This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft File: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft (raw, json) Hash identifier: VUa7Zs3dFIjAjC5lZ64wm94I+v09OpoDc67FgW2BxLs= Subject key identifier: C2:B5:EF:A4:8C:0F:63:B5:F7:52:55:38:60:D0:99:91:54:52:E5:6B Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8 Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8 Certificate serial: 019B38A2DA0A7D129283029119B5673FA77A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft Manifest number: 1183 Signing time: Fri 19 Dec 2025 22:02:35 +0000 Manifest this update: Fri 19 Dec 2025 22:02:35 +0000 Manifest next update: Sat 20 Dec 2025 22:02:35 +0000 Files and hashes: 1: 79lt-80txKIWQWCp9jNMLc2IHAs.roa (hash: 8V+u82sHy+GzDpyon/8u7WM8JnJcqgS9AiUeL6z8Iug=) 2: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl (hash: DaTFKc51bHdzKg4KTsZaPsszlqWv29a67ZTudTqG/AM=) 3: AQ7FmuvDz62F8uKHQpuKMEYydQQ.roa (hash: M9DqKPgllLnW8MX9RGkl/xHC2u96Nyjw3cSwX+kD68U=) 4: Vf1RDh-x6BtkmqUI8kQeJAmyoeQ.roa (hash: 1PUOdlU3yqRdUd5Mz1TUUvBo/uRT6+wW9qnbLMW13lU=) 5: lXo95w5iGY2qlCwar4Vb6ngfmUQ.roa (hash: K7cw6ymMs8oJcHolnWrjFvAyiZlrz4VloYZ/Ck1llmM=) 6: nUxTi5H5Wi_nGNCH8VXylwgxdJ0.roa (hash: xSWU06TWSLqiugEcuWmt4LzGgEiH/rhkdBHL5vVX0+0=) 7: omuf2rqv4Sp9P-8ZJZ916fSowyA.roa (hash: UlQgwX4zh3WqyryliD1lENPsPKINDm9DlFR8/vawBBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:da:0a:7d:12:92:83:02:91:19:b5:67:3f:a7:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8 Validity Not Before: Dec 19 22:02:35 2025 GMT Not After : Dec 20 22:02:35 2025 GMT Subject: CN=c2b5efa48c0f63b5f752553860d099915452e56b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f0:5e:c1:42:19:07:f9:1c:cb:11:76:3b:7e: de:88:29:d2:c8:b2:be:2e:70:31:57:25:ea:8a:8e: 0a:59:a9:e6:e3:73:a8:10:f1:48:37:09:b4:3e:9a: 4a:33:1e:69:8a:e9:f8:8d:cc:15:14:ae:87:15:d1: 77:1b:6e:ed:81:f0:07:ec:0c:ce:bd:07:bc:4a:a5: ef:a6:8b:f4:f9:34:55:52:0d:60:8f:24:1a:62:87: ce:a4:e4:05:65:62:4a:51:b3:58:b6:35:2d:5d:a7: 61:f6:7c:f6:6e:b4:fd:02:1b:25:ea:b2:dc:12:a5: 27:83:16:d9:24:8d:7d:dd:fa:29:d4:22:4a:8f:87: 7c:3c:88:12:13:ef:18:3c:d3:26:50:e1:1d:8a:e5: b8:be:c1:7c:30:ac:e9:52:35:9e:8e:a9:aa:9d:22: 1f:53:b5:34:ee:3c:dc:8f:e5:92:28:00:50:f8:be: f2:7d:5b:0b:17:15:f3:c1:a6:86:fb:5e:d7:f1:ee: b3:56:63:54:4e:1f:46:c1:65:81:64:59:b1:53:0d: 7d:d4:fd:27:e1:07:b6:38:38:af:99:c5:35:ae:c5: c5:2b:6a:db:d4:4b:14:d1:97:d8:8f:76:2e:12:67: 4c:13:ba:43:b3:f5:46:d6:d9:9e:93:b9:22:b8:6a: