This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft File: CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json) Hash identifier: tz+bOMBL6l/AdaXxfHnoOOKr+APNY0fXyj78GYVWHVQ= Subject key identifier: 40:68:FE:2E:38:97:6C:FC:A5:B7:EC:4F:FE:D4:8F:2D:E1:51:0A:87 Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad Certificate serial: 019B65E7DF03A0AADAFB3FBA5608FF9F91DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft Manifest number: 0A6A Signing time: Sun 28 Dec 2025 17:00:53 +0000 Manifest this update: Sun 28 Dec 2025 17:00:53 +0000 Manifest next update: Mon 29 Dec 2025 17:00:53 +0000 Files and hashes: 1: 1YffucAnrX0zrPGVUVBeyKH78tE.roa (hash: F+0MkZW1rwniUkgJEFMqZDUVPzIQlWc77ANUG11yVk0=) 2: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: uOd55vi+PjWtPz2eSPMMhn042HdVtPcVXeo3amojRgY=) 3: HHgp5sq5yc4_sgJa6AXu1wOFQNM.roa (hash: 7azvHrY82JhsqK3mxuoAki0dX0VXyY18Oolw0K+QPEw=) 4: QIYUcsbQNAYJ49MS9GSzg6HzMws.roa (hash: 25Ipjti12DAizEBm/x19xImh3kKTX0L8ySHToWXRDaw=) 5: b6ZEK46tBFQpFeGihP04dAsRVEs.roa (hash: QgioZFeGRbfakufTGnBIdfmvDS/FUhl+3OYWyWgTaL4=) 6: dntaOaxuIDGd8pI8wGTFAJRgyN0.roa (hash: ZmPkwqzAaYGLrLg5+RqVjoLEOwPFE1N2kmesXzCCUwI=) 7: pM8VKNSiqXyxvrYM2CF2U0Iw0pw.roa (hash: fs4sKC29dVzpn86XWfZbe24a1J4GrvjTCH4XsQbkw6c=) 8: qQrVFVU2zYEeKI_c1sPfgRBsdws.roa (hash: Q0Q6+jTPsyoLSIpvRXxP/rur4NZVUawp72Ly9Y4IL/A=) 9: tstTYn_D9Pn-4nRlBfI2UB_WSGg.roa (hash: ZjiObePgXbEPhVg4yY+Q8sRWmDFO/c82OdQ5TNgpPAM=) 10: zEb6SCNh9IA2ZcmgZWwsmTznbFk.roa (hash: tgHdlVCEN4GvD5zc3JRTYHWhACpqWoQ7O4VCFRbyik4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 17:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:e7:df:03:a0:aa:da:fb:3f:ba:56:08:ff:9f:91:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08af091858bb99651764399c6565df7a0834dbad Validity Not Before: Dec 28 17:00:53 2025 GMT Not After : Dec 29 17:00:53 2025 GMT Subject: CN=4068fe2e38976cfca5b7ec4ffed48f2de1510a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0b:9a:a8:5b:0c:fa:e9:f2:14:0f:90:83:11: 3a:17:e2:a0:a0:b3:35:07:de:33:c2:e5:10:19:5d: dd:c0:e9:b3:86:af:4c:d5:2a:44:ea:34:16:af:dc: 0c:3f:7a:ec:c4:90:cf:ae:db:4a:fe:e3:91:6d:e5: b7:72:52:63:09:42:e9:74:b1:c9:a2:65:4e:55:7f: 6a:ff:5f:cd:11:3c:81:56:84:68:eb:fa:10:ae:28: 27:bb:7d:88:ac:d8:87:b4:43:74:c7:f2:b7:3c:56: 18:c3:49:dd:93:a4:18:14:d8:00:1d:f7:cd:d9:7a: 84:ae:f9:c5:89:73:b3:46:64:b2:a6:4e:0f:3f:e2: 01:cd:cc:2b:43:8c:4f:24:f2:84:c4:85:27:df:97: 39:16:3c:48:61:24:39:bb:32:3d:15:46:19:0a:85: df:c7:9a:a5:51:c5:90:13:e6:d8:14:42:39:f9:ed: 36:18:9f:fc:72:c2:e4:be:40:00:c3:e1:82:8f:a3: 