This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft File: 8z8ttyqrQ1udqisffhqKMnZ3iL4.mft (raw, json) Hash identifier: tjG1KdA6aQXrWhZbjrOFDXX1TENkyMjVHOC5RIgm7cg= Subject key identifier: 37:D4:6D:B5:30:9D:B6:50:AD:7F:62:99:A0:62:31:7B:42:EB:3D:F4 Authority key identifier: F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE Certificate issuer: /CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be Certificate serial: 019B51BE004DBC18A18423317B0978EA79AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft Manifest number: 023D Signing time: Wed 24 Dec 2025 19:02:44 +0000 Manifest this update: Wed 24 Dec 2025 19:02:44 +0000 Manifest next update: Thu 25 Dec 2025 19:02:44 +0000 Files and hashes: 1: 8z8ttyqrQ1udqisffhqKMnZ3iL4.crl (hash: IEqWUVbHsUKPC1kzHU9D0YclPwu8P4aZ9uENt3oLWNo=) 2: JJIvfjZzCLr-eY_LSqlGpsRo7hw.roa (hash: bxgw5cMXPreloYfdhoWhuj5SGkwaDHEoqsrDfOC485Y=) 3: gLRqMg9LH0l3Bvm_1EaM6nJMhBU.roa (hash: tozY0cG4yyw1J4sRnJzdlyQ67yOL3u+re3wAKQtu0HE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:be:00:4d:bc:18:a1:84:23:31:7b:09:78:ea:79:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f33f2db72aab435b9daa2b1f7e1a8a32767788be Validity Not Before: Dec 24 19:02:44 2025 GMT Not After : Dec 25 19:02:44 2025 GMT Subject: CN=37d46db5309db650ad7f6299a062317b42eb3df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ae:e9:49:6c:4c:e4:78:d2:e9:00:9f:5f:a1: d9:44:79:40:42:15:25:48:3f:ff:be:11:9a:07:1f: 1a:65:c1:2f:61:90:60:ea:05:21:5f:85:83:1f:73: 78:2c:bf:6d:67:8b:17:54:59:55:1b:8f:0a:be:7b: 59:9e:d1:4a:5a:b9:e9:96:9f:d8:be:f2:b5:be:12: 8b:ee:4f:4e:aa:b3:b3:d2:f4:9c:33:6d:9d:a9:60: d7:33:13:91:86:87:0e:0d:06:66:ac:6f:5d:23:e0: 24:32:82:aa:ad:0e:c3:a0:e2:c2:c9:35:60:07:e9: a4:24:17:7a:4e:00:41:11:95:a2:4e:de:c8:79:e5: f9:2f:f3:99:d7:87:83:45:f4:8d:4a:85:0b:32:5a: 35:82:f4:3a:3f:eb:b6:53:2d:e7:91:b0:fc:f3:33: 8c:62:ce:6a:bb:e1:23:20:a9:23:8b:9e:b0:59:6a: 09:b7:b2:72:34:92:32:f9:ea:43:a4:af:79:40:3b: a1:f9:ff:50:48:fb:b1:4c:2d:ef:dc:2a:04:75:e2: 3c:31:b6:e6:3e:6b:fc:34:67:88:0c:8f:a2:ad:62: 18:d4:55:b6:7d:ea:0a:80:fc:85:4d:f6:e3:aa:87: dc:d3:05:4b:fa:1e:e8:11:09:3c:1c:51:7b:3a:90: f4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D4:6D:B5:30:9D:B6:50:AD:7F:62:99:A0:62:31:7B:42:EB:3D:F4 X509v3 Authority Key Identifier: