This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft File: 8KEVxxfliRNKVTZw8-K1uc2hLYM.mft (raw, json) Hash identifier: uGbZ9Jl2yYDXoGev9Yq5F5C6sXVlqf9QNRkqJkAh0NU= Subject key identifier: 6C:51:23:B2:4E:31:AD:8E:43:F4:5E:E1:66:3E:CE:BC:77:36:C1:3B Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83 Certificate issuer: /CN=f0a115c717e589134a553670f3e2b5b9cda12d83 Certificate serial: 019B51BC5787675B1EB10AAAE3588FAF8AEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft Manifest number: 0E88 Signing time: Wed 24 Dec 2025 19:00:56 +0000 Manifest this update: Wed 24 Dec 2025 19:00:56 +0000 Manifest next update: Thu 25 Dec 2025 19:00:56 +0000 Files and hashes: 1: 8KEVxxfliRNKVTZw8-K1uc2hLYM.crl (hash: UFMDyXSZDRkrqgbVVgZniuJSfzRK7m+agq3HxIxLgLc=) 2: pGdvSW9NlY7ggpWYdQxsgPpUkIc.roa (hash: +D8etcwAhuaAWN3gXHXLkRiaN5uUVNnmE3FwZNf0dCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:57:87:67:5b:1e:b1:0a:aa:e3:58:8f:af:8a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83 Validity Not Before: Dec 24 19:00:56 2025 GMT Not After : Dec 25 19:00:56 2025 GMT Subject: CN=6c5123b24e31ad8e43f45ee1663ecebc7736c13b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b0:33:1f:e4:74:dd:3e:8e:95:5e:7c:d0:94: f8:9e:5e:7f:c6:93:16:f3:2a:ba:a6:25:bd:25:16: a0:74:8c:dd:de:d9:a8:b0:4f:df:bf:f5:8a:66:c4: 3a:8a:64:64:5e:31:37:4b:c3:8a:49:86:40:ab:8a: f0:32:58:89:d1:12:7c:27:d1:17:cd:45:b3:f0:6d: 3a:da:e2:d2:3d:cc:29:a1:1c:e3:e8:5a:2d:f4:05: 01:29:c5:10:62:b5:7d:c0:50:a4:a2:5a:a6:5c:1b: 16:a1:50:71:a0:9c:46:9f:65:e8:c3:08:82:bf:e8: 95:8d:65:66:58:2e:4c:f7:05:7b:81:f5:94:4e:07: 95:45:4a:eb:81:7e:6a:4c:60:37:f0:38:65:8b:2e: cc:0d:25:6d:15:15:c3:68:e2:36:26:f4:13:ab:23: 1d:61:6d:ca:81:59:f3:58:f3:db:22:26:e9:fc:c2: bb:10:6d:d4:d5:19:f8:39:ba:6f:2d:61:a9:6e:8d: a5:23:33:3b:de:b7:85:cd:39:09:f6:82:fe:5b:05: 09:08:9e:78:14:91:82:9d:4c:ce:c7:d9:6d:c2:18: c4:4c:92:2d:cc:e0:35:1f:54:98:e1:38:32:66:19: af:b4:70:12:6e:36:de:ee:76:8d:23:c5:e8:b3:41: 92:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:51:23:B2:4E:31:AD:8E:43:F4:5E:E1:66:3E:CE:BC:77:36:C1:3B X509v3 Authority Key Identifier: keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:25:69:97:80:04:c0:46:53:fc:9d:15:03:4d:9f:73:cc:0a: 6f:62:87:64:6c:96:a8:27:b6:b1:05:9b:e1:6b:dd:16:ae:aa: 