This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft File: 8nBAx0Kee54hpf_IjZMrRwfMOgA.mft (raw, json) Hash identifier: nWUPsFDwW1zY9SH48q0BHbtu615xuSRdJmJ5bx3RiS8= Subject key identifier: 65:E0:7F:58:9E:E0:F3:06:AD:54:BB:8A:B2:C7:BE:AF:A7:EA:46:B8 Authority key identifier: F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00 Certificate issuer: /CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00 Certificate serial: 019B1EAAA2CCB74F0BAFF3975C7386D06B43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft Manifest number: 1775 Signing time: Sun 14 Dec 2025 21:00:57 +0000 Manifest this update: Sun 14 Dec 2025 21:00:57 +0000 Manifest next update: Mon 15 Dec 2025 21:00:57 +0000 Files and hashes: 1: 8nBAx0Kee54hpf_IjZMrRwfMOgA.crl (hash: 2hj43Vw65tS5izAqCnqaVViyu60LGFnAlVACEuG2lwI=) 2: r8IgxFWc9XzlcmWsiD3Z-WIyGyw.roa (hash: FGlOHNeym9mZlkgU9PVn/K4BszdTXj5x4PebqSOF0dQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 21:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:aa:a2:cc:b7:4f:0b:af:f3:97:5c:73:86:d0:6b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00 Validity Not Before: Dec 14 21:00:57 2025 GMT Not After : Dec 15 21:00:57 2025 GMT Subject: CN=65e07f589ee0f306ad54bb8ab2c7beafa7ea46b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8a:5e:af:a5:54:1e:4c:40:23:af:64:30:52: 53:c5:3a:cb:da:05:20:03:a0:4b:f7:90:2a:c8:3d: ad:a6:aa:b0:f6:bf:6d:b6:44:43:a5:5d:34:3c:b8: 20:81:1b:7c:95:ca:6d:71:02:a8:9a:be:d2:37:8c: e3:2b:77:f8:45:c1:41:19:59:f4:f8:8f:2b:f5:e7: 74:9e:db:3c:3f:4d:59:dd:d5:5b:9d:b0:56:9b:36: ba:ae:e7:43:76:be:03:05:13:3b:00:d2:c5:1c:a3: 69:ec:fe:a9:62:68:65:43:0a:b0:7c:eb:55:de:c1: d7:61:c1:18:37:15:42:73:2e:2b:46:42:d1:53:51: 26:4e:87:74:54:58:2b:11:3b:14:93:f8:f4:3f:99: 5c:87:56:b6:4c:f1:3e:b0:75:cd:25:4e:96:7f:8e: 9d:25:bc:c9:a1:d4:7f:9f:94:1a:08:0b:ae:84:63: 1b:2b:1c:f6:a4:51:3f:c3:4a:13:5f:ab:fa:ca:a5: 49:4e:05:a2:c0:0f:73:af:36:fe:69:00:cf:1e:3c: 7e:f5:68:14:a4:3d:69:b0:05:82:32:e1:30:9f:65: 88:e8:97:63:df:87:4d:fe:86:ef:ba:7b:9e:0b:e3: 87:61:ce:2c:06:08:7b:5d:0c:17:39:18:d8:d7:fa: c2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E0:7F:58:9E:E0:F3:06:AD:54:BB:8A:B2:C7:BE:AF:A7:EA:46:B8 X509v3 Authority Key Identifier: keyid:F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:f0:ab:c9:ef:9c:42:a7:a3:e4:86:82:4e:0a:fa:88:e8:89: 9d:34:7b:72:bc:93:03:dc:0d:e7:96:06:57:92:06:47:b1:24: