This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft File: 8EoYcV28tIU2j6_pm4riyfBK92M.mft (raw, json) Hash identifier: CyxIWLnwmmxdue8UbANB92FZWaCVeiM7YcWKL6nQy9Y= Subject key identifier: F8:95:4D:20:DC:DF:60:00:28:5F:A3:B0:EC:54:F5:64:6A:CA:3D:9F Authority key identifier: F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63 Certificate issuer: /CN=f04a18715dbcb485368fafe99b8ae2c9f04af763 Certificate serial: 019B747FEE4A528CBFBB098FB44A4B8F1456 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft Manifest number: 0F05 Signing time: Wed 31 Dec 2025 13:01:39 +0000 Manifest this update: Wed 31 Dec 2025 13:01:39 +0000 Manifest next update: Thu 01 Jan 2026 13:01:39 +0000 Files and hashes: 1: 8EoYcV28tIU2j6_pm4riyfBK92M.crl (hash: LifFGmx9/hKGjybSD+98w0w66Np18ZBwIJVQMCmG9so=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:7f:ee:4a:52:8c:bf:bb:09:8f:b4:4a:4b:8f:14:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a18715dbcb485368fafe99b8ae2c9f04af763 Validity Not Before: Dec 31 13:01:39 2025 GMT Not After : Jan 1 13:01:39 2026 GMT Subject: CN=f8954d20dcdf6000285fa3b0ec54f5646aca3d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e8:6f:37:73:4b:10:df:bb:6a:94:56:cb:97: 19:da:6b:21:62:e5:5b:5a:1d:57:76:18:da:26:0a: 89:11:be:6e:c5:84:67:36:24:21:14:5a:8f:e7:cf: 82:f3:a7:9f:ac:27:da:d1:a9:72:26:bc:94:f6:cb: 02:e5:f1:e6:16:22:18:ae:a6:a1:b0:14:c2:2b:45: 41:6b:c7:80:8d:e3:86:66:33:f2:06:7b:2e:d1:72: 07:9e:5d:75:e8:fd:75:77:b3:a6:69:45:14:92:26: 18:2d:8b:a6:2d:f9:6a:78:61:2e:c4:15:e2:15:d0: b1:42:0b:e3:57:5e:c8:1b:e3:c6:48:65:94:e9:6d: 43:34:df:1b:6b:10:bb:d7:2e:23:66:dc:72:56:6d: 31:98:8e:d3:c6:00:0e:0a:31:93:ae:05:f5:30:c0: 02:e2:99:da:0b:04:fe:e0:d9:31:1e:f8:58:55:5f: a3:a1:6a:58:ca:12:ee:be:fc:a6:7b:c1:fc:51:be: b0:64:4b:e3:11:e5:62:94:c7:38:83:af:4c:e1:c4: bf:b4:b0:36:16:1d:a2:fa:27:ba:6a:f1:1b:df:06: 2e:fc:50:47:c1:26:90:ce:cf:e3:ee:29:e6:a5:a7: 1b:c1:eb:d1:21:ca:30:8f:76:c0:8b:17:1d:cc:b4: cf:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:95:4D:20:DC:DF:60:00:28:5F:A3:B0:EC:54:F5:64:6A:CA:3D:9F X509v3 Authority Key Identifier: keyid:F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9d:5d:83:fc:e8:d1:9c:e1:6d:eb:75:41:98:b7:0b:c7:4a: e0:fd:e8:0b:12:78:91:b0:04:78:1e:7f:ba:ca:f6:bb:15:65: 9a:55:40:fa:44:f8:6d:84:8e:fe:1b:ee:8e:d3:32:31:10:3b: