12:8b:7a:79:36:cd:a5: 4d:a8:0e:d3:df:d5:3c:a2:f6:a5:ca:4e:4f:0e:ad:a1:4f:7f: 55:d7:cc:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv2q1NqQBvP5cCdjbpYq5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjUxMjA1MjMwMTA3WhcNMjUxMjA2MjMwMTA3WjAzMTEwLwYDVQQD EyhlYWZhYzJiNzJmYTk1M2RkZDMxNTVjZTg0YmE3ZmRhMDA0NTM0ODhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXm3J1RUnIOxoOA6YIkCFKC/Q7sl XfJkNH3YLhoosZLwRPteI+x58L4c/lril/HqQhqAMnwyJI221tNIliub03c6vAe4 FNfLSyWmWJlY22x9/aqo2AW7EvWLGw+Y9UN8fo70nf2/TX5/ENQCWpLwd11WdzPE XQziYu7E0+ww05fI+Sdgq+ccjeDBK78sdmBwtxCWA67LRQYiYEiXmq7xUazy8FGe 7AA8YMPw3UQjUi0oM4KY5h91mf4yUzTYBEXaFiYo2ua1iVU3bMzbiFlMM+JcS8Gf DhkIlQZSnEcQMA7qbYB/M7LUTbTiapOFGryHtl1lG2Iw6qcNysbXgg4BBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOr6wrcvqVPd0xVc6Eun/aAEU0iKMB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTWpjsOQ qSVwLE7YzovWHUjiwBUNaf38/Z1bb1U3SxQUhN9Xus5IiaW9kzmAWVAw+vQ+6DkN beeLFVs/+sM6Amjr4D+/Clh3g6s0bAiOpUujUPKS6dCTXrgk6rh4PAWBzupXnWhf hV6G46ePm1rTi/Hu95ixwbsWPej8K1gTjMwBV5rM1+4JxAPCMN2uBDO5GmnjCacW JWcUq7+8U5JGprPz2G7DWRB0orLHcTFSp5DtNKV6/L58X4uQnB7LN2xflB8sJfOA ZKRuiC3avgbtNkTi+HvCN56mk3rcF11Wpg/wX1cSi3p5Ns2lTagO09/VPKL2pcpO Tw6toU9/VdfMqA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:49 2025 by rpki-client