This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft File: u8JktaZJT4kPoxT2H9fSdYfjWDA.mft (raw, json) Hash identifier: dg2Twr3FO4/Y7IAcLcYYKrYQbc549rIyuM7YVeaPPdw= Subject key identifier: 61:DA:0D:D3:40:C8:C5:2C:8B:66:3C:DE:B6:04:B0:03:F6:D5:3B:A8 Authority key identifier: BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30 Certificate issuer: /CN=bbc264b5a6494f890fa314f61fd7d27587e35830 Certificate serial: 019B4BF1EF6FD91E2FB22B0AD8A231AB011A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft Manifest number: 1793 Signing time: Tue 23 Dec 2025 16:01:45 +0000 Manifest this update: Tue 23 Dec 2025 16:01:45 +0000 Manifest next update: Wed 24 Dec 2025 16:01:45 +0000 Files and hashes: 1: t4qANnEhvVWnrRLkZS7CKoTPpCQ.roa (hash: dm6ZxXeDx09W/sn7TAuJSwJg3JzyL+0jwWDxaTnORrU=) 2: u8JktaZJT4kPoxT2H9fSdYfjWDA.crl (hash: WCPqrn7dizu15pYApylWcxuhFF8dqTvngnpcHJZkSQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:ef:6f:d9:1e:2f:b2:2b:0a:d8:a2:31:ab:01:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbc264b5a6494f890fa314f61fd7d27587e35830 Validity Not Before: Dec 23 16:01:45 2025 GMT Not After : Dec 24 16:01:45 2025 GMT Subject: CN=61da0dd340c8c52c8b663cdeb604b003f6d53ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:82:97:94:24:77:85:36:22:ad:e6:3c:b7:c9: fc:c9:be:59:0b:4c:01:d0:72:3f:20:dd:0b:d0:07: 82:b0:b6:85:77:26:b3:8c:7b:5c:2d:a5:db:2e:10: a5:9e:c8:42:20:d0:e6:ed:2c:d8:b8:7f:7e:2d:44: eb:f6:23:ea:92:35:cc:54:2a:9d:73:11:1a:71:d3: 60:a9:fb:ba:c4:bb:f4:cf:a2:46:d6:81:36:fc:78: 04:27:a7:20:c6:19:1e:e8:88:72:19:4d:3d:04:7e: 9b:d7:bd:7d:19:69:13:c9:0f:f2:52:9c:4f:32:fe: d4:05:fd:ab:47:36:57:e5:31:c0:d2:e9:83:ae:f4: 42:49:b6:9f:0f:d8:29:6a:5b:46:a4:8b:df:43:3f: 80:16:9b:ef:8b:8b:27:d5:d2:75:04:58:ad:56:2c: ab:6b:74:25:dc:9c:54:62:cb:6a:38:9d:c5:3f:67: be:f3:e0:fd:cf:99:3c:10:fc:7d:68:cb:0e:09:12: 2c:0e:f3:c9:96:b6:ba:f4:9a:6f:a1:8c:3a:6d:e2: ac:5e:09:7a:f8:99:5f:70:57:b7:4c:fa:c6:11:f9: 41:00:1a:7b:3a:bb:b5:de:05:7a:2c:f8:45:ea:30: 0b:84:91:12:d3:8a:cb:4a:1c:ba:2f:e3:a8:d2:56: 94:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DA:0D:D3:40:C8:C5:2C:8B:66:3C:DE:B6:04:B0:03:F6:D5:3B:A8 X509v3 Authority Key Identifier: keyid:BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:f2:3c:3f:bf:15:1e:93:6f:1f:f2:fb:9c:cf:73:5e:89:8e: 31:b3:49:d7:54:38:b5:06:bc:c6:88:50:22:61:85:65:4c:b9: 