This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft File: 8uKBD0mzb91kHDJr0d5OQtEosEY.mft (raw, json) Hash identifier: EUW1jsu/pSjYIxCwekV4G5sOmUKS6zdjzgtrCocJcEg= Subject key identifier: 46:53:9C:DD:24:2C:63:40:C0:CB:FE:B8:DD:DA:6B:28:F1:64:CF:67 Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Certificate serial: 019B3B6B847AAB073C350CFDE8C73FB33C72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft Manifest number: 179B Signing time: Sat 20 Dec 2025 11:01:00 +0000 Manifest this update: Sat 20 Dec 2025 11:01:00 +0000 Manifest next update: Sun 21 Dec 2025 11:01:00 +0000 Files and hashes: 1: 8uKBD0mzb91kHDJr0d5OQtEosEY.crl (hash: KDamXjU/dIeEQFiQA7Rz8fzC4lDTwWutO+E+9SYVrC8=) 2: LRM9_QXJ86lLn_T4yr6pQZsd-6U.roa (hash: O97zVnycTINnlYntMUnMI33GyBSK5H4R2ai1eQR3zfs=) 3: Lfi2kFGwKCjTFh-UgGwG9fE3y28.roa (hash: vsaKPg/3Dci9H1drLTZRN5KQySI72yp3XcQ7k6Dlcjo=) 4: cSIsSraiS7nIkZaNHDPeLhmfWzw.roa (hash: 6RDnXeZI7Aggjdy420rt58R6tW8oEB+ao9gxbA9zhLY=) 5: mgsVdxyrFBjubnGQwn9ZD0Aa8KQ.roa (hash: WUYiTP5VTCdXuJgIU+Sgp6znUUnvoPyUsuU1tYAduHA=) 6: tsKs3V1yaPsaIU0A6Ecds5AAehw.roa (hash: 3OwpSQsxFg7VVIA27B3b/Nz+rgtO4rMjVai/LlIFcFg=) 7: wodM1-EUQJUVgPu2FeLNzhcjNAQ.roa (hash: oqpoLkjU7X7RENp32UMSCTEvk2YhpXGRDxHAfJ9Hiks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:84:7a:ab:07:3c:35:0c:fd:e8:c7:3f:b3:3c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Validity Not Before: Dec 20 11:01:00 2025 GMT Not After : Dec 21 11:01:00 2025 GMT Subject: CN=46539cdd242c6340c0cbfeb8ddda6b28f164cf67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:71:7c:8a:07:30:8e:dd:a2:f9:86:17:cb:5c: 08:26:a6:39:74:42:58:3a:51:9b:96:ce:af:46:26: 7b:69:68:56:53:ae:b4:8b:45:23:86:16:50:b2:f8: 82:5f:79:05:fc:b9:7a:9e:7e:49:10:97:57:7d:3d: 85:10:f1:28:60:f0:db:da:4f:ac:f9:ad:d1:f6:76: bf:d5:88:9f:cd:1c:99:30:8a:d0:8c:15:2b:57:d9: 43:ec:be:17:be:b7:5d:d8:a5:c0:0d:75:32:6c:0f: d6:08:09:71:a0:d6:91:e5:0b:d2:ed:cf:ff:cf:16: ee:28:3d:41:3a:64:37:ee:ff:d2:68:ff:b2:00:7a: 47:45:5a:70:73:57:16:aa:8a:60:0b:ce:45:b4:db: a5:2a:63:30:41:3f:5a:4b:b7:c9:6f:d2:ad:f0:d3: b9:e0:ef:9c:8d:47:ff:76:5b:bf:40:76:42:e9:42: 5d:04:f0:7b:ba:d8:1d:8f:35:3c:1a:27:79:43:36: e3:a5:6f:ad:47:6b:06:0b:69:82:52:de:d4:e0:3b: 02:ad:d6:64:b0:63:b6:39:46:31:3a:af:f1:60:0e: a9:d4:0c:8a:ec:b5:2b:1d:56:98:9e:82:05:26:cd: c1:c9:f7:41:7a:58:ad:d2:2e:18:a3:17:4f:f3:18: 85:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:53:9C:DD:24:2C:63:40:C0:CB:FE:B8:DD:DA:6B:28:F1:64:CF:67 X509v3 Authority Key Identifier: keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ba:68:49:fc:65:5d:0d:59:2b:74:bf:62:9e:ad:72:a1:09: 18:96:55:de:d8:74:b8:e8:0d:02:5a:b1:0f:c5:87:65:d9:dd: 38:22:f1:8f:7a:a7:2a:13:24:02:c3:49:c1:9b:19:8d:ba:92: 2e:40:b1:6f:ce:72:d0:1a:ef:3b:bd:35:05:4a:10:d7:0d:9c: f7:09:ef:64:91:76:5c:f0:6d:99:45:4c:8c:ad:40:ef:42:bc: 0b:e9:50:1a:b1:7e:d3:bc:1c:a7:46:bf:91:e4:3a:54:1a:34: 7a:ba:0f:15:23:c7:bf:ea:ba:8c:85:f7:fc:16:7a:79:e5:15: 6c:31:56:54:1c:df:f5:8c:4f:9a:1d:a7:ca:3b:b6:12:e2:cd: 15:d7:a4:91:e7:70:8f:4f:af:8e:fe:ab:e7:51:d2:b1:38:a5: 07:4f:1f:d7:04:68:86:d6:ee:79:b3:6f:20:e5:ad:39:b3:0b: 86:04:ec:0a:4c:97:c6:33:72:9c:cd:f9:0b:6f:16:28:a8:64: 99:65:22:83:16:32:27:fe:ac:a8:39:e4:54:89:d2:59:46:4a: 60:2d:51:07:14:04:85:f7:fe:e2:6a:e6:06:ac:df:31:26:5c: 82:aa:97:de:17:4f:fa:1d:61:28:7d:3b:72:07:a2:55:b8:98: 56:aa:93:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a4R6qwc8NQz96Mc/szxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTI4MTBmNDliMzZmZGQ2NDFjMzI2YmQxZGU0ZTQyZDEy OGIwNDYwHhcNMjUxMjIwMTEwMTAwWhcNMjUxMjIxMTEwMTAwWjAzMTEwLwYDVQQD Eyg0NjUzOWNkZDI0MmM2MzQwYzBjYmZlYjhkZGRhNmIyOGYxNjRjZjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnF8igcwjt2i+YYXy1wIJqY5dEJY OlGbls6vRiZ7aWhWU660i0UjhhZQsviCX3kF/Ll6nn5JEJdXfT2FEPEoYPDb2k+s +a3R9na/1YifzRyZMIrQjBUrV9lD7L4Xvrdd2KXADXUybA/WCAlxoNaR5QvS7c// zxbuKD1BOmQ37v/SaP+yAHpHRVpwc1cWqopgC85FtNulKmMwQT9aS7fJb9Kt8NO5 4O+cjUf/dlu/QHZC6UJdBPB7utgdjzU8Gid5QzbjpW+tR2sGC2mCUt7U4DsCrdZk sGO2OUYxOq/xYA6p1AyK7LUrHVaYnoIFJs3ByfdBelit0i4YoxdP8xiFdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZTnN0kLGNAwMv+uN3aayjxZM9nMB8GA1UdIwQY MBaAFPLigQ9Js2/dZBwya9HeTkLRKLBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAt NTBkMmI3MGJjZjMxLzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAtNTBkMmI3MGJjZjMx LzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLpoSfxl XQ1ZK3S/Yp6tcqEJGJZV3th0uOgNAlqxD8WHZdndOCLxj3qnKhMkAsNJwZsZjbqS LkCxb85y0BrvO701BUoQ1w2c9wnvZJF2XPBtmUVMjK1A70K8C+lQGrF+07wcp0a/ keQ6VBo0eroPFSPHv+q6jIX3/BZ6eeUVbDFWVBzf9YxPmh2nyju2EuLNFdekkedw j0+vjv6r51HSsTilB08f1wRohtbuebNvIOWtObMLhgTsCkyXxjNynM35C28WKKhk mWUigxYyJ/6sqDnkVInSWUZKYC1RBxQEhff+4mrmBqzfMSZcgqqX3hdP+h1hKH07 cgeiVbiYVqqTzA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:06:02 2025 by rpki-client