This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft File: 8XeBcSTyB3J0O9MFlKiFOyvexqo.mft (raw, json) Hash identifier: 5/qK0FE6DvmD2FsWtuhDzDOBC9Jp7Yv1M+e8NT0B/r0= Subject key identifier: 23:55:EE:6C:9A:E3:19:E8:40:34:6A:BC:C0:D6:9D:83:FA:73:BD:F2 Authority key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA Certificate issuer: /CN=f177817124f20772743bd30594a8853b2bdec6aa Certificate serial: 019B4F6050E205EE99BA1695D6F8D857FBCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft Manifest number: 0E8A Signing time: Wed 24 Dec 2025 08:01:10 +0000 Manifest this update: Wed 24 Dec 2025 08:01:10 +0000 Manifest next update: Thu 25 Dec 2025 08:01:10 +0000 Files and hashes: 1: 2jqEixEfH9W4ryTrv4L_xGNFOKw.asa (hash: hl5tj4DAhIdXk+y3UcohqlF6hplYFILm0RmWglWn8No=) 2: 8XeBcSTyB3J0O9MFlKiFOyvexqo.crl (hash: y43fol6viUCuYF49CwI0/MxXL7uTTzBTKy3s1Y0ToM8=) 3: ZfrqB-JhfiqNRWe3zj0YhBh2Vgk.roa (hash: AZkZxydWTOa7MDw2bfdTftJLCSFU1oN9eZ8WQJFQzJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:50:e2:05:ee:99:ba:16:95:d6:f8:d8:57:fb:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f177817124f20772743bd30594a8853b2bdec6aa Validity Not Before: Dec 24 08:01:10 2025 GMT Not After : Dec 25 08:01:10 2025 GMT Subject: CN=2355ee6c9ae319e840346abcc0d69d83fa73bdf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b8:66:97:dd:96:9d:11:7a:80:99:e8:aa:cc: 51:53:f2:0d:14:73:60:69:46:3b:ef:2f:32:2c:3d: c8:c5:40:0f:65:15:46:48:c5:ef:10:38:5a:5a:54: e7:c1:23:00:51:94:60:69:00:a4:02:ad:39:22:99: 5a:91:f4:19:81:8c:97:75:47:75:2e:ab:8e:ba:51: ba:a4:b1:d6:bd:ec:19:60:bf:ac:6c:cd:05:94:7b: 62:5b:9c:9f:cd:d9:c8:05:e7:80:a8:d4:37:d9:6a: fd:1e:19:cb:ac:02:fc:f7:11:83:81:f1:33:9a:7d: 50:b0:99:5e:92:89:10:d9:f5:5c:e8:15:41:cf:51: c0:4f:9c:fd:aa:0a:a2:b5:de:97:90:73:b4:87:08: 5a:88:95:ea:e7:85:49:37:70:34:74:ab:78:33:9c: b1:eb:8e:24:73:d5:31:ae:1f:95:cd:0d:ca:a1:ee: 4c:a6:52:17:5e:4e:fe:43:80:15:86:f6:53:a6:0c: 4e:80:5d:1e:8a:be:fd:c1:0f:de:13:30:4a:ff:a5: 6f:ac:1c:c0:31:15:5e:53:52:15:0c:28:c5:36:cb: 82:37:25:67:87:50:67:52:ea:d5:b7:4d:6d:98:df: a5:cc:db:5e:43:66:e3:66:4b:b4:61:5d:e9:92:d0: 18:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:55:EE:6C:9A:E3:19:E8:40:34:6A:BC:C0:D6:9D:83:FA:73:BD:F2 X509v3 Authority Key Identifier: keyid:F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:83:92:4b:2e:45:ea:b1:c5:ec:b9:32:79:27:06:49:f2:15: