This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json) Hash identifier: om9LXhxYr0Wb5CXYO0XgSoDRl8R2FSfVPz3Nbr9ATmY= Subject key identifier: 21:5B:FF:20:BF:C2:5C:F6:27:CA:EC:78:71:21:73:11:E2:14:26:0D Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d Certificate serial: 019B5AF6BBD6971E6722A85ABDB90B546023 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft Manifest number: 11A8 Signing time: Fri 26 Dec 2025 14:01:17 +0000 Manifest this update: Fri 26 Dec 2025 14:01:17 +0000 Manifest next update: Sat 27 Dec 2025 14:01:17 +0000 Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: N1c0qBuPSvSa4hm5J9Q8tA9mGHYMsdVyK48l/muRvuk=) 2: l7jY8kwE-M6c_UhPj-FUehU05zw.roa (hash: pztDbxlKVmEaYKFDmjzGRQ+iSzJwJzlFrSZ9erwEw6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:bb:d6:97:1e:67:22:a8:5a:bd:b9:0b:54:60:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d Validity Not Before: Dec 26 14:01:17 2025 GMT Not After : Dec 27 14:01:17 2025 GMT Subject: CN=215bff20bfc25cf627caec7871217311e214260d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:26:bf:a5:8c:5e:db:20:60:95:7f:50:e7:76: 37:90:68:a4:64:79:83:4e:03:e6:4f:5f:97:d0:5e: c9:6c:d7:30:65:80:0d:f9:03:47:e9:5e:e7:4a:4a: d6:44:b3:a7:5b:b6:60:ef:b4:67:24:c3:34:17:31: 22:6b:53:9d:78:d0:3f:f4:a5:49:ff:d5:97:4c:1e: 78:d5:7f:a9:c9:81:e2:70:1f:cc:dd:5a:f5:61:c7: cc:67:f1:9e:7f:04:2b:7f:99:a4:8f:2e:c1:04:33: 09:4e:13:86:9e:2e:53:86:d9:50:20:d2:ad:29:72: 97:2b:45:31:7d:8c:f7:05:b1:d3:a7:14:42:53:16: 09:31:5a:80:19:b1:44:3b:39:3c:a3:4e:08:b3:5b: 11:04:33:91:bb:8b:3d:6d:32:ee:2c:59:91:64:e9: e7:13:35:1d:23:c0:e2:02:16:0a:78:80:07:0c:1f: d1:55:8c:fc:d5:e0:59:db:64:85:37:73:69:0b:d9: 9b:96:99:db:7a:0f:a2:99:50:ad:43:10:96:ff:0b: ac:bf:74:1c:98:61:cc:e4:a6:e4:16:31:b1:11:42: 28:fc:52:01:7d:a6:d9:c1:8c:25:3b:d8:5a:a0:2d: 22:43:89:67:be:bf:6b:12:c0:f3:fa:7f:16:a3:55: 02:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5B:FF:20:BF:C2:5C:F6:27:CA:EC:78:71:21:73:11:E2:14:26:0D X509v3 Authority Key Identifier: keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:07:ec:ab:63:8b:d8:3a:77:1f:ad:90:c8:52:5f:ba:fe:96: 8c:65:fc:6e:4f:3d:fe:17:a6:84:b9:07:f5:16:06:87:5a:9a: e6:87:52:d1:fd:9e:74:7f:d4:48:d9:0e:fd:a5:ad:eb:71:70: 45:33:fc:97:d5:48:6a:37:2d:73:15:45:06:24:13:4c:ee:1a: 98:44:d3:e3:03:c6:d2:b4:2a:34:73:25:74:7b:74:c4:90:f8: 98:6a:24:57:5b:34:ec:9b:ae:46:45:8d:92:84:1e:3a:be:c2: 14:4a:76:ac:52:77:b4:72:ac:3c:8d:5d:41:24:f2:7c:f1:52: 95:85:79:92:4f:01:2e:2c:77:ea:31:59:69:fd:10:57:1f:93: f0:a6:5f:4c:19:2c:94:19:9b:4b:46:c9:99:77:18:09:18:51: cb:2e:03:bb:66:29:ac:fa:15:67:5a:31:29:bb:49:dd:a2:63: 15:1f:de:4a:f2:71:34:05:94:7c:b2:e1:f2:f2:b1:87:93:35: 45:fd:2a:21:71:b7:49:20:58:5b:b8:05:83:a2:d5:9a:6d:0d: d6:9d:b8:b3:9f:26:2c:c9:dc:0c:b9:cf:c3:18:36:cd:67:14: a6:9b:32:06:cc:1c:50:93:0c:de:13:43:9c:f3:17:98:92:f1: 44:60:5b:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9rvWlx5nIqhavbkLVGAjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyN2EyMzYwN2Y2ZDFlNmU2Y2VkMWRkOTRjOWJkMTBiMzA2 ZjYwOWQwHhcNMjUxMjI2MTQwMTE3WhcNMjUxMjI3MTQwMTE3WjAzMTEwLwYDVQQD EygyMTViZmYyMGJmYzI1Y2Y2MjdjYWVjNzg3MTIxNzMxMWUyMTQyNjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvia/pYxe2yBglX9Q53Y3kGikZHmD TgPmT1+X0F7JbNcwZYAN+QNH6V7nSkrWRLOnW7Zg77RnJMM0FzEia1OdeNA/9KVJ /9WXTB541X+pyYHicB/M3Vr1YcfMZ/GefwQrf5mkjy7BBDMJThOGni5ThtlQINKt KXKXK0UxfYz3BbHTpxRCUxYJMVqAGbFEOzk8o04Is1sRBDORu4s9bTLuLFmRZOnn EzUdI8DiAhYKeIAHDB/RVYz81eBZ22SFN3NpC9mblpnbeg+imVCtQxCW/wusv3Qc mGHM5KbkFjGxEUIo/FIBfabZwYwlO9haoC0iQ4lnvr9rEsDz+n8Wo1UC1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFb/yC/wlz2J8rseHEhcxHiFCYNMB8GA1UdIwQY MBaAFPJ6I2B/bR5ubO0d2Uyb0Qswb2CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEt ODc5MTNjMzU0OTJhLzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEtODc5MTNjMzU0OTJh LzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQfsq2OL 2Dp3H62QyFJfuv6WjGX8bk89/hemhLkH9RYGh1qa5odS0f2edH/USNkO/aWt63Fw RTP8l9VIajctcxVFBiQTTO4amETT4wPG0rQqNHMldHt0xJD4mGokV1s07JuuRkWN koQeOr7CFEp2rFJ3tHKsPI1dQSTyfPFSlYV5kk8BLix36jFZaf0QVx+T8KZfTBks lBmbS0bJmXcYCRhRyy4Du2YprPoVZ1oxKbtJ3aJjFR/eSvJxNAWUfLLh8vKxh5M1 Rf0qIXG3SSBYW7gFg6LVmm0N1p24s58mLMncDLnPwxg2zWcUppsyBswcUJMM3hND nPMXmJLxRGBbLw== -----END CERTIFICATE-----Generated at Fri Dec 26 18:21:22 2025 by rpki-client