This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft File: h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft (raw, json) Hash identifier: cxg7uyRL9wTywRsxdhyCOVaVI/eFkK+wG8F64UXPHks= Subject key identifier: 36:7D:E7:50:3B:D9:46:F2:C7:25:61:5E:28:46:EE:D7:73:3B:B2:05 Authority key identifier: 87:C3:B8:5A:7B:EF:BB:44:90:D7:AC:85:2E:B8:BE:84:BF:93:8B:4D Certificate issuer: /CN=87c3b85a7befbb4490d7ac852eb8be84bf938b4d Certificate serial: 019AF19B6DF28E68FF92EA42B633573DFABB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft Manifest number: 0981 Signing time: Sat 06 Dec 2025 03:01:26 +0000 Manifest this update: Sat 06 Dec 2025 03:01:26 +0000 Manifest next update: Sun 07 Dec 2025 03:01:26 +0000 Files and hashes: 1: AO9S5FPNyFUFF8sl00iZG2uj63o.roa (hash: dj/tZS47oYr7HP4aHIaoRYk9wXqksDBdwIFty9clVxk=) 2: h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl (hash: i1vwL7Tx2zeQPmkYHZQyaCntB+PEGWoTfblBNEoBl3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:6d:f2:8e:68:ff:92:ea:42:b6:33:57:3d:fa:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87c3b85a7befbb4490d7ac852eb8be84bf938b4d Validity Not Before: Dec 6 03:01:26 2025 GMT Not After : Dec 7 03:01:26 2025 GMT Subject: CN=367de7503bd946f2c725615e2846eed7733bb205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:81:92:2c:12:41:a3:53:36:51:57:a1:90:62: 8a:c4:66:bf:54:a9:c1:d6:fc:52:c3:c9:d1:ed:85: 22:96:c1:ed:d7:26:ee:93:5f:02:e5:df:28:35:35: e7:6c:b7:38:f8:5a:6e:cb:64:d3:df:89:69:e9:d9: f8:07:52:6f:3e:aa:ae:e8:86:25:f6:90:db:3e:d2: 34:f4:11:62:0b:b7:2f:6f:9e:5b:a0:32:25:6d:25: 1d:6f:d7:47:5d:f5:ab:70:31:99:1b:0a:5e:6e:50: e8:e4:05:c2:6a:84:59:af:e9:2a:bb:6b:9f:25:93: 4d:29:96:a3:22:dc:22:a7:3a:fb:63:9c:fa:2c:87: 3f:c9:20:db:59:79:3e:c4:eb:c6:c1:b8:93:1f:98: 8f:fa:43:62:56:77:e3:8b:a9:ad:4a:b9:30:80:e8: 2e:da:21:94:a5:98:b7:9c:2b:76:9d:b4:cd:33:c4: 9b:c0:4b:5f:72:61:12:c9:d6:1d:98:39:3a:6f:bd: 73:62:a9:a9:27:6c:e5:2c:1d:52:c2:c3:fd:3f:77: c0:e5:33:8f:16:46:a4:36:6c:4b:7f:a1:9b:9e:2e: b5:db:93:fd:b3:44:2f:dc:9e:1e:5a:74:de:3f:67: eb:5b:47:f0:78:ff:4a:c2:d9:61:31:c1:fd:17:de: 96:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7D:E7:50:3B:D9:46:F2:C7:25:61:5E:28:46:EE:D7:73:3B:B2:05 X509v3 Authority Key Identifier: keyid:87:C3:B8:5A:7B:EF:BB:44:90:D7:AC:85:2E:B8:BE:84:BF:93:8B:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:bf:35:f8:06:5f:6b:dc:56:53:c8:83:a8:05:59:9a:ec:8f: 