This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft File: 8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json) Hash identifier: u14KGPvsRZP4zAyv2AyhfC8rkhvf/q8QV7NphXQpZTY= Subject key identifier: 85:9A:E0:49:C8:7C:EF:AE:F9:9C:7C:DD:8F:D3:85:DD:75:A8:9D:D0 Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F Certificate issuer: /CN=f0d444bc7d5334da14de805172b2625e9830763f Certificate serial: 019B47388BA4E554204E7CC52C816CD438EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft Manifest number: 070E Signing time: Mon 22 Dec 2025 18:00:46 +0000 Manifest this update: Mon 22 Dec 2025 18:00:46 +0000 Manifest next update: Tue 23 Dec 2025 18:00:46 +0000 Files and hashes: 1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: pr8ue+teMviDy12q8qg4gHXba7i426sWx5TN9BtWegA=) 2: 8VhhkSiakyjyds2HL3KVl5SAjHk.roa (hash: XMxyFpkWV1CCq0kdHYWIMKgwA50BX4tfunpr2JyfxpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 18:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:38:8b:a4:e5:54:20:4e:7c:c5:2c:81:6c:d4:38:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f Validity Not Before: Dec 22 18:00:46 2025 GMT Not After : Dec 23 18:00:46 2025 GMT Subject: CN=859ae049c87cefaef99c7cdd8fd385dd75a89dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c8:43:51:58:86:fb:2b:77:32:c4:e3:a1:38: 5e:77:3e:65:c2:66:b3:ea:31:e7:94:d3:b3:d7:6d: 83:bd:ae:3c:87:11:50:53:af:dc:04:bf:bc:a6:5e: a6:f4:83:61:3a:2b:e6:d1:78:9d:46:1d:d3:d7:36: 6c:2e:84:aa:7d:3b:18:8a:33:cd:4d:3c:b0:f9:08: 50:be:2b:a1:05:ab:d7:eb:18:41:fd:18:42:7b:19: 43:dd:0a:2d:fd:c2:d0:dd:f1:e4:88:86:8b:68:7d: a4:a1:51:2b:a7:39:c0:4f:60:d0:88:df:61:0b:2b: c1:3d:50:67:24:58:14:3c:4b:80:32:06:2c:b1:d1: 0d:26:f3:6c:71:de:b6:53:59:c5:20:59:38:31:d9: fc:24:c5:c0:03:7e:dc:7a:4f:93:db:14:39:8a:08: 24:d7:29:8e:a9:cc:68:bd:dd:58:16:d1:5a:23:b8: 3a:97:d4:a7:4b:80:47:42:b9:1e:34:78:34:a5:9d: 88:fa:85:b3:8b:64:52:e8:ac:5d:53:b4:be:43:63: 4d:12:68:eb:1a:1a:1e:c1:e2:98:65:20:b3:8c:62: 35:8f:ea:bf:14:8b:36:0e:cf:9f:41:40:5e:2d:d4: 71:d7:4e:01:bc:86:d2:27:6c:21:a7:c7:8a:7b:9d: 49:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9A:E0:49:C8:7C:EF:AE:F9:9C:7C:DD:8F:D3:85:DD:75:A8:9D:D0 X509v3 Authority Key Identifier: keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:69:4c:13:f2:d7:9d:a3:b0:ea:dd:dc:6b:8e:02:8c:05:49: 8f:31:83:68:9a:ae:ed:57:7c:a3:dc:87:0e:54:e5:6e:aa:f4: