This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json) Hash identifier: 8FY/ury4Zjci33BhjHUZYd6RGfFT/jCR/BS7PUB8eLM= Subject key identifier: 15:ED:AF:7C:17:66:34:C8:66:AC:68:2D:42:AF:EB:E9:FF:30:D4:CA Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d Certificate serial: 019B3A222F46247D03254B2950BBE044139B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft Manifest number: 1197 Signing time: Sat 20 Dec 2025 05:01:17 +0000 Manifest this update: Sat 20 Dec 2025 05:01:17 +0000 Manifest next update: Sun 21 Dec 2025 05:01:17 +0000 Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: pwl0n0ehfgRQ49691GCrWnl2h3nUfKTl3W9C1x8cZxU=) 2: l7jY8kwE-M6c_UhPj-FUehU05zw.roa (hash: pztDbxlKVmEaYKFDmjzGRQ+iSzJwJzlFrSZ9erwEw6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:2f:46:24:7d:03:25:4b:29:50:bb:e0:44:13:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d Validity Not Before: Dec 20 05:01:17 2025 GMT Not After : Dec 21 05:01:17 2025 GMT Subject: CN=15edaf7c176634c866ac682d42afebe9ff30d4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:36:df:c7:7a:52:f8:d6:fa:e2:fe:64:6b:40: 10:4b:81:30:37:64:fd:0b:7a:64:65:d6:64:f7:94: cf:2c:d9:33:e0:28:ec:93:6d:7d:a1:2a:70:b4:25: 9f:0e:03:18:ce:e3:a6:c8:1b:22:2b:b0:d3:6a:02: 1a:45:67:c8:32:4a:93:15:db:cc:bb:e0:2e:b3:18: 82:9a:96:9e:c0:58:f7:ae:bb:db:6b:37:9f:45:aa: ac:53:aa:16:9a:61:f4:5c:d6:c3:e1:5a:43:9b:9c: e5:9e:13:ba:ee:cd:30:dc:d7:bf:93:05:38:e0:e1: 2d:58:43:a5:9d:00:93:65:0c:0a:b1:fc:3b:c2:06: 48:7e:a3:78:56:45:d8:ba:fa:77:d5:13:21:80:81: 58:2e:f9:9f:79:c6:84:02:4f:44:5b:0c:34:a7:0e: 5a:61:f7:f2:76:5b:41:66:d9:5a:75:68:11:cb:1a: 7b:1c:be:38:0b:09:c7:b8:9f:5d:99:f6:16:aa:05: f3:f3:4d:c2:16:35:2d:bf:c5:03:37:e0:d1:5f:d0: 89:0c:cc:d6:51:e4:da:62:52:00:54:5e:a6:45:3f: 9d:cb:63:d9:35:f2:c9:09:8a:39:c1:4b:c2:14:7b: 76:74:84:91:26:89:00:e4:ff:1e:d8:97:f6:79:b0: b6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:ED:AF:7C:17:66:34:C8:66:AC:68:2D:42:AF:EB:E9:FF:30:D4:CA X509v3 Authority Key Identifier: keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:5f:b4:e7:f9:74:cf:c1:9f:36:ab:cd:8a:aa:54:1d:15:c2: 15:82:6a:ce:e2:4a:fe:8a:9f:9a:32:12:33:a6:88:3b:eb:05: 75:4e:86:e5:a8:66:47:19:84:13:94:a9:32:f4:50:a7:5c:e6: 1d:94:a7:59:cf:69:03:62:18:25:78:6c:a6:60:6e:71:2f:b6: 25:00:5f:76:19:8a:c7:9d:79:e1:cd:5f:0a:fb:da:1e:f7:98: 43:2b:a0:3e:4b:a4:42:4c:d4:8c:42:dd:8d:e5:47:52:87:e0: ec:97:35:ce:23:a4:4c:4a:13:ba:9e:bf:97:23:7d:44:ea:7e: c6:45:01:d2:c8:22:c6:53:23:28:b4:83:dc:b0:ad:36:08:79: ae:98:d5:c0:b4:2d:63:b2:d5:23:22:49:5a:06:1b:b3:c2:ce: 6b:32:08:2b:9f:7f:48:d9:43:de:3c:89:f2:69:72:49:0b:59: ee:cb:45:35:af:d4:b1:0b:83:99:e8:9c:ee:02:11:a9:40:03: e7:59:9b:41:e9:f2:f6:a4:7b:a0:3f:7a:65:d9:dc:92:ee:05: d7:b0:39:1d:00:80:3c:01:bd:90:09:dc:93:49:b7:ee:21:e2: e1:18:19:46:dd:17:a0:57:ab:18:1c:16:3f:72:6e:38:c7:ef: f1:76:25:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Ii9GJH0DJUspULvgRBObMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyN2EyMzYwN2Y2ZDFlNmU2Y2VkMWRkOTRjOWJkMTBiMzA2 ZjYwOWQwHhcNMjUxMjIwMDUwMTE3WhcNMjUxMjIxMDUwMTE3WjAzMTEwLwYDVQQD EygxNWVkYWY3YzE3NjYzNGM4NjZhYzY4MmQ0MmFmZWJlOWZmMzBkNGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTbfx3pS+Nb64v5ka0AQS4EwN2T9 C3pkZdZk95TPLNkz4Cjsk219oSpwtCWfDgMYzuOmyBsiK7DTagIaRWfIMkqTFdvM u+AusxiCmpaewFj3rrvbazefRaqsU6oWmmH0XNbD4VpDm5zlnhO67s0w3Ne/kwU4 4OEtWEOlnQCTZQwKsfw7wgZIfqN4VkXYuvp31RMhgIFYLvmfecaEAk9EWww0pw5a YffydltBZtladWgRyxp7HL44CwnHuJ9dmfYWqgXz803CFjUtv8UDN+DRX9CJDMzW UeTaYlIAVF6mRT+dy2PZNfLJCYo5wUvCFHt2dISRJokA5P8e2Jf2ebC2HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXtr3wXZjTIZqxoLUKv6+n/MNTKMB8GA1UdIwQY MBaAFPJ6I2B/bR5ubO0d2Uyb0Qswb2CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEt ODc5MTNjMzU0OTJhLzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEtODc5MTNjMzU0OTJh LzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjl+05/l0 z8GfNqvNiqpUHRXCFYJqzuJK/oqfmjISM6aIO+sFdU6G5ahmRxmEE5SpMvRQp1zm HZSnWc9pA2IYJXhspmBucS+2JQBfdhmKx5154c1fCvvaHveYQyugPkukQkzUjELd jeVHUofg7Jc1ziOkTEoTup6/lyN9ROp+xkUB0sgixlMjKLSD3LCtNgh5rpjVwLQt Y7LVIyJJWgYbs8LOazIIK59/SNlD3jyJ8mlySQtZ7stFNa/UsQuDmeic7gIRqUAD 51mbQeny9qR7oD96Zdncku4F17A5HQCAPAG9kAnck0m37iHi4RgZRt0XoFerGBwW P3JuOMfv8XYlDg== -----END CERTIFICATE-----Generated at Sat Dec 20 11:33:00 2025 by rpki-client