This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: QOa7O83I4o0RElY73KuSot7dlL4zX11krY1SIpkx+8Y= Subject key identifier: D3:37:74:34:BB:25:66:10:34:A2:28:A7:6B:A7:B5:C8:33:91:8E:07 Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 019AF49C1B394282F98E1D7F9665222BD311 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 17:01:02 +0000 Manifest this update: Sat 06 Dec 2025 17:01:02 +0000 Manifest next update: Sun 07 Dec 2025 17:01:02 +0000 Files and hashes: 1: 00x2a7vYcUP_RgzqZlJDShLq9Do.roa (hash: cq08qt5t6pt7+g4zB6xtHZuctjeJqy9pw/L/lk8TYFo=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: FsyhG91w35745fQ1dQbcp1KNtjf81qKw8XmoHJqnoSU=) 3: KVMzJG-tiBiXKGfDbX7s-fqSUcs.roa (hash: izdiO/l04uY0Tl9GP7xbaa4HsWMYkrOgbs0SiG0a1K8=) 4: OBC2jp5FIHT7G9c2m1xsJUD2ivs.roa (hash: DrwuyysosoB70lBjSllnHo3rVU0U0NusilzO8tRi9Q0=) 5: OxF-ngX6YGUArZrbAYmh9hpGzkU.roa (hash: zhEaR7GNPbf+2lOaH8uFUPJFKzbpuLS5x4CvU7dkxPs=) 6: Q2Pg2GNHELVKyFoNgxOuT8YFvLY.roa (hash: DsyRU7FSw+3XDKbBM9HrtgkzYSVPnqWwqknbD6CWVSU=) 7: RO-InVXPYoHaB1ZpM-19yr94dQs.roa (hash: 8Y6VcUcgO4alufdIJ4djN2KAnB4AyYetp1VZzDDuyNk=) 8: TbcAJ-7kgZbLEMeBArn-aI2s0Oc.roa (hash: ebCgIhbDpPxtlRtDjitUarjC0W1nxe0ujpocy11Koxs=) 9: _gM5SG_4QQqKocZtcQPCR80SAmI.roa (hash: ee8TJS3VrEj5YXrt15hISXpN3dVXM3P5ROyjlVEMHSs=) 10: fG6If6WZh4pXAVRu1gEQ7wbPbEs.roa (hash: OIBSpF8oXZotrR8RVX6KacBPnJZCoNiFLIZ7aWyayQU=) 11: gfQeyx6Q7sjS4Xpny9IUQ8tQxLY.roa (hash: zrq/geD7ajZHxMLm7OvFbnGGXeIS14GfMNfAscurlR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:1b:39:42:82:f9:8e:1d:7f:96:65:22:2b:d3:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Dec 6 17:01:02 2025 GMT Not After : Dec 7 17:01:02 2025 GMT Subject: CN=d3377434bb25661034a228a76ba7b5c833918e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2b:93:5e:cb:17:a0:ea:40:51:af:ca:14:dd: b6:e3:d3:cf:a5:5e:04:20:6d:1b:51:4d:64:18:ea: 2d:cf:9a:8e:46:51:84:88:b2:6d:7d:dc:20:d8:cf: e7:f9:9c:0c:7d:42:f5:54:16:cd:78:e7:a5:14:35: ab:1f:6f:85:39:da:78:4b:d2:11:58:ac:ea:8a:9d: 5d:fe:b3:ae:27:83:da:37:f6:e4:8d:25:77:0c:76: dd:0d:4b:4d:03:49:7f:7a:52:2d:3c:71:01:21:e1: ee:c0:0a:5b:16:c2:f9:8b:02:42:d2:c5:59:79:b5: ee:87:fa:26:63:c7:46:6d:da:80:6b:67:9f:8b:c4: 38:7c:fd:e5:b6:e2:cb:2d:89:77:1a:f4:c4:ae:64: 80:ab:2a:f6:d8:68:1b:85:08:12:93:f7:0a:c1:6f: 07:a5:b7:ae:4c:38:3b:34:a3:0d:c7:bf:11:18:20: eb:11:ce:3e:a1:d7:43:08:b6:70:de:94:55:71:93: