This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft File: 8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json) Hash identifier: aAOptB4yOWDSYmV01i+CGn9N1ievMDvfemYmkXEheds= Subject key identifier: 9F:4A:52:F0:68:D7:A4:91:A1:E3:58:E8:CF:4D:7D:47:63:07:95:2C Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 019B76A4183C237194B82B306A373CEC7221 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft Manifest number: 175C Signing time: Wed 31 Dec 2025 23:00:24 +0000 Manifest this update: Wed 31 Dec 2025 23:00:24 +0000 Manifest next update: Thu 01 Jan 2026 23:00:24 +0000 Files and hashes: 1: 1-jVAuwl23O0NOs1-bK6yeNscKls.roa (hash: Uvxs615yu+WEWoRFMHOzorsioWG8H9U4nAbzC8roX+c=) 2: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: Ykt0mWgO6xUa+ZcgvrM8rKNYdW8XPBoSf/ehR0+3Rvg=) 3: Hl-LGslDYIhPlAkXHQHVv-RvB0w.roa (hash: O2E13yhrehXyHLH26oeDji6bWmBZEWAoPwvjmCy5UcQ=) 4: KeGOh-2gcusv29keikRHiEVKS4s.roa (hash: QrPYIqt13xYHx5UZtiEmzISVzXSCi7pxjFZqjccXxgI=) 5: PCT5Mgh2BfqwgaWaY02UF5LaLEs.roa (hash: XaBzd5GEKaiXR6sIMeiAlmk2HwlM0MvOxOjSag3QaY4=) 6: asCMHwRsfFwCKLi99bMyFo21krk.roa (hash: utShPNIu2DvLofXXWk5YOZ1a0OQi1aHbqM+BbMHKgoE=) 7: euk47PXoK5T6-tp0xVlaMzoR2zU.roa (hash: ELFMwMZ6NBCdcRDyZO9f72nzLI4WiJG57xVHtBVDcdU=) 8: fs_wxLugKiT_ydUrQOwGSh335rY.roa (hash: Q5dvvgKthsbcb9JzHMCTpI33x4XiWX2kEMaFSL83EKo=) 9: s-NcW6l6hXn5NOmuFXHN7mTAqcY.roa (hash: Ec6KZfarDMvuXKyozJ8ogUajfjL0rcRRpwLDmiHket8=) 10: xs5EMPFexMMDbg6ZozpAr6uWE70.roa (hash: qg/QvTawYThYqecFxjzESCzrgezKdtEVEc1jID0tLZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 23:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:a4:18:3c:23:71:94:b8:2b:30:6a:37:3c:ec:72:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: Dec 31 23:00:24 2025 GMT Not After : Jan 1 23:00:24 2026 GMT Subject: CN=9f4a52f068d7a491a1e358e8cf4d7d476307952c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:54:63:ec:a9:09:e9:66:9b:b9:7e:79:af:6f: 42:d3:2d:c2:68:0a:72:ea:f7:43:71:ad:9c:80:68: 79:4e:51:50:72:fe:e2:c5:9e:3f:81:8d:44:38:60: 66:86:7c:83:c3:3b:56:69:b2:17:6f:49:a0:1d:c1: c2:d1:a5:9b:24:fe:ec:4c:b0:7e:9a:f0:0a:e2:4b: 1b:f6:15:fc:7d:11:e0:0f:9b:1a:9a:db:f4:7a:11: cf:1d:fc:00:6a:e0:ef:12:56:36:06:df:06:d5:ff: 74:47:e2:5c:30:3e:e4:0c:65:69:d6:e5:94:16:3d: b2:15:6e:9d:e1:9f:a4:3e:4d:03:02:e9:9d:63:99: e1:20:6a:3a:15:55:73:4f:df:45:a5:cb:e8:07:81: 17:a3:34:20:56:d9:7e:cc:d6:d0:52:78:bc:a8:af: 