This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft File: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json) Hash identifier: zIJnI0jSnn64HkLQIzXDlCOOl9TRT31ajZ3Z1Z6h8ng= Subject key identifier: FE:5E:1B:CC:61:1C:7B:8C:6A:B5:1C:45:F6:5E:FB:CB:68:58:3D:49 Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3 Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3 Certificate serial: 019B42805C7CFA2871F9869D3F94F7547CDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft Manifest number: 0736 Signing time: Sun 21 Dec 2025 20:01:06 +0000 Manifest this update: Sun 21 Dec 2025 20:01:06 +0000 Manifest next update: Mon 22 Dec 2025 20:01:06 +0000 Files and hashes: 1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: M9adHe8WxUwqxonsaDg/+2xOLHGILWBEN1puTRgnp5E=) 2: Tm2nsqR26Dl9LeV6Cyt_JHr-v8Y.roa (hash: uihaqn4cl1EUm9BC8+JYEwJFvxEP94e45YDqvyFRac4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:5c:7c:fa:28:71:f9:86:9d:3f:94:f7:54:7c:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3 Validity Not Before: Dec 21 20:01:06 2025 GMT Not After : Dec 22 20:01:06 2025 GMT Subject: CN=fe5e1bcc611c7b8c6ab51c45f65efbcb68583d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fe:33:56:9f:e2:11:72:98:01:ae:2b:88:fc: df:f0:43:2f:b8:b5:42:0d:93:84:2d:b3:00:cb:30: c2:6f:92:a6:3a:6f:f3:06:8e:74:c8:77:1e:f4:e8: f6:ad:13:20:93:15:31:e9:ee:7d:d2:35:ae:34:de: 7f:24:e7:ce:ec:1e:76:93:37:62:3a:90:96:16:19: 2f:d5:5c:18:d4:6b:4a:01:a4:f0:6f:dd:20:2d:5e: 78:52:bf:91:b8:44:d6:29:9d:54:8d:92:06:07:d1: 8c:e7:8d:5a:92:b1:6a:d0:2b:6e:01:34:bb:53:57: 47:de:03:cf:02:ca:0d:b5:f5:f3:ab:48:1e:bb:92: cd:60:34:52:1c:0f:2b:4b:36:96:4b:24:ab:29:29: 1b:a8:ae:4a:67:19:68:bf:76:14:d7:3b:a9:ca:20: 00:bd:4e:cc:be:10:69:dd:7a:e5:e6:bb:39:7c:3b: 68:2b:93:71:0b:6b:74:61:18:cc:2c:c8:73:c1:07: 19:ef:b4:92:d4:7d:8c:f5:b6:9e:53:ce:88:f0:1d: 21:c6:e0:86:8d:2f:a9:07:4b:93:32:74:6f:b1:e9: 08:3f:7f:24:af:83:f0:0b:07:a3:3c:12:82:5c:4b: c0:77:1f:94:a2:aa:55:a2:fe:de:64:8b:bf:65:b2: 7b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5E:1B:CC:61:1C:7B:8C:6A:B5:1C:45:F6:5E:FB:CB:68:58:3D:49 X509v3 Authority Key Identifier: keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:93:50:63:02:ae:c6:07:01:b7:46:27:94:2d:b6:f2:0a:d6: 2d:d0:0e:a7:ba:2d:dc:73:d1:35:3a:2b:2b:f2:62:af:a8:96: a1:1d:a9:28:59:00:3d:7c:53:11:b0:90:e0:db:22:d3:fd:d2: 6b:ac:5f:16:de:0b:c7:9a:08:9b:e8:ae:dc:11:da:fc:62:22: e9:eb:99:ee:0c:5c:67:97:71:1d:1d:e6:96:65:bb:6d:a0:03: ef:15:8d:5a:e5:d1:53:af:dc:cd:d1:dc:51:5a:30:ee:8a:b1: ff:e8:36:09:37:2e:90:19:17:57:b1:52:15:f2:84:02:a7:70: ce:63:72:b6:8c:51:69:d6:f9:88:29:63:8c:35:5d:2f:1e:a0: 43:72:b5:ad:78:17:89:89:d6:1c:6a:42:67:3a:b4:c7:74:05: 07:20:ee:87:04:3b:f1:46:dc:14:0c:d1:38:c3:eb:4e:93:58: 1f:15:3c:61:24:19:c0:8d:90:b2:7d:81:c8:05:a3:42:36:12: 89:63:2b:0f:a7:ab:d5:42:95:86:dd:a5:0e:0d:cb:9a:f8:6e: d1:12:08:0d:4d:8c:e7:07:a7:eb:61:9b:70:03:6c:13:20:ca: 40:6f:93:1f:86:2d:54:ec:94:b5:60:bc:a5:ec:f0:f6:df:42: c4:ad:8f:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgFx8+ihx+YadP5T3VHzdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMmQ1ZjE3NjM2YTFmMTRlZmE4YTBlNDA5OWIzZDMzNWZm ODRkZDMwHhcNMjUxMjIxMjAwMTA2WhcNMjUxMjIyMjAwMTA2WjAzMTEwLwYDVQQD EyhmZTVlMWJjYzYxMWM3YjhjNmFiNTFjNDVmNjVlZmJjYjY4NTgzZDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf4zVp/iEXKYAa4riPzf8EMvuLVC DZOELbMAyzDCb5KmOm/zBo50yHce9Oj2rRMgkxUx6e590jWuNN5/JOfO7B52kzdi OpCWFhkv1VwY1GtKAaTwb90gLV54Ur+RuETWKZ1UjZIGB9GM541akrFq0CtuATS7 U1dH3gPPAsoNtfXzq0geu5LNYDRSHA8rSzaWSySrKSkbqK5KZxlov3YU1zupyiAA vU7MvhBp3Xrl5rs5fDtoK5NxC2t0YRjMLMhzwQcZ77SS1H2M9baeU86I8B0hxuCG jS+pB0uTMnRvsekIP38kr4PwCwejPBKCXEvAdx+UoqpVov7eZIu/ZbJ7YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5eG8xhHHuMarUcRfZe+8toWD1JMB8GA1UdIwQY MBaAFPItXxdjah8U76ig5AmbPTNf+E3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zZDM5ODYtNmQ0Mi00YjNkLTlmYzAt NjExYTJhMWI4MjI0LzEvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zZDM5ODYtNmQ0Mi00YjNkLTlmYzAtNjExYTJhMWI4MjI0 LzEvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZNQYwKu xgcBt0YnlC228grWLdAOp7ot3HPRNTorK/Jir6iWoR2pKFkAPXxTEbCQ4Nsi0/3S a6xfFt4Lx5oIm+iu3BHa/GIi6euZ7gxcZ5dxHR3mlmW7baAD7xWNWuXRU6/czdHc UVow7oqx/+g2CTcukBkXV7FSFfKEAqdwzmNytoxRadb5iCljjDVdLx6gQ3K1rXgX iYnWHGpCZzq0x3QFByDuhwQ78UbcFAzROMPrTpNYHxU8YSQZwI2Qsn2ByAWjQjYS iWMrD6er1UKVht2lDg3Lmvhu0RIIDU2M5wen62GbcANsEyDKQG+TH4YtVOyUtWC8 pezw9t9CxK2PQQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:19:08 2025 by rpki-client