This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft File: 8eV-NQ06bbilgFWSmfC504vMWVI.mft (raw, json) Hash identifier: SrIHT+/E38Pozr4f+AcdpnyWkRmc8qkWnjMUgoJTAU0= Subject key identifier: A9:BF:1F:92:FF:AE:EF:87:AA:BF:2E:E1:B8:45:FD:E9:A8:FF:08:1E Authority key identifier: F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52 Certificate issuer: /CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952 Certificate serial: 019B44A5FA9F13FC2ED616B522FA14AC0A23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft Manifest number: 0322 Signing time: Mon 22 Dec 2025 06:01:26 +0000 Manifest this update: Mon 22 Dec 2025 06:01:26 +0000 Manifest next update: Tue 23 Dec 2025 06:01:26 +0000 Files and hashes: 1: 8eV-NQ06bbilgFWSmfC504vMWVI.crl (hash: sxSzEZSW5lz+RmXjgPnv7FQ+VQ/MFn/XQcfaemkFWJY=) 2: sW8bwiGLsI7Vh96L_GlmvLQDJKY.roa (hash: zwPk0zZ0KWeH/lkVto00u9mSsOX9BDpbaWABcwD0yq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:fa:9f:13:fc:2e:d6:16:b5:22:fa:14:ac:0a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952 Validity Not Before: Dec 22 06:01:26 2025 GMT Not After : Dec 23 06:01:26 2025 GMT Subject: CN=a9bf1f92ffaeef87aabf2ee1b845fde9a8ff081e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ad:34:bf:ce:11:3e:1d:58:d0:ce:5b:30:b1: f2:38:51:9c:7a:d9:c4:f6:e4:19:05:33:01:1a:b5: 42:fa:6d:3e:4c:72:be:49:2a:9c:4a:d6:c0:ea:ba: a4:ed:4c:e9:88:56:9f:77:69:91:f4:3b:10:09:37: 7e:94:f7:f8:9b:16:c8:eb:9d:01:f1:e5:36:b3:7b: ba:7d:35:16:6e:67:b4:c4:e5:84:62:d5:69:68:c1: 9a:31:19:75:c1:43:28:db:cd:8d:33:dc:3f:7d:19: 2c:97:fc:45:85:0a:42:72:1e:ba:97:be:bd:66:ae: 16:6a:d3:8f:63:04:9c:c6:94:0c:57:b4:bd:60:40: b0:d3:a8:2a:4c:78:ef:00:b9:ae:38:57:bc:e7:20: 80:de:15:3f:42:d0:e6:a7:b9:00:4c:aa:a6:b8:95: 02:40:f6:f4:30:27:b6:bc:7c:cb:cf:57:db:65:f1: d1:79:5d:fd:a6:4a:e0:23:98:ab:a2:7f:e6:a2:e9: ed:0d:6c:4d:d3:23:53:74:03:bb:31:03:d1:00:c3: b2:bf:69:52:66:f2:8e:ad:7c:37:e4:dd:e0:d4:47: 32:41:64:a3:c9:d4:13:df:6d:9b:68:ea:f8:7d:ea: fe:c3:34:26:e5:ca:eb:f6:82:d3:39:e1:e4:a4:3b: 5a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BF:1F:92:FF:AE:EF:87:AA:BF:2E:E1:B8:45:FD:E9:A8:FF:08:1E X509v3 Authority Key Identifier: keyid:F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:24:74:df:8e:97:f1:00:7f:6a:60:97:f3:42:8a:ce:ca:14: 9e:7d:ab:24:57:c8:5c:02:da:03:70:33:09:d8:ee:a9:51:df: 