This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft File: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json) Hash identifier: 6aYEm8bFTBXQZl/ffFo6LZGj7lgcga2kw9GaJmb0XSk= Subject key identifier: 26:F6:22:C5:E7:93:24:84:45:8A:D5:05:C4:02:A4:F1:68:85:DE:7B Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4 Certificate issuer: /CN=f145d44a1ee05853cd5892654334b1f21ce826d4 Certificate serial: 019B70A343D7B337167F3DD55030516EF2AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft Manifest number: 0E9A Signing time: Tue 30 Dec 2025 19:01:46 +0000 Manifest this update: Tue 30 Dec 2025 19:01:46 +0000 Manifest next update: Wed 31 Dec 2025 19:01:46 +0000 Files and hashes: 1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: nlDvdwcp9xNIaseAGWV02IEKnd/u4cKub1UaJ0VXE7A=) 2: oQ6iu5R4Fpm0Yjxuw1qLXncI4SY.roa (hash: H/akZoh4Ps4IHkjkrhcdXyi2oc0+hPspNWAd57bgzLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 19:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a3:43:d7:b3:37:16:7f:3d:d5:50:30:51:6e:f2:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4 Validity Not Before: Dec 30 19:01:46 2025 GMT Not After : Dec 31 19:01:46 2025 GMT Subject: CN=26f622c5e7932484458ad505c402a4f16885de7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:da:98:00:4f:8f:44:c8:bc:46:34:1b:93:69: be:88:02:06:98:dc:e1:2c:05:6c:91:29:71:0f:e2: 1b:4e:88:45:96:e0:68:1c:29:bc:cf:78:96:b0:de: d0:9b:bf:d0:34:21:22:6c:66:c2:ba:e4:aa:43:e9: 59:87:2a:c1:f5:2f:50:d4:ab:7c:61:8f:52:5f:f5: 5d:3d:a2:a7:63:43:b5:24:a4:50:3c:b1:0b:08:45: 19:f0:81:0f:c2:20:dd:2a:7e:5c:98:62:73:79:2d: f7:6f:e4:e4:48:19:0f:eb:69:1d:68:52:17:67:a4: 61:fd:68:60:5e:44:8f:19:bf:dd:98:64:2f:94:a2: 14:05:64:7d:60:fb:2d:37:fd:1e:02:cf:5a:0c:9a: 2a:1e:85:72:c3:0f:1a:b9:fe:41:b3:5c:b1:38:34: 61:09:00:1a:1d:3e:5d:0f:94:d1:9e:0c:f2:e6:4f: f7:19:11:e5:b4:61:fe:69:8d:19:ab:f2:5f:26:59: d4:94:01:a8:fd:8c:38:9e:13:64:4c:bf:a9:0e:41: 75:c7:71:9a:fe:57:3b:2a:df:cf:78:ee:91:0f:4d: 46:f4:d4:03:b0:31:87:2a:70:f6:7b:88:17:19:67: f8:ba:d4:df:f3:12:24:c3:1a:cc:a7:ba:7e:1a:8a: ba:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F6:22:C5:E7:93:24:84:45:8A:D5:05:C4:02:A4:F1:68:85:DE:7B X509v3 Authority Key Identifier: keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:94:bb:2d:87:d5:ae:53:86:cf:a5:b6:0d:eb:e6:56:83:9a: 28:9f:02:03:ac:76:65:76:17:25:4d:ab:55:35:3b:96:7a:12: ac:86:c9:82:e6:a7:12:24:66:aa:62:2a:2d:99:05:ec:96:08: 1c:4a:47:85:b2:74:38:ef:0a:f4:74:ec:32:64:cd:c5:13:e9: 0b:bf:4f:4a:23:c2:6b:96:f8:1c:16:db:01:d3:dd:c0:84:4d: 9f:05:3a:5c:c4:7d:e7:a3:e3:54:b5:a2:4a:38:96:8e:58:75: 29:51:ee:d2:2f:de:cb:41:8a:bd:6f:03:40:34:92:85:f5:f9: 04:81:ac:bc:8d:24:5e:b2:a6:a8:cb:45:e8:85:4f:89:9d:ea: e6:56:4e:d6:2c:42:12:c3:04:aa:41:ff:e7:a9:1c:4e:72:ac: 85:b4:6b:6b:86:51:e5:ff:ea:77:91:35:54:fb:57:36:f0:11: c0:7a:f0:82:2f:17:36:1d:01:48:0c:ac:0d:2b:ee:2b:3c:c1: 0b:86:65:5c:2b:82:27:72:a2:5c:8c:d6:8c:46:74:99:39:0b: 3e:c4:e0:67:1c:38:c2:82:ed:fe:5b:5f:07:ad:bf:d9:dd:4f: 3e:c6:6d:bc:f0:66:a2:48:5e:10:13:1a:55:c8:b0:f9:c8:d7: bb:b5:05:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwo0PXszcWfz3VUDBRbvKqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNDVkNDRhMWVlMDU4NTNjZDU4OTI2NTQzMzRiMWYyMWNl ODI2ZDQwHhcNMjUxMjMwMTkwMTQ2WhcNMjUxMjMxMTkwMTQ2WjAzMTEwLwYDVQQD EygyNmY2MjJjNWU3OTMyNDg0NDU4YWQ1MDVjNDAyYTRmMTY4ODVkZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNqYAE+PRMi8RjQbk2m+iAIGmNzh LAVskSlxD+IbTohFluBoHCm8z3iWsN7Qm7/QNCEibGbCuuSqQ+lZhyrB9S9Q1Kt8 YY9SX/VdPaKnY0O1JKRQPLELCEUZ8IEPwiDdKn5cmGJzeS33b+TkSBkP62kdaFIX Z6Rh/WhgXkSPGb/dmGQvlKIUBWR9YPstN/0eAs9aDJoqHoVyww8auf5Bs1yxODRh CQAaHT5dD5TRngzy5k/3GRHltGH+aY0Zq/JfJlnUlAGo/Yw4nhNkTL+pDkF1x3Ga /lc7Kt/PeO6RD01G9NQDsDGHKnD2e4gXGWf4utTf8xIkwxrMp7p+Goq6tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCb2IsXnkySERYrVBcQCpPFohd57MB8GA1UdIwQY MBaAFPFF1Eoe4FhTzViSZUM0sfIc6CbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80ZjgxMzUtYWEyNC00NGE0LWE1NDYt M2RiY2RmNzc5ZjI0LzEvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80ZjgxMzUtYWEyNC00NGE0LWE1NDYtM2RiY2RmNzc5ZjI0 LzEvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapS7LYfV rlOGz6W2DevmVoOaKJ8CA6x2ZXYXJU2rVTU7lnoSrIbJguanEiRmqmIqLZkF7JYI HEpHhbJ0OO8K9HTsMmTNxRPpC79PSiPCa5b4HBbbAdPdwIRNnwU6XMR956PjVLWi SjiWjlh1KVHu0i/ey0GKvW8DQDSShfX5BIGsvI0kXrKmqMtF6IVPiZ3q5lZO1ixC EsMEqkH/56kcTnKshbRra4ZR5f/qd5E1VPtXNvARwHrwgi8XNh0BSAysDSvuKzzB C4ZlXCuCJ3KiXIzWjEZ0mTkLPsTgZxw4woLt/ltfB62/2d1PPsZtvPBmokheEBMa Vciw+cjXu7UFRA== -----END CERTIFICATE-----Generated at Wed Dec 31 03:43:05 2025 by rpki-client