This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft File: rm8YQW19RwqgStALyldoPHidhU0.mft (raw, json) Hash identifier: hl9hFNwvN4HROiZ8kZFVUt57JZIvZCpMvUbhIeCR0oY= Subject key identifier: E8:00:0F:33:C6:2B:2D:33:E9:33:A1:8A:BA:F3:CB:F7:B2:BF:1F:F7 Authority key identifier: AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D Certificate issuer: /CN=ae6f18416d7d470aa04ad00bca57683c789d854d Certificate serial: 019B3C7EA078EA2A76EA9383DF6D08E796F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft Manifest number: 0E6E Signing time: Sat 20 Dec 2025 16:01:30 +0000 Manifest this update: Sat 20 Dec 2025 16:01:30 +0000 Manifest next update: Sun 21 Dec 2025 16:01:30 +0000 Files and hashes: 1: 1-boXqKY_Hyoe19Z5JIZ3K6AJj94.roa (hash: a5qc0h3BhqmeqSpAZh7GFmd10hjtqvPl4/lqfepgblo=) 2: rm8YQW19RwqgStALyldoPHidhU0.crl (hash: yApx2MGKQneqinjZzTbfZBPITVXuch3x+39oCHwF/9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:a0:78:ea:2a:76:ea:93:83:df:6d:08:e7:96:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae6f18416d7d470aa04ad00bca57683c789d854d Validity Not Before: Dec 20 16:01:30 2025 GMT Not After : Dec 21 16:01:30 2025 GMT Subject: CN=e8000f33c62b2d33e933a18abaf3cbf7b2bf1ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:37:93:91:21:e4:cc:ef:74:76:09:0d:64:d1: ae:69:3c:aa:42:c1:a5:a3:f9:a7:b4:81:40:11:b0: cb:80:3f:ad:33:29:72:c2:0f:bb:7f:ac:6e:f4:c6: 0f:c7:1c:5c:fd:ba:dc:5f:a7:32:c9:3d:c8:f7:7c: 64:f9:d1:a1:27:00:4c:bb:ee:0e:4a:12:c8:0a:0a: fb:31:2f:df:18:8f:17:47:92:f6:4c:15:ae:ae:dc: fd:5d:af:9b:49:6b:3b:b3:11:82:2b:c2:a4:4a:a0: b9:d5:e2:11:7f:d3:e6:28:76:37:d7:54:2d:8c:96: 3e:02:36:0e:3c:ef:68:9e:cb:57:53:03:82:2c:aa: fd:d7:d9:aa:c7:97:8d:b5:89:80:e5:93:82:bd:22: 90:1c:04:b7:ad:44:d9:74:1b:f7:d7:70:a1:b0:23: 21:a0:d6:49:c8:6b:1a:07:9e:11:20:9c:49:c9:b3: ac:4d:2b:1f:8a:34:b2:ab:4c:8d:cb:85:38:b5:db: 6f:41:63:81:ce:84:71:e3:51:1b:2a:a6:2c:3c:da: fb:57:b1:05:19:2b:97:99:42:53:e2:0d:98:19:56: 96:c7:86:ad:fd:ff:df:f5:46:f1:60:36:60:cc:15: 6b:8b:a2:78:48:22:96:47:79:be:71:58:32:3e:7e: ee:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:00:0F:33:C6:2B:2D:33:E9:33:A1:8A:BA:F3:CB:F7:B2:BF:1F:F7 X509v3 Authority Key Identifier: keyid:AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:2e:cf:9f:cd:74:f9:61:84:a3:4f:14:fb:fe:7c:e4:87:7e: 7e:66:81:ae:ee:56:a4:2e:98:79:5b:33:e9:ef:fa:fe:9e:9e: