This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft File: 8TIZIhzAohMmzgBsQoJbrCvjHhc.mft (raw, json) Hash identifier: liczBSBHVZjgIjX4kcAvEKIJ/f39MDD53li7pDYzcIU= Subject key identifier: 9C:3C:B0:FA:A2:9F:26:A3:24:E0:1B:5C:98:5B:8C:BE:AD:5F:6B:DC Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17 Certificate issuer: /CN=f13219221cc0a21326ce006c42825bac2be31e17 Certificate serial: 019B37FC7E9B7598812481B77A2FC86F7C11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft Manifest number: 18AA Signing time: Fri 19 Dec 2025 19:00:52 +0000 Manifest this update: Fri 19 Dec 2025 19:00:52 +0000 Manifest next update: Sat 20 Dec 2025 19:00:52 +0000 Files and hashes: 1: 8TIZIhzAohMmzgBsQoJbrCvjHhc.crl (hash: 2Z0nfq+f2y1ABssj+DMoMoRlo60feW3TxdqL5+iWQC4=) 2: KjLlUbsy5OhkLv0qFbrgPhCDVXc.roa (hash: Y7RFJziGNZvZmqC0fcM/IrDDZFezUSlFPJ8Z47Y2wSc=) 3: ir7-RH8I6LOM7faVYPUvWtPtBkc.roa (hash: c3S12HvLqchLUsT4f7tqk56b2aJYvGDiRT3Sw4rhzw0=) 4: sioOqEQgSdt-Z2nuvjH-ipYeJ0U.roa (hash: e/yGVe5B1VqGg3IGxSr7CYJ11tiQj+M1xaKJk8xaUwo=) 5: wBll80eEVRcCiVNLyafIlwBJOvY.roa (hash: Vrtbp5BA+79ihdsDatt4sH3YRMZYNvpy4CEr3U+1Q18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:7e:9b:75:98:81:24:81:b7:7a:2f:c8:6f:7c:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17 Validity Not Before: Dec 19 19:00:52 2025 GMT Not After : Dec 20 19:00:52 2025 GMT Subject: CN=9c3cb0faa29f26a324e01b5c985b8cbead5f6bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:20:03:8c:d9:ea:04:14:bd:05:8b:7d:ad:ca: ce:82:20:d6:40:55:01:53:15:97:08:3a:74:55:da: 3b:51:c4:9c:3e:c6:cd:4f:12:10:e9:25:a1:aa:02: 38:80:d8:20:a6:ff:9c:d5:17:05:12:eb:7f:a9:c8: 8a:e1:b2:89:8c:14:90:6c:c6:a6:eb:8d:51:81:ee: fe:51:2e:3c:11:7d:a4:2d:32:ff:bf:07:5b:f0:08: 74:1f:63:93:54:13:69:57:ac:04:a0:bc:86:aa:3a: d7:5a:bb:33:b2:29:f7:ae:30:97:62:72:ba:2b:7e: 5f:47:0a:94:34:ce:ab:c9:06:a9:2b:cb:97:9e:b3: b3:b6:1f:23:63:da:26:66:a6:ae:57:98:f2:ef:b6: 27:60:2c:79:f8:c6:f7:45:44:2f:79:be:50:d8:78: e3:92:8a:cb:86:4c:7c:1c:f5:39:41:67:bc:a7:b6: 43:b4:7a:d6:ca:9c:7e:c7:12:c9:2e:93:01:9d:34: 91:8b:ef:7f:b9:bc:2b:9b:8a:9c:be:1c:91:a9:9c: b2:87:25:54:93:22:a4:da:d6:d7:8c:b2:7a:8e:c4: a7:78:c1:99:0e:ec:ea:93:40:31:d5:b9:81:b8:62: a4:85:02:3a:c0:aa:e8:32:fa:9e:40:2c:d0:e8:3f: 30:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3C:B0:FA:A2:9F:26:A3:24:E0:1B:5C:98:5B:8C:BE:AD:5F:6B:DC X509v3 Authority Key Identifier: keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:6e:e8:76:61:6b:31:ae:87:50:ab:89:db:52:da:e0:15:24: 