This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft File: 8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft (raw, json) Hash identifier: U2sTLo7LSQzUfkxWhUb+OrHwOMoLVXuP8unjU2TYnAo= Subject key identifier: 0A:6E:E3:C9:6E:09:DB:C2:7A:02:5B:1C:C9:49:FD:4E:16:D8:6F:12 Authority key identifier: 8B:E2:14:DB:33:7D:72:6A:1F:AC:5F:FB:2E:9D:A1:05:F2:E4:20:25 Certificate issuer: /CN=8be214db337d726a1fac5ffb2e9da105f2e42025 Certificate serial: 46F5ABF4C42BB8CBAD43BE06B023E2E7E16F63DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft Manifest number: 02EB Signing time: Fri 05 Dec 2025 13:26:38 +0000 Manifest this update: Fri 05 Dec 2025 13:21:38 +0000 Manifest next update: Sat 06 Dec 2025 14:59:38 +0000 Files and hashes: 1: 8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl (hash: +JmsONZg+RTIWtlGoTeZuGNV/OXYSm3eJWhNqdRjRhc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 14:59:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:f5:ab:f4:c4:2b:b8:cb:ad:43:be:06:b0:23:e2:e7:e1:6f:63:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8be214db337d726a1fac5ffb2e9da105f2e42025 Validity Not Before: Dec 5 13:21:38 2025 GMT Not After : Dec 6 14:59:38 2025 GMT Subject: CN=0A6EE3C96E09DBC27A025B1CC949FD4E16D86F12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2a:b5:4e:d6:ac:cd:39:73:0c:a4:9e:af:9c: c9:ad:38:27:ef:39:c6:0a:a7:cf:2d:fb:5b:5c:de: bd:1c:b9:80:fa:ef:63:b9:82:a9:34:c8:f6:56:48: 81:49:d0:89:16:f5:cf:84:11:87:79:b8:76:81:30: 78:e3:4a:df:b7:3e:c5:88:b7:a0:09:b8:40:11:50: 15:8a:a2:47:4a:97:48:b2:08:06:ef:b3:05:61:44: 5f:0a:0c:35:e5:20:9e:54:1a:dd:0d:a8:f5:ec:3a: 63:da:c1:a8:71:21:7f:58:60:27:35:fe:3c:66:ac: 5e:7f:ae:71:94:77:03:5a:b3:14:93:66:0c:52:d9: 56:e8:e5:b9:a4:12:3b:b5:e5:eb:d4:48:cc:00:37: 31:a4:28:85:27:10:2f:f8:2f:6d:54:3e:a3:ae:91: d0:6d:9e:73:00:6b:bf:88:fd:c3:79:2d:98:9d:ad: 49:17:25:71:38:db:cf:b5:ca:85:a3:22:69:2d:39: f0:b9:bb:7d:71:70:96:a0:38:6f:75:89:ef:84:f2: d3:1c:57:40:11:19:28:10:38:bc:6e:9b:02:1d:05: 30:4f:2e:af:81:b7:3c:74:77:c1:bf:c2:03:b9:32: 73:13:0d:a6:a5:b1:a3:ab:d4:99:0e:d1:b5:18:88: 54:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6E:E3:C9:6E:09:DB:C2:7A:02:5B:1C:C9:49:FD:4E:16:D8:6F:12 X509v3 Authority Key Identifier: keyid:8B:E2:14:DB:33:7D:72:6A:1F:AC:5F:FB:2E:9D:A1:05:F2:E4:20:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:0b:d1:17:80:e0:d5:aa:60:19:49:8e:ae:4e:49:3a:7a:1e: 