This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft File: b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json) Hash identifier: hhdJnJDdO0rJKxqVqGBDKGWCdBog3P415P0BJUzAOaI= Subject key identifier: 7E:AF:12:AF:59:85:03:E1:B5:40:52:82:67:4B:07:3A:D9:19:3B:9C Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019B4B82ED65666EE7DE399B561D8A54AB54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft Manifest number: 17C6 Signing time: Tue 23 Dec 2025 14:00:30 +0000 Manifest this update: Tue 23 Dec 2025 14:00:30 +0000 Manifest next update: Wed 24 Dec 2025 14:00:30 +0000 Files and hashes: 1: 0Abj6PSR4FyJUqM6LoN6KFa-26E.roa (hash: 3N4/akmiC/u7gL1HF+D/mYuikLJRGoPmYVruDqzajtA=) 2: 1-HYjW61poyKPMhvfx7U4CngkbXQ.roa (hash: FgaQ7pllPxrtYs+K7a4T0YujtsmGhQlX0nAW+eszuLQ=) 3: 3yeC5jM2ksuqKR2Zh5IvhgGT7kM.roa (hash: aly6yVEpJfsikwPOCEOA8sYqzyulJ58cobvGMlp3Pfc=) 4: 4deFTq_ZGU6j5Wvv1x7sF95jtLY.roa (hash: 2TrrPS30sWSSBNdC0ytp9VKstwP0OWe2UIx3Dtm2/JM=) 5: EYPDvxacKnqAiwCcH_eLh5D-wzo.roa (hash: SGm3Pfgt15u6hgkLS+1eCeSmFoagCG2dGfjKmmJu+Tg=) 6: H6AhUHbx8OlryRkBD15AK_97AFI.roa (hash: aVuSxMtEE3jtCIFUPkZzKs9s0u5aGihLcG9skQiW4iU=) 7: K8brr-FPsMEnGF0kbZo88qS6lTk.roa (hash: qW/T11RMV283PJtyNsGcccWeoOYrXus8SlIyII3hPJA=) 8: OQtVR-cBTyQL6VvIXAOtawOW2cA.roa (hash: Y4JxghrLsZ564AFIbmlJP5QHypmTlarb7NM9FNTmN7A=) 9: PYK2EWVjncskVSm_Hdlre_awIFg.roa (hash: VWAN/Yr75jkjvzOpnYs2pejQXpvZbkMRMFEQFcncIVo=) 10: Q0S0vKeH1qE3DztlQsaMZcL_rdM.roa (hash: EfiDKy3AvswJNKh8pdzYyd3VC1uN6AzI3TYPRG8NcaE=) 11: RzzP2UDDSAPrZWNFm6aBz91iMgQ.roa (hash: 1RDkfiEzt2ZEB4LXorNIAFk4fcDKeMEBcQ7w1edzRtU=) 12: XKHgN2jT3_6QMfOgHKrS1JlPtdM.roa (hash: 0/lku7LnO6lIZwW3HNYBW2LCc3aSui+jPA3GCkogDfQ=) 13: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: X8aabO0LyUoVH+8w6Cd6PiBldAM9Iz1VUkeuDOMYqN8=) 14: fzWiDXbeNLJ9JqEUr2_LAAphcxw.roa (hash: MN7pdOMu0NZSssuxNIUp3oYg8Z0kz03GZzmjzEWZlBE=) 15: lzITf7bmOdvZVA80AcSS1I3NVAY.roa (hash: F1iqFLHu9e7lwpyQGB41+XBSS3bALDr+grcLwGFs4dw=) 16: mxHk_x4_7-pXmkuBflFU5C_xuDU.roa (hash: gtzHct2NI5Df3c0cYS0pdqVMvUN2VqKpHBWx5S3TAmU=) 17: wEFBReYub_TeCbtnkjQHEDS6zaQ.roa (hash: 5e2lfQsxA6BsgP6dDtPIK0Ql9foij6lPOeMn2Q1JhkI=) 18: wOU9aMdER98sPekS4MEPyEOSZUM.roa (hash: fyP1+WfbQMjBodG1sjfQbuHrnmZod0aoG3fzD6DGcYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:82:ed:65:66:6e:e7:de:39:9b:56:1d:8a:54:ab:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Dec 23 14:00:30 2025 GMT Not After : Dec 24 14:00:30 2025 GMT Subject: CN=7eaf12af598503e1b5405282674b073ad9193b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dd:94:41:61:26:f9:63:b1:df:8d:31:ca:97: 51:aa:4d:d9:95:26:3b:83:fd:b6:68:4a:0b:09:a8: ad:16:c5:48:16:56:e0:8c:75:74:9c:5f:a3:db:f9: 0a:da:67:be:5a:36:37:5f:5c:2b:c5:d8:42:44:8e: