This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft File: 8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json) Hash identifier: TMcCNRmm9qgpWdkkPJI6WDvJbwOFoxGppsgj2d/jkMs= Subject key identifier: 8C:E0:07:8C:CF:D8:F6:DE:19:ED:51:7B:88:1A:95:38:90:FD:AC:1A Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F Certificate issuer: /CN=f0d444bc7d5334da14de805172b2625e9830763f Certificate serial: 019B31FAD7C2C42E49827E0ADC53BE2AB14E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft Manifest number: 0703 Signing time: Thu 18 Dec 2025 15:01:21 +0000 Manifest this update: Thu 18 Dec 2025 15:01:21 +0000 Manifest next update: Fri 19 Dec 2025 15:01:21 +0000 Files and hashes: 1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: kmV+3lWJzIgvO2Hq3DvRvTHrdKMujnDjlhmnxJQ11GM=) 2: 8VhhkSiakyjyds2HL3KVl5SAjHk.roa (hash: XMxyFpkWV1CCq0kdHYWIMKgwA50BX4tfunpr2JyfxpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:d7:c2:c4:2e:49:82:7e:0a:dc:53:be:2a:b1:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f Validity Not Before: Dec 18 15:01:21 2025 GMT Not After : Dec 19 15:01:21 2025 GMT Subject: CN=8ce0078ccfd8f6de19ed517b881a953890fdac1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c9:f3:13:e4:0f:a3:06:20:2f:5f:a6:83:7d: 73:63:c6:77:47:78:e1:3b:4a:df:e9:a3:75:be:70: 9b:00:f2:50:53:e8:fb:2c:d2:a7:ec:e6:b2:33:c4: 2b:55:1a:68:74:52:53:49:39:36:1d:54:c0:a4:84: 5b:09:40:db:48:12:81:c8:3b:94:35:6b:18:46:58: ff:59:d1:d9:85:85:2d:1a:ac:86:b0:92:8d:5c:80: f7:b2:f5:ae:ab:61:8b:25:fb:28:16:fc:bb:b7:7b: f9:c8:00:ff:a2:1b:6f:6a:a8:7d:23:b3:e6:fc:23: b4:16:a6:b3:f8:65:56:b6:40:3a:2f:4c:12:e5:e1: 53:ed:56:55:61:5a:51:c4:f0:a5:26:13:6f:2b:1d: b8:73:f5:d2:be:10:c7:ef:08:21:73:5a:9b:34:54: c5:a9:bd:a3:83:7d:8a:d9:77:2d:bb:8e:00:c2:bf: a7:5e:63:15:66:c7:11:b4:d0:c2:60:82:50:e1:43: f7:07:ed:85:35:87:c1:0f:71:e3:b8:a7:b7:03:99: 26:df:ff:eb:44:f0:a5:3c:8c:99:9e:72:12:10:ff: c2:d4:0d:3a:b6:2c:93:bc:35:bc:b4:7a:15:b3:44: 24:8d:ba:ae:2f:aa:fe:92:31:bf:0e:5d:05:a4:5f: 64:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E0:07:8C:CF:D8:F6:DE:19:ED:51:7B:88:1A:95:38:90:FD:AC:1A X509v3 Authority Key Identifier: keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:bd:5f:9b:26:a3:77:7f:0f:9d:83:09:ba:f3:66:5b:ff:85: 0c:70:cf:0f:e1:0a:16:6e:d7:d9:62:71:55:c9:c4:dd:58:51: 