This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft File: CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json) Hash identifier: g/sfvvp0MvGQl2eerdsFjyqdYLCvxS2iOzK+WcgrHPs= Subject key identifier: D8:5C:AB:D8:F8:D1:BA:6D:08:01:8F:5C:15:67:F2:78:DC:A5:87:A8 Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad Certificate serial: 019AF209226240AD1DDF44C8B28C81AA0646 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft Manifest number: 0A2E Signing time: Sat 06 Dec 2025 05:01:16 +0000 Manifest this update: Sat 06 Dec 2025 05:01:16 +0000 Manifest next update: Sun 07 Dec 2025 05:01:16 +0000 Files and hashes: 1: 1YffucAnrX0zrPGVUVBeyKH78tE.roa (hash: F+0MkZW1rwniUkgJEFMqZDUVPzIQlWc77ANUG11yVk0=) 2: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: ZArB5mzrtTqk6TfXwMKNKSH0TNaCAgS/HhKV3PdUBHA=) 3: HHgp5sq5yc4_sgJa6AXu1wOFQNM.roa (hash: 7azvHrY82JhsqK3mxuoAki0dX0VXyY18Oolw0K+QPEw=) 4: QIYUcsbQNAYJ49MS9GSzg6HzMws.roa (hash: 25Ipjti12DAizEBm/x19xImh3kKTX0L8ySHToWXRDaw=) 5: b6ZEK46tBFQpFeGihP04dAsRVEs.roa (hash: QgioZFeGRbfakufTGnBIdfmvDS/FUhl+3OYWyWgTaL4=) 6: dntaOaxuIDGd8pI8wGTFAJRgyN0.roa (hash: ZmPkwqzAaYGLrLg5+RqVjoLEOwPFE1N2kmesXzCCUwI=) 7: pM8VKNSiqXyxvrYM2CF2U0Iw0pw.roa (hash: fs4sKC29dVzpn86XWfZbe24a1J4GrvjTCH4XsQbkw6c=) 8: qQrVFVU2zYEeKI_c1sPfgRBsdws.roa (hash: Q0Q6+jTPsyoLSIpvRXxP/rur4NZVUawp72Ly9Y4IL/A=) 9: tstTYn_D9Pn-4nRlBfI2UB_WSGg.roa (hash: ZjiObePgXbEPhVg4yY+Q8sRWmDFO/c82OdQ5TNgpPAM=) 10: zEb6SCNh9IA2ZcmgZWwsmTznbFk.roa (hash: tgHdlVCEN4GvD5zc3JRTYHWhACpqWoQ7O4VCFRbyik4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:22:62:40:ad:1d:df:44:c8:b2:8c:81:aa:06:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08af091858bb99651764399c6565df7a0834dbad Validity Not Before: Dec 6 05:01:16 2025 GMT Not After : Dec 7 05:01:16 2025 GMT Subject: CN=d85cabd8f8d1ba6d08018f5c1567f278dca587a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0b:c7:ab:ee:f2:b9:ee:ef:66:87:4d:59:cc: bb:c0:1e:a7:9f:08:eb:79:3e:e4:ec:77:e1:a5:6d: 69:4e:e9:e9:74:21:93:5a:75:0e:23:7c:9c:31:a0: 5f:09:04:7b:a5:c6:35:13:f9:32:d0:7d:c1:0b:43: c9:26:09:e7:2c:68:5a:14:cc:e3:c1:a4:cd:39:e2: 07:61:69:cb:7b:d0:50:16:e3:26:a8:57:8b:07:50: 09:04:5d:dc:a7:d7:39:bc:f6:51:c5:41:2a:50:4b: f4:f3:48:87:f7:0a:2c:00:b1:8e:6a:cf:00:76:fc: 82:f4:59:0f:55:64:76:d6:1e:b0:92:59:f2:58:de: 8f:6c:eb:3d:de:b3:58:39:bb:31:55:70:c5:9c:86: 9a:07:95:89:0c:24:42:b4:34:9b:56:3a:5c:f3:14: 77:5c:7e:03:de:ac:b7:fa:bc:f8:c8:c5:af:af:03: 41:c8:f9:41:be:2d:f7:82:03:e1:05:dc:d9:d1:17: 