This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft File: 8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json) Hash identifier: tjfdyK35NBOuxYplzj/lBAiNiPJcAiiy6HhrKJz7vWk= Subject key identifier: 8A:62:86:2D:8F:29:B0:77:41:0C:E0:D5:3E:29:A3:35:F8:FA:7B:CB Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7 Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7 Certificate serial: 019B3D5A7CA43176B1BCEBFDA01E6E1CCE81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft Manifest number: 1379 Signing time: Sat 20 Dec 2025 20:01:38 +0000 Manifest this update: Sat 20 Dec 2025 20:01:38 +0000 Manifest next update: Sun 21 Dec 2025 20:01:38 +0000 Files and hashes: 1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: QTh5EE/eZ6NZ5Thacjw54YT3xZaqoCknNi03MKzlMEs=) 2: IPgK_RAdsHuRvKKv6Yp_JI973ng.roa (hash: tX54SYM7m1FlAg3IfdN7mYvGyQfWousk3Km0i1Rx1t4=) 3: Jvf2IZISpfE1HPuhNsWiXU8_fSU.roa (hash: /BO/n0BAcoPwjMyxg78QY8w+wqirVwYtyUM1n22IH2E=) 4: X6FDOxTNKh52-I33xxvcwTU1qaA.roa (hash: 2Nya6BSwofcloqYL9ndMBA+GqP5w942e0XCFOKQVeZs=) 5: ox2Wfo3GjgI5qclmFBQzRvWFiwk.roa (hash: HIdOko7O9yGAFOy4Nnvp9Ps0Vn1M8Ss4upiUCfRzfB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:7c:a4:31:76:b1:bc:eb:fd:a0:1e:6e:1c:ce:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7 Validity Not Before: Dec 20 20:01:38 2025 GMT Not After : Dec 21 20:01:38 2025 GMT Subject: CN=8a62862d8f29b077410ce0d53e29a335f8fa7bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:60:a5:35:38:22:67:29:94:31:ff:a9:a9:4b: b1:f1:33:0b:94:d5:c1:10:fe:20:40:81:f3:33:36: 21:40:62:22:20:55:55:97:9a:65:59:b9:f3:9c:94: 79:b4:e5:ea:9e:63:1d:e2:4d:80:7e:ce:a3:ca:fa: 18:c1:39:e4:68:b3:f6:4a:6a:d2:45:a6:33:d1:45: 4a:60:b9:63:8f:90:4e:27:7e:8b:7a:57:73:22:73: 6b:9e:16:8f:02:de:be:c4:a5:fa:79:8c:16:e2:9c: 73:c1:46:ff:8c:98:be:ef:27:83:1d:a5:b4:b2:14: ff:41:d7:2e:52:3e:2e:4e:0b:42:9c:c5:ed:85:a6: c1:02:59:1f:03:7d:22:a0:61:ef:5c:ce:79:a0:41: 78:14:af:68:75:b1:b6:7c:b2:06:54:fe:7a:2e:a1: e7:6a:f7:b1:81:4e:13:12:ee:6a:39:97:62:81:70: a2:6e:eb:50:8b:e5:07:b5:58:0d:93:86:d7:c7:ca: 0e:a1:f3:4c:e6:35:8b:2d:14:18:07:15:36:2b:41: c5:19:0a:6f:49:c5:66:22:c7:34:27:42:94:33:a3: 58:41:db:84:a9:8c:49:4c:50:fa:43:02:64:4a:fb: 98:99:2a:c4:15:ea:64:d0:11:d6:9e:6e:e5:b5:08: ea:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:62:86:2D:8F:29:B0:77:41:0C:E0:D5:3E:29:A3:35:F8:FA:7B:CB X509v3 