This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft File: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft (raw, json) Hash identifier: PjrayJ6/RT4DsNOVq8BHaEaT4Yjz+ZncbzBySg/PEAc= Subject key identifier: A9:39:10:30:84:D1:63:96:9C:B5:AC:5F:96:22:52:9F:BA:28:29:2E Authority key identifier: F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26 Certificate issuer: /CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26 Certificate serial: 019B34201918C3EF551DF5D1B755A8BD4226 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft Manifest number: 0703 Signing time: Fri 19 Dec 2025 01:01:17 +0000 Manifest this update: Fri 19 Dec 2025 01:01:17 +0000 Manifest next update: Sat 20 Dec 2025 01:01:17 +0000 Files and hashes: 1: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl (hash: 7505nC6GHwW/xNoppNXteEY7OQhg+HxTrR/ksAw5XeQ=) 2: 9LD-hrLWBwUSPOko1WfMuzpukWE.roa (hash: IlW9fI4rY7r7GVZoUndhpUDRIk8UJ5M6N9Zdn/noO1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:19:18:c3:ef:55:1d:f5:d1:b7:55:a8:bd:42:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26 Validity Not Before: Dec 19 01:01:17 2025 GMT Not After : Dec 20 01:01:17 2025 GMT Subject: CN=a939103084d163969cb5ac5f9622529fba28292e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:94:e1:fb:0e:75:a0:ae:0e:fc:ef:61:4c:40: 82:35:ba:20:fa:3b:2a:96:4c:9b:15:7a:7f:6b:a7: ef:14:2f:de:41:0b:b5:fc:85:3b:0b:45:b1:42:7e: 42:83:a3:21:67:6e:94:1a:6e:1a:75:16:13:76:85: 88:cc:45:e5:e7:f7:df:aa:5f:0a:68:81:3f:d3:13: f7:61:0a:d0:ca:94:c7:eb:d7:e3:a8:75:33:15:18: 58:c0:68:52:a8:c0:99:e3:b9:16:45:68:b0:ca:82: bd:b3:c4:d1:64:3b:36:c8:8f:ef:8b:b7:b7:17:0c: c9:5e:e3:97:1e:28:b8:91:f2:8c:46:60:73:61:b4: 9c:c0:2d:85:c1:d1:60:18:72:a9:7e:9f:1c:b9:d8: 89:38:34:7b:32:57:7d:20:b2:40:01:34:48:fd:0f: 41:94:2f:14:a5:51:6f:3d:a2:92:f4:fd:51:75:0c: 5e:ee:09:ff:18:87:fe:50:51:09:ab:21:bf:a7:95: ed:30:dd:fa:cc:45:ac:2a:3b:c7:de:42:38:e9:3e: 74:2c:2b:f5:51:d8:35:5a:86:2d:d6:2f:38:ee:6f: 2b:8f:48:51:65:b2:48:77:73:5b:ba:ce:7f:08:48: 6a:32:e1:ec:50:b5:c3:49:71:8a:27:7c:54:d6:88: 97:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:39:10:30:84:D1:63:96:9C:B5:AC:5F:96:22:52:9F:BA:28:29:2E X509v3 Authority Key Identifier: keyid:F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:94:51:10:64:94:60:c4:c0:f2:6b:be:ac:6d:4c:9d:f5:ec: ef:e7:b0:10:84:e1:21:d6:d3:89:65:ea:c1:95:88:48:c4:fe: 