This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json) Hash identifier: KzXp/kTcSVbl3bKwBpqJE/Thkw+dfmpHaVa1sgb2kqw= Subject key identifier: 19:C7:3D:86:DA:59:88:60:96:46:E1:02:B9:2E:38:7B:A9:91:D8:E1 Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a Certificate serial: 019AF19AC7B1A297429878583B8FACA4BDDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft Manifest number: 0BBA Signing time: Sat 06 Dec 2025 03:00:43 +0000 Manifest this update: Sat 06 Dec 2025 03:00:43 +0000 Manifest next update: Sun 07 Dec 2025 03:00:43 +0000 Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: ZSw5rdClIF8ZBvjp5zN4amNCFlg2hGK2+OHho//wKwE=) 2: 9fWa2lfLkLJ8sCmivN6TQyBLwDA.roa (hash: IPb2Fry6AFROnpqPDxpsLGmfQRyiCcADkUuNtSOH1vw=) 3: M0hmVP_O7pmzGC1lZ8auVtUv08M.roa (hash: O6keKWXCa23CBnMYQ5j2NdMEa5h/R6dRjRYYfD56tpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c7:b1:a2:97:42:98:78:58:3b:8f:ac:a4:bd:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a Validity Not Before: Dec 6 03:00:43 2025 GMT Not After : Dec 7 03:00:43 2025 GMT Subject: CN=19c73d86da5988609646e102b92e387ba991d8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cd:cd:62:72:e7:3b:63:d4:8b:5d:e1:fd:ed: de:5c:cc:b7:2e:b0:d4:b0:0d:89:3d:fb:f3:61:92: 5c:3b:d9:26:ce:d7:f9:e8:07:61:23:a0:17:e4:77: 33:59:81:a9:a4:29:67:f8:25:01:71:bb:c4:f6:a4: 17:aa:70:e0:5d:95:75:28:72:9f:c1:45:53:8a:9d: a7:82:44:c8:11:1f:02:b3:11:65:90:70:9b:ca:af: 91:72:61:57:62:29:aa:bd:4e:a2:b0:f9:13:50:af: 76:1e:e8:e6:09:91:37:6d:3b:8b:3e:d7:5e:66:7c: dc:9e:6c:c8:97:4c:51:a8:f2:ac:cf:25:e2:a7:0c: 72:11:be:a4:a1:58:42:34:4a:09:ff:a1:85:74:67: 79:c3:b7:9e:27:f8:a5:ec:43:d1:3e:bf:26:62:55: 78:f7:10:68:1f:b1:20:a1:1b:c1:f5:d1:16:ce:49: 3f:ae:f0:0f:18:14:4b:56:19:d0:87:1b:9f:9d:ff: 60:2f:58:47:33:15:09:38:d3:5b:23:c4:37:39:79: 39:b1:21:14:87:d1:f6:e6:0d:c5:7c:cf:72:f7:ba: 4d:4c:23:df:44:1c:80:da:f0:cb:d6:e5:37:e8:a6: 3e:7b:d0:c2:d7:ef:10:9d:e7:f7:1b:a5:2d:cf:60: 37:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C7:3D:86:DA:59:88:60:96:46:E1:02:B9:2E:38:7B:A9:91:D8:E1 X509v3 Authority Key Identifier: keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ab:d9:ad:a7:be:54:0d:cf:b8:46:e5:30:db:4f:33:71:b9: 6f:01:c6:43:4e:e1:8c:39:ff:a2:fe:f2:20:73:a5:4a:b5:5e: 54:49:71:be:75:29:f7:59:e1:51:1a:8f:f1:9a:3f:43:f1:16: e0:bf:39:1a:a2:9b:dc:37:1b:c2:22:a0:dd:ae:0d:50:48:7f: 07:7e:06:4f:8a:3c:26:7c:5b:be:68:41:49:d0:16:44:54:b8: 07:c2:4c:0d:56:85:d0:67:e2:b5:d5:34:0a:a5:2e:a4:4c:da: 29:ee:e4:66:88:87:a1:89:f4:dc:06:7a:d5:7d:14:dd:5c:e6: b1:e2:81:9f:1d:6f:84:1b:57:e7:48:9a:87:1b:0f:13:50:5d: cc:ce:9d:ee:76:c7:f9:5d:36:b4:4f:1a:40:90:ef:bb:f5:83: 7f:ac:6a:07:39:60:52:96:43:06:1c:cc:66:f4:5a:0f:77:22: de:d5:73:48:61:2c:ab:6d:17:30:bd:78:2a:03:99:15:57:f0: 9b:f0:2a:0b:da:01:0c:65:2f:2f:8a:04:c5:98:e2:65:a2:b1: 3a:ad:cf:3c:32:db:ab:24:85:8a:04:1d:2c:de:66:2d:c1:68: 1d:39:ef:23:dd:f4:e8:50:1b:72:e4:3b:b5:6c:2d:33:90:39: 1b:3c:bd:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsexopdCmHhYO4+spL3bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGQyNzg0ODVmZmFlYTc5ZTkxMGEyNjI1MzNhODBiNWFi OTFjOGEwHhcNMjUxMjA2MDMwMDQzWhcNMjUxMjA3MDMwMDQzWjAzMTEwLwYDVQQD EygxOWM3M2Q4NmRhNTk4ODYwOTY0NmUxMDJiOTJlMzg3YmE5OTFkOGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc3NYnLnO2PUi13h/e3eXMy3LrDU sA2JPfvzYZJcO9kmztf56AdhI6AX5HczWYGppCln+CUBcbvE9qQXqnDgXZV1KHKf wUVTip2ngkTIER8CsxFlkHCbyq+RcmFXYimqvU6isPkTUK92HujmCZE3bTuLPtde ZnzcnmzIl0xRqPKszyXipwxyEb6koVhCNEoJ/6GFdGd5w7eeJ/il7EPRPr8mYlV4 9xBoH7EgoRvB9dEWzkk/rvAPGBRLVhnQhxufnf9gL1hHMxUJONNbI8Q3OXk5sSEU h9H25g3FfM9y97pNTCPfRByA2vDL1uU36KY+e9DC1+8Qnef3G6Utz2A38QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnHPYbaWYhglkbhArkuOHupkdjhMB8GA1UdIwQY MBaAFPBNJ4SF/66nnpEKJiUzqAtauRyKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hYTc0MjYtNzExZC00ZjNlLThkZjkt NWMwZTMxNmQyOGI4LzEvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9hYTc0MjYtNzExZC00ZjNlLThkZjktNWMwZTMxNmQyOGI4 LzEvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6vZrae+ VA3PuEblMNtPM3G5bwHGQ07hjDn/ov7yIHOlSrVeVElxvnUp91nhURqP8Zo/Q/EW 4L85GqKb3DcbwiKg3a4NUEh/B34GT4o8JnxbvmhBSdAWRFS4B8JMDVaF0GfitdU0 CqUupEzaKe7kZoiHoYn03AZ61X0U3VzmseKBnx1vhBtX50iahxsPE1BdzM6d7nbH +V02tE8aQJDvu/WDf6xqBzlgUpZDBhzMZvRaD3ci3tVzSGEsq20XML14KgOZFVfw m/AqC9oBDGUvL4oExZjiZaKxOq3PPDLbqySFigQdLN5mLcFoHTnvI9306FAbcuQ7 tWwtM5A5Gzy99g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:01:26 2025 by rpki-client