dd:f0:47:34:84:08:6c:da:64:82:1b:29:e5:1c:99:85:32:65: ac:69:a7:45:fe:03:8d:c8:a2:35:54:2b:d9:9b:38:90:24:70: 98:f3:8a:82:6a:ce:91:59:86:cc:52:76:d5:46:01:52:63:ef: f4:68:4e:2b:3c:5e:dc:ce:c1:06:06:b5:d5:ef:14:53:bc:d8: 02:66:d2:58:10:2a:49:e6:bc:3c:30:09:dd:48:34:67:41:73: ff:92:4e:37:63:f7:6d:65:56:60:0c:cc:be:63:66:86:60:3a: 5e:c7:2a:df:21:3f:6b:9a:b5:b5:8a:23:1e:cc:23:54:97:fc: 82:6c:cb:21:51:eb:93:77:bd:8b:e6:87:c8:d8:58:2f:e9:c6: 77:e9:30:ab:0e:16:10:ab:7c:de:73:fe:91:61:de:b1:b6:13: a3:fb:58:5a:2b:6c:b3:b2:24:8e:8f:03:1f:ea:58:85:15:13: a4:96:cf:a3:66:10:01:39:17:aa:32:d6:24:e0:77:ca:65:af: c3:b0:e8:48:ed:7c:87:6f:a9:b9:b1:17:fd:98:dd:7a:93:c8: 0c:79:e8:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHOIuk5VQgTnzFLIFs1DjrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZDQ0NGJjN2Q1MzM0ZGExNGRlODA1MTcyYjI2MjVlOTgz MDc2M2YwHhcNMjUxMjIyMTgwMDQ2WhcNMjUxMjIzMTgwMDQ2WjAzMTEwLwYDVQQD Eyg4NTlhZTA0OWM4N2NlZmFlZjk5YzdjZGQ4ZmQzODVkZDc1YTg5ZGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMhDUViG+yt3MsTjoThedz5lwmaz 6jHnlNOz122Dva48hxFQU6/cBL+8pl6m9INhOivm0XidRh3T1zZsLoSqfTsYijPN TTyw+QhQviuhBavX6xhB/RhCexlD3Qot/cLQ3fHkiIaLaH2koVErpznAT2DQiN9h CyvBPVBnJFgUPEuAMgYssdENJvNscd62U1nFIFk4Mdn8JMXAA37cek+T2xQ5iggk 1ymOqcxovd1YFtFaI7g6l9SnS4BHQrkeNHg0pZ2I+oWzi2RS6KxdU7S+Q2NNEmjr GhoeweKYZSCzjGI1j+q/FIs2Ds+fQUBeLdRx104BvIbSJ2whp8eKe51J+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWa4EnIfO+u+Zx83Y/Thd11qJ3QMB8GA1UdIwQY MBaAFPDURLx9UzTaFN6AUXKyYl6YMHY/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE5SRXZIMVROTm9VM29CUmNySmlYcGd3ZGo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy81ZGMyN2QtNWFkYi00ZGYzLTk5YzIt OThkOWM0MjU3ZmM2LzEvOE5SRXZIMVROTm9VM29CUmNySmlYcGd3ZGo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy81ZGMyN2QtNWFkYi00ZGYzLTk5YzItOThkOWM0MjU3ZmM2 LzEvOE5SRXZIMVROTm9VM29CUmNySmlYcGd3ZGo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWlME/LX naOw6t3ca44CjAVJjzGDaJqu7Vd8o9yHDlTlbqr03fBHNIQIbNpkghsp5RyZhTJl rGmnRf4DjciiNVQr2Zs4kCRwmPOKgmrOkVmGzFJ21UYBUmPv9GhOKzxe3M7BBga1 1e8UU7zYAmbSWBAqSea8PDAJ3Ug0Z0Fz/5JON2P3bWVWYAzMvmNmhmA6Xscq3yE/ a5q1tYojHswjVJf8gmzLIVHrk3e9i+aHyNhYL+nGd+kwqw4WEKt83nP+kWHesbYT o/tYWitss7Ikjo8DH+pYhRUTpJbPo2YQATkXqjLWJOB3ymWvw7DoSO18h2+pubEX /ZjdepPIDHnoUA== -----END CERTIFICATE-----Generated at Tue Dec 23 03:47:59 2025 by rpki-client