81:5d:8c:06:46:07:28:f2:df:ef:69:d4:ea:af:c5:c8:42:ac: 7e:57:bd:8b:c0:34:96:0b:e4:31:d5:73:a8:ba:2b:00:b1:0f: 75:ac:82:87:58:06:2d:5b:10:ad:70:7b:73:fb:fa:0c:2a:d6: 87:55:8e:21:71:99:ef:0b:b5:c4:cc:10:66:f1:0b:d7:bc:17: 49:6c:e1:50:2b:a2:46:db:7d:51:57:8a:bf:12:4b:87:44:75: 43:47:cd:86:78:b6:b4:ab:01:70:e7:5f:0c:03:8d:bc:9b:e6: 97:af:6b:b0:fa:75:fc:58:75:1f:8a:c9:05:82:25:51:5e:cf: ba:74:3e:c8:65:0e:1e:93:7b:d2:56:69:e7:63:99:5a:b9:6d: b2:61:cb:41:32:e5:2f:91:2c:32:32:9b:57:74:6b:3a:4c:8c: 10:0c:ed:cc:5e:30:65:d7:bf:46:ba:8e:e0:b7:52:3e:79:ba: 78:df:15:89:a9:bb:b7:82:60:30:4f:f2:de:9f:81:00:32:d4: ea:68:ca:f8:94:f1:55:8b:01:5f:05:cf:3b:cd:cd:8a:aa:1e: 60:13:c1:8b:22:67:78:46:7e:fe:a7:eb:40:b1:46:3b:f6:dd: e1:3f:0f:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/H6bdZiBJIG3ei/Ib3wRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzIxOTIyMWNjMGEyMTMyNmNlMDA2YzQyODI1YmFjMmJl MzFlMTcwHhcNMjUxMjE5MTkwMDUyWhcNMjUxMjIwMTkwMDUyWjAzMTEwLwYDVQQD Eyg5YzNjYjBmYWEyOWYyNmEzMjRlMDFiNWM5ODViOGNiZWFkNWY2YmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryADjNnqBBS9BYt9rcrOgiDWQFUB UxWXCDp0Vdo7UcScPsbNTxIQ6SWhqgI4gNggpv+c1RcFEut/qciK4bKJjBSQbMam 641Rge7+US48EX2kLTL/vwdb8Ah0H2OTVBNpV6wEoLyGqjrXWrszsin3rjCXYnK6 K35fRwqUNM6ryQapK8uXnrOzth8jY9omZqauV5jy77YnYCx5+Mb3RUQveb5Q2Hjj korLhkx8HPU5QWe8p7ZDtHrWypx+xxLJLpMBnTSRi+9/ubwrm4qcvhyRqZyyhyVU kyKk2tbXjLJ6jsSneMGZDuzqk0Ax1bmBuGKkhQI6wKroMvqeQCzQ6D8wWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJw8sPqinyajJOAbXJhbjL6tX2vcMB8GA1UdIwQY MBaAFPEyGSIcwKITJs4AbEKCW6wr4x4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRJWkloekFvaE1temdCc1FvSmJyQ3ZqSGhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDI0NGQtMDNjOC00NzgwLTg3YzMt NDVlNjk2YTVhZTQ1LzEvOFRJWkloekFvaE1temdCc1FvSmJyQ3ZqSGhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDI0NGQtMDNjOC00NzgwLTg3YzMtNDVlNjk2YTVhZTQ1 LzEvOFRJWkloekFvaE1temdCc1FvSmJyQ3ZqSGhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjG7odmFr Ma6HUKuJ21La4BUkgV2MBkYHKPLf72nU6q/FyEKsfle9i8A0lgvkMdVzqLorALEP dayCh1gGLVsQrXB7c/v6DCrWh1WOIXGZ7wu1xMwQZvEL17wXSWzhUCuiRtt9UVeK vxJLh0R1Q0fNhni2tKsBcOdfDAONvJvml69rsPp1/Fh1H4rJBYIlUV7PunQ+yGUO HpN70lZp52OZWrltsmHLQTLlL5EsMjKbV3RrOkyMEAztzF4wZde/RrqO4LdSPnm6 eN8Viam7t4JgME/y3p+BADLU6mjK+JTxVYsBXwXPO83NiqoeYBPBiyJneEZ+/qfr QLFGO/bd4T8PXQ== -----END CERTIFICATE-----Generated at Fri Dec 19 23:33:09 2025 by rpki-client