This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft File: 8aBsbBCOlBmyzbIdSLSaa71sFt8.mft (raw, json) Hash identifier: NiMAHGTzfj/2Z8ddCAL7mVFTaA8MGBqP86Y30cnKprg= Subject key identifier: 32:B7:97:0E:E0:5B:2F:82:52:ED:E0:C3:45:20:20:F3:2E:A0:67:22 Authority key identifier: F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF Certificate issuer: /CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df Certificate serial: 019B3E6D8531FD4AA64A25BF97DAFD274CD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft Manifest number: 1740 Signing time: Sun 21 Dec 2025 01:02:03 +0000 Manifest this update: Sun 21 Dec 2025 01:02:03 +0000 Manifest next update: Mon 22 Dec 2025 01:02:03 +0000 Files and hashes: 1: 8aBsbBCOlBmyzbIdSLSaa71sFt8.crl (hash: wEvDxmPz+QnvYqAlP8Pa+nvv37Mpy8NEgq0wInlC2+4=) 2: LYYtWBIrqnMkBqXL_qoGSSiMC0A.roa (hash: GO+MMgl638g9Pe8U4lrnZd+WeVwSJjTIvRPV7rn/M2U=) 3: qUqbG1fI6WnBp5sF-Oa70_Lholo.roa (hash: Onc/iKE+MBUdx68cwO8V8LQmCLrY9+uNfRvlbv3SVUg=) 4: vNazpVnOuKKsE-A9nDrKkBqBqmw.roa (hash: 6yzwUeXrNsunwiRKny+F9bobTBkszKyU+zUViVo+zKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:85:31:fd:4a:a6:4a:25:bf:97:da:fd:27:4c:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df Validity Not Before: Dec 21 01:02:03 2025 GMT Not After : Dec 22 01:02:03 2025 GMT Subject: CN=32b7970ee05b2f8252ede0c3452020f32ea06722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:c3:b4:c0:6c:24:25:1f:8f:5e:1d:37:65: 50:9c:de:43:23:fb:cc:20:59:3f:25:9e:4a:8e:ee: 3c:5b:01:87:db:36:0d:d4:84:20:c5:86:2d:0f:33: ce:56:61:da:5c:5c:9d:25:34:db:80:00:8e:76:38: 60:47:99:98:35:c0:73:ff:4e:70:59:86:6d:45:72: a4:e1:e0:a1:8d:c5:cd:72:1b:50:52:44:e1:cf:a6: 52:e7:9e:02:6e:3b:14:ff:29:f0:11:f5:f2:88:2a: 45:e5:4e:e5:7d:75:c8:b3:73:4c:77:52:cf:ce:92: 9a:22:d6:9b:f4:df:89:05:be:4a:01:93:fa:ce:7e: 96:97:dc:ab:86:03:d3:00:c6:60:4c:e3:74:ef:9e: 09:a4:d5:fe:be:e6:44:a4:07:fb:15:94:a1:bc:bd: b9:28:56:f5:2b:1d:ca:38:98:38:c7:a5:87:1c:87: 92:28:94:51:be:26:1e:d2:26:7e:0b:e4:12:f8:e1: 58:03:de:b0:af:3d:50:2b:6d:e5:b8:ca:fd:c6:c3: 27:e0:f3:cc:18:65:e6:58:de:bd:86:b1:bc:ed:d1: 15:6f:c6:27:bb:58:c7:f7:77:a5:5b:e0:f9:0c:1b: d6:5a:d3:f3:0f:f6:af:78:10:c1:ca:22:ac:3e:91: 49:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B7:97:0E:E0:5B:2F:82:52:ED:E0:C3:45:20:20:F3:2E:A0:67:22 X509v3 Authority Key Identifier: keyid:F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:c9:d8:d7:95:05:c4:9e:b8:0a:41:cb:65:ec:9a:80:14:82: 