This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft File: i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft (raw, json) Hash identifier: UV57fBQ94K/nMBxdy47PYjObLBXCdlOmLBQjuNK/EBk= Subject key identifier: 37:B6:B0:C0:48:2A:BC:10:91:06:95:8B:4C:69:51:D6:0E:68:18:65 Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6 Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6 Certificate serial: 019B443749A9195D295C514A2D27C2AFDAE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft Manifest number: 17A2 Signing time: Mon 22 Dec 2025 04:00:32 +0000 Manifest this update: Mon 22 Dec 2025 04:00:32 +0000 Manifest next update: Tue 23 Dec 2025 04:00:32 +0000 Files and hashes: 1: RZK0b0ovThhwOspu5E-ursP21fk.roa (hash: QD9vKhIKNC6G+l7AznXUzzLsXomMDZljRclFB7nn2HQ=) 2: bXyl61NnJFUqVdpbbyJUbKSLOEk.asa (hash: kvt/aU200bfEnw4rYqKdYW9+xb8+wCfFGl6Rty5GK40=) 3: fiISLcTtszje5XVI9V1A5UtzzeY.roa (hash: eVRxObYN5WO+IJLUe7vH/MdccTrSwqFAfOP7RIW37BY=) 4: i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl (hash: MZxw2YjRnetGPcgFephtL+MPmpk4pKtER736fqxJx8Y=) 5: jI6BNQdThJo2MEdSZOm1_susYMk.roa (hash: rpQAWWU68zMZ9YE0YNIh6QHC51Xor5PQY1DDvCq8+m8=) 6: uqvRjoImP67-V2pzEWGA2vqwBPY.roa (hash: yGPp5s4cB95t+0hM/KR3osWVzparRNQvZpkZjxE6wzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:49:a9:19:5d:29:5c:51:4a:2d:27:c2:af:da:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6 Validity Not Before: Dec 22 04:00:32 2025 GMT Not After : Dec 23 04:00:32 2025 GMT Subject: CN=37b6b0c0482abc109106958b4c6951d60e681865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b9:f6:78:bd:2f:08:02:97:09:70:8e:9b:de: 86:1d:19:83:98:ae:2f:32:ea:94:7e:1e:33:56:ce: 6f:27:a4:68:31:c7:98:8e:16:ef:fe:37:2b:b2:32: f4:0f:b3:51:f3:56:d8:ae:22:d1:6e:a0:06:58:33: d6:71:c4:55:6d:48:92:77:ef:cf:ae:ce:c8:97:83: 7e:3f:95:a6:c8:4b:a8:bf:57:55:5c:dd:29:a3:64: ed:7f:ee:cd:e0:1f:28:04:ab:f2:47:f6:db:33:0e: 30:04:1c:3a:35:8a:46:6c:9a:15:95:e3:17:3a:32: 26:c1:9d:f8:23:d1:8a:26:b5:7e:40:ca:15:57:d7: c4:8d:f2:18:c0:a6:1b:7d:2b:c0:29:a5:21:21:07: d2:8c:dc:ca:0a:56:d2:9a:06:da:50:97:0d:d6:57: 2b:23:b9:ee:9f:72:f8:bf:ab:6f:24:c8:2c:1b:72: e5:a2:81:e6:bc:71:6c:fa:d5:bf:d1:bc:60:bc:f1: 5b:b7:7b:43:11:16:50:a9:7c:35:e7:e7:1e:9a:ca: c2:d1:a0:2b:91:11:af:a6:df:c6:7a:6c:64:2c:7e: 6a:4d:f0:b7:48:03:cf:df:3b:48:c9:b1:31:85:7e: f4:ad:98:da:62:a1:7f:00:af:d2:64:0b:e1:ac:d9: 13:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B6:B0:C0:48:2A:BC:10:91:06:95:8B:4C:69:51:D6:0E:68:18:65 