7a:c3:4d:bd:39:56:be:b6:66:76:db:ca:dd:37:92:19:99:99: 93:24:a6:97:4d:97:8f:49:4c:f8:41:e5:41:ef:98:c3:ac:1c: 2d:3b:73:9e:4e:dc:2e:1e:c8:da:eb:b3:bd:87:62:84:ff:fa: c4:db:f1:f0:6e:cd:2d:7a:25:62:73:8b:8c:43:d9:24:a1:a5: cd:bd:1d:34:44:1d:57:61:eb:dd:2f:d5:8a:42:9b:a6:0d:1c: aa:d9:0f:57:e8:c2:f1:79:07:a6:f9:2a:5f:c0:e8:49:31:b8: aa:2c:06:d0:36:dc:cd:6f:5d:f0:39:15:eb:55:e6:f3:1f:87: d4:ae:74:24:ef:72:21:69:33:8d:76:20:db:83:f4:99:4b:d6: 68:6f:7a:36:46:61:52:d4:41:4a:0e:07:91:66:f3:35:2d:1a: e1:4e:8e:4d:cb:b3:9c:bf:35:10:2f:ba:3e:97:0e:68:86:00: e4:63:1a:93:1f:0e:d8:02:b4:5d:d2:51:59:95:45:ee:49:14: e2:b3:40:e0:50:90:82:dd:78:28:83:05:8f:0c:52:8a:e1:73: 73:78:68:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8e9v2R4vsisK2KIxqwEaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYzI2NGI1YTY0OTRmODkwZmEzMTRmNjFmZDdkMjc1ODdl MzU4MzAwHhcNMjUxMjIzMTYwMTQ1WhcNMjUxMjI0MTYwMTQ1WjAzMTEwLwYDVQQD Eyg2MWRhMGRkMzQwYzhjNTJjOGI2NjNjZGViNjA0YjAwM2Y2ZDUzYmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+oKXlCR3hTYireY8t8n8yb5ZC0wB 0HI/IN0L0AeCsLaFdyazjHtcLaXbLhClnshCINDm7SzYuH9+LUTr9iPqkjXMVCqd cxEacdNgqfu6xLv0z6JG1oE2/HgEJ6cgxhke6IhyGU09BH6b1719GWkTyQ/yUpxP Mv7UBf2rRzZX5THA0umDrvRCSbafD9gpaltGpIvfQz+AFpvvi4sn1dJ1BFitViyr a3Ql3JxUYstqOJ3FP2e+8+D9z5k8EPx9aMsOCRIsDvPJlra69JpvoYw6beKsXgl6 +JlfcFe3TPrGEflBABp7Oru13gV6LPhF6jALhJES04rLShy6L+Oo0laURQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHaDdNAyMUsi2Y83rYEsAP21TuoMB8GA1UdIwQY MBaAFLvCZLWmSU+JD6MU9h/X0nWH41gwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdThKa3RhWkpUNGtQb3hUMkg5ZlNkWWZqV0RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lYTRlNjQtNmQ3MC00YmZkLTkwOWQt ZjA1NDZjZmFiMDYxLzEvdThKa3RhWkpUNGtQb3hUMkg5ZlNkWWZqV0RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9lYTRlNjQtNmQ3MC00YmZkLTkwOWQtZjA1NDZjZmFiMDYx LzEvdThKa3RhWkpUNGtQb3hUMkg5ZlNkWWZqV0RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPI8P78V HpNvH/L7nM9zXomOMbNJ11Q4tQa8xohQImGFZUy5esNNvTlWvrZmdtvK3TeSGZmZ kySml02Xj0lM+EHlQe+Yw6wcLTtznk7cLh7I2uuzvYdihP/6xNvx8G7NLXolYnOL jEPZJKGlzb0dNEQdV2Hr3S/VikKbpg0cqtkPV+jC8XkHpvkqX8DoSTG4qiwG0Dbc zW9d8DkV61Xm8x+H1K50JO9yIWkzjXYg24P0mUvWaG96NkZhUtRBSg4HkWbzNS0a 4U6OTcuznL81EC+6PpcOaIYA5GMakx8O2AK0XdJRWZVF7kkU4rNA4FCQgt14KIMF jwxSiuFzc3hoKw== -----END CERTIFICATE-----Generated at Wed Dec 24 00:31:12 2025 by rpki-client