f6:9b:63:1a:06:98:b4:9d:34:57:e6:ba:99:0f:fb:d5:9a:3e: f0:f6:fb:a7:19:00:a1:90:5a:fc:24:89:bf:3e:2f:2c:45:c6: a5:48:8d:55:b4:e1:38:4c:62:d6:61:69:77:3b:51:c6:05:00: 5d:72:1f:55:c4:8d:58:a6:f8:f9:c0:b6:d1:65:3a:35:f4:49: ba:b1:72:6c:73:05:fa:d8:c9:32:89:f0:e5:bc:3d:fd:84:c8: cc:d9:65:d3:28:73:38:68:f1:94:bd:f4:ee:b9:54:87:0a:dc: f5:4a:b2:94:72:9c:99:22:b2:91:fc:b6:55:79:00:ce:3b:4f: 87:2e:b4:e4:6a:24:c2:35:7c:ab:b8:7d:f7:14:dc:1a:1b:d8: 93:f8:58:b3:c3:e9:b6:87:2c:6b:fb:a9:56:4f:14:5c:75:cf: f5:64:9b:da:0d:d8:1a:8d:1c:58:57:6e:3a:de:47:f2:4c:07: 1f:62:d6:b8:d8:28:19:cf:57:07:9d:e3:8c:36:17:32:5e:62: 8e:8b:c7:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt0f+5KUoy/uwmPtEpLjxRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGExODcxNWRiY2I0ODUzNjhmYWZlOTliOGFlMmM5ZjA0 YWY3NjMwHhcNMjUxMjMxMTMwMTM5WhcNMjYwMTAxMTMwMTM5WjAzMTEwLwYDVQQD EyhmODk1NGQyMGRjZGY2MDAwMjg1ZmEzYjBlYzU0ZjU2NDZhY2EzZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqehvN3NLEN+7apRWy5cZ2mshYuVb Wh1XdhjaJgqJEb5uxYRnNiQhFFqP58+C86efrCfa0alyJryU9ssC5fHmFiIYrqah sBTCK0VBa8eAjeOGZjPyBnsu0XIHnl116P11d7OmaUUUkiYYLYumLflqeGEuxBXi FdCxQgvjV17IG+PGSGWU6W1DNN8baxC71y4jZtxyVm0xmI7TxgAOCjGTrgX1MMAC 4pnaCwT+4NkxHvhYVV+joWpYyhLuvvyme8H8Ub6wZEvjEeVilMc4g69M4cS/tLA2 Fh2i+ie6avEb3wYu/FBHwSaQzs/j7inmpacbwevRIcowj3bAixcdzLTPqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiVTSDc32AAKF+jsOxU9WRqyj2fMB8GA1UdIwQY MBaAFPBKGHFdvLSFNo+v6ZuK4snwSvdjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVvWWNWMjh0SVUyajZfcG00cml5ZkJLOTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wNDJkOGItNjUxMC00N2MyLTk1YTIt MGY0MTAwN2E0Y2UwLzEvOEVvWWNWMjh0SVUyajZfcG00cml5ZkJLOTJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wNDJkOGItNjUxMC00N2MyLTk1YTItMGY0MTAwN2E0Y2Uw LzEvOEVvWWNWMjh0SVUyajZfcG00cml5ZkJLOTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXp1dg/zo 0Zzhbet1QZi3C8dK4P3oCxJ4kbAEeB5/usr2uxVlmlVA+kT4bYSO/hvujtMyMRA7 9ptjGgaYtJ00V+a6mQ/71Zo+8Pb7pxkAoZBa/CSJvz4vLEXGpUiNVbThOExi1mFp dztRxgUAXXIfVcSNWKb4+cC20WU6NfRJurFybHMF+tjJMonw5bw9/YTIzNll0yhz OGjxlL307rlUhwrc9UqylHKcmSKykfy2VXkAzjtPhy605GokwjV8q7h99xTcGhvY k/hYs8Pptocsa/upVk8UXHXP9WSb2g3YGo0cWFduOt5H8kwHH2LWuNgoGc9XB53j jDYXMl5ijovHNA== -----END CERTIFICATE-----Generated at Wed Dec 31 21:06:06 2025 by rpki-client