This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft File: 8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft (raw, json) Hash identifier: g/Tq+IhOC4itc76keQlSB+toYj8y0+R9AnTViPREY7w= Subject key identifier: 0B:90:E3:7B:43:81:00:06:38:65:96:20:C5:91:3E:E4:03:F4:8C:3A Authority key identifier: F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C Certificate issuer: /CN=f0a9005423147453909366c6b4d09c31958acc1c Certificate serial: 019B3F482853CA69B899CAC96E76ED3E2E63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft Manifest number: 0122 Signing time: Sun 21 Dec 2025 05:00:51 +0000 Manifest this update: Sun 21 Dec 2025 05:00:51 +0000 Manifest next update: Mon 22 Dec 2025 05:00:51 +0000 Files and hashes: 1: 4qVlaSTsE1gXSumcFtIoCSI6_Ds.roa (hash: gxiJkMzAgslpclu4FVxFkwBMuCJhHIk77n6WLMjRt50=) 2: 8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl (hash: HnQkJy1mexlp3cm7lpyHYuTJ2l7Qrwwve1QWzaz4neg=) 3: JPM4YH3p4W-kOC7R4fma0DgmIZQ.roa (hash: 1rs/yihW/LgAGtoac03H1xBXx8dUEUTLq50/L4CH5AA=) 4: kqgGhTxJAHOFMUNL3EFp83GA7Xo.roa (hash: YbWtoAqUQYcbJzxbPZ7TL2mv+/kqmj3HAGafEmcOApM=) 5: zWLkf9J7tc5E8tsLSE-YhUD6XZY.roa (hash: +Totm03QQJ2SJRLIDXG7rNkdSX+/Y9DffvcFrN9L3w4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:28:53:ca:69:b8:99:ca:c9:6e:76:ed:3e:2e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0a9005423147453909366c6b4d09c31958acc1c Validity Not Before: Dec 21 05:00:51 2025 GMT Not After : Dec 22 05:00:51 2025 GMT Subject: CN=0b90e37b4381000638659620c5913ee403f48c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dd:20:e7:9b:97:25:4e:6b:39:6f:22:66:1d: c6:11:23:d8:6f:51:46:31:44:43:c0:11:87:f4:97: 36:5c:e7:54:a1:13:09:15:1d:8a:6b:aa:9a:9b:4b: 2a:b6:24:60:20:6f:0d:30:c7:e9:6c:27:3b:15:6e: 73:d8:19:12:3c:a1:0e:49:95:b7:11:d1:15:fc:02: 5b:98:ee:07:b6:c5:9a:b0:71:13:24:42:a0:bf:30: 1a:64:37:05:2c:4f:85:5f:27:85:6e:f3:56:20:22: e7:b8:33:fa:dd:06:ae:cb:9b:1e:93:e8:19:3f:31: 9b:74:e3:29:c4:7c:df:70:c8:1e:ea:24:68:a1:7e: 4d:da:c0:a6:22:66:b9:d2:79:a3:2c:d8:10:eb:71: 13:ed:d0:78:34:26:a6:41:f6:82:34:25:06:76:98: a1:1b:8b:20:9b:cd:e0:6b:35:a3:a8:7f:1a:4a:a8: d2:b1:98:a1:be:f6:b9:1f:c3:3a:05:9c:e0:f5:04: e6:52:12:10:1a:2b:37:3a:e4:ae:7f:70:10:a0:74: 08:59:0c:46:11:91:98:e4:56:72:3b:be:32:8b:93: 63:6d:4b:8e:a0:8d:c6:07:cd:46:52:26:a7:7c:ba: eb:18:da:26:b9:20:94:05:5f:b1:fd:f6:04:1e:df: 92:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:90:E3:7B:43:81:00:06:38:65:96:20:C5:91:3E:E4:03:F4:8C:3A X509v3 Authority Key Identifier: keyid:F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:aa:ad:f6:a2:05:3c:a6:e0:7e:45:ef:1b:db:ee:83:b2:3f: 08:fc:3b:66:19:38:29:ac:3c:87:ce:b0:f7:bb:ea:7d:31:80: c8:25:83:03:02:53:d2:61:5b:ae:9e:5e:71:bc:f8:6b:22:fc: a0:7c:fb:2d:f2:9e:bd:ad:15:98:6f:15:03:5b:1d:8e:4d:72: 12:7a:54:da:4f:57:15:20:36:6d:94:e7:b3:6c:a1:9f:f9:78: b7:17:1c:a1:64:ed:2c:fe:7a:b1:cf:46:88:b2:64:01:0f:a3: fa:f6:fd:a8:4a:22:f7:13:e7:d5:bc:1f:74:9a:77:fe:a1:bb: 2b:2a:bc:d3:f4:19:0e:9b:4b:ea:09:44:d5:b3:c6:15:4f:0b: 59:15:b6:67:89:a2:f2:68:d2:a2:87:6d:25:ff:65:90:82:1c: 75:4d:44:46:3a:65:ff:3a:b3:12:d3:19:6b:3b:be:1f:3e:d8: 46:06:95:ba:01:40:02:91:e7:de:b2:0e:51:30:a8:52:7c:80: d4:9d:15:ff:8b:a5:a8:f4:b6:58:e4:4b:8d:54:b7:f9:07:09: 96:83:22:bd:96:1d:d1:6e:92:63:b1:0d:d3:fc:5d:12:39:70: b6:04:e6:fa:ad:8a:40:d9:e9:c6:63:a9:11:e9:d3:18:8f:98: 94:95:d9:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SChTymm4mcrJbnbtPi5jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYTkwMDU0MjMxNDc0NTM5MDkzNjZjNmI0ZDA5YzMxOTU4 YWNjMWMwHhcNMjUxMjIxMDUwMDUxWhcNMjUxMjIyMDUwMDUxWjAzMTEwLwYDVQQD EygwYjkwZTM3YjQzODEwMDA2Mzg2NTk2MjBjNTkxM2VlNDAzZjQ4YzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt0g55uXJU5rOW8iZh3GESPYb1FG MURDwBGH9Jc2XOdUoRMJFR2Ka6qam0sqtiRgIG8NMMfpbCc7FW5z2BkSPKEOSZW3 EdEV/AJbmO4HtsWasHETJEKgvzAaZDcFLE+FXyeFbvNWICLnuDP63Qauy5sek+gZ PzGbdOMpxHzfcMge6iRooX5N2sCmIma50nmjLNgQ63ET7dB4NCamQfaCNCUGdpih G4sgm83gazWjqH8aSqjSsZihvva5H8M6BZzg9QTmUhIQGis3OuSuf3AQoHQIWQxG EZGY5FZyO74yi5NjbUuOoI3GB81GUianfLrrGNomuSCUBV+x/fYEHt+SRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuQ43tDgQAGOGWWIMWRPuQD9Iw6MB8GA1UdIwQY MBaAFPCpAFQjFHRTkJNmxrTQnDGViswcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEtrQVZDTVVkRk9RazJiR3ROQ2NNWldLekJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xNTdhZjYtY2NlMi00ZTZkLWJjMjMt MzBkNzlmOWFhODc3LzEvOEtrQVZDTVVkRk9RazJiR3ROQ2NNWldLekJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8xNTdhZjYtY2NlMi00ZTZkLWJjMjMtMzBkNzlmOWFhODc3 LzEvOEtrQVZDTVVkRk9RazJiR3ROQ2NNWldLekJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwaqt9qIF PKbgfkXvG9vug7I/CPw7Zhk4Kaw8h86w97vqfTGAyCWDAwJT0mFbrp5ecbz4ayL8 oHz7LfKeva0VmG8VA1sdjk1yEnpU2k9XFSA2bZTns2yhn/l4txccoWTtLP56sc9G iLJkAQ+j+vb9qEoi9xPn1bwfdJp3/qG7Kyq80/QZDptL6glE1bPGFU8LWRW2Z4mi 8mjSoodtJf9lkIIcdU1ERjpl/zqzEtMZazu+Hz7YRgaVugFAApHn3rIOUTCoUnyA 1J0V/4ulqPS2WORLjVS3+QcJloMivZYd0W6SY7EN0/xdEjlwtgTm+q2KQNnpxmOp EenTGI+YlJXZBw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:51:30 2025 by rpki-client