This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft File: b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json) Hash identifier: wrsyaYCfXMAEPFfcel5rxKMRUtpG1C7OCFWZxDDiGOY= Subject key identifier: AF:B7:79:08:6E:F1:C1:14:8E:42:8D:0C:07:C5:54:56:53:0B:2A:E1 Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019B3C103D03742B8112B6D322C268549AE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft Manifest number: 17BE Signing time: Sat 20 Dec 2025 14:00:55 +0000 Manifest this update: Sat 20 Dec 2025 14:00:55 +0000 Manifest next update: Sun 21 Dec 2025 14:00:55 +0000 Files and hashes: 1: 0Abj6PSR4FyJUqM6LoN6KFa-26E.roa (hash: 3N4/akmiC/u7gL1HF+D/mYuikLJRGoPmYVruDqzajtA=) 2: 1-HYjW61poyKPMhvfx7U4CngkbXQ.roa (hash: FgaQ7pllPxrtYs+K7a4T0YujtsmGhQlX0nAW+eszuLQ=) 3: 3yeC5jM2ksuqKR2Zh5IvhgGT7kM.roa (hash: aly6yVEpJfsikwPOCEOA8sYqzyulJ58cobvGMlp3Pfc=) 4: 4deFTq_ZGU6j5Wvv1x7sF95jtLY.roa (hash: 2TrrPS30sWSSBNdC0ytp9VKstwP0OWe2UIx3Dtm2/JM=) 5: EYPDvxacKnqAiwCcH_eLh5D-wzo.roa (hash: SGm3Pfgt15u6hgkLS+1eCeSmFoagCG2dGfjKmmJu+Tg=) 6: H6AhUHbx8OlryRkBD15AK_97AFI.roa (hash: aVuSxMtEE3jtCIFUPkZzKs9s0u5aGihLcG9skQiW4iU=) 7: K8brr-FPsMEnGF0kbZo88qS6lTk.roa (hash: qW/T11RMV283PJtyNsGcccWeoOYrXus8SlIyII3hPJA=) 8: OQtVR-cBTyQL6VvIXAOtawOW2cA.roa (hash: Y4JxghrLsZ564AFIbmlJP5QHypmTlarb7NM9FNTmN7A=) 9: PYK2EWVjncskVSm_Hdlre_awIFg.roa (hash: VWAN/Yr75jkjvzOpnYs2pejQXpvZbkMRMFEQFcncIVo=) 10: Q0S0vKeH1qE3DztlQsaMZcL_rdM.roa (hash: EfiDKy3AvswJNKh8pdzYyd3VC1uN6AzI3TYPRG8NcaE=) 11: RzzP2UDDSAPrZWNFm6aBz91iMgQ.roa (hash: 1RDkfiEzt2ZEB4LXorNIAFk4fcDKeMEBcQ7w1edzRtU=) 12: XKHgN2jT3_6QMfOgHKrS1JlPtdM.roa (hash: 0/lku7LnO6lIZwW3HNYBW2LCc3aSui+jPA3GCkogDfQ=) 13: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: QUvdYX4n+N++ZW9S0v6DO60gogisqaxjHtU8btAwINQ=) 14: fzWiDXbeNLJ9JqEUr2_LAAphcxw.roa (hash: MN7pdOMu0NZSssuxNIUp3oYg8Z0kz03GZzmjzEWZlBE=) 15: lzITf7bmOdvZVA80AcSS1I3NVAY.roa (hash: F1iqFLHu9e7lwpyQGB41+XBSS3bALDr+grcLwGFs4dw=) 16: mxHk_x4_7-pXmkuBflFU5C_xuDU.roa (hash: gtzHct2NI5Df3c0cYS0pdqVMvUN2VqKpHBWx5S3TAmU=) 17: wEFBReYub_TeCbtnkjQHEDS6zaQ.roa (hash: 5e2lfQsxA6BsgP6dDtPIK0Ql9foij6lPOeMn2Q1JhkI=) 18: wOU9aMdER98sPekS4MEPyEOSZUM.roa (hash: fyP1+WfbQMjBodG1sjfQbuHrnmZod0aoG3fzD6DGcYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:3d:03:74:2b:81:12:b6:d3:22:c2:68:54:9a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Dec 20 14:00:55 2025 GMT Not After : Dec 21 14:00:55 2025 GMT Subject: CN=afb779086ef1c1148e428d0c07c55456530b2ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ab:23:38:a2:ae:a2:8c:5a:b2:93:28:72:38: 2c:3c:99:7c:22:57:85:ba:1a:c6:0a:88:ea:90:4c: 2f:91:4a:5b:ff:f4:ac:41:d6:74:69:e4:86:39:59: 39:f1:86:0a:ea:cf:ef:75:68:b7:13:c4:c3:0d:32: 