This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft File: CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json) Hash identifier: ldQOCKsMeRi5tSiC6xj4or828LBr6VUIzv7vItBqzU8= Subject key identifier: C7:E2:9D:38:F5:86:0C:BD:E6:4B:75:13:62:F7:96:C4:93:23:FC:6C Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad Certificate serial: 019B52984CE35A887CCCABE3C78AA5B094AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft Manifest number: 0A60 Signing time: Wed 24 Dec 2025 23:01:11 +0000 Manifest this update: Wed 24 Dec 2025 23:01:11 +0000 Manifest next update: Thu 25 Dec 2025 23:01:11 +0000 Files and hashes: 1: 1YffucAnrX0zrPGVUVBeyKH78tE.roa (hash: F+0MkZW1rwniUkgJEFMqZDUVPzIQlWc77ANUG11yVk0=) 2: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: MKZ9Pj5aRUs3vdEoPsvHGn2vyfX3N3s4vTv8ipJc10k=) 3: HHgp5sq5yc4_sgJa6AXu1wOFQNM.roa (hash: 7azvHrY82JhsqK3mxuoAki0dX0VXyY18Oolw0K+QPEw=) 4: QIYUcsbQNAYJ49MS9GSzg6HzMws.roa (hash: 25Ipjti12DAizEBm/x19xImh3kKTX0L8ySHToWXRDaw=) 5: b6ZEK46tBFQpFeGihP04dAsRVEs.roa (hash: QgioZFeGRbfakufTGnBIdfmvDS/FUhl+3OYWyWgTaL4=) 6: dntaOaxuIDGd8pI8wGTFAJRgyN0.roa (hash: ZmPkwqzAaYGLrLg5+RqVjoLEOwPFE1N2kmesXzCCUwI=) 7: pM8VKNSiqXyxvrYM2CF2U0Iw0pw.roa (hash: fs4sKC29dVzpn86XWfZbe24a1J4GrvjTCH4XsQbkw6c=) 8: qQrVFVU2zYEeKI_c1sPfgRBsdws.roa (hash: Q0Q6+jTPsyoLSIpvRXxP/rur4NZVUawp72Ly9Y4IL/A=) 9: tstTYn_D9Pn-4nRlBfI2UB_WSGg.roa (hash: ZjiObePgXbEPhVg4yY+Q8sRWmDFO/c82OdQ5TNgpPAM=) 10: zEb6SCNh9IA2ZcmgZWwsmTznbFk.roa (hash: tgHdlVCEN4GvD5zc3JRTYHWhACpqWoQ7O4VCFRbyik4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:4c:e3:5a:88:7c:cc:ab:e3:c7:8a:a5:b0:94:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08af091858bb99651764399c6565df7a0834dbad Validity Not Before: Dec 24 23:01:11 2025 GMT Not After : Dec 25 23:01:11 2025 GMT Subject: CN=c7e29d38f5860cbde64b751362f796c49323fc6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b2:c8:0b:de:cc:d5:3c:88:16:6f:6d:e8:bd: 39:f5:ec:ab:9d:0e:69:8e:66:f8:40:c1:fe:03:d9: 12:34:07:c4:40:8f:73:2a:86:60:2b:df:df:2f:fe: c7:de:87:df:71:6d:6f:60:8c:a8:c2:39:7e:82:8a: af:1b:b0:e1:bc:8e:d8:3b:5a:4e:7d:44:75:9a:de: d6:31:96:b4:be:4e:b1:05:20:2c:fd:1e:67:bd:d7: 54:c3:9f:f9:58:63:c4:8c:24:1b:cc:fe:9e:40:2f: 7c:cf:3a:ad:b6:70:5e:27:92:a7:ac:a9:b7:0e:f0: 88:5a:ee:c7:9a:dc:37:75:53:14:78:cb:fd:6e:95: 23:81:8f:ec:5d:e3:78:43:fe:a1:e3:c2:6d:d4:14: 9c:e2:bf:b9:64:01:18:55:35:87:cb:f4:67:20:bb: 95:76:62:1b:bd:bd:da:6c:dc:10:c1:a9:da:c8:26: 6b:e6:01:de:62:ca:58:36:c1:4c:96:3a:7d:51:d3: 