This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft File: 8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft (raw, json) Hash identifier: aAI16o+Ymag5nWzlYAGHE5fFWAGgpXlUCSWrv6rEZn4= Subject key identifier: 83:D2:52:25:5F:F4:76:5B:CD:68:87:10:31:56:11:7E:6F:0C:DB:D1 Authority key identifier: F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6 Certificate issuer: /CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6 Certificate serial: 019B31FA4EA3462E6BED41EDF1EE3CC812F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft Manifest number: 10BB Signing time: Thu 18 Dec 2025 15:00:46 +0000 Manifest this update: Thu 18 Dec 2025 15:00:46 +0000 Manifest next update: Fri 19 Dec 2025 15:00:46 +0000 Files and hashes: 1: 0ljyTvQ_d8HoyClfNuv9eO2Q5yA.roa (hash: jw6rtBAELKvNPa562NE5b8O7bUsTaNwLwsoxjTQsK7A=) 2: 8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl (hash: oovkUDzac9UXJ3kdiV5fn/48Mr8GmQM1Rcf+5qLRslM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:4e:a3:46:2e:6b:ed:41:ed:f1:ee:3c:c8:12:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6 Validity Not Before: Dec 18 15:00:46 2025 GMT Not After : Dec 19 15:00:46 2025 GMT Subject: CN=83d252255ff4765bcd6887103156117e6f0cdbd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cd:95:3d:0c:46:aa:08:a9:bc:33:0a:40:97: 58:97:e2:86:ba:45:09:a1:44:a4:bd:17:21:e9:67: 87:74:a4:2e:d3:a6:8c:11:f0:03:7a:32:64:a2:d4: 9e:bf:58:59:de:b8:3c:14:50:98:32:43:f4:14:32: 5c:20:a8:89:73:5c:ce:a4:84:6a:0e:a9:cc:82:8f: 31:fe:77:1a:8f:10:22:6e:f4:79:cd:8d:c3:e6:3c: d4:cc:56:38:b6:ae:ee:bf:9d:f8:a8:0f:60:3d:e1: 37:81:cf:fa:2f:00:1d:8e:c0:61:06:0a:d0:62:70: 2f:ed:6e:ba:2a:48:64:b8:92:c6:24:51:0c:49:69: 73:fe:61:ea:cb:fb:73:ea:b6:45:57:c8:ee:86:4f: b7:35:9a:e7:54:10:83:e1:64:0e:28:e6:57:82:bc: 95:0d:9d:c4:b8:fe:01:ca:dd:16:a3:ab:e7:c7:67: 87:4d:03:48:4c:ee:03:6d:97:1e:62:50:3d:2c:a3: b7:1a:f8:30:8a:52:a6:a4:e7:12:67:df:56:f4:d6: f1:1c:d8:4e:5a:de:8f:e1:57:51:01:b5:cd:ba:a4: 48:c4:0b:f7:3f:63:26:97:70:ef:5c:c8:b4:f8:da: ab:75:e8:d1:1a:f0:fd:cf:c3:6d:dd:1b:8b:ac:80: dd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D2:52:25:5F:F4:76:5B:CD:68:87:10:31:56:11:7E:6F:0C:DB:D1 X509v3 Authority Key Identifier: keyid:F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e3:a6:b0:6c:76:1e:3b:9d:56:72:bb:5b:3e:1b:65:68:34: 67:be:42:51:1b:30:f2:99:dc:bd:9d:66:d9:2a:39:60:83:ca: cd:07:24:16:39:e1:5b:6f:8e:9c:27:94:bc:ce:f9:ac:83:b6: 31:b3:a8:74:aa:47:b3:74:29:e6:c0:53:c2:5d:aa:45:71:e9: ad:6e:a6:48:02:0d:a8:8c:d4:64:60:ad:80:83:12:06:7d:9c: 17:9c:13:55:70:b5:6c:b6:8f:8c:40:a6:e1:24:38:ce:89:df: 08:73:12:31:d3:3d:27:2d:f4:ea:e6:7a:5e:71:05:f2:7a:2c: 7a:b3:67:09:5f:e3:fd:25:3e:fe:df:37:54:6f:75:23:1f:9b: a5:53:e6:f6:8e:1a:59:b3:41:14:a0:69:c1:80:c1:b9:1b:bd: d4:91:fb:3d:8a:8f:06:7e:82:8b:a9:b5:0f:ce:81:75:fc:72: d9:3e:ba:6a:b8:5d:36:1f:65:7c:67:a0:7d:33:32:ad:01:ab: 7a:01:34:4b:17:8f:75:1f:08:e3:6a:98:b6:93:3e:e2:f8:b7: e8:89:5a:3a:fb:a2:3a:e9:6c:93:84:21:09:4a:a8:cb:6f:17: f5:62:27:2d:fa:f2:5c:bb:cb:f0:36:4d:74:32:eb:a1:77:5d: 27:27:bf:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+k6jRi5r7UHt8e48yBL0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNDY2NmZiYjY0YzRkYThjYjg5OTJiZjBkYTk3YjhiMDEx N2VhYzYwHhcNMjUxMjE4MTUwMDQ2WhcNMjUxMjE5MTUwMDQ2WjAzMTEwLwYDVQQD Eyg4M2QyNTIyNTVmZjQ3NjViY2Q2ODg3MTAzMTU2MTE3ZTZmMGNkYmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm82VPQxGqgipvDMKQJdYl+KGukUJ oUSkvRch6WeHdKQu06aMEfADejJkotSev1hZ3rg8FFCYMkP0FDJcIKiJc1zOpIRq DqnMgo8x/ncajxAibvR5zY3D5jzUzFY4tq7uv534qA9gPeE3gc/6LwAdjsBhBgrQ YnAv7W66KkhkuJLGJFEMSWlz/mHqy/tz6rZFV8juhk+3NZrnVBCD4WQOKOZXgryV DZ3EuP4Byt0Wo6vnx2eHTQNITO4DbZceYlA9LKO3GvgwilKmpOcSZ99W9NbxHNhO Wt6P4VdRAbXNuqRIxAv3P2Mml3DvXMi0+NqrdejRGvD9z8Nt3RuLrIDdUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPSUiVf9HZbzWiHEDFWEX5vDNvRMB8GA1UdIwQY MBaAFPFGZvu2TE2oy4mSvw2pe4sBF+rGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFVabS03Wk1UYWpMaVpLX0RhbDdpd0VYNnNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82YThhZDUtMjFkZi00ZGJiLTlhYmQt ZDQ0NjQ1NWRjNWJhLzEvOFVabS03Wk1UYWpMaVpLX0RhbDdpd0VYNnNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82YThhZDUtMjFkZi00ZGJiLTlhYmQtZDQ0NjQ1NWRjNWJh LzEvOFVabS03Wk1UYWpMaVpLX0RhbDdpd0VYNnNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+OmsGx2 HjudVnK7Wz4bZWg0Z75CURsw8pncvZ1m2So5YIPKzQckFjnhW2+OnCeUvM75rIO2 MbOodKpHs3Qp5sBTwl2qRXHprW6mSAINqIzUZGCtgIMSBn2cF5wTVXC1bLaPjECm 4SQ4zonfCHMSMdM9Jy306uZ6XnEF8noserNnCV/j/SU+/t83VG91Ix+bpVPm9o4a WbNBFKBpwYDBuRu91JH7PYqPBn6Ci6m1D86Bdfxy2T66arhdNh9lfGegfTMyrQGr egE0SxePdR8I42qYtpM+4vi36IlaOvuiOulsk4QhCUqoy28X9WInLfryXLvL8DZN dDLroXddJye/bQ== -----END CERTIFICATE-----Generated at Thu Dec 18 18:07:10 2025 by rpki-client