This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft File: 8XShpC1Ap_uCpsCM6XZRy2ar83A.mft (raw, json) Hash identifier: i2Rrb/bYKq6OHqDkgNjUrS9gJJDYIB6WB6hYQAlHfgM= Subject key identifier: E8:55:44:13:8A:1D:F1:F0:6A:CA:41:BB:CF:72:AE:75:89:71:69:D2 Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70 Certificate issuer: /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370 Certificate serial: 019B299C1119BEAED5EA0FDF502D99398858 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft Manifest number: 0B7E Signing time: Wed 17 Dec 2025 00:00:52 +0000 Manifest this update: Wed 17 Dec 2025 00:00:52 +0000 Manifest next update: Thu 18 Dec 2025 00:00:52 +0000 Files and hashes: 1: 8XShpC1Ap_uCpsCM6XZRy2ar83A.crl (hash: wEUwSHwuzemO6ylyS1gvd+wgDz9gvPzk6KjEJ8pTPl8=) 2: Jzc1N5JK_K9rsqLLazjrhQAzn9E.roa (hash: c37u7+7V7zO9cUACPw1X9wuITqfc2J+4zg3NEuS9Gzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 00:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:9c:11:19:be:ae:d5:ea:0f:df:50:2d:99:39:88:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370 Validity Not Before: Dec 17 00:00:52 2025 GMT Not After : Dec 18 00:00:52 2025 GMT Subject: CN=e85544138a1df1f06aca41bbcf72ae75897169d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:12:b2:26:69:69:7d:8f:74:e9:33:89:d1:d0: 63:a5:bc:5e:7a:dc:ef:42:b3:be:76:fd:4b:6d:8c: 94:63:7d:c0:ee:ba:72:11:48:a7:ac:c0:f1:11:29: 79:31:8d:eb:88:ad:50:8a:29:0a:12:ea:f5:f7:8b: 27:13:c9:72:e4:ef:4e:c9:f8:c3:a1:fe:6e:d8:db: ec:6a:73:98:cf:d9:40:f6:d3:14:16:5d:e3:6f:4d: 47:28:91:fb:ef:c9:3c:72:84:7d:12:38:3f:f2:d7: ce:b2:ef:f6:19:69:83:97:f8:1e:96:02:43:2e:c8: 62:d2:1a:23:dd:13:39:39:58:90:47:9f:fe:de:16: 22:d2:9f:cb:d0:63:78:4e:8a:ab:f2:61:a1:dd:82: 2e:a0:de:9d:29:fb:76:61:52:64:c5:fb:bc:5d:48: 0f:01:e9:46:4f:ef:b6:84:bf:42:72:00:7c:d3:cc: 1b:b2:c0:3b:07:6d:d3:9d:bf:6a:e2:6b:03:8c:bc: 02:78:c1:19:f5:e8:5b:92:93:3f:e0:21:82:d1:2c: 81:d4:c6:c9:e5:06:1d:4a:85:d4:ca:86:c1:36:9c: 1a:52:e6:ea:1e:53:d8:08:13:59:a7:fe:ae:97:48: d0:47:ca:3e:9b:98:82:9a:49:75:bb:53:81:8f:1b: 4b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:55:44:13:8A:1D:F1:F0:6A:CA:41:BB:CF:72:AE:75:89:71:69:D2 X509v3 Authority Key Identifier: keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:dc:ac:59:ac:ea:06:ba:b1:9a:c8:0f:02:b8:c0:07:f2:1a: ce:01:d3:28:f1:08:cd:3d:3a:02:7e:76:fb:81:c2:86:b4:50: 