Authority Key Identifier: keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b4:b4:5f:f0:a8:f0:b7:30:fd:4c:af:6e:d9:74:68:7c:9e: 60:e6:de:23:75:c9:38:8d:22:bf:c3:b0:ca:79:37:03:4b:3b: f6:1d:a6:e0:cc:b1:4d:41:e6:0e:b0:80:12:01:61:49:73:6e: f6:52:c3:a8:7b:d8:71:26:45:c0:23:93:a4:09:64:4f:6f:80: b7:83:ef:16:5e:67:34:d7:17:f8:85:c2:18:ec:4d:e0:c2:6e: 91:5c:50:48:ad:9e:bc:25:92:14:99:6c:df:09:d5:fc:25:23: bf:8e:28:e4:8c:89:52:d8:29:a4:2e:f2:75:88:d5:df:f1:3c: 13:6c:26:65:b6:eb:6a:1a:e9:06:29:11:ff:72:cc:bc:40:0b: 6d:6d:0e:7b:54:47:f4:37:13:5f:37:87:31:d5:30:76:1c:ca: 29:70:6f:61:fc:27:22:5f:cf:48:45:99:e4:73:4e:7f:49:7a: 82:79:1a:ff:44:95:83:db:7e:65:78:35:2a:30:7a:73:b6:9f: bc:12:20:85:74:71:43:6b:05:88:be:bd:12:c7:52:72:43:84: 40:47:ae:df:a2:53:f0:13:dd:2c:ab:f5:e2:e5:9b:64:3b:dd: c6:97:bb:d0:67:33:30:b2:1d:ea:04:09:94:c5:42:7e:92:09: ae:e2:67:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WnykMXaxvOv9oB5uHM6BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYTI1M2NkZjUwN2EwM2UxZjU3OWQyMDJkOGRmMTFkNjhm NWMzZDcwHhcNMjUxMjIwMjAwMTM4WhcNMjUxMjIxMjAwMTM4WjAzMTEwLwYDVQQD Eyg4YTYyODYyZDhmMjliMDc3NDEwY2UwZDUzZTI5YTMzNWY4ZmE3YmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGClNTgiZymUMf+pqUux8TMLlNXB EP4gQIHzMzYhQGIiIFVVl5plWbnznJR5tOXqnmMd4k2Afs6jyvoYwTnkaLP2SmrS RaYz0UVKYLljj5BOJ36LeldzInNrnhaPAt6+xKX6eYwW4pxzwUb/jJi+7yeDHaW0 shT/QdcuUj4uTgtCnMXthabBAlkfA30ioGHvXM55oEF4FK9odbG2fLIGVP56LqHn avexgU4TEu5qOZdigXCibutQi+UHtVgNk4bXx8oOofNM5jWLLRQYBxU2K0HFGQpv ScVmIsc0J0KUM6NYQduEqYxJTFD6QwJkSvuYmSrEFepk0BHWnm7ltQjqNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpihi2PKbB3QQzg1T4pozX4+nvLMB8GA1UdIwQY MBaAFPKiU831B6A+H1edIC2N8R1o9cPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjct YmU0ZDVkMDlkNzEwLzEvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xMGViZWMtMjc4NC00ZGFhLThkZjctYmU0ZDVkMDlkNzEw LzEvOHFKVHpmVUhvRDRmVjUwZ0xZM3hIV2oxdzljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrS0X/Co 8Lcw/Uyvbtl0aHyeYObeI3XJOI0iv8Owynk3A0s79h2m4MyxTUHmDrCAEgFhSXNu 9lLDqHvYcSZFwCOTpAlkT2+At4PvFl5nNNcX+IXCGOxN4MJukVxQSK2evCWSFJls 3wnV/CUjv44o5IyJUtgppC7ydYjV3/E8E2wmZbbrahrpBikR/3LMvEALbW0Oe1RH 9DcTXzeHMdUwdhzKKXBvYfwnIl/PSEWZ5HNOf0l6gnka/0SVg9t+ZXg1KjB6c7af vBIghXRxQ2sFiL69EsdSckOEQEeu36JT8BPdLKv14uWbZDvdxpe70GczMLId6gQJ lMVCfpIJruJnfA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:35:25 2025 by rpki-client