This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft File: 8eV-NQ06bbilgFWSmfC504vMWVI.mft (raw, json) Hash identifier: YrK7OPuneDmGyfWLKrv6Yo229gecseGJYgUfW2naO68= Subject key identifier: E9:6F:BF:A7:70:96:45:8A:E6:A2:C1:5D:24:44:94:D9:0B:9C:15:DA Authority key identifier: F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52 Certificate issuer: /CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952 Certificate serial: 019AF19B1F1D5FE68DC2308CC7FF16650FD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft Manifest number: 02F7 Signing time: Sat 06 Dec 2025 03:01:06 +0000 Manifest this update: Sat 06 Dec 2025 03:01:06 +0000 Manifest next update: Sun 07 Dec 2025 03:01:06 +0000 Files and hashes: 1: 8eV-NQ06bbilgFWSmfC504vMWVI.crl (hash: EsfnnwBpu8mk/r0AIdgnbdt+LOcFrnRILmqGB6h+1M0=) 2: sW8bwiGLsI7Vh96L_GlmvLQDJKY.roa (hash: zwPk0zZ0KWeH/lkVto00u9mSsOX9BDpbaWABcwD0yq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:1f:1d:5f:e6:8d:c2:30:8c:c7:ff:16:65:0f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952 Validity Not Before: Dec 6 03:01:06 2025 GMT Not After : Dec 7 03:01:06 2025 GMT Subject: CN=e96fbfa77096458ae6a2c15d244494d90b9c15da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9d:4e:d7:97:90:6a:1a:d8:68:9f:e6:eb:64: f5:7e:75:49:e0:a8:ba:9a:8a:80:23:3a:f4:3b:d0: 6b:09:96:9a:00:25:8b:83:fb:e0:a5:5a:6b:7b:09: 5a:a0:4e:69:ee:9f:58:a8:f0:db:e5:f1:8d:32:52: 8d:e0:0f:eb:79:27:c1:da:18:b4:19:b0:74:7b:cc: ab:15:6e:d6:1a:9a:b3:17:01:56:c5:8a:46:1f:86: 34:6b:73:79:57:96:55:31:e6:07:86:05:4a:a1:e8: c4:5b:da:c3:2d:9c:a8:c5:ce:a6:2f:30:84:f8:16: 22:06:f2:55:e5:76:ad:85:e8:ab:75:01:78:d3:5f: 90:4d:38:e4:65:d9:5a:2c:71:35:06:5d:ff:46:6e: a7:b0:d8:90:0f:30:0f:e1:d8:51:6f:56:db:04:11: 67:bf:62:3a:e2:10:34:a7:3f:2a:94:33:0b:4c:c1: 25:10:55:f3:fb:bc:4e:ca:32:d9:78:6f:d2:b4:b2: 60:b7:6d:e7:f1:26:66:e7:17:a8:8d:a1:d1:03:29: 7a:04:38:31:ec:4e:07:d0:cb:9b:35:81:e7:b1:14: ae:45:0f:52:7f:7b:25:9f:81:20:bb:5a:0b:6b:37: 7a:22:d7:a6:ec:27:0e:33:e5:d1:90:ab:40:5f:0a: 9b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:6F:BF:A7:70:96:45:8A:E6:A2:C1:5D:24:44:94:D9:0B:9C:15:DA X509v3 Authority Key Identifier: keyid:F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:70:2a:63:db:61:20:98:57:20:ce:fa:86:52:2c:c0:e1:6d: c5:3d:95:4f:c5:2a:42:fb:d3:5c:61:df:cd:37:34:1e:08:43: