This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft File: 8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json) Hash identifier: Ffl5DQKhWYRkMTYdKIwJAyyT1J+hiM9zQ4UTQzJjD0k= Subject key identifier: D0:89:5C:7E:C1:B7:62:7D:E7:E2:47:FE:0A:FB:A7:41:EF:D8:AF:EF Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Certificate serial: 019B5418AA1870AF157CA78EF1F786447E85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft Manifest number: 11BA Signing time: Thu 25 Dec 2025 06:01:01 +0000 Manifest this update: Thu 25 Dec 2025 06:01:01 +0000 Manifest next update: Fri 26 Dec 2025 06:01:01 +0000 Files and hashes: 1: 1gtsCJyHdZ_mz1Vmc6aYSOZRTug.roa (hash: i5FmepCDxpYMWJtIWumi8I2WhRPEkV925D+zrSFUKqc=) 2: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: 8Zh7wckailXm/it55FFHa9PDexEXArAH381LNbUyYWE=) 3: AFN8OqvwZcsViNN-78O6BvKElME.roa (hash: gpOsJUC88/6LJdG6QKOWEGeO9P8/YN9o1I8OET+li9E=) 4: HzrOiNg5IGbvxaY6EJtaFTiPwJc.roa (hash: YVHrJ9qFMIVBjiboinqQXWeAb+UlfN0QhYG5EqTl3JU=) 5: KuzmOknbrD4Lg71OoDCO-y0GoDQ.roa (hash: L4TpWALjC8fwxZDKVNiQiJm1WAVC/DpX7t4BNMww1vk=) 6: N-Bn6UoZzfA4_e9vqjwupkidrwM.roa (hash: P0ucGjyfHx1AsSd/Hp9hPmA5fgW6WVVitbxsp2xrVOM=) 7: Xw6d5Q0Ua1XRZl5MjugABbqCL-g.roa (hash: 7lcJjOAWe6HvAJ8ku7/K4ZXcDrrbdwoOF4w1DXALzIA=) 8: hFAl1HVJl_9l3iGKDXy7Q3YLL-4.roa (hash: t3lebss2cDykApymCPDX/VFxLKKQQSAwSa+9uLLWAvg=) 9: ij6-YE2XVidboU68JMPVKequ6tg.roa (hash: YEMop9i5KBqo0Emc5LLaJ2ZkaUOlrtnZjcsi8p8jPuQ=) 10: lmLPjrfNDPS9XohB9eEXKDTvTVw.roa (hash: YUDeNZCjz7C+nv1yj/KNPiCOaWxteb6jP1PE6tH/qfc=) 11: rZeua0JpgspEzA0ZdwUTq0O1Bcg.roa (hash: PzfhSIF2+5kS2/v7NVciQ/Z0mLX/ZqdXk7JgE9AnGhg=) 12: vir9lXd95VlX33FtFKeYsF-pV7c.roa (hash: qWwJG4kSEBMq0oRm7MvhT+tJgjjEqP9pDam2i3CMe+g=) 13: vwnatcxNwSZQjN_EAgtCA6gLjGQ.roa (hash: is+QjkNRgmAAQFm1WLdb+VI9EY3XXeS9tjv/htKBkks=) 14: wOKO5BfevHhq6oErWALub8pu8xU.roa (hash: JFoG8SyIRYLSlAyJTBoEWjYzWkPzFQdNMJLWFlUmxRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:aa:18:70:af:15:7c:a7:8e:f1:f7:86:44:7e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Validity Not Before: Dec 25 06:01:01 2025 GMT Not After : Dec 26 06:01:01 2025 GMT Subject: CN=d0895c7ec1b7627de7e247fe0afba741efd8afef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d9:8c:fe:f5:7d:e0:e5:80:cb:27:2d:a8:55: 2f:42:f3:38:d7:00:c3:2f:d0:d8:d0:78:50:51:f6: 55:3d:89:ae:26:9d:c9:5f:92:a7:93:0f:89:92:c6: f7:0a:0c:69:85:83:17:4a:51:22:7f:b4:28:66:93: 25:6c:b7:a8:df:8a:a3:15:37:d0:07:60:26:58:de: 8e:3d:68:f7:aa:37:c3:f5:c9:da:86:cd:ad:f3:de: 46:a2:68:23:e0:de:31:11:31:ce:1b:0e:35:a8:54: 58:ed:3b:87:74:ee:0d:77:cb:35:05:a7:b3:5d:6a: d6:12:dd:01:50:d0:a2:ca:e2:9d:4e:20:29:fd:be: 79:66:48:d3:01:cf:3a:9f:13:00:46:11:75:ac:03: 