ac:d3:6b:24:80:c8:1c:ac:7a:f3:35:d1:50:7c:66:43:68:86: f2:5a:05:54:dc:28:cb:a3:5e:16:1e:dd:2e:3e:76:b9:be:58: bb:fa:fe:fe:90:4e:41:4b:d1:1f:43:e0:e2:56:09:e7:cf:4f: 9e:35:b5:6e:69:48:0f:05:6c:78:68:b7:d0:92:ef:34:0f:32: 2b:29:57:bd:6e:6b:2d:32:f5:20:61:ca:b9:2c:1b:41:3b:64: 55:4e:9c:09:39:c4:33:0d:ce:12:ef:29:f6:48:05:57:8d:b8: b0:9c:01:07:61:9d:b8:eb:55:14:54:2e:fb:5f:00:b9:a6:44: 70:d8:62:65:e9:18:d6:29:a3:4a:91:b1:da:5c:3b:00:d7:9b: c0:51:3c:df:d9:18:59:5d:44:28:66:4d:10:1a:ce:5a:eb:03: 08:61:50:c0:5c:ce:58:b3:75:43:be:54:ee:68:a7:bd:2a:da: e6:64:b6:e8:98:52:75:87:e0:d4:c9:11:c2:6a:a3:30:0d:43: 21:8d:2e:14:72:b9:c8:23:98:15:6c:24:3a:e6:56:60:cb:3c: 56:a4:d5:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fqB46ip26pOD320I55b4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNmYxODQxNmQ3ZDQ3MGFhMDRhZDAwYmNhNTc2ODNjNzg5 ZDg1NGQwHhcNMjUxMjIwMTYwMTMwWhcNMjUxMjIxMTYwMTMwWjAzMTEwLwYDVQQD EyhlODAwMGYzM2M2MmIyZDMzZTkzM2ExOGFiYWYzY2JmN2IyYmYxZmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzeTkSHkzO90dgkNZNGuaTyqQsGl o/mntIFAEbDLgD+tMylywg+7f6xu9MYPxxxc/brcX6cyyT3I93xk+dGhJwBMu+4O ShLICgr7MS/fGI8XR5L2TBWurtz9Xa+bSWs7sxGCK8KkSqC51eIRf9PmKHY311Qt jJY+AjYOPO9onstXUwOCLKr919mqx5eNtYmA5ZOCvSKQHAS3rUTZdBv313ChsCMh oNZJyGsaB54RIJxJybOsTSsfijSyq0yNy4U4tdtvQWOBzoRx41EbKqYsPNr7V7EF GSuXmUJT4g2YGVaWx4at/f/f9UbxYDZgzBVri6J4SCKWR3m+cVgyPn7ueQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgADzPGKy0z6TOhirrzy/eyvx/3MB8GA1UdIwQY MBaAFK5vGEFtfUcKoErQC8pXaDx4nYVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm04WVFXMTlSd3FnU3RBTHlsZG9QSGlkaFUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85N2Q5N2UtNmRlOS00MzMyLWI0ZGYt MDZlNTRkZDkyMTcxLzEvcm04WVFXMTlSd3FnU3RBTHlsZG9QSGlkaFUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85N2Q5N2UtNmRlOS00MzMyLWI0ZGYtMDZlNTRkZDkyMTcx LzEvcm04WVFXMTlSd3FnU3RBTHlsZG9QSGlkaFUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASi7Pn810 +WGEo08U+/585Id+fmaBru5WpC6YeVsz6e/6/p6erNNrJIDIHKx68zXRUHxmQ2iG 8loFVNwoy6NeFh7dLj52ub5Yu/r+/pBOQUvRH0Pg4lYJ589PnjW1bmlIDwVseGi3 0JLvNA8yKylXvW5rLTL1IGHKuSwbQTtkVU6cCTnEMw3OEu8p9kgFV424sJwBB2Gd uOtVFFQu+18AuaZEcNhiZekY1imjSpGx2lw7ANebwFE839kYWV1EKGZNEBrOWusD CGFQwFzOWLN1Q75U7minvSra5mS26JhSdYfg1MkRwmqjMA1DIY0uFHK5yCOYFWwk OuZWYMs8VqTVQw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:55:44 2025 by rpki-client