2a:53:cc:cc:60:38:55:2d:ec:3a:41:51:3a:9c:95:39:04:07: c6:25:e6:df:e7:6f:91:ea:40:56:dd:10:44:29:5d:5e:3e:eb: 79:21:51:b9:bb:83:00:41:b2:2e:6c:37:19:84:8b:0d:d7:bc: 84:5c:00:4e:e7:7f:df:ef:c7:dd:bf:3d:ba:59:54:51:d3:c8: db:ea:8c:c9:1d:2e:32:48:f7:f0:14:85:de:ec:3f:3e:69:74: ae:f6:96:45:a6:d6:25:52:99:68:38:e7:63:cc:84:f7:94:c8: 79:b9:ec:ec:6e:35:4d:c5:a4:24:3e:5f:2d:a9:7b:d9:d6:a4: 33:ce:81:70:9b:d9:86:67:b7:f1:4d:c6:e6:9b:ef:d9:05:31: 43:63:7f:1f:3a:f4:d5:75:e8:0b:19:62:29:7e:6e:84:4b:7a: f7:90:d0:b8:32:b9:d1:85:9c:45:5e:e3:30:74:8c:b6:a0:9e: 27:b0:a6:aa:34:b3:3a:8a:7b:39:04:e3:91:59:6a:c7:81:5b: 7a:2f:af:ff:0a:dd:14:53:3a:2c:6f:88:31:64:10:3a:f7:ce: 98:35:e5:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspnBEZvq7V6g/fUC2ZOYhYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNzRhMWE0MmQ0MGE3ZmI4MmE2YzA4Y2U5NzY1MWNiNjZh YmYzNzAwHhcNMjUxMjE3MDAwMDUyWhcNMjUxMjE4MDAwMDUyWjAzMTEwLwYDVQQD EyhlODU1NDQxMzhhMWRmMWYwNmFjYTQxYmJjZjcyYWU3NTg5NzE2OWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhKyJmlpfY906TOJ0dBjpbxeetzv QrO+dv1LbYyUY33A7rpyEUinrMDxESl5MY3riK1QiikKEur194snE8ly5O9OyfjD of5u2NvsanOYz9lA9tMUFl3jb01HKJH778k8coR9Ejg/8tfOsu/2GWmDl/gelgJD Lshi0hoj3RM5OViQR5/+3hYi0p/L0GN4Toqr8mGh3YIuoN6dKft2YVJkxfu8XUgP AelGT++2hL9CcgB808wbssA7B23Tnb9q4msDjLwCeMEZ9ehbkpM/4CGC0SyB1MbJ 5QYdSoXUyobBNpwaUubqHlPYCBNZp/6ul0jQR8o+m5iCmkl1u1OBjxtLHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhVRBOKHfHwaspBu89yrnWJcWnSMB8GA1UdIwQY MBaAFPF0oaQtQKf7gqbAjOl2Uctmq/NwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFhTaHBDMUFwX3VDcHNDTTZYWlJ5MmFyODNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lZTljODEtNmQ2Ny00ZTMzLWJkMWYt MTM0OGVjOTdiOTAyLzEvOFhTaHBDMUFwX3VDcHNDTTZYWlJ5MmFyODNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9lZTljODEtNmQ2Ny00ZTMzLWJkMWYtMTM0OGVjOTdiOTAy LzEvOFhTaHBDMUFwX3VDcHNDTTZYWlJ5MmFyODNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNysWazq BrqxmsgPArjAB/IazgHTKPEIzT06An52+4HChrRQKlPMzGA4VS3sOkFROpyVOQQH xiXm3+dvkepAVt0QRCldXj7reSFRubuDAEGyLmw3GYSLDde8hFwATud/3+/H3b89 ullUUdPI2+qMyR0uMkj38BSF3uw/Pml0rvaWRabWJVKZaDjnY8yE95TIebns7G41 TcWkJD5fLal72dakM86BcJvZhme38U3G5pvv2QUxQ2N/Hzr01XXoCxliKX5uhEt6 95DQuDK50YWcRV7jMHSMtqCeJ7CmqjSzOop7OQTjkVlqx4Fbei+v/wrdFFM6LG+I MWQQOvfOmDXlZA== -----END CERTIFICATE-----Generated at Wed Dec 17 09:49:09 2025 by rpki-client