This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft File: 8khYdchHDmqs3JR0IQXzDFl6wrs.mft (raw, json) Hash identifier: /yZ/HLE+afiwKVLERCdr/NoQi8CzDk1T8AZ750mMf3A= Subject key identifier: 10:48:BE:04:BE:EF:AD:DC:54:7A:E2:03:FC:88:81:92:AA:12:F9:49 Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB Certificate issuer: /CN=f2485875c8470e6aacdc94742105f30c597ac2bb Certificate serial: 019B3EA33E204CCB79F38CE5E62387CE2966 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft Manifest number: 0E82 Signing time: Sun 21 Dec 2025 02:00:44 +0000 Manifest this update: Sun 21 Dec 2025 02:00:44 +0000 Manifest next update: Mon 22 Dec 2025 02:00:44 +0000 Files and hashes: 1: 8khYdchHDmqs3JR0IQXzDFl6wrs.crl (hash: YuerbcCWo/kF85mxmQM1mpCaJpsR44NEIwxNpOuvsrE=) 2: KFfztoP4zYUm8dNJiEnSrQ7R73c.roa (hash: qCCYAIXwUSpfylEwHT2IABft9ieDjEL8N4YCjK7uS7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:3e:20:4c:cb:79:f3:8c:e5:e6:23:87:ce:29:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb Validity Not Before: Dec 21 02:00:44 2025 GMT Not After : Dec 22 02:00:44 2025 GMT Subject: CN=1048be04beefaddc547ae203fc888192aa12f949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7f:f4:c0:44:68:41:af:ff:4a:29:1f:9d:0d: a9:62:57:93:2d:37:69:3f:41:5b:78:0b:06:f4:fd: 81:e7:1a:eb:7d:07:b6:c4:2f:4b:68:1b:2a:61:d3: 95:83:26:a6:1d:61:8c:03:89:4c:be:0f:ae:6c:a9: fc:cb:b7:31:ed:d9:09:bc:99:99:ab:a0:d4:da:9c: cc:67:7c:bc:76:9c:32:ff:5e:47:c8:d1:1f:74:a2: 55:60:08:2f:86:36:16:79:8d:49:86:40:a9:1f:6c: 9a:a3:80:3d:92:5e:e4:eb:b0:26:66:ca:56:e6:50: 06:68:2e:1b:c9:4f:f3:a6:46:ed:4a:2e:27:02:23: 20:30:9f:3a:04:1a:08:5e:dd:55:bd:9d:8e:de:98: db:5d:a4:61:42:39:e8:56:d1:5a:5c:97:20:96:ed: a1:e3:ac:0a:53:88:ae:cf:3b:d9:1c:eb:69:19:34: 75:39:8b:41:5e:99:ef:b3:2f:f1:56:c8:4e:a3:27: b1:5c:d1:63:b6:85:cb:47:ff:be:6d:b8:f8:d6:bc: e9:b4:72:b5:3e:8f:75:79:43:c3:d6:5f:4b:16:0e: 15:9c:08:ae:13:7f:93:e2:5c:ba:08:b2:8c:33:11: 48:27:7e:5f:50:9e:98:70:39:5e:40:28:84:f6:1f: 04:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:48:BE:04:BE:EF:AD:DC:54:7A:E2:03:FC:88:81:92:AA:12:F9:49 X509v3 Authority Key Identifier: keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:12:d7:f3:84:ab:d9:8e:6a:2d:d6:d6:a6:67:c9:8b:c3:84: 2e:33:42:e5:e3:cd:b9:d8:2d:70:9b:7f:78:4a:8f:24:d8:b3: 