This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft File: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json) Hash identifier: SDVi8qxwpDZ+VdvGCg8gX+pyOZ7NQVJIffJ7hwIoA+4= Subject key identifier: 22:A1:C7:83:73:FB:99:BA:05:A5:48:97:43:C2:DA:49:84:24:1F:44 Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b Certificate serial: 019B3D90C31FAC95C740252274AC9A576F05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft Manifest number: 07AF Signing time: Sat 20 Dec 2025 21:00:55 +0000 Manifest this update: Sat 20 Dec 2025 21:00:55 +0000 Manifest next update: Sun 21 Dec 2025 21:00:55 +0000 Files and hashes: 1: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: WZUTzBVznnxqIc0rpfmVbh+5UTYX0NBVXuPcjSr6ZNk=) 2: pEP-pQhZiYbw0SOD31dKWiKIqmI.roa (hash: CfAhs6liLNKygVMpweyGMUtkUgPvkHCadlR7GSV9YRQ=) 3: ytXklMT7Qvg5G08MtY8lphgvXaw.roa (hash: r4Q3NQ10FfDyt/oO/SAMKogjYuHKvOwUOktQVJptRLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:c3:1f:ac:95:c7:40:25:22:74:ac:9a:57:6f:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b Validity Not Before: Dec 20 21:00:55 2025 GMT Not After : Dec 21 21:00:55 2025 GMT Subject: CN=22a1c78373fb99ba05a5489743c2da4984241f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:97:8a:6f:5e:17:7d:30:03:fd:c5:fa:34:06: 4a:e2:89:27:80:5b:43:e0:80:21:6f:e8:22:10:0d: 78:5a:66:ee:12:2e:da:e7:ab:f1:ab:3d:f2:0c:2d: 61:d7:f3:0c:95:f1:d2:db:1d:05:c2:f4:b9:36:0d: 76:96:fb:89:ce:21:54:7c:ec:27:91:1c:fd:bc:09: 18:44:2a:85:15:ac:11:57:ee:62:35:e6:02:4b:84: 39:c6:83:d7:8d:4a:e5:4c:88:7d:66:87:90:ae:1f: 4d:32:c8:5a:e3:ee:4d:9b:80:25:24:63:25:7b:1d: a9:43:f8:ca:9b:b6:36:37:79:61:7b:76:22:73:c0: 7f:b3:40:bd:2d:7f:58:08:18:b1:9a:c8:1b:ad:eb: a7:6c:c5:da:16:c3:50:b1:dd:52:52:6c:6a:64:96: a6:df:19:42:71:22:c8:b2:ed:14:65:a6:01:8d:17: 51:2c:b3:d1:43:67:cb:5a:44:fe:f8:25:bc:6d:1a: 36:88:c4:04:d1:48:d5:fc:34:c4:f5:56:27:16:5b: 13:ff:e6:e4:ac:3e:64:83:6b:44:e1:c0:77:8a:61: 95:10:2d:47:e2:05:80:ef:2a:ed:76:17:54:0f:b1: 36:01:2b:54:d9:df:d2:ad:eb:56:d5:9b:d0:ba:4f: e2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A1:C7:83:73:FB:99:BA:05:A5:48:97:43:C2:DA:49:84:24:1F:44 X509v3 Authority Key Identifier: keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ee:b1:84:4d:ba:12:0b:c9:0b:fd:5f:2b:9e:55:ff:e1:17: 52:20:96:64:9b:1d:8c:c1:9f:d8:4b:f4:e7:fc:d4:3a:41:41: 22:65:33:6c:57:29:f3:52:8e:ed:41:06:1b:a4:d8:0a:34:a2: a7:b4:20:6e:ae:5c:d9:be:7c:4b:a0:1d:e3:b3:7e:5d:f1:8a: c8:ee:c4:7b:c7:07:c6:e8:7b:5e:51:0c:e8:71:9d:91:53:62: 08:98:70:d2:03:a8:1f:5a:7e:bf:8f:cd:e9:62:b7:8c:1b:ab: ea:c8:60:62:9c:b8:1c:54:47:4e:7d:ee:ac:1a:f5:9e:8f:8d: 7f:91:e3:2f:10:9d:79:1f:9b:1f:05:73:19:a9:c8:99:c5:04: 6c:0a:4b:5b:97:03:23:0c:d7:15:f9:bf:cf:48:82:b7:2a:af: cd:04:62:87:38:60:8b:83:cf:14:ab:9c:7d:72:ca:68:13:07: b4:36:59:6e:5b:f3:59:cf:63:ff:85:7c:17:c7:b7:a5:91:c4: 1d:6d:70:80:01:a0:e3:2a:bf:93:ec:58:b6:c2:b8:26:c7:0c: 1a:bc:45:c9:75:ce:98:49:eb:67:4a:d3:75:2b:78:ab:2e:08: d2:d7:36:eb:fc:80:b3:fb:c3:0e:6d:ee:6b:a3:05:15:9c:d8: bd:e8:c1:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kMMfrJXHQCUidKyaV28FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzNlNmNiMmViMDJmY2M3NDJiYWY5MWFiODY1YzliMjBk NjQ4NGIwHhcNMjUxMjIwMjEwMDU1WhcNMjUxMjIxMjEwMDU1WjAzMTEwLwYDVQQD EygyMmExYzc4MzczZmI5OWJhMDVhNTQ4OTc0M2MyZGE0OTg0MjQxZjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJeKb14XfTAD/cX6NAZK4okngFtD 4IAhb+giEA14WmbuEi7a56vxqz3yDC1h1/MMlfHS2x0FwvS5Ng12lvuJziFUfOwn kRz9vAkYRCqFFawRV+5iNeYCS4Q5xoPXjUrlTIh9ZoeQrh9NMsha4+5Nm4AlJGMl ex2pQ/jKm7Y2N3lhe3Yic8B/s0C9LX9YCBixmsgbreunbMXaFsNQsd1SUmxqZJam 3xlCcSLIsu0UZaYBjRdRLLPRQ2fLWkT++CW8bRo2iMQE0UjV/DTE9VYnFlsT/+bk rD5kg2tE4cB3imGVEC1H4gWA7yrtdhdUD7E2AStU2d/SretW1ZvQuk/ibwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKhx4Nz+5m6BaVIl0PC2kmEJB9EMB8GA1UdIwQY MBaAFGvD5ssusC/MdCuvkauGXJsg1khLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mNWU0NDAtMTAwZi00OTMzLWFhYmYt MTEwOThhYTJlYmMzLzEvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mNWU0NDAtMTAwZi00OTMzLWFhYmYtMTEwOThhYTJlYmMz LzEvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALO6xhE26 EgvJC/1fK55V/+EXUiCWZJsdjMGf2Ev05/zUOkFBImUzbFcp81KO7UEGG6TYCjSi p7Qgbq5c2b58S6Ad47N+XfGKyO7Ee8cHxuh7XlEM6HGdkVNiCJhw0gOoH1p+v4/N 6WK3jBur6shgYpy4HFRHTn3urBr1no+Nf5HjLxCdeR+bHwVzGanImcUEbApLW5cD IwzXFfm/z0iCtyqvzQRihzhgi4PPFKucfXLKaBMHtDZZblvzWc9j/4V8F8e3pZHE HW1wgAGg4yq/k+xYtsK4JscMGrxFyXXOmEnrZ0rTdSt4qy4I0tc26/yAs/vDDm3u a6MFFZzYvejBow== -----END CERTIFICATE-----Generated at Sun Dec 21 02:27:44 2025 by rpki-client