This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft File: 8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json) Hash identifier: NDzMisuJ22NpGNrz/ycd0Kpo47cJWVQiH5Cg8ghOBdQ= Subject key identifier: FE:70:70:21:7D:8D:B8:F8:12:F1:38:59:A5:1D:50:DA:93:AA:07:2A Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b Certificate serial: 019B50E0F22A5760F1AA49458732C23EA7F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft Manifest number: 0B81 Signing time: Wed 24 Dec 2025 15:01:17 +0000 Manifest this update: Wed 24 Dec 2025 15:01:17 +0000 Manifest next update: Thu 25 Dec 2025 15:01:17 +0000 Files and hashes: 1: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: WAcfrOJNwu/9d/CPqijx6ncoeyhOI4Ijk6Do2f66s8w=) 2: FgbdG0fmPUK0umb6fkCIHBoc4Hk.roa (hash: +cH4y6vUFW9ebAdtQK64RlvVCm6ewXq634ESBVns0pY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:f2:2a:57:60:f1:aa:49:45:87:32:c2:3e:a7:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b Validity Not Before: Dec 24 15:01:17 2025 GMT Not After : Dec 25 15:01:17 2025 GMT Subject: CN=fe7070217d8db8f812f13859a51d50da93aa072a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ff:4a:18:e9:b7:07:8d:16:79:cd:aa:d4:e6: 31:8d:4c:72:84:b7:ea:2f:c3:70:41:eb:9f:e4:f0: 55:6e:95:0a:d7:60:36:3f:1b:f0:ec:48:10:0d:69: 76:68:8d:06:60:22:fa:32:6e:01:6f:c3:47:98:34: 43:f8:34:e8:6e:c8:df:4a:7c:f7:36:e6:c8:1d:c7: eb:6e:de:dd:4c:5f:52:8e:35:39:bd:89:51:6f:77: 6c:09:c4:d5:01:23:c8:52:98:46:b1:c8:ef:72:5e: 4d:18:6f:8f:62:49:59:b2:16:a9:5f:e2:4a:43:72: f5:fc:c7:50:d5:fd:4f:7c:73:24:31:5b:f0:59:09: 36:ba:7b:8f:8e:cf:69:d2:bd:25:32:a4:e7:fd:11: 80:42:2a:8c:8a:72:f4:10:6d:ed:4a:ca:99:ae:67: d1:61:19:1a:c7:39:d8:20:e0:a9:91:d1:ce:0f:fc: c8:76:55:b1:98:38:6f:ab:33:b4:8a:a1:a7:73:df: c8:03:31:57:e3:7a:a4:e2:e2:39:95:31:cc:76:8c: 8f:c2:f0:55:af:ed:ea:c0:38:3a:6a:a1:37:7e:3d: 8d:33:00:43:8d:fc:aa:00:a9:3c:39:bb:4c:72:0b: 8b:b1:53:d2:5f:61:40:d1:73:52:82:5a:70:c5:b9: 16:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:70:70:21:7D:8D:B8:F8:12:F1:38:59:A5:1D:50:DA:93:AA:07:2A X509v3 Authority Key Identifier: keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:22:99:9c:8e:bd:12:02:40:49:af:63:77:65:7e:d4:c6:e6: 6d:e9:58:aa:90:e0:0c:db:12:9d:f9:94:c4:32:49:11:d1:28: 04:1c:81:88:c8:6b:ab:0e:64:cb:18:a9:8f:19:f4:18:e0:5f: f8:0e:10:c7:ab:90:cc:fa:74:cb:a8:d4:d3:92:c0:98:0d:18: fc:70:27:4c:87:a4:31:d4:32:22:60:4b:c6:3a:1d:13:60:32: 4b:79:46:65:1f:5a:ee:41:e7:ed:a3:d8:43:6f:ff:fc:12:d1: 4a:69:b4:92:e3:0c:e3:16:4b:6f:b9:dc:b2:3b:95:5e:5f:1e: cc:b6:49:8c:04:07:bf:0e:3d:4d:de:27:c4:ee:e0:42:bc:97: c8:ed:b8:14:25:e9:59:6d:a0:2a:23:a9:0d:a2:30:47:f3:f7: ca:e0:74:cc:24:4b:1f:44:40:cd:a3:dc:1c:08:91:9f:71:19: 00:50:36:82:de:29:0d:0c:8f:f8:fb:6b:83:70:f9:f9:43:b9: 8d:d4:fb:ff:ef:82:d3:b2:5e:12:6f:5f:fa:8e:63:73:ad:d6: 22:44:0e:f0:94:eb:c9:7b:89:f9:61:52:7e:0a:78:12:d1:5c: a8:c9:45:c4:04:33:f9:64:22:9f:68:69:4f:28:fc:22:2b:7e: c9:46:d2:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4PIqV2DxqklFhzLCPqf4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzM2FlNWQyYzFhMzEwN2VmMTJmNGQ2ZGQ5YzkwZjI0OWMy Njc4MWIwHhcNMjUxMjI0MTUwMTE3WhcNMjUxMjI1MTUwMTE3WjAzMTEwLwYDVQQD EyhmZTcwNzAyMTdkOGRiOGY4MTJmMTM4NTlhNTFkNTBkYTkzYWEwNzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv9KGOm3B40Wec2q1OYxjUxyhLfq L8NwQeuf5PBVbpUK12A2Pxvw7EgQDWl2aI0GYCL6Mm4Bb8NHmDRD+DTobsjfSnz3 NubIHcfrbt7dTF9SjjU5vYlRb3dsCcTVASPIUphGscjvcl5NGG+PYklZshapX+JK Q3L1/MdQ1f1PfHMkMVvwWQk2unuPjs9p0r0lMqTn/RGAQiqMinL0EG3tSsqZrmfR YRkaxznYIOCpkdHOD/zIdlWxmDhvqzO0iqGnc9/IAzFX43qk4uI5lTHMdoyPwvBV r+3qwDg6aqE3fj2NMwBDjfyqAKk8ObtMcguLsVPSX2FA0XNSglpwxbkWfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5wcCF9jbj4EvE4WaUdUNqTqgcqMB8GA1UdIwQY MBaAFPM65dLBoxB+8S9NbdnJDyScJngbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jYmJkYzgtYTE4MC00ZmQ5LWFkZTQt ZmEyNTY2ZTU4Mjg2LzEvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9jYmJkYzgtYTE4MC00ZmQ5LWFkZTQtZmEyNTY2ZTU4Mjg2 LzEvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaiKZnI69 EgJASa9jd2V+1MbmbelYqpDgDNsSnfmUxDJJEdEoBByBiMhrqw5kyxipjxn0GOBf +A4Qx6uQzPp0y6jU05LAmA0Y/HAnTIekMdQyImBLxjodE2AyS3lGZR9a7kHn7aPY Q2///BLRSmm0kuMM4xZLb7ncsjuVXl8ezLZJjAQHvw49Td4nxO7gQryXyO24FCXp WW2gKiOpDaIwR/P3yuB0zCRLH0RAzaPcHAiRn3EZAFA2gt4pDQyP+Ptrg3D5+UO5 jdT7/++C07JeEm9f+o5jc63WIkQO8JTryXuJ+WFSfgp4EtFcqMlFxAQz+WQin2hp Tyj8Iit+yUbS7Q== -----END CERTIFICATE-----Generated at Wed Dec 24 20:00:16 2025 by rpki-client