This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft File: 8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json) Hash identifier: cIC1LaTUPG/AIEp2uaDJln2d70hvOlJd4hP6WYRhaAU= Subject key identifier: 4C:94:CA:12:CD:85:7A:77:62:A2:C6:74:CA:9B:26:A3:88:65:4B:B0 Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Certificate serial: 019B3AFE3AAC876BD17CE36BC79C24075774 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft Manifest number: 11AD Signing time: Sat 20 Dec 2025 09:01:38 +0000 Manifest this update: Sat 20 Dec 2025 09:01:38 +0000 Manifest next update: Sun 21 Dec 2025 09:01:38 +0000 Files and hashes: 1: 1gtsCJyHdZ_mz1Vmc6aYSOZRTug.roa (hash: i5FmepCDxpYMWJtIWumi8I2WhRPEkV925D+zrSFUKqc=) 2: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: cHLs12/nsbbVyFNaqqoygGWhSQ6nwsk2WV+Bvitj4xM=) 3: AFN8OqvwZcsViNN-78O6BvKElME.roa (hash: gpOsJUC88/6LJdG6QKOWEGeO9P8/YN9o1I8OET+li9E=) 4: HzrOiNg5IGbvxaY6EJtaFTiPwJc.roa (hash: YVHrJ9qFMIVBjiboinqQXWeAb+UlfN0QhYG5EqTl3JU=) 5: KuzmOknbrD4Lg71OoDCO-y0GoDQ.roa (hash: L4TpWALjC8fwxZDKVNiQiJm1WAVC/DpX7t4BNMww1vk=) 6: N-Bn6UoZzfA4_e9vqjwupkidrwM.roa (hash: P0ucGjyfHx1AsSd/Hp9hPmA5fgW6WVVitbxsp2xrVOM=) 7: Xw6d5Q0Ua1XRZl5MjugABbqCL-g.roa (hash: 7lcJjOAWe6HvAJ8ku7/K4ZXcDrrbdwoOF4w1DXALzIA=) 8: hFAl1HVJl_9l3iGKDXy7Q3YLL-4.roa (hash: t3lebss2cDykApymCPDX/VFxLKKQQSAwSa+9uLLWAvg=) 9: ij6-YE2XVidboU68JMPVKequ6tg.roa (hash: YEMop9i5KBqo0Emc5LLaJ2ZkaUOlrtnZjcsi8p8jPuQ=) 10: lmLPjrfNDPS9XohB9eEXKDTvTVw.roa (hash: YUDeNZCjz7C+nv1yj/KNPiCOaWxteb6jP1PE6tH/qfc=) 11: rZeua0JpgspEzA0ZdwUTq0O1Bcg.roa (hash: PzfhSIF2+5kS2/v7NVciQ/Z0mLX/ZqdXk7JgE9AnGhg=) 12: vir9lXd95VlX33FtFKeYsF-pV7c.roa (hash: qWwJG4kSEBMq0oRm7MvhT+tJgjjEqP9pDam2i3CMe+g=) 13: vwnatcxNwSZQjN_EAgtCA6gLjGQ.roa (hash: is+QjkNRgmAAQFm1WLdb+VI9EY3XXeS9tjv/htKBkks=) 14: wOKO5BfevHhq6oErWALub8pu8xU.roa (hash: JFoG8SyIRYLSlAyJTBoEWjYzWkPzFQdNMJLWFlUmxRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:3a:ac:87:6b:d1:7c:e3:6b:c7:9c:24:07:57:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Validity Not Before: Dec 20 09:01:38 2025 GMT Not After : Dec 21 09:01:38 2025 GMT Subject: CN=4c94ca12cd857a7762a2c674ca9b26a388654bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:95:ee:73:72:62:28:f2:a7:b3:c0:e1:d7:7d: f7:0f:37:bb:54:a7:4d:4e:ce:13:0d:66:cc:77:09: 1f:e8:6e:b7:77:18:48:a6:32:a6:39:20:c0:e2:fd: 2f:b2:ed:2d:af:ee:2d:1f:1b:a1:33:c2:38:89:75: 08:99:34:5d:bc:a6:d7:6d:55:59:a0:73:61:2a:94: fd:10:0e:c7:de:cc:05:ed:65:94:5d:a1:bd:9b:9d: fc:60:a0:b6:0b:a4:92:ba:74:1b:75:43:ba:d4:3d: 6e:55:a4:7d:74:c0:0f:3b:aa:ce:84:0b:a6:a1:ae: d7:78:2a:fc:a5:89:ce:3d:2f:43:3e:7f:98:22:3b: 47:ba:1e:2c:55:ab:78:f7:95:c5:17:09:6f:54:f3: 