This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json) Hash identifier: A6QWyDcgQEeCKRYKD3+b/27n/TO7dr5updaj7ArWHek= Subject key identifier: 8F:AF:E5:55:6E:25:3D:3C:A6:51:D3:F8:DB:CC:C5:7B:AB:0F:D7:63 Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf Certificate serial: 019B3EDA54E39000865B44A261B6EBCA9258 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft Manifest number: 1475 Signing time: Sun 21 Dec 2025 03:00:54 +0000 Manifest this update: Sun 21 Dec 2025 03:00:54 +0000 Manifest next update: Mon 22 Dec 2025 03:00:54 +0000 Files and hashes: 1: GEL87EsMVhk3ZunlststnTM4YLA.roa (hash: H7b1xc1l2fw0pFwv7g5oKkpSKlsP+OyAptyBIDDM0uk=) 2: agw3OIrKwOyL1W_VnmVopnHAQeo.roa (hash: f+xBycRNQ1p+9ZUPOHzjnJANu2PPzQm41w3wdyO787g=) 3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: 5ixsPhVV4w6K191w8q/eDj1g9+s2xaCpYZmsAWG7A5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:54:e3:90:00:86:5b:44:a2:61:b6:eb:ca:92:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf Validity Not Before: Dec 21 03:00:54 2025 GMT Not After : Dec 22 03:00:54 2025 GMT Subject: CN=8fafe5556e253d3ca651d3f8dbccc57bab0fd763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:69:2c:0e:04:44:d7:a2:8f:a5:cd:56:a6:d2: 71:14:47:a2:24:33:58:80:d9:88:4d:ab:23:98:59: 67:31:98:ce:29:ef:fd:d4:62:9b:1c:e0:87:ab:ed: cd:3a:46:31:1d:81:6b:ec:aa:f4:ba:4d:01:39:a0: ec:15:83:57:f6:c0:e8:7b:9c:87:35:b8:9e:38:22: f0:ff:e2:db:54:ac:b0:c2:8d:fd:e2:e7:21:79:44: 7a:63:35:92:3a:e7:a8:3b:1e:02:b3:c6:82:a5:96: 68:2a:d8:dc:2d:b0:0c:52:2e:b9:40:2c:6d:6f:56: 5f:24:a4:53:b4:24:94:dc:95:f6:4b:4f:82:ed:b4: ea:48:81:0d:4c:c4:a1:db:9a:13:bf:92:fd:f9:39: 59:8a:3a:a3:fb:1e:b6:ab:62:02:85:84:31:de:93: d3:95:1e:5d:9d:5b:c7:8f:60:42:db:bc:5c:c9:51: 25:be:dc:22:14:64:78:8f:b7:7c:c6:2d:03:52:fa: 58:d5:e1:56:ad:42:70:e7:b6:75:68:a8:47:0e:69: 5d:c0:df:4c:1b:9f:a3:eb:f9:18:6a:e1:1b:35:c3: f2:16:be:5c:e6:46:70:1e:e1:0c:fb:c4:24:67:e6: e7:4c:be:02:c8:d6:a7:99:3d:e7:8a:e0:59:8f:48: 90:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AF:E5:55:6E:25:3D:3C:A6:51:D3:F8:DB:CC:C5:7B:AB:0F:D7:63 X509v3 Authority Key Identifier: keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:04:1d:04:66:20:1f:bf:89:60:aa:6b:ab:45:d2:e9:90:e2: 82:ff:62:9a:7e:90:65:9a:84:91:e1:05:8a:68:cb:16:02:e5: 23:d6:16:67:aa:75:72:62:6e:84:7f:01:fb:e6:2e:89:7a:34: 37:05:86:5f:92:d8:24:0c:64:75:fa:ea:4e:e8:6c:dd:69:e1: f2:b0:02:61:c8:d6:b5:88:14:24:e1:78:e3:fd:a6:ff:3f:a7: 16:b7:49:ad:f4:fe:99:32:c0:fd:a3:1c:b8:c8:ad:c8:a5:3a: 8c:dd:54:96:85:3c:3c:c5:5f:4e:0a:a1:ab:72:03:6e:ec:48: a9:9a:d2:01:5f:e2:05:f7:6c:91:5e:99:5b:0a:65:53:ca:45: f2:4f:80:86:fb:3b:05:32:77:cc:2c:60:b3:68:c6:53:54:4c: d9:ac:20:8b:8d:7f:61:c2:1a:b4:b0:7d:3b:00:64:47:86:c9: 8d:b2:d9:0b:80:61:6d:36:47:09:0f:0e:49:63:63:70:bd:a6: 64:6b:46:25:39:cc:92:86:6e:ba:e9:fb:13:72:82:d3:f6:08: af:cc:91:66:92:01:39:d5:f9:5b:b5:b1:5d:62:23:2b:b2:a0: 49:43:86:f4:09:30:36:2e:34:43:12:ec:bf:83:3a:1f:36:0f: f3:08:c7:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2lTjkACGW0SiYbbrypJYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMmYwNzAxZDdhNjNjZjNkMTkzNjk1YzM5NWQxYTFmNzgz MzVjY2YwHhcNMjUxMjIxMDMwMDU0WhcNMjUxMjIyMDMwMDU0WjAzMTEwLwYDVQQD Eyg4ZmFmZTU1NTZlMjUzZDNjYTY1MWQzZjhkYmNjYzU3YmFiMGZkNzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGksDgRE16KPpc1WptJxFEeiJDNY gNmITasjmFlnMZjOKe/91GKbHOCHq+3NOkYxHYFr7Kr0uk0BOaDsFYNX9sDoe5yH NbieOCLw/+LbVKywwo394ucheUR6YzWSOueoOx4Cs8aCpZZoKtjcLbAMUi65QCxt b1ZfJKRTtCSU3JX2S0+C7bTqSIENTMSh25oTv5L9+TlZijqj+x62q2IChYQx3pPT lR5dnVvHj2BC27xcyVElvtwiFGR4j7d8xi0DUvpY1eFWrUJw57Z1aKhHDmldwN9M G5+j6/kYauEbNcPyFr5c5kZwHuEM+8QkZ+bnTL4CyNanmT3niuBZj0iQkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+v5VVuJT08plHT+NvMxXurD9djMB8GA1UdIwQY MBaAFJovBwHXpjzz0ZNpXDldGh94M1zPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjct NzM3MTdjNTZiNmYzLzEvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjctNzM3MTdjNTZiNmYz LzEvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAQdBGYg H7+JYKprq0XS6ZDigv9imn6QZZqEkeEFimjLFgLlI9YWZ6p1cmJuhH8B++YuiXo0 NwWGX5LYJAxkdfrqTuhs3Wnh8rACYcjWtYgUJOF44/2m/z+nFrdJrfT+mTLA/aMc uMityKU6jN1UloU8PMVfTgqhq3IDbuxIqZrSAV/iBfdskV6ZWwplU8pF8k+Ahvs7 BTJ3zCxgs2jGU1RM2awgi41/YcIatLB9OwBkR4bJjbLZC4BhbTZHCQ8OSWNjcL2m ZGtGJTnMkoZuuun7E3KC0/YIr8yRZpIBOdX5W7WxXWIjK7KgSUOG9AkwNi40QxLs v4M6HzYP8wjH2w== -----END CERTIFICATE-----Generated at Sun Dec 21 07:40:09 2025 by rpki-client