This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft File: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft (raw, json) Hash identifier: oe52Bpj8g7Mcw8Mc6U3qAgvGV+J9zaF9PTh36exnEHM= Subject key identifier: 12:A7:69:3F:D1:2C:3D:75:EB:94:BC:0F:09:60:0A:F8:05:2A:77:9B Authority key identifier: F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24 Certificate issuer: /CN=f260075c0944fb1634b628bb10b67f12c873e424 Certificate serial: 019AF0BF7DE9316B0D2BA315B457D3945F8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft Manifest number: B6 Signing time: Fri 05 Dec 2025 23:01:12 +0000 Manifest this update: Fri 05 Dec 2025 23:01:12 +0000 Manifest next update: Sat 06 Dec 2025 23:01:12 +0000 Files and hashes: 1: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl (hash: uARtBv5paZVivuQtYuKEW8i3oW66bl4ZWv1lIhrX9B8=) 2: Xd7ijHjwtfXf4zZiE_HQf8TmqP0.roa (hash: w9B2n3G58lCmyJiIUIJesOdWt7RmGyJHNmHtEsf7LS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:7d:e9:31:6b:0d:2b:a3:15:b4:57:d3:94:5f:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f260075c0944fb1634b628bb10b67f12c873e424 Validity Not Before: Dec 5 23:01:12 2025 GMT Not After : Dec 6 23:01:12 2025 GMT Subject: CN=12a7693fd12c3d75eb94bc0f09600af8052a779b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:43:5d:6a:95:b5:ef:98:2c:45:70:5a:dc:5a: 98:47:e5:35:df:3a:03:0c:fe:c4:96:90:f4:07:1c: 2c:71:fd:0c:d3:1f:b7:84:42:9d:dd:2e:66:43:24: d2:9e:4c:af:bc:62:89:1b:31:7e:92:bc:6f:61:8e: 82:2b:40:7d:fd:d5:c8:5f:9d:5a:6b:86:c5:02:a9: ca:31:e9:03:4e:f8:1a:6b:b2:69:22:2d:71:7c:80: ec:61:4b:7f:c7:ef:c0:30:e6:24:dc:b5:af:5d:cd: 43:ef:d2:29:ba:12:7b:3d:fd:63:96:7a:48:0a:6a: 2a:df:60:98:09:0c:40:09:52:b5:05:3d:95:eb:70: 3a:86:d9:bc:12:ec:81:e5:49:40:1d:e3:42:b2:c4: bd:5f:d3:9c:b8:17:13:17:57:d9:b1:22:a4:6e:3a: ad:27:c7:74:71:bb:c7:19:af:f3:09:4b:3b:2a:5a: 37:28:76:36:34:1a:8c:47:ef:26:83:79:f7:16:d4: 16:6a:1a:0a:35:3d:16:4f:38:a8:f8:ae:09:0a:28: 66:fa:8a:db:1b:06:9e:2a:db:f3:43:6f:af:18:48: f0:19:9b:8b:31:1b:2a:75:05:f1:4f:e6:5c:5c:91: 2f:1d:15:d7:86:19:62:19:6f:84:02:90:d7:1c:72: a6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A7:69:3F:D1:2C:3D:75:EB:94:BC:0F:09:60:0A:F8:05:2A:77:9B X509v3 Authority Key Identifier: keyid:F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:03:9d:06:09:3c:0b:10:d4:4d:55:4c:01:43:63:dc:8f:88: 84:83:cb:cb:60:bd:de:6d:2a:36:4f:9a:3e:ee:32:9e:cd:11: d3:70:9b:73:80:f7:0c:0d:6d:2f:de:78:2f:e9:ef:54:5c:5e: db:c4:d4:25:1c:e1:31:e3:de:37:20:80:c7:1a:a1:7c:be:f8: a3:dd:14:68:74:00:e1:da:4b:53:2a:4e:5b:ee:1d:f1:49:8e: 3f:0e:50:b1:d8:3d:b9:1d:84:44:45:19:fd:b8:f7:08:11:90: 76:a8:6e:1d:e5:7a:97:f9:9a:20:8d:d4:20:93:71:09:d1:ed: 95:8c:2d:6e:f1:ba:5f:57:21:ff:6a:b1:02:58:ff:92:8f:fa: 4e:13:3f:59:cd:ac:36:fc:5c:db:e9:b8:aa:4e:59:f6:62:0d: ed:c0:b0:30:cd:9b:4d:67:d3:7d:08:6d:a1:21:ff:ed:80:b1: f9:00:57:c0:61:f1:f3:a9:c2:8e:f3:be:51:81:08:1a:41:a7: e5:8e:68:ae:dc:d5:32:8f:cc:95:34:14:e8:7f:6c:97:01:5e: ec:cf:50:d4:36:da:7b:3f:38:96:c2:43:71:39:86:28:6d:e8: 1e:29:e8:a4:1c:f3:87:77:85:78:2e:26:47:26:36:b7:4c:97: 59:bd:74:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv33pMWsNK6MVtFfTlF+LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjAwNzVjMDk0NGZiMTYzNGI2MjhiYjEwYjY3ZjEyYzg3 M2U0MjQwHhcNMjUxMjA1MjMwMTEyWhcNMjUxMjA2MjMwMTEyWjAzMTEwLwYDVQQD EygxMmE3NjkzZmQxMmMzZDc1ZWI5NGJjMGYwOTYwMGFmODA1MmE3NzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUNdapW175gsRXBa3FqYR+U13zoD DP7ElpD0Bxwscf0M0x+3hEKd3S5mQyTSnkyvvGKJGzF+krxvYY6CK0B9/dXIX51a a4bFAqnKMekDTvgaa7JpIi1xfIDsYUt/x+/AMOYk3LWvXc1D79IpuhJ7Pf1jlnpI Cmoq32CYCQxACVK1BT2V63A6htm8EuyB5UlAHeNCssS9X9OcuBcTF1fZsSKkbjqt J8d0cbvHGa/zCUs7Klo3KHY2NBqMR+8mg3n3FtQWahoKNT0WTzio+K4JCihm+orb GwaeKtvzQ2+vGEjwGZuLMRsqdQXxT+ZcXJEvHRXXhhliGW+EApDXHHKmJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKnaT/RLD1165S8DwlgCvgFKnebMB8GA1UdIwQY MBaAFPJgB1wJRPsWNLYouxC2fxLIc+QkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85ZDVjZTUtYjZjOS00OGRhLThlOGEt NmEzYmI5MjQ0M2ZjLzEvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy85ZDVjZTUtYjZjOS00OGRhLThlOGEtNmEzYmI5MjQ0M2Zj LzEvOG1BSFhBbEUteFkwdGlpN0VMWl9Fc2h6NUNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgOdBgk8 CxDUTVVMAUNj3I+IhIPLy2C93m0qNk+aPu4yns0R03Cbc4D3DA1tL954L+nvVFxe 28TUJRzhMePeNyCAxxqhfL74o90UaHQA4dpLUypOW+4d8UmOPw5Qsdg9uR2EREUZ /bj3CBGQdqhuHeV6l/maII3UIJNxCdHtlYwtbvG6X1ch/2qxAlj/ko/6ThM/Wc2s Nvxc2+m4qk5Z9mIN7cCwMM2bTWfTfQhtoSH/7YCx+QBXwGHx86nCjvO+UYEIGkGn 5Y5ortzVMo/MlTQU6H9slwFe7M9Q1Dbaez84lsJDcTmGKG3oHinopBzzh3eFeC4m RyY2t0yXWb10UA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:24:02 2025 by rpki-client