This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft File: 8x7XsfY7UapRap_8sDWjoNaeZaE.mft (raw, json) Hash identifier: I15Z4a8YdSF5QZOV8xDFmzkL5oWwmjLps94wBhOY/wE= Subject key identifier: 0C:EF:36:23:94:7A:79:2D:10:13:AA:9F:2B:E0:50:64:41:08:A2:F1 Authority key identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1 Certificate issuer: /CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1 Certificate serial: 019AF31B9D68ACC46FC5A15984DC2A5673A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft Manifest number: 085A Signing time: Sat 06 Dec 2025 10:01:04 +0000 Manifest this update: Sat 06 Dec 2025 10:01:04 +0000 Manifest next update: Sun 07 Dec 2025 10:01:04 +0000 Files and hashes: 1: 8x7XsfY7UapRap_8sDWjoNaeZaE.crl (hash: ZkfyKzaPT3rJjAh3xH6Q5ozDYiYeD8zUL8hip6U3gb8=) 2: I4AeQbB27YGBJ6rcGLTRKR2F550.roa (hash: UIY98sWU5q875YoF6i4X8Jb2tdiHntT6LMJCK5ZTjXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:9d:68:ac:c4:6f:c5:a1:59:84:dc:2a:56:73:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1 Validity Not Before: Dec 6 10:01:04 2025 GMT Not After : Dec 7 10:01:04 2025 GMT Subject: CN=0cef3623947a792d1013aa9f2be050644108a2f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c4:28:9c:61:be:e6:7b:11:cc:43:6d:d4:cc: cf:a5:ac:74:11:3b:9e:d0:a5:03:30:85:e6:39:33: 86:57:6a:84:bb:2b:be:5f:2a:25:94:b1:eb:10:a8: ef:80:2d:20:d1:76:a1:0b:06:05:94:cd:a1:b4:df: f5:9f:31:1b:88:90:67:6e:ea:de:bc:93:e8:32:c3: 10:ae:0a:6a:a0:2c:32:0c:81:df:0e:b6:85:42:64: 5b:0d:30:fc:ef:4e:64:e0:e6:76:5c:ae:1e:72:83: b8:9c:52:bc:4f:e9:59:93:85:db:fa:48:53:1a:30: ad:36:ef:a9:30:5b:7c:0b:32:d2:bd:92:68:6a:96: bb:1b:e6:12:f6:9b:6e:d6:7a:23:e7:26:f2:bb:a8: b7:4d:75:70:6e:e7:9d:b7:3f:aa:44:4d:a7:40:9f: e7:57:6b:c9:6d:10:33:7f:30:85:55:c6:f3:1e:d7: 2a:ee:53:52:76:72:10:a3:46:26:96:3b:64:98:59: c8:ed:53:64:d9:28:9f:ce:44:7f:f3:6c:c2:b6:3a: 3c:72:18:0e:68:9b:3f:f8:66:bf:de:90:3c:0b:d6: 68:c0:2f:e8:3e:d2:2b:85:2f:07:dd:ef:f8:51:cf: 83:1c:a3:01:20:17:27:b3:93:00:bc:9f:ce:f9:da: 00:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EF:36:23:94:7A:79:2D:10:13:AA:9F:2B:E0:50:64:41:08:A2:F1 X509v3 Authority Key Identifier: keyid:F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:9b:38:72:c6:f5:03:ec:45:fa:9e:34:dc:df:f1:58:8f:7e: 56:ae:08:64:26:31:24:1a:5f:a0:12:09:dc:5b:26:b8:bb:51: e2:67:54:63:f6:f8:d6:c0:4d:58:d1:1b:ec:47:fe:15:9c:31: 2e:d3:b6:12:d4:9a:55:79:fc:94:b6:c1:7e:c8:68:42:0b:bb: 35:84:f7:bf:18:6f:d3:8a:f7:ce:6a:d5:7a:6a:b1:af:e7:de: cf:ad:93:bc:3f:53:69:80:64:4d:0a:05:72:51:4b:ee:25:7d: 73:94:bb:96:a8:31:d9:56:66:7b:7e:40:26:ad:d5:0e:a8:ad: 55:15:fb:7a:74:20:4f:61:31:51:4b:23:f4:20:23:8b:ad:ad: a6:c8:f8:45:9c:bd:75:43:21:78:df:96:35:ed:f8:5a:22:19: ef:c5:ac:84:83:c3:96:c5:97:0e:1e:78:0b:74:25:f9:0d:bd: 86:60:68:87:fd:32:ed:d3:14:65:de:54:4e:dc:01:33:1d:e0: d5:84:c9:e3:fc:d0:7d:6e:4b:87:f2:bf:c2:69:65:0a:1d:03: 4d:2c:9e:93:d4:72:51:4d:64:e8:2d:bc:ad:11:2e:1c:de:ea: 22:c3:61:a4:5b:09:21:54:5a:77:15:5b:3c:f6:96:b6:5c:10: c2:fd:cd:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG51orMRvxaFZhNwqVnOjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMWVkN2IxZjYzYjUxYWE1MTZhOWZmY2IwMzVhM2EwZDY5 ZTY1YTEwHhcNMjUxMjA2MTAwMTA0WhcNMjUxMjA3MTAwMTA0WjAzMTEwLwYDVQQD EygwY2VmMzYyMzk0N2E3OTJkMTAxM2FhOWYyYmUwNTA2NDQxMDhhMmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cQonGG+5nsRzENt1MzPpax0ETue 0KUDMIXmOTOGV2qEuyu+XyollLHrEKjvgC0g0XahCwYFlM2htN/1nzEbiJBnbure vJPoMsMQrgpqoCwyDIHfDraFQmRbDTD8705k4OZ2XK4ecoO4nFK8T+lZk4Xb+khT GjCtNu+pMFt8CzLSvZJoapa7G+YS9ptu1noj5ybyu6i3TXVwbuedtz+qRE2nQJ/n V2vJbRAzfzCFVcbzHtcq7lNSdnIQo0YmljtkmFnI7VNk2SifzkR/82zCtjo8chgO aJs/+Ga/3pA8C9ZowC/oPtIrhS8H3e/4Uc+DHKMBIBcns5MAvJ/O+doAnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzvNiOUenktEBOqnyvgUGRBCKLxMB8GA1UdIwQY MBaAFPMe17H2O1GqUWqf/LA1o6DWnmWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC85OWVkMDYtZTQ0NS00Y2EyLWI2NDct YmQyYjNhYmFlMTIxLzEvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC85OWVkMDYtZTQ0NS00Y2EyLWI2NDctYmQyYjNhYmFlMTIx LzEvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZs4csb1 A+xF+p403N/xWI9+Vq4IZCYxJBpfoBIJ3FsmuLtR4mdUY/b41sBNWNEb7Ef+FZwx LtO2EtSaVXn8lLbBfshoQgu7NYT3vxhv04r3zmrVemqxr+fez62TvD9TaYBkTQoF clFL7iV9c5S7lqgx2VZme35AJq3VDqitVRX7enQgT2ExUUsj9CAji62tpsj4RZy9 dUMheN+WNe34WiIZ78WshIPDlsWXDh54C3Ql+Q29hmBoh/0y7dMUZd5UTtwBMx3g 1YTJ4/zQfW5Lh/K/wmllCh0DTSyek9RyUU1k6C28rREuHN7qIsNhpFsJIVRadxVb PPaWtlwQwv3NMw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:15:15 2025 by rpki-client