This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft File: CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json) Hash identifier: n2REorHjP8jSnxbB/2PV3WyWmzJO4yqjJRj4MiJFWYY= Subject key identifier: 79:53:78:3E:45:BB:E1:B4:2F:7A:93:34:FA:E7:4C:EF:68:9E:58:59 Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad Certificate serial: 019B3B6B7ED6F61E9A090F33FBB53F5CAB26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft Manifest number: 0A54 Signing time: Sat 20 Dec 2025 11:00:59 +0000 Manifest this update: Sat 20 Dec 2025 11:00:59 +0000 Manifest next update: Sun 21 Dec 2025 11:00:59 +0000 Files and hashes: 1: 1YffucAnrX0zrPGVUVBeyKH78tE.roa (hash: F+0MkZW1rwniUkgJEFMqZDUVPzIQlWc77ANUG11yVk0=) 2: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: DW9FTdLr0d5cP9dHviRufmyFECJUG30tRVm8c3PLr4E=) 3: HHgp5sq5yc4_sgJa6AXu1wOFQNM.roa (hash: 7azvHrY82JhsqK3mxuoAki0dX0VXyY18Oolw0K+QPEw=) 4: QIYUcsbQNAYJ49MS9GSzg6HzMws.roa (hash: 25Ipjti12DAizEBm/x19xImh3kKTX0L8ySHToWXRDaw=) 5: b6ZEK46tBFQpFeGihP04dAsRVEs.roa (hash: QgioZFeGRbfakufTGnBIdfmvDS/FUhl+3OYWyWgTaL4=) 6: dntaOaxuIDGd8pI8wGTFAJRgyN0.roa (hash: ZmPkwqzAaYGLrLg5+RqVjoLEOwPFE1N2kmesXzCCUwI=) 7: pM8VKNSiqXyxvrYM2CF2U0Iw0pw.roa (hash: fs4sKC29dVzpn86XWfZbe24a1J4GrvjTCH4XsQbkw6c=) 8: qQrVFVU2zYEeKI_c1sPfgRBsdws.roa (hash: Q0Q6+jTPsyoLSIpvRXxP/rur4NZVUawp72Ly9Y4IL/A=) 9: tstTYn_D9Pn-4nRlBfI2UB_WSGg.roa (hash: ZjiObePgXbEPhVg4yY+Q8sRWmDFO/c82OdQ5TNgpPAM=) 10: zEb6SCNh9IA2ZcmgZWwsmTznbFk.roa (hash: tgHdlVCEN4GvD5zc3JRTYHWhACpqWoQ7O4VCFRbyik4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:7e:d6:f6:1e:9a:09:0f:33:fb:b5:3f:5c:ab:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08af091858bb99651764399c6565df7a0834dbad Validity Not Before: Dec 20 11:00:59 2025 GMT Not After : Dec 21 11:00:59 2025 GMT Subject: CN=7953783e45bbe1b42f7a9334fae74cef689e5859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e6:e7:8f:92:a2:da:8c:02:21:8f:77:07:9a: 07:1e:1d:d6:f5:94:34:5b:1f:8e:46:35:8d:43:f3: 8b:d9:70:98:55:f1:18:79:33:1b:7b:a7:c5:2b:05: d7:d5:e7:13:ec:f3:2e:43:2f:07:e4:d6:9b:75:91: 9a:12:2c:de:31:43:e7:d7:8b:59:7a:1b:52:d4:4b: d2:8c:01:6a:76:79:e4:f0:90:3b:64:4d:4d:40:61: ce:5f:3f:c2:27:cb:67:45:4b:31:b7:b5:63:ac:06: 6b:31:54:2e:04:12:e2:42:12:7b:c2:b0:6e:58:9f: 9d:90:41:88:92:de:bb:90:7c:2a:0a:c9:de:25:08: 09:36:b9:4a:0f:81:d9:63:b8:7c:94:66:3c:bc:0e: d6:e9:27:c2:34:f7:ac:46:c1:6b:ae:dd:b0:ac:0f: 16:af:ec:ef:48:93:61:9a:e4:aa:a0:31:41:4f:97: 87:7d:ea:e9:64:75:95:a7:c4:7e:b2:b5:d3:f5:45: 