This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json) Hash identifier: TWogxVtvV6y+YiR7tvqzDuwYG8c3tXDUchTh/X43htE= Subject key identifier: 78:1A:F7:F8:1A:50:FF:33:FC:51:7E:03:A5:8A:59:77:0A:6F:2B:2E Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d Certificate serial: 019AF49C0BBB66306F4E19E3E1A28A57951D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft Manifest number: 1173 Signing time: Sat 06 Dec 2025 17:00:58 +0000 Manifest this update: Sat 06 Dec 2025 17:00:58 +0000 Manifest next update: Sun 07 Dec 2025 17:00:58 +0000 Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: KE1LXcd6hpBRDoFc480Lw0RT1M0/ClZxTU1AMrLJuec=) 2: l7jY8kwE-M6c_UhPj-FUehU05zw.roa (hash: pztDbxlKVmEaYKFDmjzGRQ+iSzJwJzlFrSZ9erwEw6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:0b:bb:66:30:6f:4e:19:e3:e1:a2:8a:57:95:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d Validity Not Before: Dec 6 17:00:58 2025 GMT Not After : Dec 7 17:00:58 2025 GMT Subject: CN=781af7f81a50ff33fc517e03a58a59770a6f2b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9c:ee:25:a4:30:33:a6:98:e9:f3:0a:c4:83: 91:78:88:09:1e:79:db:28:4e:61:a1:5a:bd:ed:a0: a6:0f:6d:3b:11:fa:bd:3f:ff:57:57:e5:4a:c8:34: 27:fd:e9:08:0f:e4:50:44:f7:e7:78:82:cb:45:86: a2:9b:08:96:d6:e1:ae:6b:67:77:61:f2:45:51:cb: d7:f2:56:9b:7e:91:f8:b0:92:db:05:6b:88:99:42: bb:85:db:0e:1d:a9:50:53:7e:23:04:6d:f7:53:19: 48:90:f2:3f:1c:20:1c:74:84:b6:bc:5b:b5:ee:c2: c5:fa:e6:c1:eb:85:69:52:50:91:af:a6:36:d1:e7: 3e:08:05:94:78:da:9e:0e:c8:9e:16:6b:e1:d0:ba: b3:18:a6:85:49:0e:3b:ae:18:57:39:d2:7e:07:3d: f6:52:f7:70:74:a4:ab:25:55:a6:ca:87:1b:ad:27: f9:5b:31:83:fd:16:a2:53:1e:6f:7b:92:1d:fa:cd: 3a:3f:b3:fc:1c:fc:8c:e5:17:a7:fe:ee:0c:a1:b0: ed:8c:63:85:93:ff:3e:6f:7a:0c:9a:51:d7:9e:69: a6:a2:c1:c3:04:68:60:8f:e0:91:7c:2b:84:1d:ec: 92:12:40:23:47:50:47:ef:0a:f2:ec:19:13:2f:2c: b2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1A:F7:F8:1A:50:FF:33:FC:51:7E:03:A5:8A:59:77:0A:6F:2B:2E X509v3 Authority Key Identifier: keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:18:00:7e:5b:32:75:8d:02:56:ea:c1:ff:28:5d:e9:7f:31: a6:2c:e9:16:b8:9f:a3:87:b6:0e:64:f7:3d:aa:fb:2b:24:b6: 41:81:2e:04:f4:75:ec:8f:50:30:10:dc:68:d7:26:8a:da:18: 22:ba:7f:dc:43:bb:c3:22:fb:45:75:a2:9e:2e:25:3a:50:25: 2b:67:76:91:31:8e:74:87:36:13:8a:74:34:f6:02:78:d6:5f: c8:ca:4e:e7:fa:5c:4e:a2:33:d7:48:9c:f3:6e:52:33:ab:f7: 08:52:48:8d:03:fb:33:85:a0:3a:65:0e:3e:dd:59:6c:60:62: 02:5a:53:2d:96:73:3f:ce:5a:35:64:fc:eb:3c:e1:ce:1d:33: bc:e1:73:4a:ba:50:3d:a5:25:0e:3d:21:95:61:f0:e2:fb:ed: 96:14:8b:49:ad:78:72:33:dd:be:ed:a6:d2:0d:e6:b2:42:e0: c9:dc:0b:b1:84:68:9b:88:a9:ae:a4:5f:5b:20:9e:5f:3e:db: 22:25:45:eb:50:74:8d:cc:db:6b:a8:a3:d6:94:e6:27:b2:fb: 04:40:2b:37:03:29:b1:74:86:b0:46:43:5f:97:84:ec:0c:b2: 3d:04:ad:b9:dd:89:3f:55:f9:33:e0:aa:76:c4:4f:31:3f:c3: 08:95:96:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nAu7ZjBvThnj4aKKV5UdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyN2EyMzYwN2Y2ZDFlNmU2Y2VkMWRkOTRjOWJkMTBiMzA2 ZjYwOWQwHhcNMjUxMjA2MTcwMDU4WhcNMjUxMjA3MTcwMDU4WjAzMTEwLwYDVQQD Eyg3ODFhZjdmODFhNTBmZjMzZmM1MTdlMDNhNThhNTk3NzBhNmYyYjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZzuJaQwM6aY6fMKxIOReIgJHnnb KE5hoVq97aCmD207Efq9P/9XV+VKyDQn/ekID+RQRPfneILLRYaimwiW1uGua2d3 YfJFUcvX8labfpH4sJLbBWuImUK7hdsOHalQU34jBG33UxlIkPI/HCAcdIS2vFu1 7sLF+ubB64VpUlCRr6Y20ec+CAWUeNqeDsieFmvh0LqzGKaFSQ47rhhXOdJ+Bz32 UvdwdKSrJVWmyocbrSf5WzGD/RaiUx5ve5Id+s06P7P8HPyM5Ren/u4MobDtjGOF k/8+b3oMmlHXnmmmosHDBGhgj+CRfCuEHeySEkAjR1BH7wry7BkTLyyykQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHga9/gaUP8z/FF+A6WKWXcKbysuMB8GA1UdIwQY MBaAFPJ6I2B/bR5ubO0d2Uyb0Qswb2CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEt ODc5MTNjMzU0OTJhLzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEtODc5MTNjMzU0OTJh LzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnhgAflsy dY0CVurB/yhd6X8xpizpFrifo4e2DmT3Par7KyS2QYEuBPR17I9QMBDcaNcmitoY Irp/3EO7wyL7RXWini4lOlAlK2d2kTGOdIc2E4p0NPYCeNZfyMpO5/pcTqIz10ic 825SM6v3CFJIjQP7M4WgOmUOPt1ZbGBiAlpTLZZzP85aNWT86zzhzh0zvOFzSrpQ PaUlDj0hlWHw4vvtlhSLSa14cjPdvu2m0g3mskLgydwLsYRom4iprqRfWyCeXz7b IiVF61B0jczba6ij1pTmJ7L7BEArNwMpsXSGsEZDX5eE7AyyPQStud2JP1X5M+Cq dsRPMT/DCJWWng== -----END CERTIFICATE-----Generated at Sat Dec 6 19:38:29 2025 by rpki-client