5a:bf:e5:0e:97:02:b9:2e:33:b7:23:8c:6c:3d:c5:2d:8f:f3: 86:eb:3a:3d:bb:b8:6c:37:34:ad:df:43:25:c6:1f:47:32:fa: f1:6d:0b:36:95:21:b9:e9:8a:06:24:09:5f:61:8f:6b:34:7b: 82:eb:2a:6e:7b:74:bc:1f:cf:f0:f5:9f:59:1c:c2:51:3e:25: b0:25:0f:43:2c:74:f5:c3:28:c1:e2:0b:57:45:42:d3:57:f7: f5:42:57:d9:13:8a:16:f1:91:c2:ad:c7:f3:52:d6:19:67:57: da:9a:6c:11:4c:78:ea:d6:4e:e7:e5:42:52:11:68:fb:d9:16: 2f:a4:3a:43:0f:41:57:a1:10:9a:97:eb:ec:e1:8a:c1:25:35: 38:81:96:7f:21:e2:b5:f5:24:dd:10:f0:f3:4a:1f:43:42:e1: 96:22:0e:24:68:93:75:42:81:4c:21:be:b9:77:d4:aa:de:a0: bb:28:84:d5:3f:49:ef:e3:39:e6:e3:8a:ef:02:8a:de:ed:1d: 99:f5:56:05:ad:de:45:b2:41:a5:e8:d0:e2:06:e5:9f:ab:fd: 9c:5d:09:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+tfCxC5Jgn4K3FO+KrFOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZDQ0NGJjN2Q1MzM0ZGExNGRlODA1MTcyYjI2MjVlOTgz MDc2M2YwHhcNMjUxMjE4MTUwMTIxWhcNMjUxMjE5MTUwMTIxWjAzMTEwLwYDVQQD Eyg4Y2UwMDc4Y2NmZDhmNmRlMTllZDUxN2I4ODFhOTUzODkwZmRhYzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38nzE+QPowYgL1+mg31zY8Z3R3jh O0rf6aN1vnCbAPJQU+j7LNKn7OayM8QrVRpodFJTSTk2HVTApIRbCUDbSBKByDuU NWsYRlj/WdHZhYUtGqyGsJKNXID3svWuq2GLJfsoFvy7t3v5yAD/ohtvaqh9I7Pm /CO0Fqaz+GVWtkA6L0wS5eFT7VZVYVpRxPClJhNvKx24c/XSvhDH7wghc1qbNFTF qb2jg32K2Xctu44Awr+nXmMVZscRtNDCYIJQ4UP3B+2FNYfBD3HjuKe3A5km3//r RPClPIyZnnISEP/C1A06tiyTvDW8tHoVs0QkjbquL6r+kjG/Dl0FpF9kaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzgB4zP2PbeGe1Re4galTiQ/awaMB8GA1UdIwQY MBaAFPDURLx9UzTaFN6AUXKyYl6YMHY/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE5SRXZIMVROTm9VM29CUmNySmlYcGd3ZGo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy81ZGMyN2QtNWFkYi00ZGYzLTk5YzIt OThkOWM0MjU3ZmM2LzEvOE5SRXZIMVROTm9VM29CUmNySmlYcGd3ZGo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy81ZGMyN2QtNWFkYi00ZGYzLTk5YzItOThkOWM0MjU3ZmM2 LzEvOE5SRXZIMVROTm9VM29CUmNySmlYcGd3ZGo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbL1fmyaj d38PnYMJuvNmW/+FDHDPD+EKFm7X2WJxVcnE3VhRWr/lDpcCuS4ztyOMbD3FLY/z hus6Pbu4bDc0rd9DJcYfRzL68W0LNpUhuemKBiQJX2GPazR7gusqbnt0vB/P8PWf WRzCUT4lsCUPQyx09cMoweILV0VC01f39UJX2ROKFvGRwq3H81LWGWdX2ppsEUx4 6tZO5+VCUhFo+9kWL6Q6Qw9BV6EQmpfr7OGKwSU1OIGWfyHitfUk3RDw80ofQ0Lh liIOJGiTdUKBTCG+uXfUqt6guyiE1T9J7+M55uOK7wKK3u0dmfVWBa3eRbJBpejQ 4gbln6v9nF0JbA== -----END CERTIFICATE-----Generated at Thu Dec 18 22:37:25 2025 by rpki-client