75:31:a2:f2:90:13:2c:02:2d:cf:f1:ae:41:27:1a:fc:e1:e2: 7a:ff:2d:a2:64:4e:cf:79:42:ce:64:73:01:5c:29:ca:ae:04: 84:07:71:3e:7d:58:8d:0d:e6:13:f0:63:75:fb:13:cb:d4:2b: b6:2c:30:a8:ba:a3:9f:82:4c:3e:fd:25:16:24:86:ae:be:ca: 43:7b:71:65:48:1f:83:42:ce:4c:44:a5:44:2b:b9:32:d7:d1: 87:14:a4:d8:48:17:c6:65:40:8f:24:31:47:fa:bd:b6:b2:5c: 30:08:8f:ae:22:e1:ca:c3:b3:1b:fa:08:a2:95:eb:2e:45:ea: 3f:76:6d:c2:20:b5:15:e3:a6:f9:95:6d:c5:7a:ae:40:84:3e: 01:00:96:b5:e1:a8:76:c3:44:cc:6b:b0:55:52:93:1d:8f:51: bc:22:93:9a:e0:82:88:29:4f:1f:b2:87:f5:2b:90:9f:ed:03: 95:0c:c9:4e:88:4b:4c:2e:6d:0e:5b:0a:90:d2:f7:3e:08:fa: df:cc:87:d7:ca:cb:eb:e7:f0:3d:f1:fa:2c:de:aa:9c:5c:35: ce:5c:dc:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+oz4gTMt584zl5iOHzilmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNDg1ODc1Yzg0NzBlNmFhY2RjOTQ3NDIxMDVmMzBjNTk3 YWMyYmIwHhcNMjUxMjIxMDIwMDQ0WhcNMjUxMjIyMDIwMDQ0WjAzMTEwLwYDVQQD EygxMDQ4YmUwNGJlZWZhZGRjNTQ3YWUyMDNmYzg4ODE5MmFhMTJmOTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH/0wERoQa//SikfnQ2pYleTLTdp P0FbeAsG9P2B5xrrfQe2xC9LaBsqYdOVgyamHWGMA4lMvg+ubKn8y7cx7dkJvJmZ q6DU2pzMZ3y8dpwy/15HyNEfdKJVYAgvhjYWeY1JhkCpH2yao4A9kl7k67AmZspW 5lAGaC4byU/zpkbtSi4nAiMgMJ86BBoIXt1VvZ2O3pjbXaRhQjnoVtFaXJcglu2h 46wKU4iuzzvZHOtpGTR1OYtBXpnvsy/xVshOoyexXNFjtoXLR/++bbj41rzptHK1 Po91eUPD1l9LFg4VnAiuE3+T4ly6CLKMMxFIJ35fUJ6YcDleQCiE9h8EPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBIvgS+763cVHriA/yIgZKqEvlJMB8GA1UdIwQY MBaAFPJIWHXIRw5qrNyUdCEF8wxZesK7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGtoWWRjaEhEbXFzM0pSMElRWHpERmw2d3JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81YTNmMGItODZmNS00MDZlLTkxZDUt OGZkNGMwMjQ0ODhlLzEvOGtoWWRjaEhEbXFzM0pSMElRWHpERmw2d3JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS81YTNmMGItODZmNS00MDZlLTkxZDUtOGZkNGMwMjQ0ODhl LzEvOGtoWWRjaEhEbXFzM0pSMElRWHpERmw2d3JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxLX84Sr 2Y5qLdbWpmfJi8OELjNC5ePNudgtcJt/eEqPJNizdTGi8pATLAItz/GuQSca/OHi ev8tomROz3lCzmRzAVwpyq4EhAdxPn1YjQ3mE/BjdfsTy9QrtiwwqLqjn4JMPv0l FiSGrr7KQ3txZUgfg0LOTESlRCu5MtfRhxSk2EgXxmVAjyQxR/q9trJcMAiPriLh ysOzG/oIopXrLkXqP3ZtwiC1FeOm+ZVtxXquQIQ+AQCWteGodsNEzGuwVVKTHY9R vCKTmuCCiClPH7KH9SuQn+0DlQzJTohLTC5tDlsKkNL3Pgj638yH18rL6+fwPfH6 LN6qnFw1zlzciA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:53:14 2025 by rpki-client