This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft File: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json) Hash identifier: pARJgCTUHmwiEt856KIi2KXQ2OtC+6gYMTaccsPuaCA= Subject key identifier: E8:D6:A7:71:02:C1:5C:AF:96:A1:C6:70:CD:2D:34:5B:C9:06:81:D7 Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51 Certificate issuer: /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051 Certificate serial: 019B3D5A3EA26D2F0A6CF613C3F93D7567A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft Manifest number: 17AA Signing time: Sat 20 Dec 2025 20:01:22 +0000 Manifest this update: Sat 20 Dec 2025 20:01:22 +0000 Manifest next update: Sun 21 Dec 2025 20:01:22 +0000 Files and hashes: 1: 19QpkXgghLM3Nv0nEMVJTVhhYlk.roa (hash: J5AzJxFSrkUz6NEqgZpKHFp1Qkuuq+hf2j4tyd26uK8=) 2: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: ajRkiBrUihVyhUenmyNLRu0t+rcaLeDumngYbLA33t0=) 3: aUt9STDYB4WpJzoIeOhkBXlmRGY.roa (hash: OBmceRN0cnIIMX2WS5mLBG1wMtaz4OUFUqNkNJhbrA8=) 4: c9sXvnnFKQwKh05j0TaYAQugLQM.roa (hash: eyB+ysjYhGow5lnf5FUGFEiyTh1wZN2qzaaHi/6zhTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:3e:a2:6d:2f:0a:6c:f6:13:c3:f9:3d:75:67:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051 Validity Not Before: Dec 20 20:01:22 2025 GMT Not After : Dec 21 20:01:22 2025 GMT Subject: CN=e8d6a77102c15caf96a1c670cd2d345bc90681d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1b:53:0a:b9:47:e4:55:a6:b4:85:f5:c1:56: da:f7:82:6e:6e:fd:a1:85:26:da:2f:1c:71:9d:cb: ef:7b:07:cf:08:87:bc:4a:8e:11:e4:d9:44:b8:29: 04:c3:05:07:cd:8a:56:01:76:6b:a8:b5:b9:79:eb: 2a:30:bf:85:e4:72:e2:fb:e7:6b:82:22:cf:6f:69: df:83:c1:cf:c4:1b:98:6f:ea:7b:ec:c7:8d:b4:10: 72:40:9e:d6:a6:ae:72:d4:fc:e6:6e:a4:88:61:b3: 90:74:10:2d:64:26:11:30:a9:ec:d1:00:5a:c8:39: 5c:73:59:55:c9:cc:e9:d1:24:84:e8:b5:6c:52:61: 91:fd:f3:d0:ea:3b:74:68:04:f1:c3:b5:16:74:a7: dd:83:a0:8e:49:c2:00:47:9e:1a:98:56:de:bb:1c: 05:99:f2:7e:f1:1c:5e:af:0b:6a:2f:bd:3f:70:d7: 8e:73:6e:7c:59:8a:d6:fa:70:1a:80:5a:39:fe:5a: f9:eb:ee:4e:b0:46:20:1a:46:5b:20:db:df:a0:32: 6f:ca:16:13:b6:90:49:28:a3:4a:9d:72:d1:82:f3: 91:9c:41:ca:58:ed:0c:78:d5:8a:d3:3b:ab:ce:69: 58:a0:01:f0:a3:0d:f1:a3:f4:38:3d:19:2c:6b:2a: bd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D6:A7:71:02:C1:5C:AF:96:A1:C6:70:CD:2D:34:5B:C9:06:81:D7 X509v3 Authority Key Identifier: keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:d7:7e:78:12:b2:1f:8a:55:d6:c8:0e:19:4b:a3:d4:38:bc: 36:c0:9a:9c:25:1b:b5:6d:0d:60:c8:aa:49:71:d1:f1:55:d9: d6:de:0e:ca:d7:80:1c:0d:3f:ba:f4:78:3d:03:10:cb:b6:ad: 64:82:71:4a:2c:fe:16:24:dc:e1:a8:64:44:f8:ac:d5:77:91: f4:15:c4:c6:a1:62:74:6c:f2:f2:4c:25:e4:66:58:fa:73:07: f2:a7:0f:72:a2:10:7b:d5:3a:f2:86:15:e9:ae:fe:d9:59:5a: 5c:ae:fb:e9:ba:47:b0:64:be:2d:65:d0:46:95:37:ec:fe:38: 29:1a:dc:98:40:77:be:03:19:a5:bb:93:79:7c:c9:9e:02:c1: 4b:97:73:e2:06:61:d4:f8:18:51:d0:6d:a2:b6:ca:c6:4e:2c: 29:59:13:d4:be:23:da:30:09:43:05:cf:36:26:a0:96:fa:86: 75:67:da:63:8c:92:0b:0b:ca:ac:4c:aa:88:14:3e:54:41:52: 0d:9d:16:fc:b3:95:2f:b1:ab:c7:6f:3e:89:f8:36:b1:38:08: e6:91:dd:b3:57:c1:0e:bd:2a:20:05:9a:c9:f9:32:5a:9c:35: 5a:48:34:a2:ea:cc:7a:87:d6:91:ab:74:75:4b:02:72:c3:56: 47:98:8a:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wj6ibS8KbPYTw/k9dWeoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYzMzZTQzZWY1NjUyN2ExNjlkNmFjNmQ3ZTYyYzYzZDE5 NzMwNTEwHhcNMjUxMjIwMjAwMTIyWhcNMjUxMjIxMjAwMTIyWjAzMTEwLwYDVQQD EyhlOGQ2YTc3MTAyYzE1Y2FmOTZhMWM2NzBjZDJkMzQ1YmM5MDY4MWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhtTCrlH5FWmtIX1wVba94Jubv2h hSbaLxxxncvvewfPCIe8So4R5NlEuCkEwwUHzYpWAXZrqLW5eesqML+F5HLi++dr giLPb2nfg8HPxBuYb+p77MeNtBByQJ7Wpq5y1PzmbqSIYbOQdBAtZCYRMKns0QBa yDlcc1lVyczp0SSE6LVsUmGR/fPQ6jt0aATxw7UWdKfdg6COScIAR54amFbeuxwF mfJ+8RxerwtqL70/cNeOc258WYrW+nAagFo5/lr56+5OsEYgGkZbINvfoDJvyhYT tpBJKKNKnXLRgvORnEHKWO0MeNWK0zurzmlYoAHwow3xo/Q4PRksayq9+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjWp3ECwVyvlqHGcM0tNFvJBoHXMB8GA1UdIwQY MBaAFAPDPkPvVlJ6Fp1qxtfmLGPRlzBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUt YTNhM2ViODc5ZjJiLzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUtYTNhM2ViODc5ZjJi LzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNd+eBKy H4pV1sgOGUuj1Di8NsCanCUbtW0NYMiqSXHR8VXZ1t4OyteAHA0/uvR4PQMQy7at ZIJxSiz+FiTc4ahkRPis1XeR9BXExqFidGzy8kwl5GZY+nMH8qcPcqIQe9U68oYV 6a7+2VlaXK776bpHsGS+LWXQRpU37P44KRrcmEB3vgMZpbuTeXzJngLBS5dz4gZh 1PgYUdBtorbKxk4sKVkT1L4j2jAJQwXPNiaglvqGdWfaY4ySCwvKrEyqiBQ+VEFS DZ0W/LOVL7Grx28+ifg2sTgI5pHds1fBDr0qIAWayfkyWpw1Wkg0ourMeofWkat0 dUsCcsNWR5iKAg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:49:14 2025 by rpki-client