a9:fb:70:8a:00:86:c1:ab:9f:b7:a0:a4:65:ca:55:ec:b5:58: bf:03:fa:89:37:8a:fc:b3:04:87:ba:f4:d7:d7:91:b5:d6:5a: 9e:76:53:07:9e:92:5d:d0:7c:2c:19:57:1b:2c:77:a4:ee:6b: c5:67:2c:86:d5:87:fe:d6:64:94:79:cf:3e:d8:81:47:dd:5e: 04:34:cd:b7:e0:76:28:d6:5e:6e:71:3f:3f:fb:26:27:81:3b: c5:ae:f7:96:f8:d3:5f:0e:ef:19:86:31:a5:0c:c7:1e:e3:67: b2:a4:33:7c:fc:05:29:ba:ea:2b:26:e6:4f:c3:0d:e3:a6:d3: c2:94:44:dd:82:1f:2e:db:50:34:a2:9a:3e:71:fd:35:af:fc: 24:33:c3:c5:f9:e8:ce:d0:cd:e3:cc:07:29:55:33:3f:ad:ff: 5f:55:ea:c3:cd:e4:35:8f:66:2c:d0:b7:38:5f:93:a7:5c:f6: 24:d5:98:58:50:8e:d5:53:e5:0e:7e:a4:55:de:f7:ff:ee:cd: db:68:9b:da:00:0a:e5:ee:5d:ff:d2:42:e1:77:cb:15:a8:2a: fe:5c:14:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseqqLMt08Lr/OXXHOG0GtDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNzA0MGM3NDI5ZTdiOWUyMWE1ZmZjODhkOTMyYjQ3MDdj YzNhMDAwHhcNMjUxMjE0MjEwMDU3WhcNMjUxMjE1MjEwMDU3WjAzMTEwLwYDVQQD Eyg2NWUwN2Y1ODllZTBmMzA2YWQ1NGJiOGFiMmM3YmVhZmE3ZWE0NmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYper6VUHkxAI69kMFJTxTrL2gUg A6BL95AqyD2tpqqw9r9ttkRDpV00PLgggRt8lcptcQKomr7SN4zjK3f4RcFBGVn0 +I8r9ed0nts8P01Z3dVbnbBWmza6rudDdr4DBRM7ANLFHKNp7P6pYmhlQwqwfOtV 3sHXYcEYNxVCcy4rRkLRU1EmTod0VFgrETsUk/j0P5lch1a2TPE+sHXNJU6Wf46d JbzJodR/n5QaCAuuhGMbKxz2pFE/w0oTX6v6yqVJTgWiwA9zrzb+aQDPHjx+9WgU pD1psAWCMuEwn2WI6Jdj34dN/obvunueC+OHYc4sBgh7XQwXORjY1/rCLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXgf1ie4PMGrVS7irLHvq+n6ka4MB8GA1UdIwQY MBaAFPJwQMdCnnueIaX/yI2TK0cHzDoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG5CQXgwS2VlNTRocGZfSWpaTXJSd2ZNT2dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81NDNkNGMtYTRkOS00MTk2LTg5MmMt N2VjYWJhZTE4ZDhhLzEvOG5CQXgwS2VlNTRocGZfSWpaTXJSd2ZNT2dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS81NDNkNGMtYTRkOS00MTk2LTg5MmMtN2VjYWJhZTE4ZDhh LzEvOG5CQXgwS2VlNTRocGZfSWpaTXJSd2ZNT2dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPCrye+c Qqej5IaCTgr6iOiJnTR7cryTA9wN55YGV5IGR7EkqftwigCGwauft6CkZcpV7LVY vwP6iTeK/LMEh7r019eRtdZannZTB56SXdB8LBlXGyx3pO5rxWcshtWH/tZklHnP PtiBR91eBDTNt+B2KNZebnE/P/smJ4E7xa73lvjTXw7vGYYxpQzHHuNnsqQzfPwF KbrqKybmT8MN46bTwpRE3YIfLttQNKKaPnH9Na/8JDPDxfnoztDN48wHKVUzP63/ X1Xqw83kNY9mLNC3OF+Tp1z2JNWYWFCO1VPlDn6kVd73/+7N22ib2gAK5e5d/9JC 4XfLFagq/lwUIA== -----END CERTIFICATE-----Generated at Mon Dec 15 04:01:54 2025 by rpki-client