This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft File: 8G3inpNW30RwfIOW2RjmsokSnEo.mft (raw, json) Hash identifier: bcfOM/sw/RjRuy4+gT4G0w1g/BcMJdTEAam4TeHaw74= Subject key identifier: E7:6E:FC:55:C3:CE:79:25:59:10:A7:58:67:1D:7D:97:9B:71:DA:2F Authority key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A Certificate issuer: /CN=f06de29e9356df44707c8396d918e6b289129c4a Certificate serial: 019B33B25839CDF16445C291802E00171B3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft Manifest number: 02E6 Signing time: Thu 18 Dec 2025 23:01:24 +0000 Manifest this update: Thu 18 Dec 2025 23:01:24 +0000 Manifest next update: Fri 19 Dec 2025 23:01:24 +0000 Files and hashes: 1: 8G3inpNW30RwfIOW2RjmsokSnEo.crl (hash: 6I6e11dQq1ezkPsBG29FgU5d8CKciMg9hf7qjFZ9gPw=) 2: FruHS8sKA0UVPBPUKiJYlzj46rI.roa (hash: If8vnhAP47c8P1zX/kOfX6rctIeesg8CbkDyipSuox4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:58:39:cd:f1:64:45:c2:91:80:2e:00:17:1b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f06de29e9356df44707c8396d918e6b289129c4a Validity Not Before: Dec 18 23:01:24 2025 GMT Not After : Dec 19 23:01:24 2025 GMT Subject: CN=e76efc55c3ce79255910a758671d7d979b71da2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:3e:a2:2c:81:3a:59:41:b0:57:6e:e3:ae: 86:f0:f5:09:a8:5d:34:ef:70:5c:09:fe:18:05:c8: 37:d5:13:56:c0:c3:4e:1a:c5:1c:af:9a:92:ac:92: cf:1e:c2:67:42:92:a3:fb:98:fd:5e:31:a9:3e:2b: 19:5d:08:f0:c8:d1:35:63:ed:c4:c6:e3:44:b2:22: 85:d2:24:3d:96:fb:ca:22:b1:a5:ce:31:d0:a9:91: 3a:a0:df:10:3d:10:41:0e:3a:97:94:c2:f8:93:db: 14:01:3d:eb:0b:5b:9b:18:e8:e6:1d:00:d3:72:82: de:22:12:06:17:12:8f:42:01:e2:7a:91:42:cd:54: 74:87:ff:44:c8:4b:09:9f:25:6e:32:16:be:be:5b: 5d:d3:b0:ff:17:bf:b2:6a:c9:f5:79:6e:06:76:ba: ac:a6:be:50:74:31:03:ea:96:08:87:47:99:9f:0e: 46:84:01:1d:4e:db:cb:fd:82:50:55:73:de:ed:08: f3:dd:9d:22:66:17:6e:dd:35:7c:e7:39:41:ae:d5: 5d:0b:8d:02:28:20:3c:bb:3f:26:e4:bc:3d:69:46: a9:a1:b5:e3:00:00:68:54:54:56:e8:cb:de:45:7b: 37:6a:00:da:5f:6c:3e:5b:a8:df:61:e3:08:85:b3: ca:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6E:FC:55:C3:CE:79:25:59:10:A7:58:67:1D:7D:97:9B:71:DA:2F X509v3 Authority Key Identifier: keyid:F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:19:07:13:8d:d0:56:49:09:c0:f8:f6:44:96:3b:cc:ab:78: e8:70:9c:bf:d8:64:14:a3:31:f6:4f:32:b4:45:3b:9f:40:e2: 42:d0:48:73:b3:7b:63:c8:c2:df:14:64:42:6f:df:7a:50:ff: de:f4:4a:ff:a1:69:0a:3b:f0:8e:86:9a:6a:9f:85:55:c0:17: e9:94:40:83:b0:76:e6:64:6b:01:83:da:be:c0:c1:33:49:6e: d9:03:db:f6:a8:af:7f:10:35:90:9b:b3:19:8e:0c:7b:39:60: 43:bd:22:04:da:49:84:cc:87:11:e6:ff:44:72:8b:25:23:3e: e7:1b:8e:77:0b:41:81:e5:ce:e5:26:e3:36:00:ad:35:95:eb: f5:a8:02:ca:63:f0:11:e4:54:11:e6:82:e0:ad:db:dc:9a:c4: 57:05:b6:ee:03:02:37:8f:9c:cd:5f:ae:b6:48:0d:a4:d0:62: 3d:fe:fb:00:fb:e7:14:2a:6e:a6:22:89:ea:c3:a8:cf:b2:a2: 46:27:5e:9c:9e:00:1c:eb:a8:09:4e:55:57:fb:7d:e5:63:3c: 68:ac:9e:f4:50:e7:a0:5a:9c:02:58:2f:bd:43:c8:ea:72:11: 8f:52:45:a7:62:d8:7e:d3:e8:5c:38:ae:6d:d6:b5:a1:09:21: e9:2d:ef:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszslg5zfFkRcKRgC4AFxs7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNmRlMjllOTM1NmRmNDQ3MDdjODM5NmQ5MThlNmIyODkx MjljNGEwHhcNMjUxMjE4MjMwMTI0WhcNMjUxMjE5MjMwMTI0WjAzMTEwLwYDVQQD EyhlNzZlZmM1NWMzY2U3OTI1NTkxMGE3NTg2NzFkN2Q5NzliNzFkYTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugM+oiyBOllBsFdu466G8PUJqF00 73BcCf4YBcg31RNWwMNOGsUcr5qSrJLPHsJnQpKj+5j9XjGpPisZXQjwyNE1Y+3E xuNEsiKF0iQ9lvvKIrGlzjHQqZE6oN8QPRBBDjqXlML4k9sUAT3rC1ubGOjmHQDT coLeIhIGFxKPQgHiepFCzVR0h/9EyEsJnyVuMha+vltd07D/F7+yasn1eW4Gdrqs pr5QdDED6pYIh0eZnw5GhAEdTtvL/YJQVXPe7Qjz3Z0iZhdu3TV85zlBrtVdC40C KCA8uz8m5Lw9aUapobXjAABoVFRW6MveRXs3agDaX2w+W6jfYeMIhbPKLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdu/FXDznklWRCnWGcdfZebcdovMB8GA1UdIwQY MBaAFPBt4p6TVt9EcHyDltkY5rKJEpxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lNDRkNTgtMTVkNS00OGM3LWJlMjEt ZjgxNmQzYmU0MDEyLzEvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lNDRkNTgtMTVkNS00OGM3LWJlMjEtZjgxNmQzYmU0MDEy LzEvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxkHE43Q VkkJwPj2RJY7zKt46HCcv9hkFKMx9k8ytEU7n0DiQtBIc7N7Y8jC3xRkQm/felD/ 3vRK/6FpCjvwjoaaap+FVcAX6ZRAg7B25mRrAYPavsDBM0lu2QPb9qivfxA1kJuz GY4MezlgQ70iBNpJhMyHEeb/RHKLJSM+5xuOdwtBgeXO5SbjNgCtNZXr9agCymPw EeRUEeaC4K3b3JrEVwW27gMCN4+czV+utkgNpNBiPf77APvnFCpupiKJ6sOoz7Ki RidenJ4AHOuoCU5VV/t95WM8aKye9FDnoFqcAlgvvUPI6nIRj1JFp2LYftPoXDiu bda1oQkh6S3veA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:52:56 2025 by rpki-client