18:2d:a6:a5:d0:7c:bf:50:1d:61:c9:e3:09:86:d3: b6:96:e9:ee:5b:56:67:97:e4:93:03:79:48:79:51: cb:f6:7b:71:26:01:a2:cf:69:21:14:9c:59:5a:ea: 8f:7c:de:2b:4d:3e:08:1f:ff:c9:7a:87:c9:0f:e0: e4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:68:FE:2E:38:97:6C:FC:A5:B7:EC:4F:FE:D4:8F:2D:E1:51:0A:87 X509v3 Authority Key Identifier: keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e5:85:53:45:cc:90:0e:5e:ba:dd:a6:ba:54:f2:00:f5:9d: bf:24:12:19:12:d2:34:85:00:7f:b6:dd:ac:05:66:bc:a8:d9: 86:b1:8f:d7:e8:e2:52:e5:85:5e:83:be:bf:5c:8d:b9:ff:63: 83:5f:d0:7f:b8:2d:15:06:d0:b2:f4:30:35:79:c1:4b:aa:3c: ff:93:41:a3:7d:cc:ed:4b:5b:6d:5d:84:68:0c:1f:9a:ad:b8: cd:ec:4a:e4:e6:81:7a:0a:0d:00:25:fc:f8:fc:25:81:1d:b3: 42:5c:60:74:3e:cb:39:4b:40:8f:f8:da:d4:6e:ed:f2:ed:a0: df:12:04:d5:e0:96:3f:69:42:c6:a4:ba:b5:22:e7:1b:7e:67: a7:99:2e:ec:84:db:1b:0b:ad:bf:83:d3:a0:cf:e9:23:3c:33: e2:27:e6:31:0a:c7:92:e0:d1:6d:be:59:18:3a:b3:0d:68:32: 33:8d:a3:80:cb:ff:8c:5a:ec:6d:84:5f:b8:38:de:e2:fd:6b: 29:fd:0b:f9:bb:5e:60:83:fa:57:22:40:d9:b0:d7:41:df:84: c6:9c:62:a1:22:67:ea:bd:0f:d2:83:94:0d:9e:a5:ba:5f:d3: f2:2b:c5:1d:b1:e7:01:f9:4a:c1:e6:11:f7:d4:a9:80:4a:89: 92:63:8a:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtl598DoKra+z+6Vgj/n5HbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz NGRiYWQwHhcNMjUxMjI4MTcwMDUzWhcNMjUxMjI5MTcwMDUzWjAzMTEwLwYDVQQD Eyg0MDY4ZmUyZTM4OTc2Y2ZjYTViN2VjNGZmZWQ0OGYyZGUxNTEwYTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QuaqFsM+unyFA+QgxE6F+KgoLM1 B94zwuUQGV3dwOmzhq9M1SpE6jQWr9wMP3rsxJDPrttK/uORbeW3clJjCULpdLHJ omVOVX9q/1/NETyBVoRo6/oQrignu32IrNiHtEN0x/K3PFYYw0ndk6QYFNgAHffN 2XqErvnFiXOzRmSypk4PP+IBzcwrQ4xPJPKExIUn35c5FjxIYSQ5uzI9FUYZCoXf x5qlUcWQE+bYFEI5+e02GJ/8csLkvkAAw+GCj6MYLaal0Hy/UB1hyeMJhtO2lunu W1Znl+STA3lIeVHL9ntxJgGiz2khFJxZWuqPfN4rTT4IH//JeofJD+DkDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBo/i44l2z8pbfsT/7Ujy3hUQqHMB8GA1UdIwQY MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt NTYxMjliN2RjMDE4LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4 LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeWFU0XM kA5eut2mulTyAPWdvyQSGRLSNIUAf7bdrAVmvKjZhrGP1+jiUuWFXoO+v1yNuf9j g1/Qf7gtFQbQsvQwNXnBS6o8/5NBo33M7UtbbV2EaAwfmq24zexK5OaBegoNACX8 +PwlgR2zQlxgdD7LOUtAj/ja1G7t8u2g3xIE1eCWP2lCxqS6tSLnG35np5ku7ITb Gwutv4PToM/pIzwz4ifmMQrHkuDRbb5ZGDqzDWgyM42jgMv/jFrsbYRfuDje4v1r Kf0L+bteYIP6VyJA2bDXQd+ExpxioSJn6r0P0oOUDZ6lul/T8ivFHbHnAflKweYR 99SpgEqJkmOKNA== -----END CERTIFICATE-----Generated at Mon Dec 29 01:50:12 2025 by rpki-client