This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json) Hash identifier: a43P+BrXvgh5CfazIkEwgZE+r55IPJrtPPgg0CULc5I= Subject key identifier: C5:58:95:60:87:68:BC:54:B1:A5:65:68:6F:B3:11:37:33:7C:D5:FD Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e Certificate serial: 019B0E925B75EBD53A0D4C64760FFC1FC3A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft Manifest number: 0831 Signing time: Thu 11 Dec 2025 18:00:31 +0000 Manifest this update: Thu 11 Dec 2025 18:00:31 +0000 Manifest next update: Fri 12 Dec 2025 18:00:31 +0000 Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: qAsFc2PmFz5H23gqbpYB3EokIkU+6XnM0aSs8PJTg6E=) 2: NoirTMocfMUxRX4SSF3NnN1MXMg.roa (hash: k1dgXUxG201nPT5HWgsPlWuxupL/o/GsnkXTowkj8SY=) 3: kBL0NGTyltK_bUGqu0ZT8FN5oyY.roa (hash: RQ7q9e83VNSzPNBYQofT5w9K3HiXcrFugBatkkxu9/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:5b:75:eb:d5:3a:0d:4c:64:76:0f:fc:1f:c3:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e Validity Not Before: Dec 11 18:00:31 2025 GMT Not After : Dec 12 18:00:31 2025 GMT Subject: CN=c55895608768bc54b1a565686fb31137337cd5fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:87:b5:21:45:27:1c:54:62:34:1d:f1:2e:82: 24:5a:60:7f:db:c1:75:21:b3:a4:e2:f4:f4:78:a6: cb:b2:11:5d:57:66:fc:3d:d1:64:f9:7d:94:e0:08: 16:f7:f9:48:12:ff:e6:75:60:53:98:c3:c4:62:75: e9:79:8c:5b:44:88:3c:e7:72:37:36:50:9e:e6:6e: da:86:7f:89:6a:83:a1:fc:b2:4a:58:16:b6:72:37: fa:69:fb:be:54:c7:3c:dc:3c:de:ef:63:29:e0:c0: 71:c3:3c:15:3b:14:87:23:84:7a:77:4b:b0:a9:8a: 6c:20:db:44:22:2d:f8:27:22:2a:7e:0d:d3:47:bc: b9:5d:0b:77:1f:af:a0:93:01:dd:c4:34:88:16:35: 04:d2:24:ee:76:30:67:d8:d5:45:d0:e4:65:5d:81: 71:6a:96:12:0b:64:d7:e5:55:a4:b7:0e:f0:49:ef: d8:68:17:f7:f6:58:1f:b7:54:73:cc:0c:bf:15:08: 2a:51:3a:bb:87:a8:69:8e:54:1a:bf:48:50:2e:8a: db:5a:34:22:4a:be:ab:07:fc:21:f7:d4:06:3e:26: 90:c5:74:81:a6:a5:b7:a3:7b:30:0a:8a:ac:7d:91: 28:ed:2f:13:33:e9:dc:c5:e8:2d:3b:2a:bf:af:da: db:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:58:95:60:87:68:BC:54:B1:A5:65:68:6F:B3:11:37:33:7C:D5:FD X509v3 Authority Key Identifier: keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:cd:74:ad:2c:97:3e:16:a1:1a:2a:21:ec:6b:a6:e1:f0:46: 6f:95:e3:75:ca:04:06:f3:90:84:bf:39:8e:bb:a9:f0:81:1a: f8:8c:00:74:e3:d9:6f:7a:34:65:2e:4f:63:df:11:5f:b7:00: 62:ac:de:cf:9f:1b:12:4b:c5:cd:dc:1f:32:6b:84:6d:8d:58: ca:ea:bd:ec:b7:f5:b8:90:9d:94:0b:ad:be:8f:3a:f5:81:2b: e1:5c:c2:17:7f:52:8a:0c:e0:b8:c6:ad:25:97:87:20:96:80: 10:cf:f2:2d:f0:f9:4f:8c:e2:71:6b:8e:97:15:ec:cd:eb:0d: 00:af:5b:41:4a:5b:79:93:23:49:4e:54:5c:c1:55:7c:e4:7d: c0:64:37:f6:54:27:b9:62:cc:53:30:5a:ec:a3:e9:89:a4:9d: 28:34:95:a5:32:8d:9c:47:5d:49:6c:1d:5f:f7:e1:97:48:8e: 21:a1:ca:4d:55:bc:c0:90:84:92:3e:0e:1d:3d:45:89:83:20: a0:5f:c0:be:31:89:95:92:d3:63:c6:1c:98:dd:19:0a:5f:81: 76:5d:5d:5f:5d:0c:3f:15:b9:c7:a7:3f:f1:c6:63:16:e6:20: b4:8a:70:b9:ce:9b:50:d0:37:17:a2:7b:d8:1b:dc:81:d8:2c: d4:ce:c0:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOklt169U6DUxkdg/8H8OoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMWQxYzA1YWJkNzE0YzY3YzMyOTFlMDEwZDIxYzcwYTM1 ZGQ1N2UwHhcNMjUxMjExMTgwMDMxWhcNMjUxMjEyMTgwMDMxWjAzMTEwLwYDVQQD EyhjNTU4OTU2MDg3NjhiYzU0YjFhNTY1Njg2ZmIzMTEzNzMzN2NkNWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroe1IUUnHFRiNB3xLoIkWmB/28F1 IbOk4vT0eKbLshFdV2b8PdFk+X2U4AgW9/lIEv/mdWBTmMPEYnXpeYxbRIg853I3 NlCe5m7ahn+JaoOh/LJKWBa2cjf6afu+VMc83Dze72Mp4MBxwzwVOxSHI4R6d0uw qYpsINtEIi34JyIqfg3TR7y5XQt3H6+gkwHdxDSIFjUE0iTudjBn2NVF0ORlXYFx apYSC2TX5VWktw7wSe/YaBf39lgft1RzzAy/FQgqUTq7h6hpjlQav0hQLorbWjQi Sr6rB/wh99QGPiaQxXSBpqW3o3swCoqsfZEo7S8TM+ncxegtOyq/r9rb4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVYlWCHaLxUsaVlaG+zETczfNX9MB8GA1UdIwQY MBaAFPMdHAWr1xTGfDKR4BDSHHCjXdV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMt NTU1OWFjNDEwYWNlLzEvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMtNTU1OWFjNDEwYWNl LzEvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQM10rSyX PhahGioh7Gum4fBGb5XjdcoEBvOQhL85jrup8IEa+IwAdOPZb3o0ZS5PY98RX7cA Yqzez58bEkvFzdwfMmuEbY1Yyuq97Lf1uJCdlAutvo869YEr4VzCF39SigzguMat JZeHIJaAEM/yLfD5T4zicWuOlxXszesNAK9bQUpbeZMjSU5UXMFVfOR9wGQ39lQn uWLMUzBa7KPpiaSdKDSVpTKNnEddSWwdX/fhl0iOIaHKTVW8wJCEkj4OHT1FiYMg oF/AvjGJlZLTY8YcmN0ZCl+Bdl1dX10MPxW5x6c/8cZjFuYgtIpwuc6bUNA3F6J7 2Bvcgdgs1M7AHw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:01:04 2025 by rpki-client