74:49:79:a2:c8:50:b0:b5:7b:e0:92:5e:c1:8f:f0: 2a:47:80:8a:9e:a0:9f:96:2c:2c:00:aa:93:2f:54: 1c:c8:79:de:b4:5c:01:0e:5f:8e:c0:f2:a0:35:23: 0b:4c:5a:2e:d0:12:58:9d:cf:cd:2e:43:30:66:35: ab:2f:a9:0d:41:05:ff:76:78:ef:17:ec:34:40:d0: e1:32:14:74:18:7b:d7:ae:0b:a9:57:71:0e:7e:20: 0a:0f:73:6e:42:c4:92:6e:e9:a4:4e:08:24:33:5f: 0b:ee:c8:25:73:71:f0:68:55:32:99:f0:61:79:43: f9:79:5b:e6:66:27:05:d1:1a:28:45:11:e9:e6:45: 8a:55:91:fb:5e:e7:90:b5:4f:6b:79:54:c0:e1:c3: 53:7b:9c:e5:6e:c8:2d:a7:df:56:be:8e:1c:c6:17: 33:95:db:0f:2e:d0:38:1d:95:11:bd:21:32:e7:c2: b5:58:fb:51:5a:2b:03:b3:46:5d:ff:47:ce:46:b1: 91:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B7:79:08:6E:F1:C1:14:8E:42:8D:0C:07:C5:54:56:53:0B:2A:E1 X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:5c:d7:52:e4:84:0a:00:05:94:4d:49:40:99:81:dd:d5:c4: 48:51:6c:e0:00:d4:4d:54:87:04:98:1f:be:c4:a4:51:dc:3c: 68:05:82:fb:f9:d7:79:80:90:ee:3a:45:0c:ef:f7:74:1b:18: 3b:47:da:46:05:85:2c:9c:a6:97:9d:a8:4e:31:f9:fd:f3:d1: 6d:8a:7b:d0:5b:b7:f7:e5:de:49:9d:75:f4:44:78:9c:22:4e: 48:b6:e6:b3:d9:dd:6e:74:50:94:64:2e:0e:dc:c9:e3:c4:24: 5d:2e:a1:27:19:b5:8f:a6:9d:46:95:8b:29:c6:cc:89:68:88: 93:92:69:36:85:61:6e:f6:86:ff:b4:02:83:58:30:44:c3:eb: ec:36:61:f2:a7:be:36:2c:30:a2:7b:35:e5:1f:c7:91:25:cc: 02:25:32:f3:9d:6f:48:a5:a3:2e:62:43:df:03:6a:a6:55:34: f7:44:b0:96:7b:bc:12:f7:63:b3:b0:eb:ee:5d:8c:c0:89:92: 20:55:9c:62:7e:f2:5b:06:ad:91:80:b8:fb:6c:11:43:82:cc: 75:22:a5:91:61:a3:40:ba:94:a3:14:91:9a:81:b3:c2:ee:cd: 79:9b:78:97:9a:45:92:21:71:99:4c:47:28:d2:d1:b9:b5:fd: 38:2a:eb:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ED0DdCuBErbTIsJoVJrgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjUxMjIwMTQwMDU1WhcNMjUxMjIxMTQwMDU1WjAzMTEwLwYDVQQD EyhhZmI3NzkwODZlZjFjMTE0OGU0MjhkMGMwN2M1NTQ1NjUzMGIyYWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKsjOKKuooxaspMocjgsPJl8IleF uhrGCojqkEwvkUpb//SsQdZ0aeSGOVk58YYK6s/vdWi3E8TDDTJ0SXmiyFCwtXvg kl7Bj/AqR4CKnqCfliwsAKqTL1QcyHnetFwBDl+OwPKgNSMLTFou0BJYnc/NLkMw ZjWrL6kNQQX/dnjvF+w0QNDhMhR0GHvXrgupV3EOfiAKD3NuQsSSbumkTggkM18L 7sglc3HwaFUymfBheUP5eVvmZicF0RooRRHp5kWKVZH7XueQtU9reVTA4cNTe5zl bsgtp99Wvo4cxhczldsPLtA4HZURvSEy58K1WPtRWisDs0Zd/0fORrGR1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+3eQhu8cEUjkKNDAfFVFZTCyrhMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFzXUuSE CgAFlE1JQJmB3dXESFFs4ADUTVSHBJgfvsSkUdw8aAWC+/nXeYCQ7jpFDO/3dBsY O0faRgWFLJyml52oTjH5/fPRbYp70Fu39+XeSZ119ER4nCJOSLbms9ndbnRQlGQu DtzJ48QkXS6hJxm1j6adRpWLKcbMiWiIk5JpNoVhbvaG/7QCg1gwRMPr7DZh8qe+ Niwwons15R/HkSXMAiUy851vSKWjLmJD3wNqplU090Swlnu8Evdjs7Dr7l2MwImS IFWcYn7yWwatkYC4+2wRQ4LMdSKlkWGjQLqUoxSRmoGzwu7NeZt4l5pFkiFxmUxH KNLRubX9OCrrLg== -----END CERTIFICATE-----Generated at Sat Dec 20 17:00:05 2025 by rpki-client