This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft File: 8cH5rk0YR9SdTY_a40V7WhclZwc.mft (raw, json) Hash identifier: 3RRClagXJNi3oNTTtne49B2/OcnD86XNXJO8VHt6nEQ= Subject key identifier: 9C:32:64:E8:C7:EE:AA:BE:7F:E2:53:93:46:EE:C5:04:B2:CE:81:DB Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07 Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707 Certificate serial: 019B26642DB7C6987A2CEE9BAADA22EA8DCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft Manifest number: 177E Signing time: Tue 16 Dec 2025 09:00:58 +0000 Manifest this update: Tue 16 Dec 2025 09:00:58 +0000 Manifest next update: Wed 17 Dec 2025 09:00:58 +0000 Files and hashes: 1: 8cH5rk0YR9SdTY_a40V7WhclZwc.crl (hash: Zu35FaXz+QlBMEtKK/MF9RudCg3v9uD3p7oJwvX1qh0=) 2: G6K_DWhWU68de4ypb82fcRNbq1c.roa (hash: Gtd0kHs/yyYgjTN6WOR+S2KJ5GiQ71eqM+ooEqk1CdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:2d:b7:c6:98:7a:2c:ee:9b:aa:da:22:ea:8d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707 Validity Not Before: Dec 16 09:00:58 2025 GMT Not After : Dec 17 09:00:58 2025 GMT Subject: CN=9c3264e8c7eeaabe7fe2539346eec504b2ce81db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2a:74:59:54:eb:1a:7f:8d:ad:82:bf:1b:a9: 09:e0:ba:c9:02:23:b5:c5:69:06:ee:e8:c1:6c:67: 9a:20:ee:7f:9e:e2:6a:4d:c3:bd:0e:fd:03:82:4b: e5:90:b2:44:02:0b:be:0f:78:28:47:5c:95:96:49: 32:e9:a5:49:bf:f7:3a:d0:b5:1e:ed:c1:d8:57:9e: 9c:ad:f0:31:27:8a:f1:60:0a:1c:5c:ab:13:ca:9d: 02:1a:79:4b:55:63:5c:0e:eb:ab:a2:30:47:23:c7: 55:e5:8a:27:24:62:a1:39:25:5b:92:78:00:e0:e3: c2:b3:05:8e:ab:4d:0c:43:77:b7:12:54:12:06:7f: f2:da:ee:c5:7c:5c:1d:37:b7:52:d4:96:74:fd:17: 81:2e:16:55:50:be:c3:64:ef:d2:15:8f:1f:47:cb: 11:cf:6d:13:b4:75:20:cc:21:95:88:e8:22:c2:07: 2f:d1:87:d9:d8:67:7e:02:82:79:9a:de:da:6c:f6: 25:42:92:6e:fc:0d:87:10:43:27:e0:87:39:44:5a: 00:ff:08:d1:b3:ee:2c:b6:1c:59:00:e3:62:02:8a: 77:6f:cd:1e:5a:94:54:df:cf:23:b3:7b:9f:97:c9: 70:d6:78:b8:30:47:fe:e1:b9:84:11:5f:69:e5:09: 3b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:32:64:E8:C7:EE:AA:BE:7F:E2:53:93:46:EE:C5:04:B2:CE:81:DB X509v3 Authority Key Identifier: keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:b4:47:85:3f:ec:f4:11:e5:3e:13:4a:6d:8f:43:d5:3a:a1: 37:47:84:f1:99:58:9a:8b:71:3e:df:9e:01:f5:aa:b3:65:91: 0e:75:9a:72:5b:a2:6c:53:bb:39:81:ec:51:e7:2d:e0:2d:17: 