This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft File: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json) Hash identifier: jcniA8Jp4m8zKW31nHy1yYz5UohygPubQDmtQURSDfY= Subject key identifier: E0:DB:09:61:34:3D:AF:95:CE:37:48:A9:0D:2E:93:06:59:91:D8:D4 Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3 Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3 Certificate serial: 019AF164603191D1D99E2FDB267A7E6AFE25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft Manifest number: 070C Signing time: Sat 06 Dec 2025 02:01:18 +0000 Manifest this update: Sat 06 Dec 2025 02:01:18 +0000 Manifest next update: Sun 07 Dec 2025 02:01:18 +0000 Files and hashes: 1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: r3ZGIBBagagYwlEaIQ52YZLszSWNCWxXPAoAZrQGcIY=) 2: Tm2nsqR26Dl9LeV6Cyt_JHr-v8Y.roa (hash: uihaqn4cl1EUm9BC8+JYEwJFvxEP94e45YDqvyFRac4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:60:31:91:d1:d9:9e:2f:db:26:7a:7e:6a:fe:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3 Validity Not Before: Dec 6 02:01:18 2025 GMT Not After : Dec 7 02:01:18 2025 GMT Subject: CN=e0db0961343daf95ce3748a90d2e93065991d8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:66:1b:fb:5e:8b:b9:c2:44:9a:19:cd:61:75: f0:13:cf:d8:c9:b4:6e:6e:7f:72:a0:2d:fd:2c:47: f6:1f:b9:61:3b:fe:9f:96:cb:4a:a7:a9:7f:24:be: 9f:05:ee:64:05:3d:58:9d:ab:8a:56:2f:97:ec:61: 7e:88:ed:93:e9:29:46:f9:bc:21:4c:b7:ac:4b:fc: 32:32:2a:3b:1f:11:c9:2e:b4:dd:da:5d:45:75:f9: 9c:8a:67:a9:2d:fe:0d:ac:a6:cc:f6:db:16:37:7b: 2f:6b:8e:65:e2:13:65:27:1b:24:02:0a:5a:4d:8a: de:5d:09:e3:0d:af:a5:84:b3:11:38:8b:d9:a9:02: 59:0d:bd:0d:52:9e:c9:6b:12:73:3f:21:45:20:38: d0:49:b1:c7:a7:ae:c1:2f:8d:06:69:00:04:13:20: 89:b5:42:fc:e1:a5:cc:fe:2e:cf:c3:3e:ef:7e:5a: 84:d2:85:08:d8:35:7e:d9:1d:b2:3c:4c:a8:eb:e8: 7e:8b:d3:08:00:17:13:fc:88:7b:2a:ac:64:e8:58: 2b:77:d3:7f:fe:1b:18:7d:ff:ad:ff:fa:36:b5:e2: 9b:0f:63:61:ec:83:9e:e4:b0:58:b4:3a:92:c6:53: 69:1e:0c:ea:78:5a:ae:53:1d:b0:e3:16:6e:9d:a0: 93:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DB:09:61:34:3D:AF:95:CE:37:48:A9:0D:2E:93:06:59:91:D8:D4 X509v3 Authority Key Identifier: keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f2:06:90:01:73:6a:66:bd:b8:54:fa:92:67:be:dd:22:ee: 00:5f:0e:9c:be:32:a5:7c:71:24:f4:dc:57:ec:dd:63:92:8b: 08:d4:5b:15:e6:14:ae:1e:1c:38:df:6e:8f:25:be:a9:a9:b8: be:c6:de:94:8b:a2:ae:98:39:fc:77:02:d2:11:9a:ce:be:0a: b0:3d:f2:2f:73:fa:b7:bc:8b:d4:49:4c:f4:f2:c9:91:15:99: 17:81:e2:29:59:f7:4f:2d:61:e0:1d:9a:41:41:95:ed:c5:fb: f2:78:e7:4e:9f:27:42:4f:86:73:4b:08:9b:09:08:c5:aa:34: e3:e7:bb:30:0f:0b:05:25:a6:2d:ed:fd:c1:11:6d:7d:c3:43: a1:f1:90:91:17:6f:dd:04:db:75:a6:70:33:af:36:e2:a5:9c: 83:54:96:86:a1:6b:34:77:17:55:68:3e:3b:a1:25:e4:22:ba: bf:c1:67:a4:5b:77:ed:e5:a4:c0:ec:94:48:b7:d7:1a:fe:fd: 4e:35:83:56:e5:8c:6c:f6:c0:cd:dc:47:5c:3c:71:9d:49:a5: 50:a3:a4:56:0f:0f:a5:4c:df:48:9f:ab:f5:58:99:f4:0a:0f: 13:38:63:33:25:56:a9:0b:77:99:63:aa:fe:ee:a5:35:f0:d0: aa:99:ea:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGAxkdHZni/bJnp+av4lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMmQ1ZjE3NjM2YTFmMTRlZmE4YTBlNDA5OWIzZDMzNWZm ODRkZDMwHhcNMjUxMjA2MDIwMTE4WhcNMjUxMjA3MDIwMTE4WjAzMTEwLwYDVQQD EyhlMGRiMDk2MTM0M2RhZjk1Y2UzNzQ4YTkwZDJlOTMwNjU5OTFkOGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GYb+16LucJEmhnNYXXwE8/YybRu bn9yoC39LEf2H7lhO/6flstKp6l/JL6fBe5kBT1YnauKVi+X7GF+iO2T6SlG+bwh TLesS/wyMio7HxHJLrTd2l1FdfmcimepLf4NrKbM9tsWN3sva45l4hNlJxskAgpa TYreXQnjDa+lhLMROIvZqQJZDb0NUp7JaxJzPyFFIDjQSbHHp67BL40GaQAEEyCJ tUL84aXM/i7Pwz7vflqE0oUI2DV+2R2yPEyo6+h+i9MIABcT/Ih7Kqxk6Fgrd9N/ /hsYff+t//o2teKbD2Nh7IOe5LBYtDqSxlNpHgzqeFquUx2w4xZunaCT8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODbCWE0Pa+VzjdIqQ0ukwZZkdjUMB8GA1UdIwQY MBaAFPItXxdjah8U76ig5AmbPTNf+E3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zZDM5ODYtNmQ0Mi00YjNkLTlmYzAt NjExYTJhMWI4MjI0LzEvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zZDM5ODYtNmQ0Mi00YjNkLTlmYzAtNjExYTJhMWI4MjI0 LzEvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffIGkAFz ama9uFT6kme+3SLuAF8OnL4ypXxxJPTcV+zdY5KLCNRbFeYUrh4cON9ujyW+qam4 vsbelIuirpg5/HcC0hGazr4KsD3yL3P6t7yL1ElM9PLJkRWZF4HiKVn3Ty1h4B2a QUGV7cX78njnTp8nQk+Gc0sImwkIxao04+e7MA8LBSWmLe39wRFtfcNDofGQkRdv 3QTbdaZwM6824qWcg1SWhqFrNHcXVWg+O6El5CK6v8FnpFt37eWkwOyUSLfXGv79 TjWDVuWMbPbAzdxHXDxxnUmlUKOkVg8PpUzfSJ+r9ViZ9AoPEzhjMyVWqQt3mWOq /u6lNfDQqpnqMA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:26 2025 by rpki-client