8e:ba:b7:b0:68:10:09:a4:42:a7:2f:92:8f:a8:6c:b9:b4:32: 81:2a:89:4f:4a:1e:ed:a9:2f:4a:98:ac:48:1c:79:63:f6:ba: 1f:02:5b:60:6b:ec:4d:62:d5:25:24:5b:37:f5:63:c4:ea:98: 3c:18:ff:09:0e:e9:5a:bc:46:cd:6a:d1:8a:99:e5:d0:f8:a1: b7:a1:76:20:47:68:ba:ed:98:3a:1e:24:34:58:ed:cd:a7:16: d8:92:61:29:97:87:71:1a:b9:c0:a1:e4:4c:fc:ea:02:b1:cc: c4:94:c2:54:e2:de:6e:4b:d2:5e:e1:c2:51:5b:09:03:af:dd: ad:a8:7d:4d:c1:74:ea:18:d1:1b:c7:cc:a1:c6:ea:fb:ba:68: 68:81:43:21:5b:44:05:6f:53:c4:83:de:2b:35:a1:3a:18:bd: fd:a1:c8:31:83:5b:7c:8a:09:b4:f0:bc:3b:2c:0a:a0:3c:ab: 95:c1:74:db:28:62:5a:48:78:4d:16:45:71:61:6a:0c:c6:63: 33:51:15:01:07:e1:6c:cd:b6:2c:b4:81:48:60:09:c0:78:51: 85:0f:f6:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpfqfE/wu1ha1IvoUrAojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZTU3ZTM1MGQzYTZkYjhhNTgwNTU5Mjk5ZjBiOWQzOGJj YzU5NTIwHhcNMjUxMjIyMDYwMTI2WhcNMjUxMjIzMDYwMTI2WjAzMTEwLwYDVQQD EyhhOWJmMWY5MmZmYWVlZjg3YWFiZjJlZTFiODQ1ZmRlOWE4ZmYwODFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3a00v84RPh1Y0M5bMLHyOFGcetnE 9uQZBTMBGrVC+m0+THK+SSqcStbA6rqk7UzpiFafd2mR9DsQCTd+lPf4mxbI650B 8eU2s3u6fTUWbme0xOWEYtVpaMGaMRl1wUMo282NM9w/fRksl/xFhQpCch66l769 Zq4WatOPYwScxpQMV7S9YECw06gqTHjvALmuOFe85yCA3hU/QtDmp7kATKqmuJUC QPb0MCe2vHzLz1fbZfHReV39pkrgI5iron/mountDWxN0yNTdAO7MQPRAMOyv2lS ZvKOrXw35N3g1EcyQWSjydQT322baOr4fer+wzQm5crr9oLTOeHkpDtaBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKm/H5L/ru+Hqr8u4bhF/emo/wgeMB8GA1UdIwQY MBaAFPHlfjUNOm24pYBVkpnwudOLzFlSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGVWLU5RMDZiYmlsZ0ZXU21mQzUwNHZNV1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yMjJkZjItNjIyNS00MDQxLTljYjAt MGNkOWZhYTU2NTNlLzEvOGVWLU5RMDZiYmlsZ0ZXU21mQzUwNHZNV1ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8yMjJkZjItNjIyNS00MDQxLTljYjAtMGNkOWZhYTU2NTNl LzEvOGVWLU5RMDZiYmlsZ0ZXU21mQzUwNHZNV1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSR0346X 8QB/amCX80KKzsoUnn2rJFfIXALaA3AzCdjuqVHfjrq3sGgQCaRCpy+Sj6hsubQy gSqJT0oe7akvSpisSBx5Y/a6HwJbYGvsTWLVJSRbN/VjxOqYPBj/CQ7pWrxGzWrR ipnl0Piht6F2IEdouu2YOh4kNFjtzacW2JJhKZeHcRq5wKHkTPzqArHMxJTCVOLe bkvSXuHCUVsJA6/drah9TcF06hjRG8fMocbq+7poaIFDIVtEBW9TxIPeKzWhOhi9 /aHIMYNbfIoJtPC8OywKoDyrlcF02yhiWkh4TRZFcWFqDMZjM1EVAQfhbM22LLSB SGAJwHhRhQ/2Ew== -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:27 2025 by rpki-client