This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json) Hash identifier: V/iqyQjV9dKctx3JsBIETmVYQjz+It+dlB2GNHyWUbY= Subject key identifier: 14:71:2B:64:91:D1:69:96:4A:1E:50:82:AB:E8:E2:C2:E1:72:DF:73 Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e Certificate serial: 019B638B95A8E326D8BB0B31649E30604063 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft Manifest number: 085D Signing time: Sun 28 Dec 2025 06:00:50 +0000 Manifest this update: Sun 28 Dec 2025 06:00:50 +0000 Manifest next update: Mon 29 Dec 2025 06:00:50 +0000 Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: noUzXbeUGXnz1JrjCWJEwBq0xjvVKrWo0bmA5oqPdbY=) 2: NoirTMocfMUxRX4SSF3NnN1MXMg.roa (hash: k1dgXUxG201nPT5HWgsPlWuxupL/o/GsnkXTowkj8SY=) 3: kBL0NGTyltK_bUGqu0ZT8FN5oyY.roa (hash: RQ7q9e83VNSzPNBYQofT5w9K3HiXcrFugBatkkxu9/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:8b:95:a8:e3:26:d8:bb:0b:31:64:9e:30:60:40:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e Validity Not Before: Dec 28 06:00:50 2025 GMT Not After : Dec 29 06:00:50 2025 GMT Subject: CN=14712b6491d169964a1e5082abe8e2c2e172df73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1c:36:cb:33:73:bf:2c:5c:c6:4b:54:1e:b8: a3:5f:7e:d2:17:e2:d3:d4:92:17:5a:95:61:4f:87: 71:e3:cb:7a:68:35:34:c4:f2:11:ba:d8:18:8a:a4: 82:35:4c:60:c9:39:f9:81:01:92:7f:61:bf:b6:4b: 32:5d:92:cb:05:40:d7:52:bd:d0:b7:fd:65:0a:17: 86:6f:02:99:6f:80:19:15:c3:17:8d:3d:14:4f:e0: ec:22:2e:4c:12:e9:0f:fd:a9:22:a9:d6:24:91:cf: a9:93:64:38:4b:91:58:6b:59:ef:24:ed:bc:42:cc: f5:ca:d2:08:01:28:d7:76:67:1b:99:39:57:9f:e6: c3:94:66:20:0c:aa:72:6b:aa:79:36:80:c5:53:0c: 82:2e:5e:d2:d6:4c:3a:a3:74:e4:4f:97:06:b4:f1: a4:bc:5c:67:05:27:61:23:43:3d:27:90:bc:67:1d: 6e:cf:fd:2c:c8:b1:21:38:f6:bf:0d:98:4b:80:07: 64:4f:5a:48:f2:51:21:83:90:45:76:c0:f1:26:b3: 29:66:ec:ca:e6:05:de:a8:35:5a:17:07:25:22:34: 73:69:bd:38:19:07:c5:1a:cc:21:aa:13:e8:b3:c3: 3a:ac:c2:02:b1:94:71:b3:b2:7a:47:b9:7d:18:7b: b2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:71:2B:64:91:D1:69:96:4A:1E:50:82:AB:E8:E2:C2:E1:72:DF:73 X509v3 Authority Key Identifier: keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d4:4d:8a:e0:d5:eb:4e:be:a9:a6:fa:e5:68:b8:10:74:32: 3f:20:ca:90:ad:ad:a9:05:b9:7b:49:eb:65:34:f7:f7:d5:07: a5:2c:36:28:0d:a8:91:56:12:8d:b9:d0:4f:05:3f:2b:8a:94: 25:49:14:b7:f8:de:40:37:a6:79:03:6d:87:86:7d:d1:4a:da: dd:6a:23:e5:04:46:b0:c4:3c:fe:89:26:50:04:ad:11:1a:0a: b3:e1:1a:01:af:54:e5:99:45:28:0f:c9:df:d1:6b:1f:7e:de: 30:de:57:8a:56:41:32:9c:b8:55:e5:ad:bc:87:8d:9a:33:26: c4:f6:2d:48:6f:56:62:ca:43:09:75:60:72:f8:04:cf:d3:ac: db:e5:fc:35:88:02:f6:a6:3a:17:d0:7a:02:7c:e7:5d:25:e8: 23:09:69:9b:93:c8:de:f1:35:4e:44:29:21:ed:e1:94:21:5c: 58:b6:42:05:b1:8e:71:ca:6d:55:1c:15:13:9b:70:fe:51:4f: bb:18:12:b0:7a:de:02:33:dc:a5:ed:f1:14:56:ae:37:5a:8a: b0:88:12:e1:11:02:98:b3:58:e4:eb:d2:74:96:fb:4a:f2:e9: 72:9f:af:31:8c:56:15:f4:be:1c:ab:9c:fc:d7:f7:18:c0:3b: 68:75:a4:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtji5Wo4ybYuwsxZJ4wYEBjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMWQxYzA1YWJkNzE0YzY3YzMyOTFlMDEwZDIxYzcwYTM1 ZGQ1N2UwHhcNMjUxMjI4MDYwMDUwWhcNMjUxMjI5MDYwMDUwWjAzMTEwLwYDVQQD EygxNDcxMmI2NDkxZDE2OTk2NGExZTUwODJhYmU4ZTJjMmUxNzJkZjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhw2yzNzvyxcxktUHrijX37SF+LT 1JIXWpVhT4dx48t6aDU0xPIRutgYiqSCNUxgyTn5gQGSf2G/tksyXZLLBUDXUr3Q t/1lCheGbwKZb4AZFcMXjT0UT+DsIi5MEukP/akiqdYkkc+pk2Q4S5FYa1nvJO28 Qsz1ytIIASjXdmcbmTlXn+bDlGYgDKpya6p5NoDFUwyCLl7S1kw6o3TkT5cGtPGk vFxnBSdhI0M9J5C8Zx1uz/0syLEhOPa/DZhLgAdkT1pI8lEhg5BFdsDxJrMpZuzK 5gXeqDVaFwclIjRzab04GQfFGswhqhPos8M6rMICsZRxs7J6R7l9GHuyDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRxK2SR0WmWSh5Qgqvo4sLhct9zMB8GA1UdIwQY MBaAFPMdHAWr1xTGfDKR4BDSHHCjXdV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMt NTU1OWFjNDEwYWNlLzEvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC84ODY2YmItMmViNy00Mjg4LWE4MmMtNTU1OWFjNDEwYWNl LzEvOHgwY0JhdlhGTVo4TXBIZ0VOSWNjS05kMVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9RNiuDV 606+qab65Wi4EHQyPyDKkK2tqQW5e0nrZTT399UHpSw2KA2okVYSjbnQTwU/K4qU JUkUt/jeQDemeQNth4Z90Ura3Woj5QRGsMQ8/okmUAStERoKs+EaAa9U5ZlFKA/J 39FrH37eMN5XilZBMpy4VeWtvIeNmjMmxPYtSG9WYspDCXVgcvgEz9Os2+X8NYgC 9qY6F9B6AnznXSXoIwlpm5PI3vE1TkQpIe3hlCFcWLZCBbGOccptVRwVE5tw/lFP uxgSsHreAjPcpe3xFFauN1qKsIgS4RECmLNY5OvSdJb7SvLpcp+vMYxWFfS+HKuc /Nf3GMA7aHWkwg== -----END CERTIFICATE-----Generated at Sun Dec 28 07:30:07 2025 by rpki-client