33:f8:0a:a1:64:49:4f:93:cc:49:b0:99:d3:e6:5a: e9:cc:58:61:48:46:4c:37:51:61:37:e6:56:b3:08: 3b:c6:bd:23:c9:c7:cd:ec:80:72:ff:94:a0:df:35: b8:64:15:4d:9a:67:2c:43:2b:51:31:6c:3d:82:b8: 35:b7:db:4e:51:64:f4:8b:cb:47:73:0b:82:ef:ee: 9d:6a:19:e8:5a:7a:01:f0:72:4d:55:59:9c:44:79: 2f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4A:52:F0:68:D7:A4:91:A1:E3:58:E8:CF:4D:7D:47:63:07:95:2C X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:94:47:9f:c2:7e:06:d6:9c:f2:c3:de:ee:cb:17:a2:5e:9a: 8d:e3:9a:0c:8f:04:55:05:db:dc:4e:31:a2:52:61:8d:cb:5d: fc:01:51:01:a0:b2:ac:78:23:92:82:97:cc:51:d2:0a:2d:94: 10:52:10:40:f5:81:a5:84:9e:a1:f5:0a:9a:b5:cf:d5:1f:92: 1b:cb:06:41:70:e6:ce:d3:c6:bd:b8:49:59:67:20:74:1f:84: 05:25:e8:ed:88:ba:2d:eb:11:52:45:c8:5e:64:bb:7e:1f:1b: e7:7f:67:b0:fe:d3:e2:87:4e:b6:cc:dd:b3:b0:29:de:1b:41: 20:63:b5:da:55:1d:38:b6:22:49:84:ea:92:72:18:a6:42:45: dd:0e:a8:f5:cb:6f:8b:64:08:30:6a:f8:e2:a6:b7:a3:81:cb: d7:07:6c:22:ce:0f:15:4f:b1:4f:85:18:09:39:d7:9d:eb:19: 46:b1:6c:5e:c7:ed:94:db:cf:2c:6c:6c:90:48:91:17:cf:93: a9:35:bd:02:5a:d1:72:a8:cb:24:de:ac:66:e3:ae:8a:d7:91: 87:2a:a9:41:4d:36:5e:91:de:53:b5:f2:7d:b9:12:12:fd:16: 22:df:a8:0e:ab:63:08:3c:54:12:dc:99:67:d6:82:ab:37:0a: b1:d8:b0:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2pBg8I3GUuCswajc87HIhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjUxMjMxMjMwMDI0WhcNMjYwMTAxMjMwMDI0WjAzMTEwLwYDVQQD Eyg5ZjRhNTJmMDY4ZDdhNDkxYTFlMzU4ZThjZjRkN2Q0NzYzMDc5NTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVRj7KkJ6WabuX55r29C0y3CaApy 6vdDca2cgGh5TlFQcv7ixZ4/gY1EOGBmhnyDwztWabIXb0mgHcHC0aWbJP7sTLB+ mvAK4ksb9hX8fRHgD5samtv0ehHPHfwAauDvElY2Bt8G1f90R+JcMD7kDGVp1uWU Fj2yFW6d4Z+kPk0DAumdY5nhIGo6FVVzT99FpcvoB4EXozQgVtl+zNbQUni8qK8z +AqhZElPk8xJsJnT5lrpzFhhSEZMN1FhN+ZWswg7xr0jycfN7IBy/5Sg3zW4ZBVN mmcsQytRMWw9grg1t9tOUWT0i8tHcwuC7+6dahnoWnoB8HJNVVmcRHkvswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9KUvBo16SRoeNY6M9NfUdjB5UsMB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJRHn8J+ Btac8sPe7ssXol6ajeOaDI8EVQXb3E4xolJhjctd/AFRAaCyrHgjkoKXzFHSCi2U EFIQQPWBpYSeofUKmrXP1R+SG8sGQXDmztPGvbhJWWcgdB+EBSXo7Yi6LesRUkXI XmS7fh8b539nsP7T4odOtszds7Ap3htBIGO12lUdOLYiSYTqknIYpkJF3Q6o9ctv i2QIMGr44qa3o4HL1wdsIs4PFU+xT4UYCTnXnesZRrFsXsftlNvPLGxskEiRF8+T qTW9AlrRcqjLJN6sZuOuiteRhyqpQU02XpHeU7XyfbkSEv0WIt+oDqtjCDxUEtyZ Z9aCqzcKsdiw6Q== -----END CERTIFICATE-----Generated at Thu Jan 1 03:57:46 2026 by rpki-client