This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft File: 8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft (raw, json) Hash identifier: 4T19Vvxe5K9my/rpx3zUwsovrjo8LTBF5YLNsc2p7aw= Subject key identifier: EA:02:16:CE:C8:AA:CF:C1:A3:F4:28:84:36:BA:E7:87:56:6A:86:06 Authority key identifier: F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0 Certificate issuer: /CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0 Certificate serial: 019B217586E8B5B5A3BD7C5934A4DD811742 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft Manifest number: 1778 Signing time: Mon 15 Dec 2025 10:01:48 +0000 Manifest this update: Mon 15 Dec 2025 10:01:48 +0000 Manifest next update: Tue 16 Dec 2025 10:01:48 +0000 Files and hashes: 1: 8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl (hash: okG7Y219Alcj2e5HxlB/p73MW0ydRL6HX3fCN52h5z4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:86:e8:b5:b5:a3:bd:7c:59:34:a4:dd:81:17:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0 Validity Not Before: Dec 15 10:01:48 2025 GMT Not After : Dec 16 10:01:48 2025 GMT Subject: CN=ea0216cec8aacfc1a3f4288436bae787566a8606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fb:5a:ae:4f:fb:55:42:0b:ce:f3:8e:1c:10: 88:c5:5e:7e:7b:7a:7b:f3:89:c1:d3:dd:03:ef:4f: 3a:6e:42:17:ae:fb:2a:c4:aa:0d:aa:53:4c:14:bd: 7b:ac:a3:24:4f:dc:8d:e4:66:8b:dd:6c:a8:96:db: 07:cc:9f:95:28:0f:8c:06:3f:7d:7b:15:0d:09:96: a1:26:53:9f:9e:31:8d:e5:26:2e:37:fc:ed:73:b4: 07:94:f9:ea:51:4e:9b:ec:39:0e:51:29:8e:e7:c1: 25:4b:ac:4a:4a:e7:6b:c6:a1:f0:1a:e1:70:61:2d: 57:b9:6c:5b:ba:9a:05:d9:94:d6:5c:b7:36:e2:86: 8f:9b:1b:2f:44:82:5c:4f:e1:46:b5:e1:4f:61:fe: 08:53:63:51:9c:1b:8c:a8:5f:d5:29:98:b9:ef:dd: f5:79:4f:61:3d:ee:73:08:8b:f1:66:2e:44:0f:85: 41:2f:c3:74:eb:9e:11:75:05:66:d4:f4:1c:c5:99: 3d:86:1d:3f:56:87:a6:f9:5b:f4:a0:0c:ba:81:f6: 62:66:ea:51:0a:1c:1d:f1:6c:0b:cf:de:2d:09:34: e8:2f:5b:88:7e:c0:17:ee:d8:7d:04:9f:3d:18:5a: ce:c0:c3:af:4e:82:c6:a5:49:d0:cc:1c:d5:f5:09: c3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:02:16:CE:C8:AA:CF:C1:A3:F4:28:84:36:BA:E7:87:56:6A:86:06 X509v3 Authority Key Identifier: keyid:F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:21:78:02:8e:9a:2a:fe:b6:13:1f:5f:85:e0:78:8a:e0:c9: 34:6c:2c:04:de:13:f1:f4:19:8b:dc:64:e8:5e:20:22:1c:90: 68:bd:c2:5d:5e:c9:7c:c3:bb:e9:da:f3:7f:91:06:ff:00:10: 41:76:9b:f6:80:82:f3:0b:ee:86:ee:a7:9a:69:02:ae:ce:44: 66:5c:e3:7f:82:d9:bf:72:a0:12:a3:77:00:88:cf:be:c2:80: 9f:eb:a7:49:d4:2e:b9:a3:77:0b:e6:0c:0e:5c:a6:4f:4a:12: 81:8a:5a:c3:8e:66:a0:87:2a:11:7b:5c:3c:a9:84:3c:f8:20: 80:73:60:70:76:0b:a6:52:34:b9:94:6e:6f:b0:6f:07:ff:91: 8e:43:5a:fb:b1:47:98:f8:4c:e1:5e:50:c6:94:db:ea:6b:7d: 9e:5a:36:0e:a6:4e:b7:60:20:ea:64:2e:12:5a:7c:d8:28:77: d5:d2:7d:5d:28:f9:10:1c:86:1f:4a:9a:09:f2:b6:dc:f7:3a: 71:55:c6:0c:c7:56:20:be:35:ee:b3:85:aa:c4:8c:df:14:4f: 61:15:a5:50:b3:63:65:e8:f0:f8:67:d2:55:a8:89:32:90:a6: 84:1a:bf:39:87:2e:1f:f0:58:58:d1:fe:93:b6:05:5e:0f:84: 81:96:f1:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdYbotbWjvXxZNKTdgRdCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjFmYTFmZTZkYzA5ZmE1NGQxYWY1OWMyZTEwMGNkMTQx MmM3ZjAwHhcNMjUxMjE1MTAwMTQ4WhcNMjUxMjE2MTAwMTQ4WjAzMTEwLwYDVQQD EyhlYTAyMTZjZWM4YWFjZmMxYTNmNDI4ODQzNmJhZTc4NzU2NmE4NjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivtark/7VUILzvOOHBCIxV5+e3p7 84nB090D7086bkIXrvsqxKoNqlNMFL17rKMkT9yN5GaL3WyoltsHzJ+VKA+MBj99 exUNCZahJlOfnjGN5SYuN/ztc7QHlPnqUU6b7DkOUSmO58ElS6xKSudrxqHwGuFw YS1XuWxbupoF2ZTWXLc24oaPmxsvRIJcT+FGteFPYf4IU2NRnBuMqF/VKZi57931 eU9hPe5zCIvxZi5ED4VBL8N0654RdQVm1PQcxZk9hh0/Voem+Vv0oAy6gfZiZupR Chwd8WwLz94tCTToL1uIfsAX7th9BJ89GFrOwMOvToLGpUnQzBzV9QnDCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOoCFs7Iqs/Bo/QohDa654dWaoYGMB8GA1UdIwQY MBaAFPJh+h/m3An6VNGvWcLhAM0UEsfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1INkgtYmNDZnBVMGE5Wnd1RUF6UlFTeF9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi81ZTBlNGYtNzQ2Yy00OTA4LTg1NWQt ZTc3ZTBlMjFiMTZhLzEvOG1INkgtYmNDZnBVMGE5Wnd1RUF6UlFTeF9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi81ZTBlNGYtNzQ2Yy00OTA4LTg1NWQtZTc3ZTBlMjFiMTZh LzEvOG1INkgtYmNDZnBVMGE5Wnd1RUF6UlFTeF9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSF4Ao6a Kv62Ex9fheB4iuDJNGwsBN4T8fQZi9xk6F4gIhyQaL3CXV7JfMO76drzf5EG/wAQ QXab9oCC8wvuhu6nmmkCrs5EZlzjf4LZv3KgEqN3AIjPvsKAn+unSdQuuaN3C+YM DlymT0oSgYpaw45moIcqEXtcPKmEPPgggHNgcHYLplI0uZRub7BvB/+RjkNa+7FH mPhM4V5QxpTb6mt9nlo2DqZOt2Ag6mQuElp82Ch31dJ9XSj5EByGH0qaCfK23Pc6 cVXGDMdWIL417rOFqsSM3xRPYRWlULNjZejw+GfSVaiJMpCmhBq/OYcuH/BYWNH+ k7YFXg+EgZbxfQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:34:07 2025 by rpki-client