X509v3 Authority Key Identifier: keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d9:85:3f:02:e7:a2:4b:fa:b5:2c:f2:df:02:72:f5:37:d7: 5b:2b:6e:57:df:52:af:a7:1f:ba:7b:8a:95:15:b4:37:4c:8f: 6b:b5:7a:3e:a1:53:59:6e:4f:6d:a6:5f:c1:f8:eb:6d:93:6c: fa:28:6b:09:60:55:4e:f3:52:3f:88:66:0e:08:b2:79:51:20: 44:ab:66:62:da:42:91:99:b6:08:12:2c:8c:7c:2e:a7:32:75: 97:21:72:41:c6:5a:ec:d1:a1:48:6a:78:2c:b5:7f:c8:0a:ba: d1:2f:76:08:94:9c:e2:29:4c:f5:53:14:79:75:e3:08:0d:37: 64:88:d8:64:ca:2c:1d:66:b5:e2:71:29:eb:8a:c8:c9:84:97: 71:f8:c5:15:4d:f4:a4:86:47:91:40:58:1b:79:f0:88:3a:a0: 5b:6b:91:c7:d9:5b:84:93:90:26:d5:ae:56:35:46:3c:8f:23: 27:3f:fc:db:f2:85:34:e9:0c:c2:ce:ca:40:3a:c8:b8:ab:d8: d4:55:b1:13:77:5a:cc:fd:db:ee:17:cc:2b:a9:40:6b:d1:56: b9:63:9c:91:16:a5:b3:ea:ce:ed:fc:e7:ae:1a:e8:07:75:b9: b3:f6:75:c6:8f:67:8d:56:f1:a6:6f:7a:39:f5:39:62:83:72: fe:83:bf:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN0mpGV0pXFFKLSfCr9rhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNjlmYzYxMjhiZTU5MTQwMWFjZjgyYmMyNDYxYWY2MzZl YmU4ZTYwHhcNMjUxMjIyMDQwMDMyWhcNMjUxMjIzMDQwMDMyWjAzMTEwLwYDVQQD EygzN2I2YjBjMDQ4MmFiYzEwOTEwNjk1OGI0YzY5NTFkNjBlNjgxODY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ln2eL0vCAKXCXCOm96GHRmDmK4v MuqUfh4zVs5vJ6RoMceYjhbv/jcrsjL0D7NR81bYriLRbqAGWDPWccRVbUiSd+/P rs7Il4N+P5WmyEuov1dVXN0po2Ttf+7N4B8oBKvyR/bbMw4wBBw6NYpGbJoVleMX OjImwZ34I9GKJrV+QMoVV9fEjfIYwKYbfSvAKaUhIQfSjNzKClbSmgbaUJcN1lcr I7nun3L4v6tvJMgsG3LlooHmvHFs+tW/0bxgvPFbt3tDERZQqXw15+cemsrC0aAr kRGvpt/GemxkLH5qTfC3SAPP3ztIybExhX70rZjaYqF/AK/SZAvhrNkT7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDe2sMBIKrwQkQaVi0xpUdYOaBhlMB8GA1UdIwQY MBaAFItp/GEovlkUAaz4K8JGGvY26+jmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUt MjY1ZjJiZDBmOGYzLzEvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wYWE2ZTYtMzA1NC00ODg4LTg2NWUtMjY1ZjJiZDBmOGYz LzEvaTJuOFlTaS1XUlFCclBncndrWWE5amJyNk9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONmFPwLn okv6tSzy3wJy9TfXWytuV99Sr6cfunuKlRW0N0yPa7V6PqFTWW5PbaZfwfjrbZNs +ihrCWBVTvNSP4hmDgiyeVEgRKtmYtpCkZm2CBIsjHwupzJ1lyFyQcZa7NGhSGp4 LLV/yAq60S92CJSc4ilM9VMUeXXjCA03ZIjYZMosHWa14nEp64rIyYSXcfjFFU30 pIZHkUBYG3nwiDqgW2uRx9lbhJOQJtWuVjVGPI8jJz/82/KFNOkMws7KQDrIuKvY 1FWxE3dazP3b7hfMK6lAa9FWuWOckRals+rO7fznrhroB3W5s/Z1xo9njVbxpm96 OfU5YoNy/oO/Kw== -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:40 2025 by rpki-client