This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft File: 8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json) Hash identifier: WEV0N4lzczfFfhE/S/KwG/31sGbDQYsfgQ9xCvD4H2A= Subject key identifier: 54:4A:36:43:F0:A6:40:31:FC:38:BB:6C:CD:8D:70:A7:F3:3B:85:14 Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 019B3AC6596A98846B22880AB730010B9196 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft Manifest number: 173D Signing time: Sat 20 Dec 2025 08:00:36 +0000 Manifest this update: Sat 20 Dec 2025 08:00:36 +0000 Manifest next update: Sun 21 Dec 2025 08:00:36 +0000 Files and hashes: 1: 1-jVAuwl23O0NOs1-bK6yeNscKls.roa (hash: Uvxs615yu+WEWoRFMHOzorsioWG8H9U4nAbzC8roX+c=) 2: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: 5V/RgWNEM7a3dLeOXhgkAf2MOEWtIY6ZFpZnx3yaSQ0=) 3: Hl-LGslDYIhPlAkXHQHVv-RvB0w.roa (hash: O2E13yhrehXyHLH26oeDji6bWmBZEWAoPwvjmCy5UcQ=) 4: KeGOh-2gcusv29keikRHiEVKS4s.roa (hash: QrPYIqt13xYHx5UZtiEmzISVzXSCi7pxjFZqjccXxgI=) 5: PCT5Mgh2BfqwgaWaY02UF5LaLEs.roa (hash: XaBzd5GEKaiXR6sIMeiAlmk2HwlM0MvOxOjSag3QaY4=) 6: asCMHwRsfFwCKLi99bMyFo21krk.roa (hash: utShPNIu2DvLofXXWk5YOZ1a0OQi1aHbqM+BbMHKgoE=) 7: euk47PXoK5T6-tp0xVlaMzoR2zU.roa (hash: ELFMwMZ6NBCdcRDyZO9f72nzLI4WiJG57xVHtBVDcdU=) 8: fs_wxLugKiT_ydUrQOwGSh335rY.roa (hash: Q5dvvgKthsbcb9JzHMCTpI33x4XiWX2kEMaFSL83EKo=) 9: s-NcW6l6hXn5NOmuFXHN7mTAqcY.roa (hash: Ec6KZfarDMvuXKyozJ8ogUajfjL0rcRRpwLDmiHket8=) 10: xs5EMPFexMMDbg6ZozpAr6uWE70.roa (hash: qg/QvTawYThYqecFxjzESCzrgezKdtEVEc1jID0tLZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:59:6a:98:84:6b:22:88:0a:b7:30:01:0b:91:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: Dec 20 08:00:36 2025 GMT Not After : Dec 21 08:00:36 2025 GMT Subject: CN=544a3643f0a64031fc38bb6ccd8d70a7f33b8514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6b:d4:ff:63:fb:48:cb:3d:56:dc:41:c0:e2: 72:7b:e2:7c:6d:4f:17:22:ad:05:92:bc:dd:b2:79: f9:f9:bf:2f:ab:06:51:69:da:95:be:b3:eb:54:77: cf:2c:9b:b3:89:33:60:1f:54:29:b3:51:4e:35:8c: dc:ff:0b:7c:a6:bf:14:e2:a9:2b:83:71:5a:85:9f: ed:06:78:1e:98:ea:fa:b7:54:f5:76:88:a4:54:9c: ff:b4:fe:64:ba:73:4b:a0:bc:9f:0a:55:6c:c3:01: ed:0a:30:bd:88:58:cf:2c:ac:49:2a:b6:f0:c4:45: 6e:ea:b3:06:07:58:93:73:eb:43:2c:5a:38:0d:12: f2:43:26:3a:b0:5e:9a:ea:fb:87:ce:0b:f5:e1:e1: 82:60:51:1d:b5:f4:f7:5a:9d:1c:8a:16:9d:c0:af: 53:2f:7d:31:ae:96:7f:10:46:92:b4:fd:de:5b:28: 