This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json) Hash identifier: FBExjYP400gL6zcz1TYFwM1qFIKRb67LHVP1nGTB+pw= Subject key identifier: 6D:9E:EA:A9:EA:AE:69:42:A5:64:35:79:AF:52:4C:4B:90:9D:38:DB Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a Certificate serial: 019B27ADBB6631994309481379E8B02B66B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft Manifest number: 0BD6 Signing time: Tue 16 Dec 2025 15:00:55 +0000 Manifest this update: Tue 16 Dec 2025 15:00:55 +0000 Manifest next update: Wed 17 Dec 2025 15:00:55 +0000 Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: YLJayMVA1yYB1xURFwLYeRCTIMTQ1sf0qscMeMJh4WM=) 2: 9fWa2lfLkLJ8sCmivN6TQyBLwDA.roa (hash: IPb2Fry6AFROnpqPDxpsLGmfQRyiCcADkUuNtSOH1vw=) 3: M0hmVP_O7pmzGC1lZ8auVtUv08M.roa (hash: O6keKWXCa23CBnMYQ5j2NdMEa5h/R6dRjRYYfD56tpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ad:bb:66:31:99:43:09:48:13:79:e8:b0:2b:66:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a Validity Not Before: Dec 16 15:00:55 2025 GMT Not After : Dec 17 15:00:55 2025 GMT Subject: CN=6d9eeaa9eaae6942a5643579af524c4b909d38db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:78:6a:c5:2b:96:aa:f6:c3:66:79:58:93:3e: ac:e3:cd:1b:f4:e6:61:c3:f4:a1:26:08:75:94:12: 93:38:71:ca:47:1b:1f:2b:90:38:a8:a5:41:e3:9b: 51:13:52:1f:0a:72:25:d4:b0:ee:f3:47:7c:ec:99: ad:6e:fd:01:a7:4d:72:46:65:ec:81:5b:10:78:87: 78:25:ed:87:5f:b6:2a:7c:40:1a:73:dc:03:53:ba: 34:27:10:f7:cd:f6:d0:4d:06:9e:8f:33:84:de:d7: 95:0c:42:47:2f:19:dc:dd:62:24:11:b6:82:02:cd: 12:bc:cc:ed:5d:7c:2a:19:39:0e:aa:84:dd:3d:17: 84:26:41:15:89:2e:90:f5:45:4c:0a:f2:73:1d:3f: 74:74:2e:5a:7f:f0:41:1a:1d:3d:ed:89:00:b5:c8: f1:5e:04:18:52:95:1f:76:05:af:17:71:86:41:07: 44:4a:ad:ba:4f:71:43:0f:71:72:87:6a:03:97:82: 18:a5:b6:3e:d6:5c:a7:59:c4:fa:3c:d6:e3:7e:22: b9:e6:c8:10:e8:8d:06:11:7b:48:af:d4:55:be:8f: 86:35:9b:4b:a2:cc:f6:6d:65:87:38:74:55:35:ff: 88:9c:97:01:00:db:b3:fb:27:0f:5d:4b:4e:42:3a: 88:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9E:EA:A9:EA:AE:69:42:A5:64:35:79:AF:52:4C:4B:90:9D:38:DB X509v3 Authority Key Identifier: keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:63:64:e9:fb:f2:ed:ca:43:d5:98:4a:f2:33:67:27:89:44: 1d:12:3d:fd:42:0a:e9:c6:f2:5c:70:60:7e:5e:45:a5:5e:28: 77:e6:bc:30:a6:de:f8:42:10:56:56:aa:65:07:e8:03:89:a1: 7c:44:23:72:14:6f:74:de:71:5c:b1:76:f3:f3:1c:95:f9:e3: 04:94:29:c8:6d:30:f5:40:c1:82:4b:89:90:c7:69:af:7f:3d: a5:a1:fb:dd:ef:14:b9:e4:5b:fc:fd:1f:2a:be:f6:d1:fc:5b: 0e:95:3a:f6:b6:1a:c0:b7:33:a3:29:78:e0:de:ee:51:f7:a7: 59:61:80:35:1b:3e:67:75:e9:86:79:ee:18:0e:db:d3:f2:19: 65:99:52:de:08:87:25:1f:e7:51:b7:0d:f0:ac:c2:b9:76:03: 2f:08:6c:d6:9e:19:ab:98:ee:0e:98:e5:17:fd:27:96:0e:96: b2:92:09:2d:78:c5:a8:45:9c:89:47:13:bc:18:98:d4:16:cc: 99:5b:d6:8b:85:44:6d:94:e0:fd:cc:1f:e3:30:d2:9a:d4:3f: ac:75:90:f1:bc:90:9b:31:b7:02:ef:2c:a7:fe:00:fa:b8:3b: ef:e1:82:aa:d7:2f:dc:af:4f:89:49:bb:f3:69:d7:a2:31:5c: 73:e2:fe:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrbtmMZlDCUgTeeiwK2a3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGQyNzg0ODVmZmFlYTc5ZTkxMGEyNjI1MzNhODBiNWFi OTFjOGEwHhcNMjUxMjE2MTUwMDU1WhcNMjUxMjE3MTUwMDU1WjAzMTEwLwYDVQQD Eyg2ZDllZWFhOWVhYWU2OTQyYTU2NDM1NzlhZjUyNGM0YjkwOWQzOGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunhqxSuWqvbDZnlYkz6s480b9OZh w/ShJgh1lBKTOHHKRxsfK5A4qKVB45tRE1IfCnIl1LDu80d87Jmtbv0Bp01yRmXs gVsQeId4Je2HX7YqfEAac9wDU7o0JxD3zfbQTQaejzOE3teVDEJHLxnc3WIkEbaC As0SvMztXXwqGTkOqoTdPReEJkEViS6Q9UVMCvJzHT90dC5af/BBGh097YkAtcjx XgQYUpUfdgWvF3GGQQdESq26T3FDD3Fyh2oDl4IYpbY+1lynWcT6PNbjfiK55sgQ 6I0GEXtIr9RVvo+GNZtLosz2bWWHOHRVNf+InJcBANuz+ycPXUtOQjqIPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2e6qnqrmlCpWQ1ea9STEuQnTjbMB8GA1UdIwQY MBaAFPBNJ4SF/66nnpEKJiUzqAtauRyKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hYTc0MjYtNzExZC00ZjNlLThkZjkt NWMwZTMxNmQyOGI4LzEvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9hYTc0MjYtNzExZC00ZjNlLThkZjktNWMwZTMxNmQyOGI4 LzEvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGNk6fvy 7cpD1ZhK8jNnJ4lEHRI9/UIK6cbyXHBgfl5FpV4od+a8MKbe+EIQVlaqZQfoA4mh fEQjchRvdN5xXLF28/MclfnjBJQpyG0w9UDBgkuJkMdpr389paH73e8UueRb/P0f Kr720fxbDpU69rYawLczoyl44N7uUfenWWGANRs+Z3XphnnuGA7b0/IZZZlS3giH JR/nUbcN8KzCuXYDLwhs1p4Zq5juDpjlF/0nlg6WspIJLXjFqEWciUcTvBiY1BbM mVvWi4VEbZTg/cwf4zDSmtQ/rHWQ8byQmzG3Au8sp/4A+rg77+GCqtcv3K9PiUm7 82nXojFcc+L+kA== -----END CERTIFICATE-----Generated at Tue Dec 16 18:02:49 2025 by rpki-client