2b:65:c9:31:9f:09:2c:08:7e:26:d8:14:0b:aa:14: 32:b4:b4:ac:ae:2d:32:07:40:0c:eb:34:3b:0e:7f: 14:23:fa:ca:e0:ed:46:fa:b8:c5:62:62:04:c5:72: 41:81:e8:96:3f:09:30:70:1f:24:e5:ae:7f:e6:ee: d0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:53:78:3E:45:BB:E1:B4:2F:7A:93:34:FA:E7:4C:EF:68:9E:58:59 X509v3 Authority Key Identifier: keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:36:c3:b7:58:56:c8:be:6f:1c:b1:38:41:9b:6e:a1:66:f7: b3:3d:a4:6f:c4:ae:85:32:3c:48:69:6e:f9:d9:64:15:13:30: b1:76:08:c5:a2:2a:3a:d8:c1:3a:b7:a9:1c:2b:3f:a3:6c:7a: 8d:ba:0b:ef:22:a5:3e:a0:ac:cc:eb:73:c9:ab:dd:e7:aa:a7: e6:d9:8e:c1:66:b3:ee:45:a0:26:ea:29:f8:64:ce:3e:dc:7d: de:c6:f9:0a:fe:bd:1c:eb:67:87:9e:86:6e:d3:2a:86:fe:1b: 26:f2:55:72:4b:dc:1b:79:70:7c:dd:b5:52:e3:82:10:f8:61: bc:87:84:60:ce:39:af:9d:1e:3e:5d:8c:af:3d:5a:99:84:c1: 04:07:35:a1:df:57:ba:a7:ad:a5:84:f5:4c:64:ed:1c:3f:3e: c2:af:19:11:db:80:3b:5d:34:d5:32:f8:2d:55:c9:e6:bd:ca: 16:79:68:0f:df:48:fe:68:29:b0:4c:ea:18:5a:04:4d:20:6e: 67:ed:04:52:10:1f:28:fc:da:c7:70:37:6b:d3:34:76:3b:03: 69:90:76:21:89:2e:1b:03:19:77:ed:b7:4c:be:77:fc:ca:e1: a7:f1:1c:00:05:aa:41:2a:a3:f1:32:0e:6d:b5:a7:fa:6e:c7: 4a:5a:cc:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a37W9h6aCQ8z+7U/XKsmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz NGRiYWQwHhcNMjUxMjIwMTEwMDU5WhcNMjUxMjIxMTEwMDU5WjAzMTEwLwYDVQQD Eyg3OTUzNzgzZTQ1YmJlMWI0MmY3YTkzMzRmYWU3NGNlZjY4OWU1ODU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+bnj5Ki2owCIY93B5oHHh3W9ZQ0 Wx+ORjWNQ/OL2XCYVfEYeTMbe6fFKwXX1ecT7PMuQy8H5NabdZGaEizeMUPn14tZ ehtS1EvSjAFqdnnk8JA7ZE1NQGHOXz/CJ8tnRUsxt7VjrAZrMVQuBBLiQhJ7wrBu WJ+dkEGIkt67kHwqCsneJQgJNrlKD4HZY7h8lGY8vA7W6SfCNPesRsFrrt2wrA8W r+zvSJNhmuSqoDFBT5eHferpZHWVp8R+srXT9UUrZckxnwksCH4m2BQLqhQytLSs ri0yB0AM6zQ7Dn8UI/rK4O1G+rjFYmIExXJBgeiWPwkwcB8k5a5/5u7QLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlTeD5Fu+G0L3qTNPrnTO9onlhZMB8GA1UdIwQY MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt NTYxMjliN2RjMDE4LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4 LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTbDt1hW yL5vHLE4QZtuoWb3sz2kb8SuhTI8SGlu+dlkFRMwsXYIxaIqOtjBOrepHCs/o2x6 jboL7yKlPqCszOtzyavd56qn5tmOwWaz7kWgJuop+GTOPtx93sb5Cv69HOtnh56G btMqhv4bJvJVckvcG3lwfN21UuOCEPhhvIeEYM45r50ePl2Mrz1amYTBBAc1od9X uqetpYT1TGTtHD8+wq8ZEduAO1001TL4LVXJ5r3KFnloD99I/mgpsEzqGFoETSBu Z+0EUhAfKPzax3A3a9M0djsDaZB2IYkuGwMZd+23TL53/Mrhp/EcAAWqQSqj8TIO bbWn+m7HSlrM4Q== -----END CERTIFICATE-----Generated at Sat Dec 20 15:10:53 2025 by rpki-client