28:c9:25:04:2d:8a:16:b5:b6:94:9d:fa:e8:d4:53: e4:d5:fe:8b:ac:b8:17:66:f5:78:c1:1c:6b:ed:09: 65:5e:21:24:5b:69:47:45:b6:28:18:29:62:9c:69: b5:ee:cf:b8:99:c5:71:e3:3b:98:cf:54:c9:1b:a2: db:25:55:12:3e:ff:71:1d:cd:31:08:1b:51:95:12: d4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4A:36:43:F0:A6:40:31:FC:38:BB:6C:CD:8D:70:A7:F3:3B:85:14 X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:b0:13:79:a3:53:6c:05:6e:55:5c:18:a7:20:41:43:d2:82: 0e:cb:87:3e:9c:09:b2:6c:04:d6:47:0f:7f:d8:b2:aa:b2:be: 03:7e:3a:9c:a8:6a:5e:5f:f3:d6:e8:d4:85:cb:7d:2d:c9:05: 3e:07:c4:04:ea:5e:52:6a:b5:e3:ac:c0:1e:e5:07:44:3e:8b: 25:6d:25:9b:6f:aa:46:82:e1:03:74:b5:3c:7b:85:62:64:b0: d6:d1:cc:16:71:1e:93:d9:4b:a9:d0:61:92:c0:91:b4:96:64: c2:9b:ea:3c:f7:40:a0:25:d2:77:1d:87:e8:4f:9b:3c:48:53: e4:d6:bd:54:49:25:15:8a:b0:e3:86:a3:b0:06:ea:9d:4d:df: c3:86:b1:c7:2e:f7:22:16:b7:37:00:6d:b0:b5:61:8b:f9:3c: 62:c7:1b:76:a1:69:ef:51:d6:e9:32:2b:e4:f6:50:dd:24:f5: 54:c5:b4:57:35:26:34:ad:f8:81:dc:93:66:ee:f0:b0:62:01: 2b:9e:35:53:82:15:72:ed:5d:bc:13:57:5e:17:f6:8b:df:1e: 68:ed:00:f7:31:29:84:aa:61:f2:f4:7b:59:85:ae:9c:41:d6: ee:a6:17:f8:2c:30:d4:91:95:81:c6:4f:20:b4:5a:b7:ad:ee: d5:cb:b6:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xllqmIRrIogKtzABC5GWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjUxMjIwMDgwMDM2WhcNMjUxMjIxMDgwMDM2WjAzMTEwLwYDVQQD Eyg1NDRhMzY0M2YwYTY0MDMxZmMzOGJiNmNjZDhkNzBhN2YzM2I4NTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12vU/2P7SMs9VtxBwOJye+J8bU8X Iq0Fkrzdsnn5+b8vqwZRadqVvrPrVHfPLJuziTNgH1Qps1FONYzc/wt8pr8U4qkr g3FahZ/tBngemOr6t1T1doikVJz/tP5kunNLoLyfClVswwHtCjC9iFjPLKxJKrbw xEVu6rMGB1iTc+tDLFo4DRLyQyY6sF6a6vuHzgv14eGCYFEdtfT3Wp0cihadwK9T L30xrpZ/EEaStP3eWygoySUELYoWtbaUnfro1FPk1f6LrLgXZvV4wRxr7QllXiEk W2lHRbYoGClinGm17s+4mcVx4zuYz1TJG6LbJVUSPv9xHc0xCBtRlRLUvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRKNkPwpkAx/Di7bM2NcKfzO4UUMB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhLATeaNT bAVuVVwYpyBBQ9KCDsuHPpwJsmwE1kcPf9iyqrK+A346nKhqXl/z1ujUhct9LckF PgfEBOpeUmq146zAHuUHRD6LJW0lm2+qRoLhA3S1PHuFYmSw1tHMFnEek9lLqdBh ksCRtJZkwpvqPPdAoCXSdx2H6E+bPEhT5Na9VEklFYqw44ajsAbqnU3fw4axxy73 Iha3NwBtsLVhi/k8YscbdqFp71HW6TIr5PZQ3ST1VMW0VzUmNK34gdyTZu7wsGIB K541U4IVcu1dvBNXXhf2i98eaO0A9zEphKph8vR7WYWunEHW7qYX+Cww1JGVgcZP ILRat63u1cu2Eg== -----END CERTIFICATE-----Generated at Sat Dec 20 15:22:21 2025 by rpki-client