This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft File: 8G3inpNW30RwfIOW2RjmsokSnEo.mft (raw, json) Hash identifier: /3ZOxV1XURxcCLNyGuaHsEuLgJhz2dnndFyNlOL9/IM= Subject key identifier: 64:E7:05:1B:CF:79:61:9F:8E:0F:2C:A1:B7:72:70:5D:E2:D7:EF:69 Authority key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A Certificate issuer: /CN=f06de29e9356df44707c8396d918e6b289129c4a Certificate serial: 019B43257E85BC3CE45507CE7AF1B771582E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft Manifest number: 02EE Signing time: Sun 21 Dec 2025 23:01:29 +0000 Manifest this update: Sun 21 Dec 2025 23:01:29 +0000 Manifest next update: Mon 22 Dec 2025 23:01:29 +0000 Files and hashes: 1: 8G3inpNW30RwfIOW2RjmsokSnEo.crl (hash: 3aq6oiUWvfaIgy5/50ZUWm0p/1veNdxgbHYKLeGxjzQ=) 2: FruHS8sKA0UVPBPUKiJYlzj46rI.roa (hash: If8vnhAP47c8P1zX/kOfX6rctIeesg8CbkDyipSuox4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:7e:85:bc:3c:e4:55:07:ce:7a:f1:b7:71:58:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f06de29e9356df44707c8396d918e6b289129c4a Validity Not Before: Dec 21 23:01:29 2025 GMT Not After : Dec 22 23:01:29 2025 GMT Subject: CN=64e7051bcf79619f8e0f2ca1b772705de2d7ef69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:30:e9:96:39:67:fe:3b:c7:1b:bc:a1:3a:78: 67:77:9a:9b:51:31:12:ed:49:da:2c:48:a6:c2:34: 7a:a1:2f:22:94:46:6c:bc:48:c7:f1:f5:b0:66:b5: 92:a0:86:f9:db:79:53:dd:4c:d2:d3:7f:93:e5:28: c2:f8:3e:bd:4e:16:aa:45:c4:b3:0a:f3:f9:96:59: 30:77:f5:81:9a:de:23:ed:24:7b:93:b4:8b:b8:ca: 03:34:3c:f0:3c:6e:13:c3:6e:e9:79:92:44:4a:74: c8:2c:e4:61:12:08:31:5c:6b:af:69:57:cc:f2:d2: 24:87:de:23:9d:c2:72:92:7d:37:b9:ab:80:bf:73: 4b:62:f5:fc:57:51:01:68:01:2d:90:e4:06:fe:6a: 07:da:9d:2a:bf:a1:3a:e9:94:e1:a0:9a:d7:69:74: 48:fa:98:7e:28:55:bc:f5:51:52:7a:99:46:e3:26: b1:f8:07:95:a8:28:48:46:36:91:a1:6c:42:b6:be: 84:87:1d:4b:4f:04:fa:b0:e0:bc:95:83:f4:8f:b5: 33:47:39:bd:25:bf:39:e0:9f:07:d9:f0:7b:cf:16: 33:db:3a:a2:7e:59:b2:6a:53:f7:8a:b2:c9:9f:ca: 04:ac:e0:fa:d8:ab:cb:da:1f:9e:45:c7:d0:cb:48: 30:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E7:05:1B:CF:79:61:9F:8E:0F:2C:A1:B7:72:70:5D:E2:D7:EF:69 X509v3 Authority Key Identifier: keyid:F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:12:b5:60:a4:d2:72:ca:09:ad:81:8e:0c:90:f4:81:0d:4e: e3:09:2c:90:0a:ae:3b:9e:13:87:a5:ea:77:5c:92:18:5f:e7: 8e:67:d7:06:55:5e:72:e8:dd:40:83:2c:4d:9c:dc:4f:07:01: 9c:ba:87:66:7f:a1:9c:39:be:04:a5:ef:61:1d:97:94:92:b4: 24:c0:1c:e9:01:96:cf:28:7a:d0:6b:4c:1d:d4:a0:d3:68:b3: 9e:b0:ea:61:83:17:24:55:7c:8c:ad:f3:ac:06:34:0e:2f:95: cd:c8:23:97:cb:70:f6:8d:a5:a9:51:17:1f:30:9c:bd:30:d4: e8:3e:a5:57:98:d0:c0:28:ee:57:e5:15:58:43:55:16:49:5c: 23:f0:28:39:19:6b:e5:22:e1:4c:5b:c9:0c:42:80:83:84:2b: 0d:69:e7:99:eb:db:9d:a7:63:af:50:e4:e1:7a:a1:c6:36:49: 8d:25:78:5e:0b:cb:ec:56:7b:02:82:0f:90:1b:22:37:af:b7: 2c:ca:01:b6:c6:32:b5:26:f3:e0:1b:01:3d:0f:76:a8:2f:0b: ab:db:10:ce:62:2a:5b:ae:29:6f:37:ae:56:7d:3d:0b:c1:be: 23:1e:fa:62:3c:5c:03:e7:80:81:3f:0d:93:f2:51:32:64:11: 33:ef:2b:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJX6FvDzkVQfOevG3cVguMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNmRlMjllOTM1NmRmNDQ3MDdjODM5NmQ5MThlNmIyODkx MjljNGEwHhcNMjUxMjIxMjMwMTI5WhcNMjUxMjIyMjMwMTI5WjAzMTEwLwYDVQQD Eyg2NGU3MDUxYmNmNzk2MTlmOGUwZjJjYTFiNzcyNzA1ZGUyZDdlZjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTDpljln/jvHG7yhOnhnd5qbUTES 7UnaLEimwjR6oS8ilEZsvEjH8fWwZrWSoIb523lT3UzS03+T5SjC+D69ThaqRcSz CvP5llkwd/WBmt4j7SR7k7SLuMoDNDzwPG4Tw27peZJESnTILORhEggxXGuvaVfM 8tIkh94jncJykn03uauAv3NLYvX8V1EBaAEtkOQG/moH2p0qv6E66ZThoJrXaXRI +ph+KFW89VFSeplG4yax+AeVqChIRjaRoWxCtr6Ehx1LTwT6sOC8lYP0j7UzRzm9 Jb854J8H2fB7zxYz2zqiflmyalP3irLJn8oErOD62KvL2h+eRcfQy0gwpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTnBRvPeWGfjg8sobdycF3i1+9pMB8GA1UdIwQY MBaAFPBt4p6TVt9EcHyDltkY5rKJEpxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lNDRkNTgtMTVkNS00OGM3LWJlMjEt ZjgxNmQzYmU0MDEyLzEvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lNDRkNTgtMTVkNS00OGM3LWJlMjEtZjgxNmQzYmU0MDEy LzEvOEczaW5wTlczMFJ3ZklPVzJSam1zb2tTbkVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhK1YKTS csoJrYGODJD0gQ1O4wkskAquO54Th6Xqd1ySGF/njmfXBlVecujdQIMsTZzcTwcB nLqHZn+hnDm+BKXvYR2XlJK0JMAc6QGWzyh60GtMHdSg02iznrDqYYMXJFV8jK3z rAY0Di+Vzcgjl8tw9o2lqVEXHzCcvTDU6D6lV5jQwCjuV+UVWENVFklcI/AoORlr 5SLhTFvJDEKAg4QrDWnnmevbnadjr1Dk4XqhxjZJjSV4XgvL7FZ7AoIPkBsiN6+3 LMoBtsYytSbz4BsBPQ92qC8Lq9sQzmIqW64pbzeuVn09C8G+Ix76YjxcA+eAgT8N k/JRMmQRM+8rUA== -----END CERTIFICATE-----Generated at Mon Dec 22 07:56:41 2025 by rpki-client