This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft File: 8EoYcV28tIU2j6_pm4riyfBK92M.mft (raw, json) Hash identifier: aSyyNWhfHVu77shXxLAUX9pReND99sN+45BzOxBmWok= Subject key identifier: 7D:F8:5B:5B:51:10:74:E8:9E:E1:92:79:BA:15:00:BC:37:C3:BF:D6 Authority key identifier: F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63 Certificate issuer: /CN=f04a18715dbcb485368fafe99b8ae2c9f04af763 Certificate serial: 019B4815C1E909899F3DA7FD49757DF9855B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft Manifest number: 0EEE Signing time: Mon 22 Dec 2025 22:02:23 +0000 Manifest this update: Mon 22 Dec 2025 22:02:23 +0000 Manifest next update: Tue 23 Dec 2025 22:02:23 +0000 Files and hashes: 1: 8EoYcV28tIU2j6_pm4riyfBK92M.crl (hash: Ll0K73PNtHyTbZiIgDMpTqoU5iegh65B9z0A5gl7pVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:c1:e9:09:89:9f:3d:a7:fd:49:75:7d:f9:85:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a18715dbcb485368fafe99b8ae2c9f04af763 Validity Not Before: Dec 22 22:02:23 2025 GMT Not After : Dec 23 22:02:23 2025 GMT Subject: CN=7df85b5b511074e89ee19279ba1500bc37c3bfd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:37:1d:1b:02:e4:ae:12:b2:f9:bd:d4:8c: 75:ac:16:62:9c:ba:e8:66:56:c4:86:f5:29:c8:e9: fe:ad:d7:38:23:e9:a9:8a:30:d5:db:a8:cd:89:2c: 26:35:3d:1e:88:2e:0b:56:c5:d0:d8:58:d8:2e:65: 75:2b:1f:80:b0:1f:af:10:37:e8:a9:db:49:bf:c1: 0f:c5:d3:dd:e0:cb:99:35:09:3b:07:f3:ac:19:5e: 3a:67:31:08:24:d4:eb:ef:e3:a2:21:2b:af:75:55: 92:80:92:d1:3b:93:9e:6b:4a:c9:d9:d1:e6:59:d3: 44:60:df:4e:db:dd:63:34:4b:bb:ba:1d:93:63:8e: 35:05:1b:9e:1b:2b:b1:87:c4:34:69:32:5b:31:13: 56:55:22:67:f5:82:1f:1c:bb:e2:ff:ba:1c:55:87: af:7b:58:72:53:bc:bf:2b:0e:b5:e3:8f:67:76:77: 8a:bb:48:e7:d5:0e:eb:06:f5:9a:5e:69:64:96:96: 46:24:77:8f:94:b7:b4:1c:c0:a6:0b:19:20:15:6b: f6:e0:ed:7e:ae:cb:ec:20:24:4d:06:b9:86:85:cb: 3e:df:61:75:d7:eb:66:2c:86:87:a3:db:c6:f5:f2: 5b:0b:ba:33:f0:6c:f0:91:19:44:c3:6e:d6:5e:be: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F8:5B:5B:51:10:74:E8:9E:E1:92:79:BA:15:00:BC:37:C3:BF:D6 X509v3 Authority Key Identifier: keyid:F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:50:e8:8d:86:5f:43:05:a9:74:9e:1d:56:b4:a7:76:64:19: 6f:e3:95:5a:e0:31:33:75:5f:74:93:4f:b7:70:87:c6:ba:b4: 79:dd:1e:7c:80:ce:4f:61:1b:fd:59:2e:db:90:6f:83:5d:0a: db:36:55:69:6c:f8:33:b4:f0:e2:ab:13:3c:c6:3d:f0:ee:3a: ff:d6:5e:b8:1f:bf:a8:2c:a1:bf:c1:a4:6e:7d:bf:f6:81:95: b6:c4:73:ee:1b:8d:1d:06:c7:fe:57:50:00:73:0a:d9:83:57: 68:6c:1f:dc:0a:66:d0:87:5a:9b:6b:ee:de:4b:9c:79:2e:69: af:b1:e4:1c:52:c8:b3:46:23:63:38:c1:89:8f:ab:bf:fc:4a: 41:c2:75:ff:24:54:2b:22:a4:c8:a7:e4:0a:43:a6:97:69:ce: e6:ed:9e:6d:fd:71:6b:0d:b8:3d:b7:6e:f5:ef:e9:20:55:4d: 14:02:0a:3e:1f:ec:ef:82:f4:f3:28:e8:d1:3d:c8:55:07:1c: 35:4c:fe:86:c6:86:35:db:24:85:27:dd:3b:5b:f0:fa:e1:6b: bf:6c:1a:f4:6e:55:06:9c:c2:31:b1:87:5c:d6:45:e2:b9:d4: 6c:43:47:73:fc:0e:65:f6:a4:5f:dd:f3:64:2d:5f:da:c5:2a: 30:c9:e6:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFcHpCYmfPaf9SXV9+YVbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGExODcxNWRiY2I0ODUzNjhmYWZlOTliOGFlMmM5ZjA0 YWY3NjMwHhcNMjUxMjIyMjIwMjIzWhcNMjUxMjIzMjIwMjIzWjAzMTEwLwYDVQQD Eyg3ZGY4NWI1YjUxMTA3NGU4OWVlMTkyNzliYTE1MDBiYzM3YzNiZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthE3HRsC5K4Ssvm91Ix1rBZinLro ZlbEhvUpyOn+rdc4I+mpijDV26jNiSwmNT0eiC4LVsXQ2FjYLmV1Kx+AsB+vEDfo qdtJv8EPxdPd4MuZNQk7B/OsGV46ZzEIJNTr7+OiISuvdVWSgJLRO5Oea0rJ2dHm WdNEYN9O291jNEu7uh2TY441BRueGyuxh8Q0aTJbMRNWVSJn9YIfHLvi/7ocVYev e1hyU7y/Kw61449ndneKu0jn1Q7rBvWaXmlklpZGJHePlLe0HMCmCxkgFWv24O1+ rsvsICRNBrmGhcs+32F11+tmLIaHo9vG9fJbC7oz8GzwkRlEw27WXr7AlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH34W1tREHTonuGSeboVALw3w7/WMB8GA1UdIwQY MBaAFPBKGHFdvLSFNo+v6ZuK4snwSvdjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVvWWNWMjh0SVUyajZfcG00cml5ZkJLOTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wNDJkOGItNjUxMC00N2MyLTk1YTIt MGY0MTAwN2E0Y2UwLzEvOEVvWWNWMjh0SVUyajZfcG00cml5ZkJLOTJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wNDJkOGItNjUxMC00N2MyLTk1YTItMGY0MTAwN2E0Y2Uw LzEvOEVvWWNWMjh0SVUyajZfcG00cml5ZkJLOTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeFDojYZf QwWpdJ4dVrSndmQZb+OVWuAxM3VfdJNPt3CHxrq0ed0efIDOT2Eb/Vku25Bvg10K 2zZVaWz4M7Tw4qsTPMY98O46/9ZeuB+/qCyhv8Gkbn2/9oGVtsRz7huNHQbH/ldQ AHMK2YNXaGwf3Apm0Idam2vu3kuceS5pr7HkHFLIs0YjYzjBiY+rv/xKQcJ1/yRU KyKkyKfkCkOml2nO5u2ebf1xaw24Pbdu9e/pIFVNFAIKPh/s74L08yjo0T3IVQcc NUz+hsaGNdskhSfdO1vw+uFrv2wa9G5VBpzCMbGHXNZF4rnUbENHc/wOZfakX93z ZC1f2sUqMMnm6A== -----END CERTIFICATE-----Generated at Tue Dec 23 05:03:15 2025 by rpki-client