This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json) Hash identifier: /9SshTJOiAYY28zqjv3nbMKpgiNFtcCW+PghvtK/FOY= Subject key identifier: 11:EA:96:B1:80:A8:51:86:54:55:6A:37:25:CF:FA:FA:1A:09:3E:31 Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d Certificate serial: 019B47A682ABB6802C2AABBB06D5EAAFE26F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft Manifest number: 119E Signing time: Mon 22 Dec 2025 20:00:53 +0000 Manifest this update: Mon 22 Dec 2025 20:00:53 +0000 Manifest next update: Tue 23 Dec 2025 20:00:53 +0000 Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: guqIH9HjiAwjiHJvryFXO9c+IkuyCtWga28S6a/BUGk=) 2: l7jY8kwE-M6c_UhPj-FUehU05zw.roa (hash: pztDbxlKVmEaYKFDmjzGRQ+iSzJwJzlFrSZ9erwEw6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:82:ab:b6:80:2c:2a:ab:bb:06:d5:ea:af:e2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d Validity Not Before: Dec 22 20:00:53 2025 GMT Not After : Dec 23 20:00:53 2025 GMT Subject: CN=11ea96b180a8518654556a3725cffafa1a093e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e2:88:8d:bc:c8:06:37:9c:72:7b:7a:f3:9e: 38:00:8b:54:a6:8d:9c:46:39:05:b4:aa:5d:ff:45: 85:3e:62:04:1b:fe:1f:ea:bf:71:1e:70:c7:e7:41: c6:95:c1:90:bc:42:e4:3f:f7:37:bc:11:19:33:c6: 80:c6:b3:e0:a9:a8:a8:08:37:8d:b5:b6:d3:a4:c1: 94:88:e0:05:b6:c1:a8:9f:dd:12:6e:51:56:32:03: bd:c0:89:aa:a3:a8:43:5e:25:79:27:9e:88:5c:09: 88:e5:18:26:04:0f:2c:42:0d:1e:57:ed:1a:f0:68: 2f:8f:5e:93:4a:35:a9:dd:7b:e5:e8:97:67:f1:2a: 79:23:36:f1:b9:06:5a:fe:d8:4d:eb:19:5e:63:9c: 9e:59:4e:9d:3e:53:01:7f:48:17:4a:e4:01:e6:ba: 4b:e6:aa:2c:12:18:14:75:b5:66:8b:db:20:71:16: 9d:a4:3a:01:57:a5:04:06:0b:16:0b:d2:e0:4b:0b: fc:07:da:16:97:dc:12:4f:52:e4:86:d6:88:cd:93: 4d:55:91:d3:90:dd:22:30:e1:fe:e2:d9:34:47:7f: 2a:15:9b:aa:98:2d:5e:91:e2:b3:18:02:00:eb:be: a9:70:4f:7f:1e:c9:7f:0a:7b:ef:d0:01:30:93:85: a8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EA:96:B1:80:A8:51:86:54:55:6A:37:25:CF:FA:FA:1A:09:3E:31 X509v3 Authority Key Identifier: keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:50:99:ae:8e:97:e8:4c:60:a2:ad:72:2d:5b:aa:b9:4b:b8: 97:3d:5f:35:00:4b:40:08:82:08:b0:d4:f1:74:0c:44:39:f8: 8b:2b:81:8b:28:22:11:a6:f4:23:dd:40:d2:5c:34:71:e8:d3: 8e:0d:0e:f7:6e:72:69:ac:95:69:a2:51:b3:b1:9e:c5:f1:c4: d1:7e:8c:58:0e:d8:1c:02:46:22:cf:48:b9:d4:ce:5a:6d:90: d5:56:76:bb:f0:6a:8f:a1:a1:ac:21:55:35:61:03:a7:08:20: 4b:b1:fd:0d:6d:4c:4a:bf:57:84:3b:e9:af:cf:ab:9c:60:91: 43:a5:ca:56:d3:be:a3:83:dc:62:ee:16:63:69:b9:75:65:3c: d8:92:a1:8a:09:72:8e:c0:48:cf:59:42:07:60:99:db:4f:6f: 6b:1c:39:78:2a:98:93:4c:be:13:db:cc:b8:c8:b7:f2:df:e7: a3:f8:d3:2a:50:c4:77:3b:47:17:cb:e2:5f:3c:13:39:65:3b: 1d:ab:60:01:17:c5:ac:1c:7c:ce:fa:b8:1e:b0:80:8c:d6:8d: 1a:d3:e3:09:a9:9c:be:cc:69:b8:6a:b1:f5:40:65:b8:39:68: f8:85:4f:b7:fe:d0:31:8a:6e:29:9a:1d:14:56:c6:d1:40:39: 4f:de:86:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpoKrtoAsKqu7BtXqr+JvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyN2EyMzYwN2Y2ZDFlNmU2Y2VkMWRkOTRjOWJkMTBiMzA2 ZjYwOWQwHhcNMjUxMjIyMjAwMDUzWhcNMjUxMjIzMjAwMDUzWjAzMTEwLwYDVQQD EygxMWVhOTZiMTgwYTg1MTg2NTQ1NTZhMzcyNWNmZmFmYTFhMDkzZTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOKIjbzIBjeccnt68544AItUpo2c RjkFtKpd/0WFPmIEG/4f6r9xHnDH50HGlcGQvELkP/c3vBEZM8aAxrPgqaioCDeN tbbTpMGUiOAFtsGon90SblFWMgO9wImqo6hDXiV5J56IXAmI5RgmBA8sQg0eV+0a 8Ggvj16TSjWp3Xvl6Jdn8Sp5IzbxuQZa/thN6xleY5yeWU6dPlMBf0gXSuQB5rpL 5qosEhgUdbVmi9sgcRadpDoBV6UEBgsWC9LgSwv8B9oWl9wST1LkhtaIzZNNVZHT kN0iMOH+4tk0R38qFZuqmC1ekeKzGAIA676pcE9/Hsl/Cnvv0AEwk4WoxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHqlrGAqFGGVFVqNyXP+voaCT4xMB8GA1UdIwQY MBaAFPJ6I2B/bR5ubO0d2Uyb0Qswb2CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEt ODc5MTNjMzU0OTJhLzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEtODc5MTNjMzU0OTJh LzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlCZro6X 6Exgoq1yLVuquUu4lz1fNQBLQAiCCLDU8XQMRDn4iyuBiygiEab0I91A0lw0cejT jg0O925yaayVaaJRs7GexfHE0X6MWA7YHAJGIs9IudTOWm2Q1VZ2u/Bqj6GhrCFV NWEDpwggS7H9DW1MSr9XhDvpr8+rnGCRQ6XKVtO+o4PcYu4WY2m5dWU82JKhigly jsBIz1lCB2CZ209vaxw5eCqYk0y+E9vMuMi38t/no/jTKlDEdztHF8viXzwTOWU7 HatgARfFrBx8zvq4HrCAjNaNGtPjCamcvsxpuGqx9UBluDlo+IVPt/7QMYpuKZod FFbG0UA5T96GaA== -----END CERTIFICATE-----Generated at Mon Dec 22 22:05:49 2025 by rpki-client