This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft File: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json) Hash identifier: p9W0ao/z/xNY5u9qjdlutMEyfD6v/kceKVFt7B4Ca60= Subject key identifier: 6E:97:0D:18:97:A4:04:26:5A:BD:65:9B:FE:2B:26:71:26:BF:7C:68 Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5 Certificate issuer: /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5 Certificate serial: 019AF12D09A37CBBD1F022F7522B8E55A250 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft Manifest number: 1151 Signing time: Sat 06 Dec 2025 01:00:51 +0000 Manifest this update: Sat 06 Dec 2025 01:00:51 +0000 Manifest next update: Sun 07 Dec 2025 01:00:51 +0000 Files and hashes: 1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: rtnV6FLdRMC5TFu4bolHeIyZPYesiyJSQZPoVN5OhNM=) 2: qPfR7RG57f18LNEfOXECDUWuxuU.roa (hash: QgXqOHY45cNI3RJ9Yex5GhM6/GX8GPU2S0Ij2p9Y640=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:09:a3:7c:bb:d1:f0:22:f7:52:2b:8e:55:a2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5 Validity Not Before: Dec 6 01:00:51 2025 GMT Not After : Dec 7 01:00:51 2025 GMT Subject: CN=6e970d1897a404265abd659bfe2b267126bf7c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:71:4f:fa:25:68:2b:81:64:2a:61:31:7c:90: 45:22:e6:56:3a:65:e7:d5:ab:49:18:cb:12:12:20: 50:8e:15:9a:3c:26:58:a0:bf:19:2b:ce:5d:44:72: 85:41:40:aa:10:7a:a5:35:94:b2:72:de:ec:7e:34: b7:ee:6a:87:bd:bc:b6:16:62:93:51:94:8c:4b:45: 42:f5:bd:58:31:6d:46:c4:35:c4:ab:a0:cf:7c:e8: 74:59:d0:a8:23:fb:ee:7b:80:71:1d:bd:53:dd:65: ab:4a:28:aa:62:f0:ba:a6:47:f4:00:29:e0:a9:6d: e1:79:e4:37:c1:cf:d5:2d:62:b6:02:68:38:c0:ea: c8:e2:6d:cf:56:dd:6f:de:ef:d7:a6:ab:a8:d8:04: 3d:5b:d4:66:de:27:f2:d9:6c:87:25:41:93:8a:d6: 6b:66:8f:5c:13:1a:37:51:a9:17:f7:0e:62:be:73: 29:ae:34:30:fb:68:8f:54:be:b9:a6:b5:cd:58:49: e6:c6:3a:86:c8:47:c0:6b:bc:a8:24:69:39:33:7f: 30:17:22:b4:3f:6b:54:f3:38:88:44:1b:b2:b0:eb: fe:e6:47:93:fb:4c:3a:b6:50:6c:78:cc:9a:2d:9d: 68:bc:e8:44:f2:ed:f4:b7:49:70:dd:03:ef:56:da: 62:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:97:0D:18:97:A4:04:26:5A:BD:65:9B:FE:2B:26:71:26:BF:7C:68 X509v3 Authority Key Identifier: keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:3b:aa:2b:13:ac:06:1c:e1:c6:04:ab:54:08:56:cf:a9:96: 6f:11:14:54:c9:71:ee:3f:5f:6b:e8:7b:27:cf:92:08:7b:16: ca:23:ea:f8:d1:70:20:68:56:97:ab:4e:db:c0:40:9e:d0:31: 04:75:99:b5:27:c5:b7:c1:d9:15:76:22:d2:91:42:7f:a1:30: 05:50:72:d9:f1:cf:97:06:77:92:bb:36:a3:d8:19:e7:dc:f9: fc:4e:85:43:78:e1:5e:49:83:18:e7:ae:39:e9:1e:d4:f0:60: 9e:f1:60:ac:91:a0:10:92:fa:ef:b2:39:fe:1b:e0:fc:5b:6f: 37:06:27:94:48:24:5a:0f:ef:5f:e1:ea:aa:7f:fa:68:e5:2d: 3b:75:a9:10:3e:ce:2f:62:6d:97:43:14:c9:14:d2:76:55:5e: 5a:02:a5:14:30:18:de:d9:8c:36:4a:95:fa:84:ff:fe:27:7b: 53:6e:6b:a4:bd:cd:19:50:5f:5e:66:f7:9f:7b:26:4e:3f:5f: 77:f9:f0:ec:fb:01:ee:1a:b6:6e:f0:1b:8b:c6:c7:ba:9a:28: af:17:d9:c3:48:72:7d:d2:45:85:7a:5c:7f:2e:1a:94:60:a7: 92:61:8b:39:4e:c9:1e:51:27:cc:26:63:8f:73:71:84:d7:df: f2:5a:b0:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQmjfLvR8CL3UiuOVaJQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMDAzZDJjNzFhYjA3Njk5MWZiMDNlZDY2MDBiZjFkNDhi NzJiZTUwHhcNMjUxMjA2MDEwMDUxWhcNMjUxMjA3MDEwMDUxWjAzMTEwLwYDVQQD Eyg2ZTk3MGQxODk3YTQwNDI2NWFiZDY1OWJmZTJiMjY3MTI2YmY3YzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnFP+iVoK4FkKmExfJBFIuZWOmXn 1atJGMsSEiBQjhWaPCZYoL8ZK85dRHKFQUCqEHqlNZSyct7sfjS37mqHvby2FmKT UZSMS0VC9b1YMW1GxDXEq6DPfOh0WdCoI/vue4BxHb1T3WWrSiiqYvC6pkf0ACng qW3heeQ3wc/VLWK2Amg4wOrI4m3PVt1v3u/Xpquo2AQ9W9Rm3ify2WyHJUGTitZr Zo9cExo3UakX9w5ivnMprjQw+2iPVL65prXNWEnmxjqGyEfAa7yoJGk5M38wFyK0 P2tU8ziIRBuysOv+5keT+0w6tlBseMyaLZ1ovOhE8u30t0lw3QPvVtpiRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6XDRiXpAQmWr1lm/4rJnEmv3xoMB8GA1UdIwQY MBaAFPEAPSxxqwdpkfsD7WYAvx1ItyvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84NDZhMDMtZGUyNC00ODViLWI5Yjct YzRiYzgwM2Q4OTNmLzEvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC84NDZhMDMtZGUyNC00ODViLWI5YjctYzRiYzgwM2Q4OTNm LzEvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzuqKxOs BhzhxgSrVAhWz6mWbxEUVMlx7j9fa+h7J8+SCHsWyiPq+NFwIGhWl6tO28BAntAx BHWZtSfFt8HZFXYi0pFCf6EwBVBy2fHPlwZ3krs2o9gZ59z5/E6FQ3jhXkmDGOeu Oeke1PBgnvFgrJGgEJL677I5/hvg/FtvNwYnlEgkWg/vX+Hqqn/6aOUtO3WpED7O L2Jtl0MUyRTSdlVeWgKlFDAY3tmMNkqV+oT//id7U25rpL3NGVBfXmb3n3smTj9f d/nw7PsB7hq2bvAbi8bHupoorxfZw0hyfdJFhXpcfy4alGCnkmGLOU7JHlEnzCZj j3NxhNff8lqwIw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:26 2025 by rpki-client