49:3b:0d:fc:80:0d:de:d4:2e:27:51:d3:4b:2f:d1:b5:cc:76: df:07:60:9d:a0:8f:a4:72:7b:4b:93:4a:18:c5:cf:af:06:14: 72:92:8d:d3:cc:0c:f3:73:dd:5d:9d:15:f7:d9:29:22:c1:87: 64:2c:f8:30:7a:ab:5d:2c:42:1e:a6:9a:08:8d:4a:72:1f:54: 6e:06:34:64:ce:ef:69:75:82:a2:f6:86:a4:41:1c:62:83:93: e5:08:86:44:97:46:c6:9d:c7:83:b9:20:a5:17:72:41:4a:69: 99:30:8f:17:91:a2:88:a7:e5:dc:ac:b7:e9:05:99:d1:3e:6e: f7:a7:cc:42:9b:cb:7d:c8:1c:7a:43:a0:02:e6:ee:50:53:7e: 6a:0c:56:ac:76:4c:8c:b7:bb:a7:aa:8e:9b:ea:c2:ba:92:36: a1:0f:59:de:e5:1f:0c:1b:75:19:4a:ab:de:6f:2d:e5:6c:3b: 59:2e:79:13:64:d3:74:6b:c6:98:50:ee:72:98:a9:e7:38:e1: ac:53:8a:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZC23xph6LO6bqtoi6o3LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYzFmOWFlNGQxODQ3ZDQ5ZDRkOGZkYWUzNDU3YjVhMTcy NTY3MDcwHhcNMjUxMjE2MDkwMDU4WhcNMjUxMjE3MDkwMDU4WjAzMTEwLwYDVQQD Eyg5YzMyNjRlOGM3ZWVhYWJlN2ZlMjUzOTM0NmVlYzUwNGIyY2U4MWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyp0WVTrGn+NrYK/G6kJ4LrJAiO1 xWkG7ujBbGeaIO5/nuJqTcO9Dv0DgkvlkLJEAgu+D3goR1yVlkky6aVJv/c60LUe 7cHYV56crfAxJ4rxYAocXKsTyp0CGnlLVWNcDuurojBHI8dV5YonJGKhOSVbkngA 4OPCswWOq00MQ3e3ElQSBn/y2u7FfFwdN7dS1JZ0/ReBLhZVUL7DZO/SFY8fR8sR z20TtHUgzCGViOgiwgcv0YfZ2Gd+AoJ5mt7abPYlQpJu/A2HEEMn4Ic5RFoA/wjR s+4sthxZAONiAop3b80eWpRU388js3ufl8lw1ni4MEf+4bmEEV9p5Qk7swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwyZOjH7qq+f+JTk0buxQSyzoHbMB8GA1UdIwQY MBaAFPHB+a5NGEfUnU2P2uNFe1oXJWcHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGNINXJrMFlSOVNkVFlfYTQwVjdXaGNsWndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC84NDYwNTAtMmEzYi00OGQ3LWIyYWUt MjU4MWIzZGI3OGNiLzEvOGNINXJrMFlSOVNkVFlfYTQwVjdXaGNsWndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC84NDYwNTAtMmEzYi00OGQ3LWIyYWUtMjU4MWIzZGI3OGNi LzEvOGNINXJrMFlSOVNkVFlfYTQwVjdXaGNsWndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmLRHhT/s 9BHlPhNKbY9D1TqhN0eE8ZlYmotxPt+eAfWqs2WRDnWacluibFO7OYHsUect4C0X STsN/IAN3tQuJ1HTSy/Rtcx23wdgnaCPpHJ7S5NKGMXPrwYUcpKN08wM83PdXZ0V 99kpIsGHZCz4MHqrXSxCHqaaCI1Kch9UbgY0ZM7vaXWCovaGpEEcYoOT5QiGRJdG xp3Hg7kgpRdyQUppmTCPF5GiiKfl3Ky36QWZ0T5u96fMQpvLfcgcekOgAubuUFN+ agxWrHZMjLe7p6qOm+rCupI2oQ9Z3uUfDBt1GUqr3m8t5Ww7WS55E2TTdGvGmFDu cpip5zjhrFOKXA== -----END CERTIFICATE-----Generated at Tue Dec 16 19:32:05 2025 by rpki-client