c1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B5:EF:A4:8C:0F:63:B5:F7:52:55:38:60:D0:99:91:54:52:E5:6B X509v3 Authority Key Identifier: keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:95:55:5f:62:22:a8:94:7d:4d:bd:ce:ca:85:81:9b:60:74: be:a7:91:de:68:36:c5:5e:8c:f9:9e:5e:50:b5:44:9c:e3:1b: f4:ff:cc:c8:ff:a2:0a:9e:36:87:39:2c:32:5e:56:4c:32:bd: 54:34:62:bd:5c:31:c8:7e:ce:a1:4c:fd:d1:22:f9:e5:53:13: 7e:82:52:57:79:55:86:04:26:7a:54:4a:92:b2:40:f3:22:b3: 25:81:3f:47:5a:93:1b:18:b2:e7:ef:15:8e:8d:e9:36:14:e1: e2:9d:a5:95:fa:a4:da:62:38:56:71:92:85:88:8d:a3:d1:5d: 53:c5:a2:c1:3c:d7:68:15:5d:10:d8:b3:c4:50:37:21:ef:ea: fd:10:92:49:69:0f:ce:f6:8d:75:80:21:ef:86:d6:9e:d9:27: 33:ba:57:28:d7:2e:68:2c:e9:de:3e:70:ad:3c:67:22:dc:c0: 10:ac:61:09:e4:0d:29:4d:21:e8:04:53:41:12:f5:c2:90:33: 04:1e:24:d4:d8:0b:7d:ab:e6:8a:15:87:ab:70:df:fa:bd:31: eb:e3:e9:dd:a3:e5:86:34:8f:ea:0f:05:99:07:38:d7:51:f4: 50:7f:13:ce:22:c1:70:85:54:b9:73:1a:50:a2:6e:81:e1:06: ea:1f:f6:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4otoKfRKSgwKRGbVnP6d6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxOTkxOGVkMjE5ZTdkM2Q5MjI3MzdlY2RjNzMxZjBjYTYw YTY4YjgwHhcNMjUxMjE5MjIwMjM1WhcNMjUxMjIwMjIwMjM1WjAzMTEwLwYDVQQD EyhjMmI1ZWZhNDhjMGY2M2I1Zjc1MjU1Mzg2MGQwOTk5MTU0NTJlNTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vBewUIZB/kcyxF2O37eiCnSyLK+ LnAxVyXqio4KWanm43OoEPFINwm0PppKMx5piun4jcwVFK6HFdF3G27tgfAH7AzO vQe8SqXvpov0+TRVUg1gjyQaYofOpOQFZWJKUbNYtjUtXadh9nz2brT9Ahsl6rLc EqUngxbZJI193fop1CJKj4d8PIgSE+8YPNMmUOEdiuW4vsF8MKzpUjWejqmqnSIf U7U07jzcj+WSKABQ+L7yfVsLFxXzwaaG+17X8e6zVmNUTh9GwWWBZFmxUw191P0n 4Qe2ODivmcU1rsXFK2rb1EsU0ZfYj3YuEmdME7pDs/VG1tmek7kiuGrBpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMK176SMD2O191JVOGDQmZFUUuVrMB8GA1UdIwQY MBaAFPGZGO0hnn09kic37NxzHwymCmi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzIt MzEzZWZlYjBiMTlkLzEvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzItMzEzZWZlYjBiMTlk LzEvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZVVX2Ii qJR9Tb3OyoWBm2B0vqeR3mg2xV6M+Z5eULVEnOMb9P/MyP+iCp42hzksMl5WTDK9 VDRivVwxyH7OoUz90SL55VMTfoJSV3lVhgQmelRKkrJA8yKzJYE/R1qTGxiy5+8V jo3pNhTh4p2llfqk2mI4VnGShYiNo9FdU8WiwTzXaBVdENizxFA3Ie/q/RCSSWkP zvaNdYAh74bWntknM7pXKNcuaCzp3j5wrTxnItzAEKxhCeQNKU0h6ARTQRL1wpAz BB4k1NgLfavmihWHq3Df+r0x6+Pp3aPlhjSP6g8FmQc411H0UH8TziLBcIVUuXMa UKJugeEG6h/28g== -----END CERTIFICATE-----Generated at Sat Dec 20 02:54:49 2025 by rpki-client