02:b3:95:6e:3c:3c:db:5e:8f:c8:e2:c0:61:d7:b3:84:e6:6f: fd:fe:a2:d9:cd:89:10:6f:14:7d:28:58:0c:3d:0b:1f:08:05: 80:4b:a5:df:ac:bb:8e:41:f0:49:c9:11:6a:e5:5c:73:cf:49: 08:e3:3e:2f:07:c5:7c:69:81:12:b6:4e:67:61:f9:b5:1c:8d: da:0a:59:3d:ff:7b:bc:d3:20:32:03:34:17:43:66:d3:22:54: c4:82:d1:7d:69:18:96:ea:9a:c9:24:40:9e:c2:08:ce:3a:68: 46:31:92:10:8a:22:a1:e5:58:0e:78:2f:3f:40:46:ce:92:c4: d8:26:5e:68:78:22:36:cb:96:b0:2e:85:48:59:ff:49:84:65: 1a:60:a1:19:26:92:3e:62:8d:fc:75:0c:cb:1f:49:ee:52:46: 8c:ca:91:68:8c:c0:f5:e5:64:1f:f8:ee:4a:53:97:3d:8b:dd: ae:90:36:16:29:d6:bb:11:db:fd:41:4e:f0:ea:ad:04:80:1b: 93:46:e4:4f:97:07:54:f9:a1:c4:ee:97:40:fb:d4:64:d9:ce: 39:f0:95:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvFeHZ1sesQqq41iPr4rrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYTExNWM3MTdlNTg5MTM0YTU1MzY3MGYzZTJiNWI5Y2Rh MTJkODMwHhcNMjUxMjI0MTkwMDU2WhcNMjUxMjI1MTkwMDU2WjAzMTEwLwYDVQQD Eyg2YzUxMjNiMjRlMzFhZDhlNDNmNDVlZTE2NjNlY2ViYzc3MzZjMTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LAzH+R03T6OlV580JT4nl5/xpMW 8yq6piW9JRagdIzd3tmosE/fv/WKZsQ6imRkXjE3S8OKSYZAq4rwMliJ0RJ8J9EX zUWz8G062uLSPcwpoRzj6Fot9AUBKcUQYrV9wFCkolqmXBsWoVBxoJxGn2XowwiC v+iVjWVmWC5M9wV7gfWUTgeVRUrrgX5qTGA38Dhliy7MDSVtFRXDaOI2JvQTqyMd YW3KgVnzWPPbIibp/MK7EG3U1Rn4ObpvLWGpbo2lIzM73reFzTkJ9oL+WwUJCJ54 FJGCnUzOx9ltwhjETJItzOA1H1SY4TgyZhmvtHASbjbe7naNI8Xos0GSHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGxRI7JOMa2OQ/Re4WY+zrx3NsE7MB8GA1UdIwQY MBaAFPChFccX5YkTSlU2cPPitbnNoS2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEtFVnh4ZmxpUk5LVlRadzgtSzF1YzJoTFlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jNTIyZDctYTQ4OS00Yjc2LTkzNDgt Mzc2MjRmNmE1MzExLzEvOEtFVnh4ZmxpUk5LVlRadzgtSzF1YzJoTFlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jNTIyZDctYTQ4OS00Yjc2LTkzNDgtMzc2MjRmNmE1MzEx LzEvOEtFVnh4ZmxpUk5LVlRadzgtSzF1YzJoTFlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqSVpl4AE wEZT/J0VA02fc8wKb2KHZGyWqCe2sQWb4WvdFq6qArOVbjw8216PyOLAYdezhOZv /f6i2c2JEG8UfShYDD0LHwgFgEul36y7jkHwSckRauVcc89JCOM+LwfFfGmBErZO Z2H5tRyN2gpZPf97vNMgMgM0F0Nm0yJUxILRfWkYluqaySRAnsIIzjpoRjGSEIoi oeVYDngvP0BGzpLE2CZeaHgiNsuWsC6FSFn/SYRlGmChGSaSPmKN/HUMyx9J7lJG jMqRaIzA9eVkH/juSlOXPYvdrpA2FinWuxHb/UFO8OqtBIAbk0bkT5cHVPmhxO6X QPvUZNnOOfCVeg== -----END CERTIFICATE-----Generated at Thu Dec 25 03:36:26 2025 by rpki-client