a3:0b:70:55:9d:a2:9e:10:ba:4e:da:40:1f:d9:12: 79:fd:82:a8:c5:e7:cd:32:ff:98:58:9f:7e:74:b7: 43:16:7c:bb:3c:fd:4f:08:08:23:f8:58:9d:82:5d: e2:03:e1:54:d3:ff:ca:2c:0b:85:5a:3b:c7:b8:11: 40:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:37:74:34:BB:25:66:10:34:A2:28:A7:6B:A7:B5:C8:33:91:8E:07 X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:47:63:ee:94:fb:cd:a8:bc:31:4f:a5:26:8b:af:38:7d:27: 62:b1:ac:03:17:13:ef:90:d5:17:81:65:c7:ca:b5:6a:30:a8: a6:5e:92:21:9f:19:57:43:33:9b:59:00:62:50:79:99:0c:d5: 76:c8:1e:e0:56:83:b1:d2:00:93:5a:bf:87:d4:ab:da:f7:76: d1:be:26:80:51:b6:be:1c:40:cf:3b:cf:e9:dd:07:d1:3d:24: 40:ae:da:01:7b:4a:22:18:fc:99:58:9d:e1:b4:de:e1:03:2c: 57:f1:98:a2:61:b1:b6:56:db:71:e6:23:48:49:31:1b:10:3a: ae:55:bd:96:ad:41:32:0e:f7:53:f9:83:09:14:a2:9b:58:17: 9a:3f:69:68:e6:dc:d1:a2:73:11:7e:d1:ac:a7:f2:55:c4:70: 88:a7:bb:99:79:6f:0c:42:a9:c6:8a:7d:77:41:6e:96:5e:3f: c6:a0:c0:68:38:b4:87:c7:fd:4b:45:0b:c4:d4:4f:65:dd:1a: e0:06:78:ab:c7:1f:79:29:96:a8:53:7c:12:93:6b:0e:7f:8c: d3:44:49:6e:69:20:a5:66:19:4e:db:46:f5:17:97:02:21:31: b0:b5:92:86:01:a1:1e:59:a8:cf:2d:52:f3:74:45:c0:a7:da: 74:ec:eb:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nBs5QoL5jh1/lmUiK9MRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjUxMjA2MTcwMTAyWhcNMjUxMjA3MTcwMTAyWjAzMTEwLwYDVQQD EyhkMzM3NzQzNGJiMjU2NjEwMzRhMjI4YTc2YmE3YjVjODMzOTE4ZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyuTXssXoOpAUa/KFN2249PPpV4E IG0bUU1kGOotz5qORlGEiLJtfdwg2M/n+ZwMfUL1VBbNeOelFDWrH2+FOdp4S9IR WKzqip1d/rOuJ4PaN/bkjSV3DHbdDUtNA0l/elItPHEBIeHuwApbFsL5iwJC0sVZ ebXuh/omY8dGbdqAa2efi8Q4fP3ltuLLLYl3GvTErmSAqyr22GgbhQgSk/cKwW8H pbeuTDg7NKMNx78RGCDrEc4+oddDCLZw3pRVcZOjC3BVnaKeELpO2kAf2RJ5/YKo xefNMv+YWJ9+dLdDFny7PP1PCAgj+Fidgl3iA+FU0//KLAuFWjvHuBFAawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNM3dDS7JWYQNKIop2untcgzkY4HMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApkdj7pT7 zai8MU+lJouvOH0nYrGsAxcT75DVF4Flx8q1ajCopl6SIZ8ZV0Mzm1kAYlB5mQzV dsge4FaDsdIAk1q/h9Sr2vd20b4mgFG2vhxAzzvP6d0H0T0kQK7aAXtKIhj8mVid 4bTe4QMsV/GYomGxtlbbceYjSEkxGxA6rlW9lq1BMg73U/mDCRSim1gXmj9paObc 0aJzEX7RrKfyVcRwiKe7mXlvDEKpxop9d0Full4/xqDAaDi0h8f9S0ULxNRPZd0a 4AZ4q8cfeSmWqFN8EpNrDn+M00RJbmkgpWYZTttG9ReXAiExsLWShgGhHlmozy1S 83RFwKfadOzr4g== -----END CERTIFICATE-----Generated at Sat Dec 6 20:36:00 2025 by rpki-client