c0:99:78:29:87:3e:93:ef:66:80:7d:c0:f2:17:31: 34:5f:12:73:d6:e4:fb:a2:f4:30:7a:bf:03:11:63: 4c:ea:5e:d4:91:df:06:ac:72:89:d0:42:7f:30:90: 4d:13:e0:1c:62:c7:54:67:9b:c1:ec:c0:e2:f1:80: 4d:c7:d7:56:53:0c:34:d4:4c:01:f5:cc:84:2d:1a: 00:58:b1:b1:f1:02:11:26:e4:6a:a0:b9:1c:dd:4e: a9:38:12:ce:97:d8:cd:81:e6:3e:f4:b6:55:14:ff: 8c:00:48:45:4b:66:c8:c9:8c:3e:45:44:fd:3a:ee: 1b:d0:9a:1d:f9:e0:f2:6a:b0:12:88:4f:69:26:6e: dd:61:9b:31:85:3c:54:0d:e1:a4:74:f8:1c:84:d8: f4:0b:59:2f:bf:cd:27:89:84:9f:5c:aa:4d:5c:de: 99:be:f3:e4:fb:b0:e8:5b:0f:49:a3:69:61:4a:0e: e8:60:3d:89:23:a5:28:ad:e9:ed:b2:a4:85:a4:7b: 7c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AF:12:AF:59:85:03:E1:B5:40:52:82:67:4B:07:3A:D9:19:3B:9C X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:01:2c:6d:6a:7d:d6:30:97:a4:32:19:74:7e:8c:24:3a:d6: 35:7d:60:42:53:59:35:04:b0:d3:27:54:54:6b:1f:81:96:8a: 8b:c6:17:c2:8b:6e:83:9e:97:5c:89:ef:ca:48:6f:da:cf:cf: 7d:df:c3:cf:86:45:04:a4:b6:04:50:ac:56:3a:d5:65:c2:79: c5:18:88:2f:39:35:e8:a3:09:74:41:76:fc:34:59:11:4f:f9: 09:42:8c:ab:70:e1:e5:68:55:c4:4c:e2:5e:bd:04:f1:ff:ac: 25:ab:c3:ca:d9:ad:c5:93:49:9d:04:89:e0:f2:cd:4a:f9:a1: c3:cd:ec:d6:c4:62:6a:1f:da:f4:7d:7e:97:86:a4:f5:7d:69: 76:08:be:7e:8b:54:9d:e8:53:5e:b4:df:b2:6e:65:b4:90:e6: 38:6b:4a:10:c6:42:59:52:c0:f1:0a:56:5c:d5:4f:62:aa:de: 70:ff:0b:8e:c8:a3:bb:74:19:1b:bc:c5:73:95:62:65:f8:81: 8a:dd:19:fd:f9:b9:d1:52:e4:f6:2c:87:c3:66:53:b9:0c:82: f9:92:21:63:26:00:80:f5:9b:0c:58:f9:39:e8:29:c2:94:3d: 98:3d:70:3f:ec:d1:ed:43:2d:04:f0:0d:18:92:7c:48:e8:3d: da:b6:b6:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLgu1lZm7n3jmbVh2KVKtUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjUxMjIzMTQwMDMwWhcNMjUxMjI0MTQwMDMwWjAzMTEwLwYDVQQD Eyg3ZWFmMTJhZjU5ODUwM2UxYjU0MDUyODI2NzRiMDczYWQ5MTkzYjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot2UQWEm+WOx340xypdRqk3ZlSY7 g/22aEoLCaitFsVIFlbgjHV0nF+j2/kK2me+WjY3X1wrxdhCRI7AmXgphz6T72aA fcDyFzE0XxJz1uT7ovQwer8DEWNM6l7Ukd8GrHKJ0EJ/MJBNE+AcYsdUZ5vB7MDi 8YBNx9dWUww01EwB9cyELRoAWLGx8QIRJuRqoLkc3U6pOBLOl9jNgeY+9LZVFP+M AEhFS2bIyYw+RUT9Ou4b0Jod+eDyarASiE9pJm7dYZsxhTxUDeGkdPgchNj0C1kv v80niYSfXKpNXN6ZvvPk+7DoWw9Jo2lhSg7oYD2JI6UorentsqSFpHt8DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6vEq9ZhQPhtUBSgmdLBzrZGTucMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwEsbWp9 1jCXpDIZdH6MJDrWNX1gQlNZNQSw0ydUVGsfgZaKi8YXwotug56XXInvykhv2s/P fd/Dz4ZFBKS2BFCsVjrVZcJ5xRiILzk16KMJdEF2/DRZEU/5CUKMq3Dh5WhVxEzi Xr0E8f+sJavDytmtxZNJnQSJ4PLNSvmhw83s1sRiah/a9H1+l4ak9X1pdgi+fotU nehTXrTfsm5ltJDmOGtKEMZCWVLA8QpWXNVPYqrecP8Ljsiju3QZG7zFc5ViZfiB it0Z/fm50VLk9iyHw2ZTuQyC+ZIhYyYAgPWbDFj5OegpwpQ9mD1wP+zR7UMtBPAN GJJ8SOg92ra2vQ== -----END CERTIFICATE-----Generated at Tue Dec 23 15:19:05 2025 by rpki-client