This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft File: 8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft (raw, json) Hash identifier: k7JiUr3f7tbK0tDEwB/w2ghIy+yH3JvtQfM5FWUlw1Y= Subject key identifier: 90:1A:22:84:7C:F2:29:33:44:6B:DB:5A:E9:88:C7:42:54:7B:ED:8F Authority key identifier: F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6 Certificate issuer: /CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6 Certificate serial: 019AF051237A8149E420CA848B8CF599EB3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft Manifest number: 1099 Signing time: Fri 05 Dec 2025 21:00:40 +0000 Manifest this update: Fri 05 Dec 2025 21:00:40 +0000 Manifest next update: Sat 06 Dec 2025 21:00:40 +0000 Files and hashes: 1: 0ljyTvQ_d8HoyClfNuv9eO2Q5yA.roa (hash: jw6rtBAELKvNPa562NE5b8O7bUsTaNwLwsoxjTQsK7A=) 2: 8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl (hash: ZnZdXDmKIdMiaFqQibMIsVlFUyf49sYinl2QyE5aPmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:23:7a:81:49:e4:20:ca:84:8b:8c:f5:99:eb:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6 Validity Not Before: Dec 5 21:00:40 2025 GMT Not After : Dec 6 21:00:40 2025 GMT Subject: CN=901a22847cf22933446bdb5ae988c742547bed8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4c:a2:3f:1b:70:68:87:e9:5b:cb:69:8d:8a: ce:f2:48:e4:c7:a6:d4:60:92:fe:60:ac:de:02:4c: b8:40:cb:a9:33:95:d2:46:88:11:72:de:e3:06:12: c7:56:d9:81:31:6e:13:68:aa:6d:bc:fb:b8:37:64: 4d:9e:82:be:6e:29:7c:92:06:12:20:65:14:be:62: 25:1a:51:cf:87:ba:8a:24:68:0e:39:6f:f2:6d:aa: 65:5a:4c:04:96:57:2b:91:1d:eb:39:31:e3:b3:33: d0:cb:96:e5:13:f9:e2:9d:40:8a:e7:1f:40:94:75: 36:96:bf:6c:00:e0:f8:ff:92:bd:20:ce:73:62:94: 8f:2b:b1:e0:a8:41:68:4c:cc:00:fa:22:9a:9d:57: 91:27:b3:44:3f:09:1e:cd:e1:0e:e1:6c:db:66:60: 3a:49:fc:75:61:9b:fb:10:4f:8f:3b:51:b7:e4:34: 76:39:92:92:b9:fb:c9:77:80:6a:65:98:41:6d:76: bd:bd:09:50:21:b8:a5:c8:fc:3d:09:42:58:a7:f6: aa:00:8e:e6:d5:c9:21:e3:b3:2b:78:6a:1d:5c:d3: a9:c5:11:6c:11:0e:13:94:a5:f5:63:c6:42:6c:db: 9b:a0:a9:09:02:bd:67:2e:39:0b:3b:ba:12:15:3a: 18:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1A:22:84:7C:F2:29:33:44:6B:DB:5A:E9:88:C7:42:54:7B:ED:8F X509v3 Authority Key Identifier: keyid:F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:7f:35:0e:8e:b0:b2:d5:be:66:67:f5:e9:96:75:cb:dc:6a: ff:bf:35:b8:2a:e5:98:4a:bb:a7:a8:2f:b6:59:c6:79:e0:1f: 80:a7:97:dc:83:72:bb:2a:d2:20:06:80:98:b9:45:b3:73:d0: 93:65:d3:5c:93:91:a7:0a:41:c2:9b:b2:0d:80:6e:be:56:32: 13:23:25:70:af:ab:63:32:b1:8e:a9:94:b0:79:02:c1:f6:ae: e2:e7:7a:bc:ec:02:c5:83:2b:77:ae:6f:61:d3:5a:f3:02:c0: 38:3d:78:bb:7e:11:7a:ca:4c:b5:f5:5c:57:14:e0:34:ae:6f: e3:94:68:33:e4:29:a2:d4:c8:d9:bd:c0:ea:1d:81:78:6f:dd: 8b:6d:98:d9:34:e5:71:3b:63:a0:e1:97:f7:3b:0d:6f:69:f5: 87:0e:a8:6f:b0:96:c6:f1:b1:6c:36:f9:82:bd:16:4a:43:d2: 06:4f:f6:11:8f:16:1d:5c:a0:03:3d:58:aa:66:54:42:92:0c: 3e:f3:cd:08:94:02:2f:9f:b4:48:7e:5f:c9:5a:5c:20:c7:6d: 8f:bf:ce:7b:81:dc:93:c9:8c:e1:40:85:37:a1:c5:df:b5:7d: 74:0e:a4:57:ae:12:4c:39:90:bf:8a:c9:2b:d2:62:b7:95:85: e2:90:c7:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUSN6gUnkIMqEi4z1mes6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNDY2NmZiYjY0YzRkYThjYjg5OTJiZjBkYTk3YjhiMDEx N2VhYzYwHhcNMjUxMjA1MjEwMDQwWhcNMjUxMjA2MjEwMDQwWjAzMTEwLwYDVQQD Eyg5MDFhMjI4NDdjZjIyOTMzNDQ2YmRiNWFlOTg4Yzc0MjU0N2JlZDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUyiPxtwaIfpW8tpjYrO8kjkx6bU YJL+YKzeAky4QMupM5XSRogRct7jBhLHVtmBMW4TaKptvPu4N2RNnoK+bil8kgYS IGUUvmIlGlHPh7qKJGgOOW/ybaplWkwEllcrkR3rOTHjszPQy5blE/ninUCK5x9A lHU2lr9sAOD4/5K9IM5zYpSPK7HgqEFoTMwA+iKanVeRJ7NEPwkezeEO4WzbZmA6 Sfx1YZv7EE+PO1G35DR2OZKSufvJd4BqZZhBbXa9vQlQIbilyPw9CUJYp/aqAI7m 1ckh47MreGodXNOpxRFsEQ4TlKX1Y8ZCbNuboKkJAr1nLjkLO7oSFToYQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAaIoR88ikzRGvbWumIx0JUe+2PMB8GA1UdIwQY MBaAFPFGZvu2TE2oy4mSvw2pe4sBF+rGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFVabS03Wk1UYWpMaVpLX0RhbDdpd0VYNnNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82YThhZDUtMjFkZi00ZGJiLTlhYmQt ZDQ0NjQ1NWRjNWJhLzEvOFVabS03Wk1UYWpMaVpLX0RhbDdpd0VYNnNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82YThhZDUtMjFkZi00ZGJiLTlhYmQtZDQ0NjQ1NWRjNWJh LzEvOFVabS03Wk1UYWpMaVpLX0RhbDdpd0VYNnNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdn81Do6w stW+Zmf16ZZ1y9xq/781uCrlmEq7p6gvtlnGeeAfgKeX3INyuyrSIAaAmLlFs3PQ k2XTXJORpwpBwpuyDYBuvlYyEyMlcK+rYzKxjqmUsHkCwfau4ud6vOwCxYMrd65v YdNa8wLAOD14u34RespMtfVcVxTgNK5v45RoM+QpotTI2b3A6h2BeG/di22Y2TTl cTtjoOGX9zsNb2n1hw6ob7CWxvGxbDb5gr0WSkPSBk/2EY8WHVygAz1YqmZUQpIM PvPNCJQCL5+0SH5fyVpcIMdtj7/Oe4Hck8mM4UCFN6HF37V9dA6kV64STDmQv4rJ K9Jit5WF4pDHpw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:27 2025 by rpki-client