This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft File: 8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json) Hash identifier: 0Ei7XV1xOHKR45klvYfUtEuSZ7rO3TF8B5G43qirEOw= Subject key identifier: 4D:0B:49:AC:C9:43:B6:C6:FD:34:28:DD:DA:58:42:6D:B5:F8:A9:8E Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Certificate serial: 019AF389689122C7BEC37D09FE1BA8F2EC3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft Manifest number: 1188 Signing time: Sat 06 Dec 2025 12:00:59 +0000 Manifest this update: Sat 06 Dec 2025 12:00:59 +0000 Manifest next update: Sun 07 Dec 2025 12:00:59 +0000 Files and hashes: 1: 1gtsCJyHdZ_mz1Vmc6aYSOZRTug.roa (hash: i5FmepCDxpYMWJtIWumi8I2WhRPEkV925D+zrSFUKqc=) 2: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: l+EoP+wKwjuQnGxhivPMRjjpN9uPKPTDSePP9j4h/NM=) 3: AFN8OqvwZcsViNN-78O6BvKElME.roa (hash: gpOsJUC88/6LJdG6QKOWEGeO9P8/YN9o1I8OET+li9E=) 4: HzrOiNg5IGbvxaY6EJtaFTiPwJc.roa (hash: YVHrJ9qFMIVBjiboinqQXWeAb+UlfN0QhYG5EqTl3JU=) 5: KuzmOknbrD4Lg71OoDCO-y0GoDQ.roa (hash: L4TpWALjC8fwxZDKVNiQiJm1WAVC/DpX7t4BNMww1vk=) 6: N-Bn6UoZzfA4_e9vqjwupkidrwM.roa (hash: P0ucGjyfHx1AsSd/Hp9hPmA5fgW6WVVitbxsp2xrVOM=) 7: Xw6d5Q0Ua1XRZl5MjugABbqCL-g.roa (hash: 7lcJjOAWe6HvAJ8ku7/K4ZXcDrrbdwoOF4w1DXALzIA=) 8: hFAl1HVJl_9l3iGKDXy7Q3YLL-4.roa (hash: t3lebss2cDykApymCPDX/VFxLKKQQSAwSa+9uLLWAvg=) 9: ij6-YE2XVidboU68JMPVKequ6tg.roa (hash: YEMop9i5KBqo0Emc5LLaJ2ZkaUOlrtnZjcsi8p8jPuQ=) 10: lmLPjrfNDPS9XohB9eEXKDTvTVw.roa (hash: YUDeNZCjz7C+nv1yj/KNPiCOaWxteb6jP1PE6tH/qfc=) 11: rZeua0JpgspEzA0ZdwUTq0O1Bcg.roa (hash: PzfhSIF2+5kS2/v7NVciQ/Z0mLX/ZqdXk7JgE9AnGhg=) 12: vir9lXd95VlX33FtFKeYsF-pV7c.roa (hash: qWwJG4kSEBMq0oRm7MvhT+tJgjjEqP9pDam2i3CMe+g=) 13: vwnatcxNwSZQjN_EAgtCA6gLjGQ.roa (hash: is+QjkNRgmAAQFm1WLdb+VI9EY3XXeS9tjv/htKBkks=) 14: wOKO5BfevHhq6oErWALub8pu8xU.roa (hash: JFoG8SyIRYLSlAyJTBoEWjYzWkPzFQdNMJLWFlUmxRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:68:91:22:c7:be:c3:7d:09:fe:1b:a8:f2:ec:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Validity Not Before: Dec 6 12:00:59 2025 GMT Not After : Dec 7 12:00:59 2025 GMT Subject: CN=4d0b49acc943b6c6fd3428ddda58426db5f8a98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:49:59:44:4a:66:0d:cb:ec:f7:50:bc:6b:57: be:84:52:ba:26:89:6d:06:de:0d:b9:44:b9:08:0c: 4e:44:08:86:a8:23:da:30:de:5d:9b:a9:73:78:7d: 5f:52:11:12:68:d7:c2:f0:63:af:8d:a2:1a:8f:1e: 4e:45:1d:fe:f3:97:d4:d3:94:5a:23:b4:8d:0f:11: 9f:d2:31:e4:1a:41:2d:9d:5d:9e:0f:36:ed:b0:16: a9:e5:8d:e1:bf:45:4c:ba:02:8c:7b:06:50:e9:d6: 77:1a:f2:a6:9b:65:bf:d3:80:39:07:b8:84:08:c0: 24:4b:98:d0:64:f8:12:73:74:99:96:72:eb:2d:b9: e3:e3:b7:5f:d8:6f:2d:74:c8:4b:c4:df:16:05:f3: db:83:c9:77:a0:f4:39:53:44:dc:5b:f1:56:22:1e: 37:c7:47:fd:10:cd:8c:84:f7:5e:00:82:5a:27:fc: e7:6d:da:aa:cd:d3:e8:c8:a0:89:82:bf:06:5d:fd: 53:f4:ee:c5:96:c0:f5:2e:6f:57:1f:3f:ea:db:da: 3b:b4:14:bf:b5:bc:8d:f6:6b:10:af:64:35:b3:6f: 63:a2:2e:41:9e:9e:10:07:9b:76:2e:b4:64:23:05: 27:69:da:0f:6c:bc:39:4f:18:3d:dd:d3:cf:4b:25: a3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0B:49:AC:C9:43:B6:C6:FD:34:28:DD:DA:58:42:6D:B5:F8:A9:8E X509v3 Authority Key Identifier: keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:b0:fe:30:de:f7:80:69:96:f8:ed:59:01:ce:05:a6:6b:eb: 1c:6d:e1:91:96:01:81:3f:5d:20:0c:a9:81:58:dd:e3:42:76: 7d:f2:02:c9:a5:c4:54:b7:b1:0d:fc:ef:d8:da:ca:6e:d4:d2: aa:83:53:e5:00:bc:d3:0c:b6:d4:f4:04:51:08:e8:7b:60:bd: f6:88:e0:60:0f:b8:3c:45:ab:fe:73:ec:97:38:fe:31:0c:61: bc:d7:6e:fc:96:22:88:43:97:31:0b:bc:47:23:5b:2a:2e:89: 53:b7:45:c6:90:9d:27:a6:21:a2:05:74:43:52:0b:dd:f4:e5: 21:4b:97:e6:e9:8d:3b:cf:5d:c3:6f:3b:30:f1:6d:cb:06:df: d6:d5:50:ef:86:a0:70:5a:ca:36:29:86:12:e6:1c:d2:7f:5f: c3:b8:59:2d:61:db:c1:41:19:56:3d:8d:4c:eb:b1:a1:50:c6: c8:a1:64:1b:d6:8f:68:2d:3b:60:65:99:77:4a:57:20:5d:88: 5f:0f:c1:8f:1a:97:31:33:60:73:3a:4f:2d:f4:16:b6:48:96: cd:07:a2:c4:d2:1d:3a:f6:f4:f0:f8:94:ce:6e:de:06:a4:80: cd:8e:bd:b4:7a:da:62:f3:a9:15:ea:5f:f2:7f:a5:14:46:27: a1:6c:68:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWiRIse+w30J/huo8uw6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi ZWJmOGQwHhcNMjUxMjA2MTIwMDU5WhcNMjUxMjA3MTIwMDU5WjAzMTEwLwYDVQQD Eyg0ZDBiNDlhY2M5NDNiNmM2ZmQzNDI4ZGRkYTU4NDI2ZGI1ZjhhOThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ElZREpmDcvs91C8a1e+hFK6Jolt Bt4NuUS5CAxORAiGqCPaMN5dm6lzeH1fUhESaNfC8GOvjaIajx5ORR3+85fU05Ra I7SNDxGf0jHkGkEtnV2eDzbtsBap5Y3hv0VMugKMewZQ6dZ3GvKmm2W/04A5B7iE CMAkS5jQZPgSc3SZlnLrLbnj47df2G8tdMhLxN8WBfPbg8l3oPQ5U0TcW/FWIh43 x0f9EM2MhPdeAIJaJ/znbdqqzdPoyKCJgr8GXf1T9O7FlsD1Lm9XHz/q29o7tBS/ tbyN9msQr2Q1s29joi5Bnp4QB5t2LrRkIwUnadoPbLw5Txg93dPPSyWj5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0LSazJQ7bG/TQo3dpYQm21+KmOMB8GA1UdIwQY MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt NWM1ODkyYWZhNDg3LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3 LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7D+MN73 gGmW+O1ZAc4FpmvrHG3hkZYBgT9dIAypgVjd40J2ffICyaXEVLexDfzv2NrKbtTS qoNT5QC80wy21PQEUQjoe2C99ojgYA+4PEWr/nPslzj+MQxhvNdu/JYiiEOXMQu8 RyNbKi6JU7dFxpCdJ6YhogV0Q1IL3fTlIUuX5umNO89dw287MPFtywbf1tVQ74ag cFrKNimGEuYc0n9fw7hZLWHbwUEZVj2NTOuxoVDGyKFkG9aPaC07YGWZd0pXIF2I Xw/BjxqXMTNgczpPLfQWtkiWzQeixNIdOvb08PiUzm7eBqSAzY69tHraYvOpFepf 8n+lFEYnoWxo7g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:25:11 2025 by rpki-client