This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json) Hash identifier: nToqnxtdmhmpM79pYIaXRwUWvUKQTU+vFdK3C9EsxUs= Subject key identifier: 51:2C:B4:52:C4:43:B9:A6:86:54:7E:91:2E:88:7E:72:23:07:48:D3 Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e Certificate serial: 019AF19AE6B158E22E07D519521687702944 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft Manifest number: 0822 Signing time: Sat 06 Dec 2025 03:00:51 +0000 Manifest this update: Sat 06 Dec 2025 03:00:51 +0000 Manifest next update: Sun 07 Dec 2025 03:00:51 +0000 Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: mOrwszlv9AaagFCIr55FCfiygOC75aixvC6ajhH4hHY=) 2: NoirTMocfMUxRX4SSF3NnN1MXMg.roa (hash: k1dgXUxG201nPT5HWgsPlWuxupL/o/GsnkXTowkj8SY=) 3: kBL0NGTyltK_bUGqu0ZT8FN5oyY.roa (hash: RQ7q9e83VNSzPNBYQofT5w9K3HiXcrFugBatkkxu9/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e6:b1:58:e2:2e:07:d5:19:52:16:87:70:29:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e Validity Not Before: Dec 6 03:00:51 2025 GMT Not After : Dec 7 03:00:51 2025 GMT Subject: CN=512cb452c443b9a686547e912e887e72230748d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:95:bf:d7:7c:2f:65:3f:79:5b:4f:df:3c:68: 45:f0:ae:48:00:30:cb:0e:48:8d:8f:ae:35:2f:95: 94:64:d5:50:26:a2:5a:ab:dc:41:f7:5b:07:d6:59: ac:d3:50:e4:7d:9e:78:4a:4d:e5:43:4e:98:d7:ef: c9:51:a2:45:1c:26:3b:ab:e9:c2:34:0c:a6:38:f0: 61:42:a1:62:d6:a6:07:fa:f4:c7:7c:6c:de:7f:e4: dd:44:9b:ff:0b:23:03:6e:00:97:b8:08:28:cd:09: 20:6a:d8:16:ba:a4:81:5c:d5:ca:63:8e:4b:6d:db: f1:c8:e5:13:40:aa:60:6f:f7:1a:c6:76:0f:70:54: 98:62:af:b7:e4:63:4e:56:a6:5d:fe:07:cf:61:c5: 87:a2:cf:7a:5f:e2:87:c4:f9:b5:27:c0:33:82:04: 1f:cd:bb:59:b6:7b:bd:7a:95:9b:a5:75:a7:df:35: 4e:70:11:8e:69:04:3e:5a:8b:b8:b9:69:42:e1:98: 17:8a:0c:f5:fe:2d:a4:2d:8b:45:14:6a:df:37:e9: f4:2a:1b:a6:d9:82:5e:0a:9b:d9:3f:0d:af:2b:97: 1e:e3:26:88:73:52:24:94:e9:79:d4:a4:d0:8f:73: bc:74:ec:3f:a2:77:bd:2e:95:27:a0:33:22:51:9d: bd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2C:B4:52:C4:43:B9:A6:86:54:7E:91:2E:88:7E:72:23:07:48:D3 X509v3 Authority Key Identifier: keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3b:46:59:86:8d:d1:09:12:e6:d4:b9:bd:02:c2:b2:f4:6f: c8:29:79:da:1d:41:53:fd:d6:a3:92:8f:73:df:9e:5d:98:97: a8:23:84:24:5b:51:bd:b3:07:ef:38:75:fc:b2:63:e5:0c:fc: 96:02:f9:36:58:f3:f0:af:47:aa:39:3f:f1:2a:8f:a1:02:f1: 9c:5e:c5:f6:4a:1d:6f:4d:ed:06:e6:13:28:49:60:bb:05:8a: 8e:7a:7a:38:27:1f:da:83:1f:0e:b2:2f:02:bd:0c:09:03:fa: df:65:ea:bf:35:14:d0:bd:93:97:aa:e2:60:0a:29:39:0a:8e: c9:d8:fe:4e:24:35:24:3b:1c:c2:4f:ec:31:ba:f8:33:92:41: e1:83:92:25:f5:5f:13:90:01:17:4e:67:0d:55:8f:a1:8a:48: 1c:d2:da:1e:2a:8f:c1:cb:a0:77:87:e6:b9:87:67:fd:f5:4d: 68:aa:13:cc:91:61:a3:40:88:03:2f:ae:ab:69:b1:f6:52:44: 65:6b:f7:2a:13:c2:ee:f1:1d:b8:65:0e:a0:c2:90:28:e9:99: 53:00:09:cd:f6:40:9c:51:ba:bf:01:ec:4f:5a:78:bc:23:96: 01:cd:3a:c0:b0:0f:a7:7b:40:17:96:70:bb:55:03:e6:f5:5d: aa:5c:54:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuaxWOIuB9UZUhaHcClEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMWQxYzA1YWJkNzE0YzY3YzMyOTFlMDEwZDIxYzcwYTM1 ZGQ1N2UwHhcNMjUxMjA2MDMwMDUxWhcNMjUxMjA3MDMwMDUxWjAzMTEwLwYDVQQD Eyg1MTJjYjQ1MmM0NDNiOWE2ODY1NDdlOTEyZTg4N2U3MjIzMDc0OGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5W/13wvZT95W0/fPGhF8K5IADDL DkiNj641L5WUZNVQJqJaq9xB91sH1lms01DkfZ54Sk3lQ06Y1+/JUaJFHCY7q+nC NAymOPBhQqFi1qYH+vTHfGzef+TdRJv/CyMDbgCXuAgozQkgatgWuqSBXNXKY45L bdvxyOUTQKpgb/caxnYPcFSYYq+35GNOVqZd/gfPYcWHos96X+KHxPm1J8AzggQf zbtZtnu9epWbpXWn3zVOcBGOaQQ+Wou4uWlC4ZgXigz1/i2kLYtFFGrfN+n0Khum 2YJeCpvZPw2vK5ce4yaIc1IklOl51KTQj3O8dOw/one9LpUnoDMiUZ290QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEstFLEQ7mmhlR+kS6IfnIjB0jTMB8GA1UdIwQY MBaAFPMdHAWr1xTGfDKR4BDSHHCjXdV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMt NTU1OWFjNDEwYWNlLzEvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMtNTU1OWFjNDEwYWNl LzEvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOztGWYaN 0QkS5tS5vQLCsvRvyCl52h1BU/3Wo5KPc9+eXZiXqCOEJFtRvbMH7zh1/LJj5Qz8 lgL5Nljz8K9Hqjk/8SqPoQLxnF7F9kodb03tBuYTKElguwWKjnp6OCcf2oMfDrIv Ar0MCQP632XqvzUU0L2Tl6riYAopOQqOydj+TiQ1JDscwk/sMbr4M5JB4YOSJfVf E5ABF05nDVWPoYpIHNLaHiqPwcugd4fmuYdn/fVNaKoTzJFho0CIAy+uq2mx9lJE ZWv3KhPC7vEduGUOoMKQKOmZUwAJzfZAnFG6vwHsT1p4vCOWAc06wLAPp3tAF5Zw u1UD5vVdqlxUFw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:54 2025 by rpki-client