6e:49:01:7e:f6:41:78:e0:f9:63:3d:08:93:ed:35:da:7a:c4: 3c:e2:4f:2f:88:da:fc:61:5a:e6:ea:cf:ad:6b:ad:ad:f3:2b: 72:1e:12:10:69:e1:01:82:8b:ed:0c:2b:d4:94:3c:c3:d9:cc: 67:c1:73:9d:bb:83:7e:22:29:20:f5:50:31:73:e1:24:a4:68: 72:bc:98:91:8b:2c:9d:9c:c3:84:7d:cc:61:36:0f:28:d4:0c: 88:e2:12:e2:4e:5a:f4:33:c9:3b:0e:ca:7c:44:9c:0a:52:85: 8a:fb:19:21:da:2a:c0:32:f0:19:f5:ac:11:40:4d:e9:86:3d: de:23:23:4e:66:26:da:8d:b7:01:25:dd:a2:6c:58:08:71:f7: e4:e8:50:a5:35:08:d7:55:14:3b:ec:d5:96:52:0b:06:d5:90: 43:0d:d1:2f:57:e8:d2:ba:47:f5:66:ae:af:e7:20:d6:5e:83: ee:ff:87:3d:e3:3a:5e:2d:c0:af:70:e9:75:7e:f9:c6:e9:0d: 7a:01:d6:1c:45:d6:7a:c2:cd:a1:61:9e:81:7b:85:cb:f9:89: eb:c1:f5:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IBkYw+9VHfXRt1WovUImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMzFjMmRhNmJiOWE1NmMyOGVmZWVjNGU0ZGYwNzU4Y2My NGViMjYwHhcNMjUxMjE5MDEwMTE3WhcNMjUxMjIwMDEwMTE3WjAzMTEwLwYDVQQD EyhhOTM5MTAzMDg0ZDE2Mzk2OWNiNWFjNWY5NjIyNTI5ZmJhMjgyOTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15Th+w51oK4O/O9hTECCNbog+jsq lkybFXp/a6fvFC/eQQu1/IU7C0WxQn5Cg6MhZ26UGm4adRYTdoWIzEXl5/ffql8K aIE/0xP3YQrQypTH69fjqHUzFRhYwGhSqMCZ47kWRWiwyoK9s8TRZDs2yI/vi7e3 FwzJXuOXHii4kfKMRmBzYbScwC2FwdFgGHKpfp8cudiJODR7Mld9ILJAATRI/Q9B lC8UpVFvPaKS9P1RdQxe7gn/GIf+UFEJqyG/p5XtMN36zEWsKjvH3kI46T50LCv1 Udg1WoYt1i847m8rj0hRZbJId3Nbus5/CEhqMuHsULXDSXGKJ3xU1oiXzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKk5EDCE0WOWnLWsX5YiUp+6KCkuMB8GA1UdIwQY MBaAFPAxwtpruaVsKO/uxOTfB1jMJOsmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOERIQzJtdTVwV3dvNy03RTVOOEhXTXdrNnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kZDcwNGItYzczNS00NGRmLWE3OTYt Zjg2MjQzYTljMmIzLzEvOERIQzJtdTVwV3dvNy03RTVOOEhXTXdrNnlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9kZDcwNGItYzczNS00NGRmLWE3OTYtZjg2MjQzYTljMmIz LzEvOERIQzJtdTVwV3dvNy03RTVOOEhXTXdrNnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5RREGSU YMTA8mu+rG1MnfXs7+ewEIThIdbTiWXqwZWISMT+bkkBfvZBeOD5Yz0Ik+012nrE POJPL4ja/GFa5urPrWutrfMrch4SEGnhAYKL7Qwr1JQ8w9nMZ8FznbuDfiIpIPVQ MXPhJKRocryYkYssnZzDhH3MYTYPKNQMiOIS4k5a9DPJOw7KfEScClKFivsZIdoq wDLwGfWsEUBN6YY93iMjTmYm2o23ASXdomxYCHH35OhQpTUI11UUO+zVllILBtWQ Qw3RL1fo0rpH9Waur+cg1l6D7v+HPeM6Xi3Ar3DpdX75xukNegHWHEXWesLNoWGe gXuFy/mJ68H16g== -----END CERTIFICATE-----Generated at Fri Dec 19 07:33:31 2025 by rpki-client