keyid:F3:3F:2D:B7:2A:AB:43:5B:9D:AA:2B:1F:7E:1A:8A:32:76:77:88:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8ttyqrQ1udqisffhqKMnZ3iL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c09d9-da0b-4f5b-be21-c6c06e2b3a9f/1/8z8ttyqrQ1udqisffhqKMnZ3iL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:62:01:e8:29:65:d3:45:cf:78:87:bd:ec:b8:3f:b3:bc:a7: f6:32:6e:ae:09:a2:e5:3c:28:1b:15:2e:bf:5c:bb:9b:f3:ae: 2e:68:19:16:c0:62:df:5c:e5:f8:c1:a9:15:cb:5a:a0:02:1b: 91:18:77:82:7a:98:c8:24:5f:84:cd:ea:a3:2d:8b:74:60:9c: 5f:28:b7:0e:6f:db:78:49:a4:0d:ec:8f:90:5c:02:ec:f6:c1: 6e:43:39:2c:f0:d7:9b:20:ea:2b:4f:9a:79:38:71:ab:f8:69: 07:8a:3f:04:8b:a3:0d:ee:5f:86:d8:59:a2:b6:2d:1a:06:3d: d5:57:41:9c:e5:af:0b:9c:48:da:c3:80:8f:a4:c7:bd:3b:f9: 9f:fe:b7:88:7d:48:cd:3b:d8:84:83:78:87:30:40:6f:70:ac: 24:ab:c0:ba:3c:e4:33:be:20:25:61:07:c6:3c:1e:3a:44:a6: a8:0b:df:f5:e9:f5:b2:b1:38:00:04:1a:00:e0:93:23:ad:17: 2c:00:e9:c7:d9:2c:31:c7:d7:2f:48:fc:75:2f:3d:b9:bb:f4: 19:8c:7b:93:cc:8c:6d:69:ba:bb:c9:ea:d3:11:92:48:a2:5d: a9:b1:3e:f8:28:a9:0e:d2:fa:3f:06:35:4a:28:a5:41:67:ad: 81:e5:eb:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvgBNvBihhCMxewl46nmtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzM2YyZGI3MmFhYjQzNWI5ZGFhMmIxZjdlMWE4YTMyNzY3 Nzg4YmUwHhcNMjUxMjI0MTkwMjQ0WhcNMjUxMjI1MTkwMjQ0WjAzMTEwLwYDVQQD EygzN2Q0NmRiNTMwOWRiNjUwYWQ3ZjYyOTlhMDYyMzE3YjQyZWIzZGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj67pSWxM5HjS6QCfX6HZRHlAQhUl SD//vhGaBx8aZcEvYZBg6gUhX4WDH3N4LL9tZ4sXVFlVG48KvntZntFKWrnplp/Y vvK1vhKL7k9OqrOz0vScM22dqWDXMxORhocODQZmrG9dI+AkMoKqrQ7DoOLCyTVg B+mkJBd6TgBBEZWiTt7IeeX5L/OZ14eDRfSNSoULMlo1gvQ6P+u2Uy3nkbD88zOM Ys5qu+EjIKkji56wWWoJt7JyNJIy+epDpK95QDuh+f9QSPuxTC3v3CoEdeI8Mbbm Pmv8NGeIDI+irWIY1FW2feoKgPyFTfbjqofc0wVL+h7oEQk8HFF7OpD0WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfUbbUwnbZQrX9imaBiMXtC6z30MB8GA1UdIwQY MBaAFPM/Lbcqq0NbnaorH34aijJ2d4i+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82YzA5ZDktZGEwYi00ZjViLWJlMjEt YzZjMDZlMmIzYTlmLzEvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS82YzA5ZDktZGEwYi00ZjViLWJlMjEtYzZjMDZlMmIzYTlm LzEvOHo4dHR5cXJRMXVkcWlzZmZocUtNblozaUw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWIB6Cll 00XPeIe97Lg/s7yn9jJurgmi5TwoGxUuv1y7m/OuLmgZFsBi31zl+MGpFctaoAIb kRh3gnqYyCRfhM3qoy2LdGCcXyi3Dm/beEmkDeyPkFwC7PbBbkM5LPDXmyDqK0+a eThxq/hpB4o/BIujDe5fhthZorYtGgY91VdBnOWvC5xI2sOAj6THvTv5n/63iH1I zTvYhIN4hzBAb3CsJKvAujzkM74gJWEHxjweOkSmqAvf9en1srE4AAQaAOCTI60X LADpx9ksMcfXL0j8dS89ubv0GYx7k8yMbWm6u8nq0xGSSKJdqbE++CipDtL6PwY1 SiilQWetgeXrBA== -----END CERTIFICATE-----Generated at Wed Dec 24 21:47:10 2025 by rpki-client