4a:ab:f0:de:30:7c:57:c1:39:68:95:ee:c3:5f:ae:9b:cf:a9: d2:19:dc:32:fa:db:ce:a9:b7:e8:c4:5d:a1:43:23:e1:ac:8d: d0:5e:dd:3e:ff:2c:cf:9b:d7:b6:ed:15:23:79:bf:a4:45:dc: cc:81:24:d7:ef:ef:a4:5a:cd:0f:bf:da:07:d9:5f:41:af:bc: 18:40:a2:34:36:68:5e:66:a6:03:85:38:0b:0c:7b:ca:8e:8a: b0:3d:dd:04:e5:5b:31:84:50:09:91:2a:8c:4d:55:6f:d8:61: 7a:d1:a7:58:f8:e8:bf:52:24:03:be:6f:9c:5d:e0:fd:e4:15: 28:77:01:cc:70:ed:8b:3b:ed:1f:fb:60:31:a0:ee:84:8c:41: 65:a0:d4:90:72:b3:0d:c7:87:df:3f:5b:19:4b:75:69:04:b8: f8:20:7c:ce:e6:55:df:dc:5f:f7:32:b4:6b:28:b7:17:f6:78: 03:bf:14:e4:3b:96:89:9f:6c:32:18:a2:d5:88:12:b6:fc:97: d8:0c:b7:06:b9:a7:18:49:64:d6:f0:37:33:28:1a:c8:5b:f7: 89:06:c7:01:9c:c1:74:25:ea:3b:bd:2b:46:1b:ee:35:8a:81: a7:56:9d:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm23yjmj/kupCtjNXPfq7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YzNiODVhN2JlZmJiNDQ5MGQ3YWM4NTJlYjhiZTg0YmY5 MzhiNGQwHhcNMjUxMjA2MDMwMTI2WhcNMjUxMjA3MDMwMTI2WjAzMTEwLwYDVQQD EygzNjdkZTc1MDNiZDk0NmYyYzcyNTYxNWUyODQ2ZWVkNzczM2JiMjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYGSLBJBo1M2UVehkGKKxGa/VKnB 1vxSw8nR7YUilsHt1ybuk18C5d8oNTXnbLc4+Fpuy2TT34lp6dn4B1JvPqqu6IYl 9pDbPtI09BFiC7cvb55boDIlbSUdb9dHXfWrcDGZGwpeblDo5AXCaoRZr+kqu2uf JZNNKZajItwipzr7Y5z6LIc/ySDbWXk+xOvGwbiTH5iP+kNiVnfji6mtSrkwgOgu 2iGUpZi3nCt2nbTNM8SbwEtfcmESydYdmDk6b71zYqmpJ2zlLB1SwsP9P3fA5TOP FkakNmxLf6Gbni6125P9s0Qv3J4eWnTeP2frW0fweP9KwtlhMcH9F96WPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZ951A72UbyxyVhXihG7tdzO7IFMB8GA1UdIwQY MBaAFIfDuFp777tEkNeshS64voS/k4tNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDhPNFdudnZ1MFNRMTZ5RkxyaS1oTC1UaTAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzVjYzgtYjNlZi00MGZjLWFlNDAt NzhlYzgwMjMwNjhmLzEvaDhPNFdudnZ1MFNRMTZ5RkxyaS1oTC1UaTAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzVjYzgtYjNlZi00MGZjLWFlNDAtNzhlYzgwMjMwNjhm LzEvaDhPNFdudnZ1MFNRMTZ5RkxyaS1oTC1UaTAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU781+AZf a9xWU8iDqAVZmuyPSqvw3jB8V8E5aJXuw1+um8+p0hncMvrbzqm36MRdoUMj4ayN 0F7dPv8sz5vXtu0VI3m/pEXczIEk1+/vpFrND7/aB9lfQa+8GECiNDZoXmamA4U4 Cwx7yo6KsD3dBOVbMYRQCZEqjE1Vb9hhetGnWPjov1IkA75vnF3g/eQVKHcBzHDt izvtH/tgMaDuhIxBZaDUkHKzDceH3z9bGUt1aQS4+CB8zuZV39xf9zK0ayi3F/Z4 A78U5DuWiZ9sMhii1YgStvyX2Ay3BrmnGElk1vA3MygayFv3iQbHAZzBdCXqO70r RhvuNYqBp1adcg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:32:51 2025 by rpki-client