This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft File: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft (raw, json) Hash identifier: aegteSYkTlpqA42FGkOIquAmyzRX2b3pGIyham1oAoM= Subject key identifier: 88:63:9C:9D:72:79:58:30:07:E9:4E:76:86:3C:8C:4B:C4:90:47:D9 Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b Certificate serial: 019B5C768F0325544C8696C51C72AAC072ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft Manifest number: 07BF Signing time: Fri 26 Dec 2025 21:00:32 +0000 Manifest this update: Fri 26 Dec 2025 21:00:32 +0000 Manifest next update: Sat 27 Dec 2025 21:00:32 +0000 Files and hashes: 1: a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl (hash: zb5uz4476H+R6Mir8OZ4YYIN2RsbX9wpTeLAHlSTZ8A=) 2: pEP-pQhZiYbw0SOD31dKWiKIqmI.roa (hash: CfAhs6liLNKygVMpweyGMUtkUgPvkHCadlR7GSV9YRQ=) 3: ytXklMT7Qvg5G08MtY8lphgvXaw.roa (hash: r4Q3NQ10FfDyt/oO/SAMKogjYuHKvOwUOktQVJptRLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:76:8f:03:25:54:4c:86:96:c5:1c:72:aa:c0:72:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b Validity Not Before: Dec 26 21:00:32 2025 GMT Not After : Dec 27 21:00:32 2025 GMT Subject: CN=88639c9d7279583007e94e76863c8c4bc49047d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:00:39:02:84:87:1f:84:fd:5e:c6:df:53:23: 4a:1e:21:40:f3:e0:26:45:b3:f1:5c:98:4f:58:6e: e6:ad:af:ef:86:35:96:e7:eb:25:5b:1a:9d:f7:81: 94:df:91:0e:5e:97:7c:e7:51:0c:6b:bf:8e:1f:11: 25:b7:42:6c:36:41:29:ab:5f:bf:a0:5a:c2:87:e4: bb:42:f8:d4:68:66:16:21:2b:85:ce:83:64:86:43: d7:cb:79:94:0a:27:a3:e5:cf:d1:8f:d6:b2:b1:51: 0f:cd:58:60:b1:49:7a:df:16:1a:48:9a:16:2e:82: b5:6a:e5:31:4c:1d:84:e2:5e:9b:33:22:e1:65:77: f0:65:03:c6:fe:ed:b2:7a:da:a1:84:6a:c7:30:99: 26:25:92:e0:98:48:4f:0a:fb:cc:d4:04:58:a4:ae: 02:91:b7:f9:70:69:7a:42:b9:bf:0f:82:9e:dd:74: 06:b1:72:c2:8a:1c:bf:75:f2:5b:a6:0e:dc:f1:fd: 29:6c:f7:15:66:30:57:b4:7b:c5:28:af:d7:d8:44: 4c:54:ea:b0:ea:6e:07:d9:bb:20:35:5f:71:0d:a3: 3b:29:23:1c:c2:f9:59:b0:d2:81:61:70:01:e7:24: 32:28:9d:f0:c1:f1:ca:9c:00:c3:64:3a:a8:dc:12: 6f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:63:9C:9D:72:79:58:30:07:E9:4E:76:86:3C:8C:4B:C4:90:47:D9 X509v3 Authority Key Identifier: keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:1a:92:f2:da:61:7c:d5:fe:3e:91:f9:f2:c9:fc:36:d2:c3: f3:bd:be:fc:70:6c:54:24:68:ae:4e:26:cb:3e:60:e3:3d:a4: f7:1b:19:97:d6:3c:bc:eb:81:27:5e:3d:06:e0:99:87:eb:dd: 7c:fa:6d:81:38:89:88:08:e2:f8:50:22:1c:da:16:19:25:d9: 4a:17:11:0f:29:7d:eb:b9:bf:00:91:83:e4:e0:70:c6:e8:2e: fc:fb:72:a8:4b:88:67:fb:d7:0a:db:2b:67:88:4f:82:40:2b: 88:74:30:98:c0:1a:9c:c5:23:f2:b0:df:64:04:fa:0e:b1:74: 46:b3:e8:5c:46:4b:ba:d5:86:dc:a8:6e:8f:44:fc:53:2b:f8: 07:cc:51:f0:46:b8:aa:95:f1:d2:89:b3:fe:90:8b:7b:c1:11: 4c:71:f6:43:57:8d:25:49:c9:6e:48:b2:15:c5:3a:ce:62:b1: b0:42:61:04:9e:bf:55:ac:c4:3f:68:72:f6:c8:c1:c3:97:77: a1:d0:a4:a6:da:9d:bd:3b:4e:ef:bc:04:30:fb:88:0b:3e:bd: bd:21:7f:51:5a:6e:f2:b8:3d:dc:62:91:12:19:ef:92:e8:d0: 3e:d3:5d:90:d7:89:f4:d8:91:83:43:30:a4:5e:82:b0:b6:98: cf:f8:e3:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcdo8DJVRMhpbFHHKqwHLtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzNlNmNiMmViMDJmY2M3NDJiYWY5MWFiODY1YzliMjBk NjQ4NGIwHhcNMjUxMjI2MjEwMDMyWhcNMjUxMjI3MjEwMDMyWjAzMTEwLwYDVQQD Eyg4ODYzOWM5ZDcyNzk1ODMwMDdlOTRlNzY4NjNjOGM0YmM0OTA0N2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgA5AoSHH4T9XsbfUyNKHiFA8+Am RbPxXJhPWG7mra/vhjWW5+slWxqd94GU35EOXpd851EMa7+OHxElt0JsNkEpq1+/ oFrCh+S7QvjUaGYWISuFzoNkhkPXy3mUCiej5c/Rj9aysVEPzVhgsUl63xYaSJoW LoK1auUxTB2E4l6bMyLhZXfwZQPG/u2yetqhhGrHMJkmJZLgmEhPCvvM1ARYpK4C kbf5cGl6Qrm/D4Ke3XQGsXLCihy/dfJbpg7c8f0pbPcVZjBXtHvFKK/X2ERMVOqw 6m4H2bsgNV9xDaM7KSMcwvlZsNKBYXAB5yQyKJ3wwfHKnADDZDqo3BJvKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhjnJ1yeVgwB+lOdoY8jEvEkEfZMB8GA1UdIwQY MBaAFGvD5ssusC/MdCuvkauGXJsg1khLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mNWU0NDAtMTAwZi00OTMzLWFhYmYt MTEwOThhYTJlYmMzLzEvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mNWU0NDAtMTAwZi00OTMzLWFhYmYtMTEwOThhYTJlYmMz LzEvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqBqS8tph fNX+PpH58sn8NtLD872+/HBsVCRork4myz5g4z2k9xsZl9Y8vOuBJ149BuCZh+vd fPptgTiJiAji+FAiHNoWGSXZShcRDyl967m/AJGD5OBwxugu/PtyqEuIZ/vXCtsr Z4hPgkAriHQwmMAanMUj8rDfZAT6DrF0RrPoXEZLutWG3Khuj0T8Uyv4B8xR8Ea4 qpXx0omz/pCLe8ERTHH2Q1eNJUnJbkiyFcU6zmKxsEJhBJ6/VazEP2hy9sjBw5d3 odCkptqdvTtO77wEMPuICz69vSF/UVpu8rg93GKREhnvkujQPtNdkNeJ9NiRg0Mw pF6CsLaYz/jj7g== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:50 2025 by rpki-client