b3:55:e9:c3:97:59:a2:ca:27:78:c6:53:2e:46:2d:10:d6:c2: a6:bd:42:ba:d4:10:26:54:9e:d8:d7:94:39:8e:43:b1:e6:07: cd:79:26:43:04:b4:b2:b8:ab:97:0f:19:e8:af:f7:0a:ad:20: 58:02:bd:42:2a:58:36:7d:01:a5:fc:d4:ac:a5:0e:79:33:25: 55:fb:d7:22:38:57:39:d5:df:7a:98:8e:76:0d:70:8f:9e:4d: bb:7e:d5:f3:1c:00:b6:22:65:ee:ef:14:34:a4:d4:33:4b:e6: 50:38:71:27:7d:1f:eb:fc:b8:1f:d7:f3:aa:44:b6:9a:08:f8: c7:1d:60:22:87:89:dc:5a:70:76:82:1c:b8:fd:dd:1c:7f:34: 92:71:0c:47:ab:51:6e:40:14:49:43:c5:e5:84:d9:d8:54:8f: 49:1e:77:bb:6a:cb:ed:98:bd:a6:9a:45:67:f5:3d:bd:d2:60: 47:26:12:c3:2d:cc:6a:cf:aa:4c:93:a8:27:2b:86:ac:3e:dc: c3:d8:73:49:ed:d3:0c:93:a6:8d:c8:09:f3:f9:56:7b:4a:15: ac:d3:8e:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmx8dX+aNwjCMx/8WZQ/QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZTU3ZTM1MGQzYTZkYjhhNTgwNTU5Mjk5ZjBiOWQzOGJj YzU5NTIwHhcNMjUxMjA2MDMwMTA2WhcNMjUxMjA3MDMwMTA2WjAzMTEwLwYDVQQD EyhlOTZmYmZhNzcwOTY0NThhZTZhMmMxNWQyNDQ0OTRkOTBiOWMxNWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7J1O15eQahrYaJ/m62T1fnVJ4Ki6 moqAIzr0O9BrCZaaACWLg/vgpVprewlaoE5p7p9YqPDb5fGNMlKN4A/reSfB2hi0 GbB0e8yrFW7WGpqzFwFWxYpGH4Y0a3N5V5ZVMeYHhgVKoejEW9rDLZyoxc6mLzCE +BYiBvJV5XatheirdQF401+QTTjkZdlaLHE1Bl3/Rm6nsNiQDzAP4dhRb1bbBBFn v2I64hA0pz8qlDMLTMElEFXz+7xOyjLZeG/StLJgt23n8SZm5xeojaHRAyl6BDgx 7E4H0MubNYHnsRSuRQ9Sf3sln4Egu1oLazd6Item7CcOM+XRkKtAXwqbbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlvv6dwlkWK5qLBXSRElNkLnBXaMB8GA1UdIwQY MBaAFPHlfjUNOm24pYBVkpnwudOLzFlSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGVWLU5RMDZiYmlsZ0ZXU21mQzUwNHZNV1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yMjJkZjItNjIyNS00MDQxLTljYjAt MGNkOWZhYTU2NTNlLzEvOGVWLU5RMDZiYmlsZ0ZXU21mQzUwNHZNV1ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8yMjJkZjItNjIyNS00MDQxLTljYjAtMGNkOWZhYTU2NTNl LzEvOGVWLU5RMDZiYmlsZ0ZXU21mQzUwNHZNV1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXAqY9th IJhXIM76hlIswOFtxT2VT8UqQvvTXGHfzTc0HghDs1Xpw5dZosoneMZTLkYtENbC pr1CutQQJlSe2NeUOY5DseYHzXkmQwS0srirlw8Z6K/3Cq0gWAK9QipYNn0BpfzU rKUOeTMlVfvXIjhXOdXfepiOdg1wj55Nu37V8xwAtiJl7u8UNKTUM0vmUDhxJ30f 6/y4H9fzqkS2mgj4xx1gIoeJ3FpwdoIcuP3dHH80knEMR6tRbkAUSUPF5YTZ2FSP SR53u2rL7Zi9pppFZ/U9vdJgRyYSwy3Mas+qTJOoJyuGrD7cw9hzSe3TDJOmjcgJ 8/lWe0oVrNOOGA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:25 2025 by rpki-client