This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft File: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json) Hash identifier: mzeLN5lsL3DJWiv1ccN+Gjb+7GrJziPGk4pI1ByFLPo= Subject key identifier: 88:0E:F7:95:95:11:A7:0C:B6:CF:07:E4:5C:E5:58:81:04:F3:89:B7 Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3 Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3 Certificate serial: 019B4A39A99AC27A75B81AF406180BE03221 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft Manifest number: 073A Signing time: Tue 23 Dec 2025 08:00:51 +0000 Manifest this update: Tue 23 Dec 2025 08:00:51 +0000 Manifest next update: Wed 24 Dec 2025 08:00:51 +0000 Files and hashes: 1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: Bd5Th+ttKX8CKdTjlGLSz1G4Qm4CFBFXj2ErY0HvbN4=) 2: Tm2nsqR26Dl9LeV6Cyt_JHr-v8Y.roa (hash: uihaqn4cl1EUm9BC8+JYEwJFvxEP94e45YDqvyFRac4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:39:a9:9a:c2:7a:75:b8:1a:f4:06:18:0b:e0:32:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3 Validity Not Before: Dec 23 08:00:51 2025 GMT Not After : Dec 24 08:00:51 2025 GMT Subject: CN=880ef7959511a70cb6cf07e45ce5588104f389b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f4:37:f2:e5:a0:e8:7b:58:fd:b6:f8:32:da: 0f:ca:99:af:8b:9f:90:a2:ce:d2:45:3c:d5:57:99: 5c:6e:dd:92:64:f7:8e:f3:27:a0:72:10:f4:0d:a9: 80:0a:1a:ed:a3:d6:da:1d:ad:e5:fb:0a:9d:c8:b0: 6e:aa:be:04:b0:35:c9:39:94:2a:6c:20:b6:f2:f6: fc:d7:fa:d6:47:2d:61:19:6a:ba:fb:33:81:a5:59: 46:9e:53:a5:26:05:bc:03:05:b0:ee:08:6e:c5:1a: 57:a1:64:e2:49:50:af:a1:5f:60:e9:76:fd:cb:68: 2e:22:30:a0:70:9e:8c:fc:28:8f:54:ff:c3:2a:81: 42:5a:f7:68:ce:69:fb:56:31:6c:ce:11:d8:0d:9f: c8:08:51:4d:92:b0:25:ff:62:e0:b9:a3:b0:bd:49: a7:f3:33:f5:9e:57:9c:d2:26:90:bd:60:da:12:da: f8:41:f6:d2:cf:8d:42:9a:b6:e3:a4:b6:8e:e9:7f: 37:6b:04:a8:f4:a1:7e:62:34:70:e4:57:e1:5c:68: 20:12:97:2e:78:69:22:a2:79:14:ff:b3:52:5a:44: e3:13:69:4c:4f:e4:bc:e8:10:27:90:7f:cc:48:47: 2e:81:00:c5:50:e5:65:a4:ef:48:dd:c5:3e:63:c8: 1c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0E:F7:95:95:11:A7:0C:B6:CF:07:E4:5C:E5:58:81:04:F3:89:B7 X509v3 Authority Key Identifier: keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:f3:44:4a:c0:d9:ee:69:f3:5d:2e:fb:f3:7c:1a:d2:8e:5d: 12:24:1a:e2:9e:1f:a4:56:09:d6:3a:5b:46:91:25:af:08:be: 66:11:f4:79:ad:8f:5e:41:7c:2f:ca:be:f9:7c:9e:65:6d:ec: 9a:3c:63:79:3e:bc:cf:b6:15:10:ae:f3:23:14:61:63:d9:3b: f3:b7:93:8d:25:62:aa:94:77:c9:72:aa:3e:9b:a8:9c:f3:79: 3c:e3:29:8c:4d:41:07:65:3c:25:86:fb:0f:38:6e:af:80:7d: b8:5c:d4:5e:02:7e:b0:12:ad:86:3e:4c:ca:72:8a:07:84:08: c3:d1:e7:f3:31:4d:ed:ab:5d:b3:69:2b:22:c3:52:60:83:c4: 30:21:cf:83:9e:e7:74:8d:67:27:f0:c2:48:b8:e6:ff:74:d0: 89:e0:bf:44:2e:26:33:b5:e7:38:da:60:7c:5b:a5:bb:d2:73: cd:9a:66:88:46:00:b8:0d:b2:72:bb:08:b2:49:de:2d:55:1a: 5c:d8:a8:c6:62:eb:a9:87:60:a4:a8:5a:a1:de:d2:d4:51:14: 70:99:95:ec:d8:d4:6f:13:f2:28:49:ee:1f:48:48:4b:54:3f: 50:32:c9:2e:ae:a2:69:ac:2a:23:69:29:a0:d9:bb:8d:9d:ac: 2a:fc:83:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOamawnp1uBr0BhgL4DIhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMmQ1ZjE3NjM2YTFmMTRlZmE4YTBlNDA5OWIzZDMzNWZm ODRkZDMwHhcNMjUxMjIzMDgwMDUxWhcNMjUxMjI0MDgwMDUxWjAzMTEwLwYDVQQD Eyg4ODBlZjc5NTk1MTFhNzBjYjZjZjA3ZTQ1Y2U1NTg4MTA0ZjM4OWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/Q38uWg6HtY/bb4MtoPypmvi5+Q os7SRTzVV5lcbt2SZPeO8yegchD0DamAChrto9baHa3l+wqdyLBuqr4EsDXJOZQq bCC28vb81/rWRy1hGWq6+zOBpVlGnlOlJgW8AwWw7ghuxRpXoWTiSVCvoV9g6Xb9 y2guIjCgcJ6M/CiPVP/DKoFCWvdozmn7VjFszhHYDZ/ICFFNkrAl/2LguaOwvUmn 8zP1nlec0iaQvWDaEtr4QfbSz41CmrbjpLaO6X83awSo9KF+YjRw5FfhXGggEpcu eGkionkU/7NSWkTjE2lMT+S86BAnkH/MSEcugQDFUOVlpO9I3cU+Y8gc9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgO95WVEacMts8H5FzlWIEE84m3MB8GA1UdIwQY MBaAFPItXxdjah8U76ig5AmbPTNf+E3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zZDM5ODYtNmQ0Mi00YjNkLTlmYzAt NjExYTJhMWI4MjI0LzEvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zZDM5ODYtNmQ0Mi00YjNkLTlmYzAtNjExYTJhMWI4MjI0 LzEvOGkxZkYyTnFIeFR2cUtEa0NaczlNMV80VGRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/NESsDZ 7mnzXS7783wa0o5dEiQa4p4fpFYJ1jpbRpElrwi+ZhH0ea2PXkF8L8q++XyeZW3s mjxjeT68z7YVEK7zIxRhY9k787eTjSViqpR3yXKqPpuonPN5POMpjE1BB2U8JYb7 Dzhur4B9uFzUXgJ+sBKthj5MynKKB4QIw9Hn8zFN7atds2krIsNSYIPEMCHPg57n dI1nJ/DCSLjm/3TQieC/RC4mM7XnONpgfFulu9JzzZpmiEYAuA2ycrsIskneLVUa XNioxmLrqYdgpKhaod7S1FEUcJmV7NjUbxPyKEnuH0hIS1Q/UDLJLq6iaawqI2kp oNm7jZ2sKvyDxQ== -----END CERTIFICATE-----Generated at Tue Dec 23 16:51:06 2025 by rpki-client