02:11:b6:52:11:ba:77:97:ba:f3:9b:07:65:b6:94: 17:f8:3d:f9:26:04:dc:d8:73:0b:f3:e6:e9:16:1e: c4:da:ba:47:ca:08:d9:97:8d:51:75:60:07:e4:8c: 1d:52:d7:a8:50:a0:97:33:24:0b:36:ae:9c:16:cd: d9:62:3b:04:22:e3:ed:e8:84:4d:a1:60:95:8e:b1: d3:9b:44:17:b7:27:9f:de:7d:4f:d7:d0:95:45:97: a1:74:eb:c5:f2:0a:de:ef:f8:c0:c2:42:ff:9a:b9: da:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:94:CA:12:CD:85:7A:77:62:A2:C6:74:CA:9B:26:A3:88:65:4B:B0 X509v3 Authority Key Identifier: keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:9b:48:48:b4:1a:5e:e8:6c:f9:af:10:5b:44:aa:20:84:3a: a4:b7:b0:85:97:7a:c9:b8:a1:67:ca:ae:1d:4a:4d:00:7b:5f: 99:7e:7f:b9:ec:30:41:87:3f:43:25:f6:34:22:20:14:f7:4b: 9c:4d:fb:f2:29:94:92:f1:3e:e1:4c:a0:87:7e:4b:c1:75:78: 00:99:0b:b0:f3:25:d2:97:71:ce:b1:2b:4c:96:68:f6:11:66: c7:a0:5b:24:f1:bf:e2:21:f1:cf:25:22:ef:ab:08:fd:61:20: 2d:de:a4:43:53:c1:c4:b1:2c:54:0b:6b:57:79:43:35:ed:a1: 8e:0d:5d:05:11:80:43:de:40:0b:57:4d:4f:99:5a:00:a5:51: b8:59:34:b7:7d:f9:74:16:18:34:2a:ee:66:50:48:3b:27:9e: 87:d6:ee:ac:ad:de:1f:21:e5:11:65:a6:97:b1:be:e0:9c:ca: d8:5e:f4:96:98:87:d0:41:62:cd:be:22:50:5a:e3:02:5c:3f: 76:0b:bd:be:44:b6:10:d5:14:64:01:27:3c:14:0a:7f:b9:40: ab:98:dd:2a:7b:f5:f1:19:09:84:b9:69:96:1d:e2:f4:05:3c: 5a:c9:c9:79:44:d1:57:bd:10:4d:e4:51:ea:f1:e7:03:e6:3a: 97:a0:0e:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/jqsh2vRfONrx5wkB1d0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi ZWJmOGQwHhcNMjUxMjIwMDkwMTM4WhcNMjUxMjIxMDkwMTM4WjAzMTEwLwYDVQQD Eyg0Yzk0Y2ExMmNkODU3YTc3NjJhMmM2NzRjYTliMjZhMzg4NjU0YmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZXuc3JiKPKns8Dh1333Dze7VKdN Ts4TDWbMdwkf6G63dxhIpjKmOSDA4v0vsu0tr+4tHxuhM8I4iXUImTRdvKbXbVVZ oHNhKpT9EA7H3swF7WWUXaG9m538YKC2C6SSunQbdUO61D1uVaR9dMAPO6rOhAum oa7XeCr8pYnOPS9DPn+YIjtHuh4sVat495XFFwlvVPMCEbZSEbp3l7rzmwdltpQX +D35JgTc2HML8+bpFh7E2rpHygjZl41RdWAH5IwdUteoUKCXMyQLNq6cFs3ZYjsE IuPt6IRNoWCVjrHTm0QXtyef3n1P19CVRZehdOvF8gre7/jAwkL/mrnaRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyUyhLNhXp3YqLGdMqbJqOIZUuwMB8GA1UdIwQY MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt NWM1ODkyYWZhNDg3LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3 LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJtISLQa Xuhs+a8QW0SqIIQ6pLewhZd6ybihZ8quHUpNAHtfmX5/uewwQYc/QyX2NCIgFPdL nE378imUkvE+4Uygh35LwXV4AJkLsPMl0pdxzrErTJZo9hFmx6BbJPG/4iHxzyUi 76sI/WEgLd6kQ1PBxLEsVAtrV3lDNe2hjg1dBRGAQ95AC1dNT5laAKVRuFk0t335 dBYYNCruZlBIOyeeh9burK3eHyHlEWWml7G+4JzK2F70lpiH0EFizb4iUFrjAlw/ dgu9vkS2ENUUZAEnPBQKf7lAq5jdKnv18RkJhLlplh3i9AU8WsnJeUTRV70QTeRR 6vHnA+Y6l6AOVg== -----END CERTIFICATE-----Generated at Sat Dec 20 11:42:33 2025 by rpki-client