6b:17:68:74:cc:2b:06:42:92:e0:9f:b1:1a:fe:7c:9a:0b:c1: ca:33:f2:ae:19:47:96:13:2a:e8:93:84:ed:ea:c1:74:34:1e: fe:79:76:b9:20:78:eb:25:dc:8e:3a:da:f6:ac:1f:a9:34:15: cf:46:a2:1f:66:57:82:9f:f8:74:42:db:bf:83:eb:31:b3:ec: 22:bf:06:37:ba:34:7e:3f:c3:2f:26:fe:fd:d6:fa:3f:12:1c: 05:12:74:28:4c:08:ca:a0:22:9f:52:dd:76:7c:3f:e3:01:ed: 63:ca:38:d9:d6:3c:a9:e3:d2:80:a8:04:73:f5:6f:79:dd:78: 1e:f9:0a:d4:ac:52:fa:cf:e3:b3:cd:73:80:d7:1b:e8:3a:42: 27:d4:6c:46:d2:11:79:ef:bb:96:86:12:38:57:c4:52:6c:22: f2:9a:44:06:d9:82:3e:62:34:19:b2:25:9a:21:76:49:c0:51: 4f:cf:d2:c6:7a:b1:6c:5a:e4:14:04:18:d5:a0:73:49:df:f5: ff:17:d3:ad:6b:4b:94:a5:3c:13:39:a4:5a:a8:7a:42:81:aa: 5c:47:24:d6:8d:9a:2b:0d:16:48:0d:d0:cd:a6:08:ac:f1:d7: ed:01:3b:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bYUx/UqmSiW/l9r9J0zVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYTA2YzZjMTA4ZTk0MTliMmNkYjIxZDQ4YjQ5YTZiYmQ2 YzE2ZGYwHhcNMjUxMjIxMDEwMjAzWhcNMjUxMjIyMDEwMjAzWjAzMTEwLwYDVQQD EygzMmI3OTcwZWUwNWIyZjgyNTJlZGUwYzM0NTIwMjBmMzJlYTA2NzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKDDtMBsJCUfj14dN2VQnN5DI/vM IFk/JZ5Kju48WwGH2zYN1IQgxYYtDzPOVmHaXFydJTTbgACOdjhgR5mYNcBz/05w WYZtRXKk4eChjcXNchtQUkThz6ZS554CbjsU/ynwEfXyiCpF5U7lfXXIs3NMd1LP zpKaItab9N+JBb5KAZP6zn6Wl9yrhgPTAMZgTON0754JpNX+vuZEpAf7FZShvL25 KFb1Kx3KOJg4x6WHHIeSKJRRviYe0iZ+C+QS+OFYA96wrz1QK23luMr9xsMn4PPM GGXmWN69hrG87dEVb8Ynu1jH93elW+D5DBvWWtPzD/aveBDByiKsPpFJ+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDK3lw7gWy+CUu3gw0UgIPMuoGciMB8GA1UdIwQY MBaAFPGgbGwQjpQZss2yHUi0mmu9bBbfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGFCc2JCQ09sQm15emJJZFNMU2FhNzFzRnQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kZWY2NDctOTE4Ni00NzI5LWJiOTkt MTQyZWJlODY5MzE2LzEvOGFCc2JCQ09sQm15emJJZFNMU2FhNzFzRnQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9kZWY2NDctOTE4Ni00NzI5LWJiOTktMTQyZWJlODY5MzE2 LzEvOGFCc2JCQ09sQm15emJJZFNMU2FhNzFzRnQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcnY15UF xJ64CkHLZeyagBSCaxdodMwrBkKS4J+xGv58mgvByjPyrhlHlhMq6JOE7erBdDQe /nl2uSB46yXcjjra9qwfqTQVz0aiH2ZXgp/4dELbv4PrMbPsIr8GN7o0fj/DLyb+ /db6PxIcBRJ0KEwIyqAin1Lddnw/4wHtY8o42dY8qePSgKgEc/Vved14HvkK1KxS +s/js81zgNcb6DpCJ9RsRtIRee+7loYSOFfEUmwi8ppEBtmCPmI0GbIlmiF2ScBR T8/SxnqxbFrkFAQY1aBzSd/1/xfTrWtLlKU8EzmkWqh6QoGqXEck1o2aKw0WSA3Q zaYIrPHX7QE7lg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:43:26 2025 by rpki-client