This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft File: 8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json) Hash identifier: L5OtcSYY/yV2jNREFD80wmDzl2RizxyiCjxu2+Y23Xc= Subject key identifier: 7A:9A:4F:06:C6:6E:0D:45:EE:AC:4E:2B:22:AC:C6:F4:D2:1A:C7:CF Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F Certificate issuer: /CN=f0d444bc7d5334da14de805172b2625e9830763f Certificate serial: 019AF2400577BA1954FAB5DD60300FF9A171 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft Manifest number: 06E2 Signing time: Sat 06 Dec 2025 06:01:13 +0000 Manifest this update: Sat 06 Dec 2025 06:01:13 +0000 Manifest next update: Sun 07 Dec 2025 06:01:13 +0000 Files and hashes: 1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: 2CXL0SLpVkDB7rMmMbW96/LDf2rvAaRjhorlyjLWBlU=) 2: 8VhhkSiakyjyds2HL3KVl5SAjHk.roa (hash: XMxyFpkWV1CCq0kdHYWIMKgwA50BX4tfunpr2JyfxpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:05:77:ba:19:54:fa:b5:dd:60:30:0f:f9:a1:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f Validity Not Before: Dec 6 06:01:13 2025 GMT Not After : Dec 7 06:01:13 2025 GMT Subject: CN=7a9a4f06c66e0d45eeac4e2b22acc6f4d21ac7cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b9:ef:ba:9a:00:b1:42:b8:0f:ba:5c:6d:26: 2d:69:57:7b:ed:ce:98:b0:ec:b6:f5:94:99:46:a4: 47:84:20:fe:15:c3:2e:29:20:91:05:ff:aa:ca:37: d3:db:3b:39:fe:31:4a:90:34:63:ea:bd:8a:42:8d: 8f:df:e0:2c:00:fc:46:30:04:30:da:0c:b8:0d:1b: 72:48:48:10:ab:05:7f:06:af:17:a1:cd:87:46:a5: 24:25:26:1a:0a:d7:7a:e9:eb:00:ff:1e:a4:af:d7: a0:e0:fc:3a:16:16:2e:10:ac:41:79:0d:dd:0c:ce: e8:aa:4e:ff:b6:9e:63:b2:76:ae:d6:41:af:fc:1a: 9e:9d:0f:a6:87:42:de:2b:95:a5:84:2e:d4:06:28: 11:06:71:a3:29:b3:96:66:5c:6e:93:60:65:de:49: 7d:90:7b:bc:57:75:3c:47:14:48:d9:46:f8:e2:5b: 22:67:91:3b:cf:51:4b:7f:a7:43:1f:b7:7c:a2:a6: 25:fc:15:8e:8d:34:b6:0a:1f:d9:c3:7f:4d:05:1b: 71:c2:26:00:86:4a:c4:02:1e:7d:48:77:ec:94:0d: a8:d0:5c:03:c1:a9:8f:45:40:74:b2:51:36:ec:bb: 8b:5a:52:48:ee:6a:ba:58:d2:84:65:e8:5c:e6:91: dc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:9A:4F:06:C6:6E:0D:45:EE:AC:4E:2B:22:AC:C6:F4:D2:1A:C7:CF X509v3 Authority Key Identifier: keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:02:69:5d:63:90:9d:b9:68:00:b9:a8:97:d7:9d:eb:84:ae: b1:74:de:60:32:91:6b:34:a6:25:95:05:fb:7b:38:0e:79:24: 