This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json) Hash identifier: 68QbskkMVgeCsYQJTfgWL8cBRFIoYF16WpcaYcEijSQ= Subject key identifier: B8:7F:2E:B1:05:99:40:D3:3C:BC:BD:ED:7A:16:BB:6C:7D:C1:43:D7 Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f Certificate serial: 019B58D1051C2599B132D08A2E783FD85F8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 04:00:51 +0000 Manifest this update: Fri 26 Dec 2025 04:00:51 +0000 Manifest next update: Sat 27 Dec 2025 04:00:51 +0000 Files and hashes: 1: 2xBb1eN1uQhPtol-uKswad7hTL8.roa (hash: dXJffbqWVGzT51NatOrFAZ7XiueTLyhLa5jFxa/I29Y=) 2: 44uLXBcL_RZwFzmvHMDFnzRLsrc.roa (hash: ebcHWLKhk2lxI2aGu12w8EL09XqOe4qlsJc7YtoQwgs=) 3: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: QECDxKQEUMie/9bmacTFvcy+veVon9VAIS/Iyeaf1Ro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:05:1c:25:99:b1:32:d0:8a:2e:78:3f:d8:5f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f Validity Not Before: Dec 26 04:00:51 2025 GMT Not After : Dec 27 04:00:51 2025 GMT Subject: CN=b87f2eb1059940d33cbcbded7a16bb6c7dc143d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:98:00:0c:d0:d5:db:75:e7:00:c7:a8:4d:82: 52:1d:0f:35:97:44:8b:7e:c6:31:a8:1f:ba:1d:28: f0:ef:10:80:71:b2:34:d7:94:93:b4:9b:a5:76:dd: c9:9e:eb:eb:45:9f:27:de:ed:16:96:fc:2f:1a:ea: 40:4f:dd:4a:f0:42:14:9a:b6:53:54:11:45:dc:70: df:6e:1c:5b:c5:e2:f0:df:f6:f3:44:74:92:54:11: ad:86:68:05:8f:4b:8a:d4:f9:74:27:e3:0f:84:97: fc:a2:be:21:cc:b3:ad:db:f4:46:b3:27:84:31:db: c2:e8:fc:ff:ea:d8:73:80:b4:f4:a0:34:78:00:ab: cf:0d:20:28:6d:f0:60:1f:59:69:04:10:49:ef:cd: a3:9e:88:7d:fa:25:f1:32:6f:f6:34:72:77:01:e9: 3b:07:e0:e2:28:ef:9b:4d:b3:30:77:14:f9:e0:e5: 45:4b:2a:66:f9:ee:a8:a4:63:50:6e:c1:3f:22:56: 76:56:2b:ce:1f:f9:f0:48:c6:ac:c5:27:71:d2:fc: d1:92:05:83:73:c3:e4:54:eb:92:1b:f1:47:d5:f8: b4:47:24:8b:8c:f8:99:4b:6e:58:9b:59:82:85:25: 23:ba:b6:03:a3:b7:df:27:48:73:1b:17:42:d6:79: d5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7F:2E:B1:05:99:40:D3:3C:BC:BD:ED:7A:16:BB:6C:7D:C1:43:D7 X509v3 Authority Key Identifier: keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:cb:f4:c6:0d:63:30:dd:44:0f:b4:07:b2:8c:8e:12:78:8a: cf:ed:a7:01:ea:1a:85:c9:5a:e7:44:0a:91:c0:1b:09:60:7b: 57:78:13:6c:99:a3:53:79:d1:2e:ee:e9:d6:6b:e8:e8:de:3f: d8:fe:38:13:37:49:d9:bb:48:0d:51:1f:93:da:cd:f6:00:d5: fe:17:e1:03:f7:6c:37:78:63:6a:11:bc:7a:f6:bf:ff:8c:ce: 07:dd:e1:be:4a:ee:cf:b9:06:39:70:7d:b3:7b:02:74:05:88: 4f:9e:a4:0f:3c:0b:64:03:46:82:07:f6:6d:fa:34:d3:ba:de: c9:50:62:15:65:88:74:2f:53:7a:16:d4:ec:80:b2:cc:35:d4: 09:26:c0:99:d6:df:41:fe:e4:1d:47:dc:11:f2:ff:19:d7:8e: 23:b7:1e:b1:bd:68:23:db:1a:66:cf:b3:9e:90:a0:97:99:22: d7:42:73:2b:f6:cb:0b:63:20:4a:38:84:a8:1f:da:97:83:5c: b8:ca:49:e3:bd:76:6c:84:a9:35:bf:09:82:d5:86:20:74:3e: 11:81:68:52:71:8e:1b:d7:9d:85:74:d8:76:be:c7:b8:8b:f9: 59:3f:3c:0b:98:52:54:e1:43:2e:9c:d4:84:16:f5:d8:36:58: 62:63:fe:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0QUcJZmxMtCKLng/2F+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmY2E5OTdkMzkwY2Q2ZTQ2ZTAxMjhlNTBkNzBiODRlN2Fi Njc0MGYwHhcNMjUxMjI2MDQwMDUxWhcNMjUxMjI3MDQwMDUxWjAzMTEwLwYDVQQD EyhiODdmMmViMTA1OTk0MGQzM2NiY2JkZWQ3YTE2YmI2YzdkYzE0M2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppgADNDV23XnAMeoTYJSHQ81l0SL fsYxqB+6HSjw7xCAcbI015STtJuldt3JnuvrRZ8n3u0WlvwvGupAT91K8EIUmrZT VBFF3HDfbhxbxeLw3/bzRHSSVBGthmgFj0uK1Pl0J+MPhJf8or4hzLOt2/RGsyeE MdvC6Pz/6thzgLT0oDR4AKvPDSAobfBgH1lpBBBJ782jnoh9+iXxMm/2NHJ3Aek7 B+DiKO+bTbMwdxT54OVFSypm+e6opGNQbsE/IlZ2VivOH/nwSMasxSdx0vzRkgWD c8PkVOuSG/FH1fi0RySLjPiZS25Ym1mChSUjurYDo7ffJ0hzGxdC1nnVAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLh/LrEFmUDTPLy97XoWu2x9wUPXMB8GA1UdIwQY MBaAFP/KmX05DNbkbgEo5Q1wuE56tnQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTkt ODE5YjdhN2VjNDM0LzEvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTktODE5YjdhN2VjNDM0 LzEvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8v0xg1j MN1ED7QHsoyOEniKz+2nAeoahcla50QKkcAbCWB7V3gTbJmjU3nRLu7p1mvo6N4/ 2P44EzdJ2btIDVEfk9rN9gDV/hfhA/dsN3hjahG8eva//4zOB93hvkruz7kGOXB9 s3sCdAWIT56kDzwLZANGggf2bfo007reyVBiFWWIdC9TehbU7ICyzDXUCSbAmdbf Qf7kHUfcEfL/GdeOI7cesb1oI9saZs+znpCgl5ki10JzK/bLC2MgSjiEqB/al4Nc uMpJ4712bISpNb8JgtWGIHQ+EYFoUnGOG9edhXTYdr7HuIv5WT88C5hSVOFDLpzU hBb12DZYYmP+Fg== -----END CERTIFICATE-----Generated at Fri Dec 26 11:16:37 2025 by rpki-client