This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json) Hash identifier: v9RY0m2v5u74CVVEIx/c+FTvgyKZ/cnfRbMBgrJRTVE= Subject key identifier: DC:B6:38:62:76:46:9C:FE:82:51:7D:43:B6:E3:20:1E:7C:38:72:A6 Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a Certificate serial: 019B3AFDA5369139FE28AF35BBD573A3D937 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft Manifest number: 0BE0 Signing time: Sat 20 Dec 2025 09:00:59 +0000 Manifest this update: Sat 20 Dec 2025 09:00:59 +0000 Manifest next update: Sun 21 Dec 2025 09:00:59 +0000 Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: ukrCjxE8rF0ZL7BSQt/ruLB3iDdyHapBCzmRELu3KFM=) 2: 9fWa2lfLkLJ8sCmivN6TQyBLwDA.roa (hash: IPb2Fry6AFROnpqPDxpsLGmfQRyiCcADkUuNtSOH1vw=) 3: M0hmVP_O7pmzGC1lZ8auVtUv08M.roa (hash: O6keKWXCa23CBnMYQ5j2NdMEa5h/R6dRjRYYfD56tpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:a5:36:91:39:fe:28:af:35:bb:d5:73:a3:d9:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a Validity Not Before: Dec 20 09:00:59 2025 GMT Not After : Dec 21 09:00:59 2025 GMT Subject: CN=dcb6386276469cfe82517d43b6e3201e7c3872a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:68:1b:35:6c:2c:d2:26:f8:cc:7a:1a:48: cd:7d:93:8f:7d:2f:cd:09:4c:2b:8b:06:b7:81:43: f8:05:a1:dc:9d:aa:3e:6f:62:12:e7:83:ac:09:a7: db:f5:41:45:a6:64:d3:b7:66:c6:ec:85:03:1e:6a: 2f:8a:5c:ea:ba:a7:fe:da:52:d2:7b:39:e4:8c:41: 5d:d9:7b:f0:cd:78:f6:cc:2d:73:6e:77:f3:86:55: dc:7a:81:56:9e:52:31:d0:0e:b5:48:52:c7:a6:9a: 8c:15:cb:8f:d0:a4:a1:6a:0d:05:2d:88:de:35:dc: e6:77:7a:ad:57:2c:19:65:d9:e6:3a:51:ff:8b:14: 1d:5a:04:40:48:09:c1:d7:f0:5b:7b:8e:f1:4b:8c: de:94:bd:35:aa:be:dd:3c:6c:44:eb:6f:9b:c3:78: dd:2a:8e:b8:be:92:e7:46:91:60:e8:44:d6:68:50: 13:fa:6a:9c:16:7f:f1:d9:be:35:58:a5:a0:a5:8d: 4e:18:86:8a:14:70:b5:71:b5:44:cf:49:ab:ab:82: 80:ae:a4:98:da:0f:77:b5:ba:dc:a1:9b:81:6d:47: e5:e6:37:a3:ae:88:19:69:f8:a4:5e:bc:56:92:8b: ba:8e:9d:8a:82:e2:1a:2d:07:e0:3a:c2:a7:a8:ba: 5f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B6:38:62:76:46:9C:FE:82:51:7D:43:B6:E3:20:1E:7C:38:72:A6 X509v3 Authority Key Identifier: keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:f7:1a:e5:8b:c0:e9:55:7f:90:67:d5:f0:15:9b:74:cc:64: 32:ae:aa:26:31:88:7c:82:02:5e:26:c2:b6:c8:3f:65:cc:6d: 89:20:17:fb:61:58:f6:dc:bf:f5:78:7b:32:d3:cb:a6:71:49: f3:96:ee:92:f5:16:06:65:97:0b:b8:88:69:24:da:3a:9f:36: cd:29:6b:81:ec:02:51:48:19:f0:9c:ac:35:ab:f5:d6:b4:de: 7c:36:9b:52:56:9c:ba:20:c8:77:59:98:63:f9:2b:78:fe:67: 31:75:4d:b7:c7:9e:1f:11:26:e7:28:d9:93:c9:ca:6a:9e:fe: e3:ba:1e:c5:e6:09:c6:fa:82:8a:a5:e7:9e:27:59:95:4d:68: 48:ed:df:ba:34:94:5e:db:5f:e1:3c:f2:e9:d5:ac:97:ef:5b: 02:5d:de:35:ab:f2:e8:c5:b2:57:21:58:29:43:ba:f1:a4:ab: d3:0e:50:da:19:c2:2b:68:19:67:57:30:b2:53:39:05:89:fe: 41:fa:d7:67:60:dc:ae:51:73:cf:3b:e8:4b:53:89:94:22:aa: 06:91:0f:2f:d7:36:0e:54:80:ce:26:56:2e:5c:90:d7:1a:56: c5:aa:e5:e8:50:92:04:12:b3:75:7d:a4:b9:e6:ec:8d:6f:d0: 05:42:8e:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/aU2kTn+KK81u9Vzo9k3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGQyNzg0ODVmZmFlYTc5ZTkxMGEyNjI1MzNhODBiNWFi OTFjOGEwHhcNMjUxMjIwMDkwMDU5WhcNMjUxMjIxMDkwMDU5WjAzMTEwLwYDVQQD EyhkY2I2Mzg2Mjc2NDY5Y2ZlODI1MTdkNDNiNmUzMjAxZTdjMzg3MmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC9oGzVsLNIm+Mx6GkjNfZOPfS/N CUwriwa3gUP4BaHcnao+b2IS54OsCafb9UFFpmTTt2bG7IUDHmovilzquqf+2lLS eznkjEFd2XvwzXj2zC1zbnfzhlXceoFWnlIx0A61SFLHppqMFcuP0KShag0FLYje Ndzmd3qtVywZZdnmOlH/ixQdWgRASAnB1/Bbe47xS4zelL01qr7dPGxE62+bw3jd Ko64vpLnRpFg6ETWaFAT+mqcFn/x2b41WKWgpY1OGIaKFHC1cbVEz0mrq4KArqSY 2g93tbrcoZuBbUfl5jejrogZafikXrxWkou6jp2KguIaLQfgOsKnqLpf3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNy2OGJ2Rpz+glF9Q7bjIB58OHKmMB8GA1UdIwQY MBaAFPBNJ4SF/66nnpEKJiUzqAtauRyKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hYTc0MjYtNzExZC00ZjNlLThkZjkt NWMwZTMxNmQyOGI4LzEvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9hYTc0MjYtNzExZC00ZjNlLThkZjktNWMwZTMxNmQyOGI4 LzEvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/ca5YvA 6VV/kGfV8BWbdMxkMq6qJjGIfIICXibCtsg/ZcxtiSAX+2FY9ty/9Xh7MtPLpnFJ 85bukvUWBmWXC7iIaSTaOp82zSlrgewCUUgZ8JysNav11rTefDabUlacuiDId1mY Y/kreP5nMXVNt8eeHxEm5yjZk8nKap7+47oexeYJxvqCiqXnnidZlU1oSO3fujSU Xttf4Tzy6dWsl+9bAl3eNavy6MWyVyFYKUO68aSr0w5Q2hnCK2gZZ1cwslM5BYn+ QfrXZ2DcrlFzzzvoS1OJlCKqBpEPL9c2DlSAziZWLlyQ1xpWxarl6FCSBBKzdX2k uebsjW/QBUKOFQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:48:12 2025 by rpki-client