5b:ce:9a:2a:d7:7d:3e:db:88:b5:0c:34:93:6a:76:41:08:b5: ae:1f:a5:47:54:68:2e:72:ee:e5:5b:ba:24:1f:24:a3:46:aa: 35:90:36:22:a8:ff:c1:63:00:52:87:be:c7:12:91:2a:6c:a8: 15:1e:89:9d:d9:27:8c:cd:bd:82:36:06:f0:2c:16:78:3b:28: bd:ff:13:52:08:cc:ee:55:9b:f9:d9:36:04:49:cf:bb:71:f8: 94:b8:37:e0:f7:6e:49:5a:49:48:9c:d1:8f:45:84:87:18:49: b6:e9:fa:93:fd:ab:33:79:99:39:96:21:5a:65:8c:bd:fa:32: 5d:a2:ae:97:cf:13:ea:2c:3e:3c:5f:2a:5d:4d:04:ef:07:19: 86:87:17:a6:cf:f2:8e:8c:e2:b8:0a:8c:b4:be:5c:16:68:e2: 4d:d7:e5:18:0d:14:3c:31:f0:7b:74:12:e2:9c:c3:88:9b:83: 31:1a:3d:30:33:94:99:1f:98:cf:d2:57:81:ed:29:af:1d:92: f1:41:a2:a6:c6:e6:45:a5:29:f2:ec:5b:3f:5e:e5:81:23:24: 6c:93:23:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAV3uhlU+rXdYDAP+aFxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZDQ0NGJjN2Q1MzM0ZGExNGRlODA1MTcyYjI2MjVlOTgz MDc2M2YwHhcNMjUxMjA2MDYwMTEzWhcNMjUxMjA3MDYwMTEzWjAzMTEwLwYDVQQD Eyg3YTlhNGYwNmM2NmUwZDQ1ZWVhYzRlMmIyMmFjYzZmNGQyMWFjN2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrnvupoAsUK4D7pcbSYtaVd77c6Y sOy29ZSZRqRHhCD+FcMuKSCRBf+qyjfT2zs5/jFKkDRj6r2KQo2P3+AsAPxGMAQw 2gy4DRtySEgQqwV/Bq8Xoc2HRqUkJSYaCtd66esA/x6kr9eg4Pw6FhYuEKxBeQ3d DM7oqk7/tp5jsnau1kGv/BqenQ+mh0LeK5WlhC7UBigRBnGjKbOWZlxuk2Bl3kl9 kHu8V3U8RxRI2Ub44lsiZ5E7z1FLf6dDH7d8oqYl/BWOjTS2Ch/Zw39NBRtxwiYA hkrEAh59SHfslA2o0FwDwamPRUB0slE27LuLWlJI7mq6WNKEZehc5pHcwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqaTwbGbg1F7qxOKyKsxvTSGsfPMB8GA1UdIwQY MBaAFPDURLx9UzTaFN6AUXKyYl6YMHY/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE5SRXZIMVROTm9VM29CUmNySmlYcGd3ZGo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy81ZGMyN2QtNWFkYi00ZGYzLTk5YzIt OThkOWM0MjU3ZmM2LzEvOE5SRXZIMVROTm9VM29CUmNySmlYcGd3ZGo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy81ZGMyN2QtNWFkYi00ZGYzLTk5YzItOThkOWM0MjU3ZmM2 LzEvOE5SRXZIMVROTm9VM29CUmNySmlYcGd3ZGo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgJpXWOQ nbloALmol9ed64SusXTeYDKRazSmJZUF+3s4DnkkW86aKtd9PtuItQw0k2p2QQi1 rh+lR1RoLnLu5Vu6JB8ko0aqNZA2Iqj/wWMAUoe+xxKRKmyoFR6JndknjM29gjYG 8CwWeDsovf8TUgjM7lWb+dk2BEnPu3H4lLg34PduSVpJSJzRj0WEhxhJtun6k/2r M3mZOZYhWmWMvfoyXaKul88T6iw+PF8qXU0E7wcZhocXps/yjoziuAqMtL5cFmji TdflGA0UPDHwe3QS4pzDiJuDMRo9MDOUmR+Yz9JXge0prx2S8UGipsbmRaUp8uxb P17lgSMkbJMjMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:09:14 2025 by rpki-client