92:80:a0:12:c4:c6:45:51:61:86:8a:ee:45:05:84: 15:2d:5d:8d:51:fb:d3:ca:cf:96:c5:ca:60:ba:dd: 01:08:53:3f:f9:46:d7:fc:d8:0e:38:ff:fb:17:20: 37:37:f0:e0:d1:e4:f6:77:74:5a:04:91:cc:48:62: ff:9a:0d:22:a5:aa:1f:30:7b:46:c9:1d:63:f0:38: 73:53:8f:90:cf:f3:98:b2:18:45:7d:5f:25:5b:b4: 07:b8:19:8e:1e:5a:e7:1a:f4:54:6b:c7:68:bd:c7: d9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:89:5C:7E:C1:B7:62:7D:E7:E2:47:FE:0A:FB:A7:41:EF:D8:AF:EF X509v3 Authority Key Identifier: keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:4e:33:ad:93:ca:4c:28:2b:94:a8:6a:dd:a9:62:50:c2:85: d5:5c:e9:fc:f2:44:3d:e6:54:9f:31:ac:3e:df:58:84:ce:a7: e1:05:7b:63:0e:b7:df:fa:ff:a2:ff:ac:49:0f:8e:90:1f:4f: 89:03:8d:9b:6e:53:26:b6:e1:96:fa:ad:6d:dc:d6:14:69:ba: 2e:de:7d:c4:33:11:97:5a:ec:bc:d0:ab:cf:67:2e:43:33:06: 8d:de:7d:61:a7:35:4c:f9:f7:20:bf:39:b8:6c:f2:3d:b3:6b: 3a:c5:08:43:0e:e2:43:6c:d3:bc:bf:1b:91:f9:25:50:4a:fb: 1d:de:18:be:64:1e:b8:85:c9:ba:fb:88:cf:3a:f5:b0:07:41: 01:f0:f1:67:5a:d7:e1:1c:27:06:4d:6d:ff:4c:74:55:86:b0: d9:1b:f1:b7:94:8f:26:b5:77:60:bc:f7:6c:8c:d2:ce:1f:47: 1c:16:c9:e0:12:4b:b7:88:aa:bc:8a:6a:2a:e8:f5:c3:27:02: 69:5b:ba:0d:5d:4a:00:af:d5:26:e0:a6:86:be:69:1d:b5:25: dd:f9:b3:c8:da:5a:9e:8a:c3:2b:7b:18:f8:e6:8c:6f:df:b8: 59:7b:99:30:2a:d7:ec:40:80:7f:4c:d4:e8:a8:d7:6a:29:7d: ff:92:81:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGKoYcK8VfKeO8feGRH6FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi ZWJmOGQwHhcNMjUxMjI1MDYwMTAxWhcNMjUxMjI2MDYwMTAxWjAzMTEwLwYDVQQD EyhkMDg5NWM3ZWMxYjc2MjdkZTdlMjQ3ZmUwYWZiYTc0MWVmZDhhZmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNmM/vV94OWAyyctqFUvQvM41wDD L9DY0HhQUfZVPYmuJp3JX5Knkw+Jksb3CgxphYMXSlEif7QoZpMlbLeo34qjFTfQ B2AmWN6OPWj3qjfD9cnahs2t895Gomgj4N4xETHOGw41qFRY7TuHdO4Nd8s1Baez XWrWEt0BUNCiyuKdTiAp/b55ZkjTAc86nxMARhF1rAOSgKASxMZFUWGGiu5FBYQV LV2NUfvTys+Wxcpgut0BCFM/+UbX/NgOOP/7FyA3N/Dg0eT2d3RaBJHMSGL/mg0i paofMHtGyR1j8DhzU4+Qz/OYshhFfV8lW7QHuBmOHlrnGvRUa8dovcfZ4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCJXH7Bt2J95+JH/gr7p0Hv2K/vMB8GA1UdIwQY MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt NWM1ODkyYWZhNDg3LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3 LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcU4zrZPK TCgrlKhq3aliUMKF1Vzp/PJEPeZUnzGsPt9YhM6n4QV7Yw633/r/ov+sSQ+OkB9P iQONm25TJrbhlvqtbdzWFGm6Lt59xDMRl1rsvNCrz2cuQzMGjd59Yac1TPn3IL85 uGzyPbNrOsUIQw7iQ2zTvL8bkfklUEr7Hd4YvmQeuIXJuvuIzzr1sAdBAfDxZ1rX 4RwnBk1t/0x0VYaw2Rvxt5SPJrV3YLz3bIzSzh9HHBbJ4BJLt4iqvIpqKuj1wycC aVu6DV1KAK/VJuCmhr5pHbUl3fmzyNpanorDK3sY+OaMb9+4WXuZMCrX7ECAf0zU 6KjXail9/5KBhg== -----END CERTIFICATE-----Generated at Thu Dec 25 09:14:51 2025 by rpki-client