This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft File: 8cH5rk0YR9SdTY_a40V7WhclZwc.mft (raw, json) Hash identifier: i+CaSQp9UqXI+oAINz+ONbOh16BTnjFRu74Q3joDWpA= Subject key identifier: AC:93:C4:F6:7F:8E:F1:DD:A0:C8:9C:E0:BC:33:54:F9:80:5C:62:62 Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07 Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707 Certificate serial: 019AF2401535C3F4704B2ADEC22D990DB3D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 06:01:17 +0000 Manifest this update: Sat 06 Dec 2025 06:01:17 +0000 Manifest next update: Sun 07 Dec 2025 06:01:17 +0000 Files and hashes: 1: 8cH5rk0YR9SdTY_a40V7WhclZwc.crl (hash: ScxFO3+g2S4zj0zw+c+lsxZ9MSrycGl27O2Z0rL7tgM=) 2: G6K_DWhWU68de4ypb82fcRNbq1c.roa (hash: Gtd0kHs/yyYgjTN6WOR+S2KJ5GiQ71eqM+ooEqk1CdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:15:35:c3:f4:70:4b:2a:de:c2:2d:99:0d:b3:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707 Validity Not Before: Dec 6 06:01:17 2025 GMT Not After : Dec 7 06:01:17 2025 GMT Subject: CN=ac93c4f67f8ef1dda0c89ce0bc3354f9805c6262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:24:7e:75:6e:58:fd:51:4e:81:12:15:38:0c: 76:c8:ac:2d:d2:d5:06:87:a5:c3:3b:8c:e0:d8:08: 68:5c:3e:11:29:bc:8e:ff:23:d9:90:1e:fb:cc:23: 1c:74:89:7f:cf:31:1f:a4:38:b0:bf:e0:30:b8:10: 90:fd:3d:99:b4:30:88:5c:52:7b:58:d7:30:56:9d: ba:5c:90:1c:55:87:ef:ea:a5:bd:eb:77:53:a3:c7: 87:4c:e0:f0:3a:e6:41:bd:ed:b2:57:ff:5c:d6:55: c9:74:70:b0:4d:a9:e0:85:23:01:72:aa:cc:9f:6c: c6:5c:4b:2b:7a:5f:8e:61:d6:99:cd:98:1b:e1:bf: c2:f1:75:3d:63:ff:51:75:b4:63:ec:1e:c4:2a:7f: b9:f8:8a:24:ce:7e:17:e0:3e:94:e2:00:55:d7:8a: 36:9a:4b:99:a1:45:1b:b9:79:75:3f:8a:de:85:d8: bf:12:3c:67:0b:df:cd:22:57:1a:7c:12:57:85:6b: 1e:2a:79:c2:65:1f:30:8c:89:d6:be:6e:2e:e5:3d: 83:cd:0e:1b:68:d2:d4:cc:30:65:b1:44:aa:80:d4: d9:7a:c9:9d:df:b1:e4:a4:6f:1e:2d:b9:83:87:67: c1:32:8d:1f:90:15:6b:41:d2:f6:2e:59:1a:53:d4: 27:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:93:C4:F6:7F:8E:F1:DD:A0:C8:9C:E0:BC:33:54:F9:80:5C:62:62 X509v3 Authority Key Identifier: keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:62:10:16:ed:fc:82:0e:c2:af:ff:46:26:97:b2:00:16:2e: 97:6f:e3:53:93:eb:35:fb:a8:f9:f8:1c:b6:e7:17:2e:72:8b: e6:51:26:fd:de:14:8a:d0:d1:be:79:99:de:35:c1:24:5e:8f: df:66:ba:b9:41:cf:89:55:cb:16:56:fb:90:1a:d7:ff:ee:c2: 2d:a8:93:e9:69:19:7a:6c:a8:d1:fe:90:a4:be:5a:68:69:44: 33:2e:22:cb:2e:59:80:4b:62:b4:84:98:d8:6e:63:08:a2:35: 5a:4d:99:60:63:02:3b:50:1a:5f:67:eb:38:a5:d1:0c:e3:b4: d6:3a:17:6e:4f:aa:97:74:ec:85:77:f5:da:32:f8:e4:0c:cf: d0:63:81:bc:d1:18:a8:e3:f0:77:c5:d8:f1:fd:a1:ab:62:f3: a4:fc:c3:66:e1:14:5a:59:1e:da:71:28:10:ab:a7:35:a7:48: 0d:83:52:01:36:4d:3f:23:3b:87:6e:da:6b:b3:ec:17:19:d0: e3:43:34:8a:6f:b9:9c:8d:c2:76:78:14:37:be:0f:74:e6:e1: 2d:be:4c:24:06:f3:ce:11:4a:58:9d:aa:59:0e:07:90:79:c5: 75:e1:63:4a:e2:fe:c7:24:11:34:5a:a9:63:0c:de:19:4d:99: 03:95:72:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBU1w/RwSyrewi2ZDbPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYzFmOWFlNGQxODQ3ZDQ5ZDRkOGZkYWUzNDU3YjVhMTcy NTY3MDcwHhcNMjUxMjA2MDYwMTE3WhcNMjUxMjA3MDYwMTE3WjAzMTEwLwYDVQQD EyhhYzkzYzRmNjdmOGVmMWRkYTBjODljZTBiYzMzNTRmOTgwNWM2MjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyR+dW5Y/VFOgRIVOAx2yKwt0tUG h6XDO4zg2AhoXD4RKbyO/yPZkB77zCMcdIl/zzEfpDiwv+AwuBCQ/T2ZtDCIXFJ7 WNcwVp26XJAcVYfv6qW963dTo8eHTODwOuZBve2yV/9c1lXJdHCwTanghSMBcqrM n2zGXEsrel+OYdaZzZgb4b/C8XU9Y/9RdbRj7B7EKn+5+Iokzn4X4D6U4gBV14o2 mkuZoUUbuXl1P4rehdi/EjxnC9/NIlcafBJXhWseKnnCZR8wjInWvm4u5T2DzQ4b aNLUzDBlsUSqgNTZesmd37HkpG8eLbmDh2fBMo0fkBVrQdL2LlkaU9QnOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyTxPZ/jvHdoMic4LwzVPmAXGJiMB8GA1UdIwQY MBaAFPHB+a5NGEfUnU2P2uNFe1oXJWcHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGNINXJrMFlSOVNkVFlfYTQwVjdXaGNsWndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC84NDYwNTAtMmEzYi00OGQ3LWIyYWUt MjU4MWIzZGI3OGNiLzEvOGNINXJrMFlSOVNkVFlfYTQwVjdXaGNsWndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC84NDYwNTAtMmEzYi00OGQ3LWIyYWUtMjU4MWIzZGI3OGNi LzEvOGNINXJrMFlSOVNkVFlfYTQwVjdXaGNsWndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWIQFu38 gg7Cr/9GJpeyABYul2/jU5PrNfuo+fgctucXLnKL5lEm/d4UitDRvnmZ3jXBJF6P 32a6uUHPiVXLFlb7kBrX/+7CLaiT6WkZemyo0f6QpL5aaGlEMy4iyy5ZgEtitISY 2G5jCKI1Wk2ZYGMCO1AaX2frOKXRDOO01joXbk+ql3TshXf12jL45AzP0GOBvNEY qOPwd8XY8f2hq2LzpPzDZuEUWlke2nEoEKunNadIDYNSATZNPyM7h27aa7PsFxnQ 40M0im+5nI3CdngUN74PdObhLb5MJAbzzhFKWJ2qWQ4HkHnFdeFjSuL+xyQRNFqp YwzeGU2ZA5VySg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:43 2025 by rpki-client