41:1f:ee:40:b4:84:6d:4c:c8:a2:d7:e3:6f:8c:60:54:2c:2a: 7d:b1:ef:94:c4:bf:a6:ae:29:cb:be:45:b5:9b:ee:ed:ef:11: 07:60:54:3f:72:0d:d8:85:7a:fe:93:d7:fc:87:df:6f:1c:fe: e2:0a:6c:aa:0b:48:a0:9b:80:2a:b4:00:95:78:ac:b5:57:e4: 03:77:1e:4e:cc:0b:77:4e:1f:ae:03:a2:6f:60:f8:4f:56:ef: ff:c0:31:28:26:22:48:e0:87:8a:f8:f7:58:0c:1a:6f:81:3b: 43:8f:fb:29:67:df:35:96:0f:8b:28:87:0c:2c:00:16:67:6a: ec:53:37:40:59:42:3d:9d:fb:42:4b:14:b3:43:8a:3b:51:90: 78:7b:00:59:d1:d9:32:11:22:82:bf:0f:7e:4d:3b:fb:a5:d3: c9:f4:e4:f6:a8:cd:19:53:c1:dc:f5:21:d1:a6:a5:d7:da:c4: 8e:db:a6:15:2e:67:db:b4:4a:ea:70:cb:f4:fd:4b:2d:48:b2: 9a:15:79:d9:12:d4:85:d7:21:04:72:fe:4f:70:b5:b9:d0:84: 73:73:d4:f0:cf:64:b9:e4:17:53:f6:b6:02:82:95:6c:54:35: 74:cc:14:7d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURvWr9MQruMutQ74GsCPi5+FvY9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGJlMjE0ZGIzMzdkNzI2YTFmYWM1ZmZiMmU5ZGExMDVm MmU0MjAyNTAeFw0yNTEyMDUxMzIxMzhaFw0yNTEyMDYxNDU5MzhaMDMxMTAvBgNV BAMTKDBBNkVFM0M5NkUwOURCQzI3QTAyNUIxQ0M5NDlGRDRFMTZEODZGMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9KrVO1qzNOXMMpJ6vnMmtOCfv OcYKp88t+1tc3r0cuYD672O5gqk0yPZWSIFJ0IkW9c+EEYd5uHaBMHjjSt+3PsWI t6AJuEARUBWKokdKl0iyCAbvswVhRF8KDDXlIJ5UGt0NqPXsOmPawahxIX9YYCc1 /jxmrF5/rnGUdwNasxSTZgxS2Vbo5bmkEju15evUSMwANzGkKIUnEC/4L21UPqOu kdBtnnMAa7+I/cN5LZidrUkXJXE428+1yoWjImktOfC5u31xcJagOG91ie+E8tMc V0ARGSgQOLxumwIdBTBPLq+Btzx0d8G/wgO5MnMTDaalsaOr1JkO0bUYiFShAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUCm7jyW4J28J6AlscyUn9ThbYbxIwHwYDVR0j BBgwFoAUi+IU2zN9cmofrF/7Lp2hBfLkICUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTQ1MWRmMzAtM2RmZS00NTAyLWExY2YtMTM0MzU4Mzlk YTBhLzAvOEJFMjE0REIzMzdENzI2QTFGQUM1RkZCMkU5REExMDVGMkU0MjAyNS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ktSVUyek45Y21vZnJGXzdMcDJoQmZM a0lDVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xNDUxZGYzMC0z ZGZlLTQ1MDItYTFjZi0xMzQzNTgzOWRhMGEvMC84QkUyMTREQjMzN0Q3MjZBMUZB QzVGRkIyRTlEQTEwNUYyRTQyMDI1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwvRF4Dg1apgGUmOrk5J OnoeQR/uQLSEbUzIotfjb4xgVCwqfbHvlMS/pq4py75FtZvu7e8RB2BUP3IN2IV6 /pPX/Iffbxz+4gpsqgtIoJuAKrQAlXistVfkA3ceTswLd04frgOib2D4T1bv/8Ax KCYiSOCHivj3WAwab4E7Q4/7KWffNZYPiyiHDCwAFmdq7FM3QFlCPZ37QksUs0OK O1GQeHsAWdHZMhEigr8Pfk07+6XTyfTk9qjNGVPB3PUh0aal19rEjtumFS5n27RK 6nDL9P1LLUiymhV52RLUhdchBHL+T3C1udCEc3PU8M9kueQXU/a2AoKVbFQ1dMwU fQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:35 2025 by rpki-client