b6:e6:ad:f9:6c:19:34:1f:96:ae:99:3c:ec:b3:1d:48:e1:bc: 72:bc:f8:3a:31:0f:8c:bb:72:2f:61:e7:8d:fd:59:7d:d3:b4: 33:a8:6c:d5:ca:4d:86:2c:77:12:96:18:6b:48:30:23:9a:29: e0:3e:80:ab:b5:0c:cc:de:44:b9:e6:81:27:49:92:fb:4f:a9: 45:6b:0d:8e:41:3b:cc:cf:d6:f6:95:6d:85:75:66:4e:75:ae: 27:83:60:1f:c6:9b:e4:97:f6:d3:c8:49:12:22:34:07:98:a9: 74:d1:43:2c:42:ad:38:e1:cc:74:3a:3e:c4:43:e0:84:9a:fd: 27:9e:3c:8b:60:e2:83:4a:c8:f1:80:f4:cf:c9:78:4d:b7:f0: d9:46:fc:4c:19:4f:ac:70:8b:3b:40:74:08:64:5d:e8:56:0e: 1f:03:aa:7b:d0:41:aa:d0:ff:33:00:1e:f4:d5:be:f4:86:8f: 78:57:c5:19:24:5a:b0:92:00:22:9d:5d:02:03:7b:04:63:c0: 8a:4c:10:1d:83:4c:86:b8:ae:70:e0:06:33:ef:44:9d:d5:52: ba:e1:e9:95:8b:40:47:a7:93:ad:ee:88:78:e9:af:36:56:07: af:b3:0c:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYFDiBe6ZuhaV1vjYV/vNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNzc4MTcxMjRmMjA3NzI3NDNiZDMwNTk0YTg4NTNiMmJk ZWM2YWEwHhcNMjUxMjI0MDgwMTEwWhcNMjUxMjI1MDgwMTEwWjAzMTEwLwYDVQQD EygyMzU1ZWU2YzlhZTMxOWU4NDAzNDZhYmNjMGQ2OWQ4M2ZhNzNiZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17hml92WnRF6gJnoqsxRU/INFHNg aUY77y8yLD3IxUAPZRVGSMXvEDhaWlTnwSMAUZRgaQCkAq05IplakfQZgYyXdUd1 LquOulG6pLHWvewZYL+sbM0FlHtiW5yfzdnIBeeAqNQ32Wr9HhnLrAL89xGDgfEz mn1QsJlekokQ2fVc6BVBz1HAT5z9qgqitd6XkHO0hwhaiJXq54VJN3A0dKt4M5yx 644kc9Uxrh+VzQ3Koe5MplIXXk7+Q4AVhvZTpgxOgF0eir79wQ/eEzBK/6VvrBzA MRVeU1IVDCjFNsuCNyVnh1BnUurVt01tmN+lzNteQ2bjZku0YV3pktAYQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNV7mya4xnoQDRqvMDWnYP6c73yMB8GA1UdIwQY MBaAFPF3gXEk8gdydDvTBZSohTsr3saqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMDQ0ZTItYTg0Mi00OGFiLWJjNTQt NjI1NDIyMjgyOTFjLzEvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8wMDQ0ZTItYTg0Mi00OGFiLWJjNTQtNjI1NDIyMjgyOTFj LzEvOFhlQmNTVHlCM0owTzlNRmxLaUZPeXZleHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4OSSy5F 6rHF7LkyeScGSfIVtuat+WwZNB+Wrpk87LMdSOG8crz4OjEPjLtyL2Hnjf1ZfdO0 M6hs1cpNhix3EpYYa0gwI5op4D6Aq7UMzN5EueaBJ0mS+0+pRWsNjkE7zM/W9pVt hXVmTnWuJ4NgH8ab5Jf208hJEiI0B5ipdNFDLEKtOOHMdDo+xEPghJr9J548i2Di g0rI8YD0z8l4Tbfw2Ub8TBlPrHCLO0B0CGRd6FYOHwOqe9BBqtD/MwAe9NW+9IaP eFfFGSRasJIAIp1dAgN7BGPAikwQHYNMhriucOAGM+9EndVSuuHplYtAR6eTre6I eOmvNlYHr7MMlA== -----END CERTIFICATE-----Generated at Wed Dec 24 12:00:34 2025 by rpki-client