This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: UpTy5uY7y4x5hqh2e53OXk1DlkW+h7Qb5YUtNJ6gXSs= Subject key identifier: 99:1E:F4:FF:DD:7D:70:B0:D5:D3:13:E9:6D:47:37:DF:61:3D:46:E9 Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 019B2F9EAC6F59E61A2A4E4B9342985466A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 04:01:26 +0000 Manifest this update: Thu 18 Dec 2025 04:01:26 +0000 Manifest next update: Fri 19 Dec 2025 04:01:26 +0000 Files and hashes: 1: 00x2a7vYcUP_RgzqZlJDShLq9Do.roa (hash: cq08qt5t6pt7+g4zB6xtHZuctjeJqy9pw/L/lk8TYFo=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: 8ILbu+ZgRAlt5dNx/oBpq4jGtgfw+PdAKektyCZtK8I=) 3: KVMzJG-tiBiXKGfDbX7s-fqSUcs.roa (hash: izdiO/l04uY0Tl9GP7xbaa4HsWMYkrOgbs0SiG0a1K8=) 4: OxF-ngX6YGUArZrbAYmh9hpGzkU.roa (hash: zhEaR7GNPbf+2lOaH8uFUPJFKzbpuLS5x4CvU7dkxPs=) 5: Q2Pg2GNHELVKyFoNgxOuT8YFvLY.roa (hash: DsyRU7FSw+3XDKbBM9HrtgkzYSVPnqWwqknbD6CWVSU=) 6: RO-InVXPYoHaB1ZpM-19yr94dQs.roa (hash: 8Y6VcUcgO4alufdIJ4djN2KAnB4AyYetp1VZzDDuyNk=) 7: TbcAJ-7kgZbLEMeBArn-aI2s0Oc.roa (hash: ebCgIhbDpPxtlRtDjitUarjC0W1nxe0ujpocy11Koxs=) 8: _gM5SG_4QQqKocZtcQPCR80SAmI.roa (hash: ee8TJS3VrEj5YXrt15hISXpN3dVXM3P5ROyjlVEMHSs=) 9: fG6If6WZh4pXAVRu1gEQ7wbPbEs.roa (hash: OIBSpF8oXZotrR8RVX6KacBPnJZCoNiFLIZ7aWyayQU=) 10: gfQeyx6Q7sjS4Xpny9IUQ8tQxLY.roa (hash: zrq/geD7ajZHxMLm7OvFbnGGXeIS14GfMNfAscurlR8=) 11: v88a1n77gbDXULcDTWMWWeiKOSs.roa (hash: uCwWaTXn9SCN1Q8WU0rPqu6C7hoOabj2vXoUWRD64+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:ac:6f:59:e6:1a:2a:4e:4b:93:42:98:54:66:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Dec 18 04:01:26 2025 GMT Not After : Dec 19 04:01:26 2025 GMT Subject: CN=991ef4ffdd7d70b0d5d313e96d4737df613d46e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:90:f8:b6:75:a5:64:aa:20:74:31:0b:2d:b2: 2c:9f:c2:d1:97:27:01:a0:8d:cb:28:6c:29:a6:79: 21:92:ef:ac:2c:e7:f8:51:3d:8d:db:3a:e0:eb:af: 02:c0:9d:24:56:a3:00:dd:cb:d0:62:b6:35:85:d0: cf:ec:18:4c:ce:3c:e0:fd:93:05:be:d5:dd:c5:d3: 7b:1d:d4:b3:d9:99:64:9c:5b:55:40:24:05:d4:ee: 0a:ab:c8:e6:4c:42:78:41:6d:52:4c:e4:91:2d:33: 03:8d:f5:ce:10:02:92:10:65:27:a1:02:9c:20:0c: c6:2b:1c:30:56:97:97:9e:64:b3:75:c6:48:99:b6: 8b:ec:c0:e2:69:d7:f8:75:a7:a6:2a:d0:fd:f5:1e: 3d:ed:a3:eb:80:5d:03:18:2c:97:e2:99:d7:e8:58: 6b:70:4d:66:16:7e:14:c1:52:6d:d5:63:be:3b:4b: 04:7c:37:6a:13:81:fd:59:23:11:84:a7:37:0f:62: e0:30:d5:92:29:23:35:bd:0a:2e:ca:6d:99:fb:4a: 7d:5a:f5:ff:2f:6c:3c:00:fe:39:76:09:21:e2:22: 56:dc:59:db:ef:2f:6a:14:19:19:91:db:dc:74:db: 83:17:e5:29:4a:c2:e8:37:31:46:76:76:8a:41:6c: 4f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1E:F4:FF:DD:7D:70:B0:D5:D3:13:E9:6D:47:37:DF:61:3D:46:E9 X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:bf:b6:75:74:64:53:d0:ff:40:70:0d:d5:af:cf:10:fb:c2: 93:11:6f:62:dd:c4:b7:6f:47:56:44:9a:47:7e:2c:b1:0a:db: 92:7b:41:91:97:8b:11:b1:22:78:ed:66:d4:da:a9:4c:32:87: b6:0f:e1:a1:b5:2e:2a:a6:8f:5a:ec:e8:85:49:15:1f:30:19: 98:43:11:e3:e4:b3:67:4b:35:0f:25:f1:df:be:59:32:67:28: 4f:f5:1a:ff:5b:cf:1f:fa:08:da:77:01:a4:f5:bb:cb:91:c3: 2f:d3:7b:84:fc:9a:d6:25:1d:11:1a:ca:cd:d1:a6:2b:c5:fb: 89:f5:62:6b:60:63:4c:6e:bf:3a:cd:c1:93:fc:ed:96:ac:82: fd:28:5c:d4:82:be:59:7f:38:81:85:fe:73:b1:c0:b1:bc:0c: dd:9b:eb:07:00:5b:f6:29:ea:a8:d6:5d:ce:16:7d:04:16:70: a6:c9:ed:51:cd:ed:98:c7:07:d6:8f:df:31:d9:89:f8:27:89: d9:af:fc:c3:b3:30:d1:21:4f:ff:b9:ad:b6:df:a1:bc:96:17: 90:61:fd:c8:ad:de:c5:d1:a7:a9:25:70:65:17:72:b6:c2:d7: eb:55:0b:01:fe:f3:0b:48:6c:53:98:f8:19:12:a3:35:d3:42: 7c:b2:1b:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnqxvWeYaKk5Lk0KYVGapMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjUxMjE4MDQwMTI2WhcNMjUxMjE5MDQwMTI2WjAzMTEwLwYDVQQD Eyg5OTFlZjRmZmRkN2Q3MGIwZDVkMzEzZTk2ZDQ3MzdkZjYxM2Q0NmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJD4tnWlZKogdDELLbIsn8LRlycB oI3LKGwppnkhku+sLOf4UT2N2zrg668CwJ0kVqMA3cvQYrY1hdDP7BhMzjzg/ZMF vtXdxdN7HdSz2ZlknFtVQCQF1O4Kq8jmTEJ4QW1STOSRLTMDjfXOEAKSEGUnoQKc IAzGKxwwVpeXnmSzdcZImbaL7MDiadf4daemKtD99R497aPrgF0DGCyX4pnX6Fhr cE1mFn4UwVJt1WO+O0sEfDdqE4H9WSMRhKc3D2LgMNWSKSM1vQouym2Z+0p9WvX/ L2w8AP45dgkh4iJW3Fnb7y9qFBkZkdvcdNuDF+UpSsLoNzFGdnaKQWxPUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJke9P/dfXCw1dMT6W1HN99hPUbpMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcb+2dXRk U9D/QHAN1a/PEPvCkxFvYt3Et29HVkSaR34ssQrbkntBkZeLEbEieO1m1NqpTDKH tg/hobUuKqaPWuzohUkVHzAZmEMR4+SzZ0s1DyXx375ZMmcoT/Ua/1vPH/oI2ncB pPW7y5HDL9N7hPya1iUdERrKzdGmK8X7ifVia2BjTG6/Os3Bk/ztlqyC/Shc1IK+ WX84gYX+c7HAsbwM3ZvrBwBb9inqqNZdzhZ9BBZwpsntUc3tmMcH1o/fMdmJ+CeJ 2a/8w7Mw0SFP/7mttt+hvJYXkGH9yK3exdGnqSVwZRdytsLX61ULAf7zC0hsU5j4 GRKjNdNCfLIbEQ== -----END CERTIFICATE-----Generated at Thu Dec 18 11:53:54 2025 by rpki-client