03:ca:41:63:ae:ce:fb:a7:86:a2:17:84:4f:03:67: 8a:ac:be:b7:dd:16:d4:44:63:07:e4:ec:6b:c5:3a: 0f:1a:91:9e:65:b0:5b:c7:d2:4a:d8:9b:72:e6:8d: d3:54:18:94:fe:20:af:04:72:15:e5:41:d4:08:2e: d9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5C:AB:D8:F8:D1:BA:6D:08:01:8F:5C:15:67:F2:78:DC:A5:87:A8 X509v3 Authority Key Identifier: keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ac:fb:aa:5a:23:fa:0b:ae:c8:18:c2:d4:30:08:cf:11:91: b0:b5:99:64:97:eb:0d:34:51:f5:7b:d7:f3:14:9a:7b:21:d3: e1:70:0b:73:ca:d8:fe:39:3a:ce:40:67:59:45:cf:1d:a7:80: 75:65:9a:ab:25:9c:31:12:7a:a0:d7:ad:a8:c6:f2:1e:8a:88: 77:ca:69:01:42:99:e9:2d:84:38:c5:5d:f2:d4:94:7b:27:91: d7:79:a1:66:91:48:ba:2b:48:8d:7f:78:41:8f:1d:1b:a9:24: 21:6a:ba:88:d5:b2:8f:a9:e2:71:c5:73:91:be:1b:4d:8a:97: d4:84:a8:33:c1:2b:44:d2:ad:a2:26:a9:05:c5:ef:d5:6a:45: 99:e0:40:2f:d0:31:bf:2d:bf:16:30:51:4d:97:c2:ca:e0:58: 4a:3f:89:86:42:6d:53:4c:24:5f:b8:4a:56:92:ef:81:8b:9a: 0a:e1:22:d7:e5:a5:3a:2c:fb:10:b8:db:84:81:97:e8:29:e7: 20:8b:84:66:89:52:db:f6:9d:3d:e6:cf:09:f3:d0:3a:2c:57: a7:bb:fd:1e:48:8e:74:91:34:5d:7e:22:64:c6:6d:5a:7c:c4: 0e:a6:df:2f:3c:71:f4:12:3b:fc:83:9b:8f:76:34:c5:06:20: 02:34:8d:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSJiQK0d30TIsoyBqgZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz NGRiYWQwHhcNMjUxMjA2MDUwMTE2WhcNMjUxMjA3MDUwMTE2WjAzMTEwLwYDVQQD EyhkODVjYWJkOGY4ZDFiYTZkMDgwMThmNWMxNTY3ZjI3OGRjYTU4N2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAvHq+7yue7vZodNWcy7wB6nnwjr eT7k7HfhpW1pTunpdCGTWnUOI3ycMaBfCQR7pcY1E/ky0H3BC0PJJgnnLGhaFMzj waTNOeIHYWnLe9BQFuMmqFeLB1AJBF3cp9c5vPZRxUEqUEv080iH9wosALGOas8A dvyC9FkPVWR21h6wklnyWN6PbOs93rNYObsxVXDFnIaaB5WJDCRCtDSbVjpc8xR3 XH4D3qy3+rz4yMWvrwNByPlBvi33ggPhBdzZ0RcDykFjrs77p4aiF4RPA2eKrL63 3RbURGMH5OxrxToPGpGeZbBbx9JK2Jty5o3TVBiU/iCvBHIV5UHUCC7ZjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhcq9j40bptCAGPXBVn8njcpYeoMB8GA1UdIwQY MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt NTYxMjliN2RjMDE4LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4 LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKz7qloj +guuyBjC1DAIzxGRsLWZZJfrDTRR9XvX8xSaeyHT4XALc8rY/jk6zkBnWUXPHaeA dWWaqyWcMRJ6oNetqMbyHoqId8ppAUKZ6S2EOMVd8tSUeyeR13mhZpFIuitIjX94 QY8dG6kkIWq6iNWyj6niccVzkb4bTYqX1ISoM8ErRNKtoiapBcXv1WpFmeBAL9Ax vy2/FjBRTZfCyuBYSj+JhkJtU0wkX7hKVpLvgYuaCuEi1+WlOiz7ELjbhIGX6Cnn IIuEZolS2/adPebPCfPQOixXp7v9HkiOdJE0XX4iZMZtWnzEDqbfLzxx9BI7/IOb j3Y0xQYgAjSNWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:46:53 2025 by rpki-client