This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft File: 8XShpC1Ap_uCpsCM6XZRy2ar83A.mft (raw, json) Hash identifier: hOzIImsgrZlb2xe9Pv1r1cQ7oi1ypy6A09B42iF6wBI= Subject key identifier: EE:23:6C:AD:65:2D:59:DA:47:C2:DF:07:AB:81:A8:96:63:2C:61:B7 Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70 Certificate issuer: /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370 Certificate serial: 019AF19B82C745E331E01432F4A576140CFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft Manifest number: 0B61 Signing time: Sat 06 Dec 2025 03:01:31 +0000 Manifest this update: Sat 06 Dec 2025 03:01:31 +0000 Manifest next update: Sun 07 Dec 2025 03:01:31 +0000 Files and hashes: 1: 8XShpC1Ap_uCpsCM6XZRy2ar83A.crl (hash: yWHQLoATfpMH8plFDQsQYpfKI1tqN785QcX7P49x53M=) 2: Jzc1N5JK_K9rsqLLazjrhQAzn9E.roa (hash: c37u7+7V7zO9cUACPw1X9wuITqfc2J+4zg3NEuS9Gzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:82:c7:45:e3:31:e0:14:32:f4:a5:76:14:0c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370 Validity Not Before: Dec 6 03:01:31 2025 GMT Not After : Dec 7 03:01:31 2025 GMT Subject: CN=ee236cad652d59da47c2df07ab81a896632c61b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:05:26:20:7b:3d:cf:4e:c2:c7:6e:9e:48:af: 80:79:07:29:15:f3:d5:51:fd:4e:43:ad:7a:81:fa: b3:97:02:54:46:bf:6a:a1:9e:ff:cc:53:51:f1:5b: cf:a1:b4:65:12:b0:01:35:57:05:af:7e:6d:25:77: e4:b9:1f:1a:b9:60:e6:d6:25:bd:a6:45:21:d2:dd: b1:47:9f:bd:c4:46:d6:69:9c:74:ef:a3:86:09:11: eb:13:f7:92:21:5a:c2:7c:e5:5b:da:b2:38:3e:fd: 78:78:a1:2f:10:2b:2a:2e:91:22:14:4b:6f:ac:43: 63:3e:51:85:b5:11:e6:5a:da:9f:af:72:4a:d6:0b: e9:f3:74:29:24:e4:b5:04:de:4b:3e:cb:47:fb:37: 7c:ae:b8:07:a0:2e:74:a8:08:5c:b3:0f:69:2b:71: ed:0d:4b:25:4b:bf:6a:c6:5c:41:0a:ac:89:e7:a3: 8d:78:94:19:1f:87:8a:27:8c:93:7b:92:e1:23:82: b9:b9:23:e6:f9:ae:34:77:18:fe:73:f3:f6:34:36: ce:e8:86:01:bf:36:9f:e0:cd:28:55:c5:f4:49:bc: 03:9f:df:17:91:db:97:4f:7a:ff:5d:dc:2d:cf:aa: 90:1d:33:78:f2:cb:7f:46:82:b1:06:28:f2:cd:25: 55:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:23:6C:AD:65:2D:59:DA:47:C2:DF:07:AB:81:A8:96:63:2C:61:B7 X509v3 Authority Key Identifier: keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:f0:49:44:30:86:1f:9f:0f:e9:0f:ee:f5:f8:52:db:fb:3b: 77:28:0a:26:2d:3c:93:53:2f:88:10:a3:88:b3:53:64:66:88: da:c6:71:0d:63:92:42:ab:1b:bd:26:ad:66:c2:84:58:93:9f: 3e:2d:53:dd:42:ea:04:af:84:d7:65:7e:d1:a4:b1:61:2a:6a: 86:97:a1:24:e9:bf:21:51:49:33:10:4e:22:8a:c6:2b:29:5c: 70:6a:ad:a4:e0:93:6f:42:ee:f2:97:23:8f:e4:24:ab:88:32: 04:31:a0:db:42:ff:41:2f:f5:30:f8:c2:a5:9c:8f:07:bd:19: b6:87:8d:66:54:f4:83:33:a8:7d:de:3f:dd:70:ca:b1:1e:94: 38:3d:1e:e3:1b:0f:ec:63:24:e1:aa:14:3d:84:50:56:53:4d: 13:ea:85:cb:e0:4e:10:65:a5:6e:47:9a:db:fa:92:92:71:f4: 6f:50:e0:39:5b:45:d8:6f:46:72:19:ff:b2:ef:a6:f5:60:6c: 33:1a:52:91:f7:2a:ee:17:f7:ed:12:21:b6:6b:89:01:d9:1e: 35:ce:85:f1:e7:e4:ad:a8:27:e0:72:56:47:00:d2:e4:06:5f: ba:c5:63:f5:85:b9:40:6f:64:30:3c:70:2e:3f:24:73:c3:fe: cc:cf:38:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4LHReMx4BQy9KV2FAz9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNzRhMWE0MmQ0MGE3ZmI4MmE2YzA4Y2U5NzY1MWNiNjZh YmYzNzAwHhcNMjUxMjA2MDMwMTMxWhcNMjUxMjA3MDMwMTMxWjAzMTEwLwYDVQQD EyhlZTIzNmNhZDY1MmQ1OWRhNDdjMmRmMDdhYjgxYTg5NjYzMmM2MWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwUmIHs9z07Cx26eSK+AeQcpFfPV Uf1OQ616gfqzlwJURr9qoZ7/zFNR8VvPobRlErABNVcFr35tJXfkuR8auWDm1iW9 pkUh0t2xR5+9xEbWaZx076OGCRHrE/eSIVrCfOVb2rI4Pv14eKEvECsqLpEiFEtv rENjPlGFtRHmWtqfr3JK1gvp83QpJOS1BN5LPstH+zd8rrgHoC50qAhcsw9pK3Ht DUslS79qxlxBCqyJ56ONeJQZH4eKJ4yTe5LhI4K5uSPm+a40dxj+c/P2NDbO6IYB vzaf4M0oVcX0SbwDn98XkduXT3r/Xdwtz6qQHTN48st/RoKxBijyzSVVywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4jbK1lLVnaR8LfB6uBqJZjLGG3MB8GA1UdIwQY MBaAFPF0oaQtQKf7gqbAjOl2Uctmq/NwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFhTaHBDMUFwX3VDcHNDTTZYWlJ5MmFyODNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lZTljODEtNmQ2Ny00ZTMzLWJkMWYt MTM0OGVjOTdiOTAyLzEvOFhTaHBDMUFwX3VDcHNDTTZYWlJ5MmFyODNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9lZTljODEtNmQ2Ny00ZTMzLWJkMWYtMTM0OGVjOTdiOTAy LzEvOFhTaHBDMUFwX3VDcHNDTTZYWlJ5MmFyODNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtPBJRDCG H58P6Q/u9fhS2/s7dygKJi08k1MviBCjiLNTZGaI2sZxDWOSQqsbvSatZsKEWJOf Pi1T3ULqBK+E12V+0aSxYSpqhpehJOm/IVFJMxBOIorGKylccGqtpOCTb0Lu8pcj j+Qkq4gyBDGg20L/QS/1MPjCpZyPB70ZtoeNZlT0gzOofd4/3XDKsR6UOD0e4xsP 7GMk4aoUPYRQVlNNE+qFy+BOEGWlbkea2/qSknH0b1DgOVtF2G9Gchn/su+m9WBs MxpSkfcq7hf37RIhtmuJAdkeNc6F8efkragn4HJWRwDS5AZfusVj9YW5QG9kMDxw Lj8kc8P+zM84Kw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:01 2025 by rpki-client