54:7e:78:a7:b9:f3:58:b6:07:b7:03:c9:ce:ae:1d: 41:e2:a9:23:3e:0a:a0:07:70:14:d9:45:8f:3a:5f: 4d:8f:f3:5c:b5:80:66:78:34:67:63:e3:83:ad:ce: ad:b5:90:fb:84:f2:0c:c0:d3:09:7e:d1:1f:e9:fa: 01:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E2:9D:38:F5:86:0C:BD:E6:4B:75:13:62:F7:96:C4:93:23:FC:6C X509v3 Authority Key Identifier: keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ad:64:30:68:0d:42:cb:fb:45:5c:6f:1b:6b:4e:41:52:9d: 7c:6a:3f:f1:b1:d7:07:cf:4a:32:4f:02:ac:b7:b5:8b:ed:2d: e7:a9:1f:d8:35:a7:6b:ab:49:df:3e:e8:92:87:bd:d6:b7:4e: 56:3f:28:45:a5:62:18:31:20:9f:65:c5:d4:45:ab:fe:13:1a: 76:d8:47:82:ae:fd:59:8e:34:d8:8b:27:7b:c7:61:89:80:c8: d6:2c:10:5e:75:91:c5:e9:e7:1a:e2:80:1a:f6:c2:dc:19:6e: b6:5c:c8:0a:87:51:a4:9f:05:6d:d6:0c:b5:ff:02:e3:ef:8c: 7e:54:ed:e6:84:6e:87:55:e2:ad:5d:fc:fa:98:ae:11:da:16: 7d:b0:97:21:d4:54:f1:4e:c6:ed:32:8d:4e:f0:0b:a0:27:41: be:2d:1c:87:07:87:90:ea:73:00:55:b3:a0:d2:a1:dc:88:50: e8:18:0e:ea:ce:93:65:32:85:af:cd:a9:1f:8c:82:f0:a9:b0: d0:18:16:7e:c3:95:3d:c6:63:55:7c:d6:9a:83:61:89:d3:38: ac:94:9e:51:27:ea:fa:d8:64:92:17:9f:26:fd:e3:a7:a8:dd: 81:72:80:a0:d3:0a:5c:f4:c3:03:36:20:c8:1c:b3:82:0e:1f: 07:b8:66:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmEzjWoh8zKvjx4qlsJSsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz NGRiYWQwHhcNMjUxMjI0MjMwMTExWhcNMjUxMjI1MjMwMTExWjAzMTEwLwYDVQQD EyhjN2UyOWQzOGY1ODYwY2JkZTY0Yjc1MTM2MmY3OTZjNDkzMjNmYzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrLIC97M1TyIFm9t6L059eyrnQ5p jmb4QMH+A9kSNAfEQI9zKoZgK9/fL/7H3offcW1vYIyowjl+goqvG7DhvI7YO1pO fUR1mt7WMZa0vk6xBSAs/R5nvddUw5/5WGPEjCQbzP6eQC98zzqttnBeJ5KnrKm3 DvCIWu7Hmtw3dVMUeMv9bpUjgY/sXeN4Q/6h48Jt1BSc4r+5ZAEYVTWHy/RnILuV dmIbvb3abNwQwanayCZr5gHeYspYNsFMljp9UdNUfninufNYtge3A8nOrh1B4qkj PgqgB3AU2UWPOl9Nj/NctYBmeDRnY+ODrc6ttZD7hPIMwNMJftEf6foBkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfinTj1hgy95kt1E2L3lsSTI/xsMB8GA1UdIwQY MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt NTYxMjliN2RjMDE4LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4 LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiK1kMGgN Qsv7RVxvG2tOQVKdfGo/8bHXB89KMk8CrLe1i+0t56kf2DWna6tJ3z7okoe91rdO Vj8oRaViGDEgn2XF1EWr/hMadthHgq79WY402Isne8dhiYDI1iwQXnWRxennGuKA GvbC3BlutlzICodRpJ8FbdYMtf8C4++MflTt5oRuh1XirV38+piuEdoWfbCXIdRU 8U7G7TKNTvALoCdBvi0chweHkOpzAFWzoNKh3IhQ6BgO6s6TZTKFr82pH4yC8Kmw 0BgWfsOVPcZjVXzWmoNhidM4rJSeUSfq+thkkhefJv3jp6jdgXKAoNMKXPTDAzYg yByzgg4fB7hmhw== -----END CERTIFICATE-----Generated at Thu Dec 25 09:15:49 2025 by rpki-client