This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft File: 8ihddApeiSzQvm8iT00_Tp1t0cQ.mft (raw, json) Hash identifier: 4Ok9UrYCCoueZ/cBZlY9nMTInM5wwAdEfiIGXYXbxFU= Subject key identifier: C2:1B:E6:77:2C:C5:1D:71:01:0F:16:06:63:6A:71:0C:75:40:56:CA Authority key identifier: F2:28:5D:74:0A:5E:89:2C:D0:BE:6F:22:4F:4D:3F:4E:9D:6D:D1:C4 Certificate issuer: /CN=f2285d740a5e892cd0be6f224f4d3f4e9d6dd1c4 Certificate serial: 019AF12D8E5EDF7EF3D32C29D3EE567432F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ihddApeiSzQvm8iT00_Tp1t0cQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft Manifest number: 0719 Signing time: Sat 06 Dec 2025 01:01:25 +0000 Manifest this update: Sat 06 Dec 2025 01:01:25 +0000 Manifest next update: Sun 07 Dec 2025 01:01:25 +0000 Files and hashes: 1: 8ihddApeiSzQvm8iT00_Tp1t0cQ.crl (hash: RbhlFZU6X85bjKYSXnH7XiodsyVhDxff2YzWXpTkBy4=) 2: MHj3Uc-p1kz3nu3McqkQnyvmX5k.roa (hash: jZ2LYvOeYYqufGXlqvtkULLXS9QyefT3nRWf2hFGUNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8ihddApeiSzQvm8iT00_Tp1t0cQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:8e:5e:df:7e:f3:d3:2c:29:d3:ee:56:74:32:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2285d740a5e892cd0be6f224f4d3f4e9d6dd1c4 Validity Not Before: Dec 6 01:01:25 2025 GMT Not After : Dec 7 01:01:25 2025 GMT Subject: CN=c21be6772cc51d71010f1606636a710c754056ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5e:5f:8b:83:1b:5c:47:62:bb:69:f4:ee:cd: b7:e8:dc:61:f4:8b:5c:58:67:44:ee:84:c9:4c:b4: 8b:56:c0:72:36:5b:b7:c2:74:1b:33:ca:08:fc:6d: 85:3a:2f:58:ab:54:4c:2a:40:98:5b:ec:39:f9:a9: 23:22:d4:89:7c:79:0f:1d:4d:35:9f:bd:1f:c0:d1: 16:6d:51:61:29:de:c0:e6:db:78:5e:7f:b1:52:43: 85:90:80:a0:4f:5b:03:85:cd:27:80:b2:bd:90:25: a6:08:e6:39:dd:dc:0b:ba:25:7b:82:6e:bf:ec:0e: 63:b8:00:5e:d4:e4:11:4f:44:e1:e0:1a:3f:6d:ee: 7c:00:c7:f5:a4:c5:2f:f2:6b:23:23:e8:3e:a4:a6: 5e:d8:04:34:bd:43:b8:43:15:29:ef:1d:ed:a5:04: 2d:91:a5:1a:36:ff:f9:78:8b:58:08:99:e4:b4:23: 58:9d:74:5a:5c:db:55:7d:ee:a5:5f:bb:af:91:67: 3d:c6:e6:c9:f7:a0:aa:0a:c2:d5:fa:dc:a6:e4:11: 21:f4:b6:b5:f7:0a:77:f2:29:62:24:76:59:02:54: 20:12:38:a9:55:92:e8:e8:ce:89:1e:c1:9f:64:1e: e7:2b:25:a8:a3:bf:eb:20:45:4b:92:3c:53:bd:d5: f5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1B:E6:77:2C:C5:1D:71:01:0F:16:06:63:6A:71:0C:75:40:56:CA X509v3 Authority Key Identifier: keyid:F2:28:5D:74:0A:5E:89:2C:D0:BE:6F:22:4F:4D:3F:4E:9D:6D:D1:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ihddApeiSzQvm8iT00_Tp1t0cQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:cd:a8:8e:22:c8:04:56:35:36:86:da:83:c5:2f:71:5d:b8: fb:6b:1e:ea:a1:44:55:41:dc:0f:cb:9c:7a:df:b0:de:0b:97: 05:80:33:a1:ee:b4:9e:d7:35:6a:47:dc:b7:8d:a0:b1:b4:ff: 4b:07:93:cf:cb:7c:0a:21:25:55:93:13:fd:68:6a:27:f4:0e: 6e:d8:b9:f5:18:e1:be:5e:c2:da:e4:89:48:4b:58:5b:ae:a6: 53:db:7b:de:12:fb:e7:be:0b:85:1a:fb:9e:f9:00:6c:6f:3b: d0:ad:48:b5:60:2b:41:a9:20:fa:28:39:14:ec:02:6f:2e:3c: 45:c2:55:79:1f:be:59:c0:0f:b3:af:66:de:fc:a4:20:fc:92: e5:00:22:32:4e:31:2c:5a:3d:b3:68:d3:26:86:1b:56:9f:42: 7b:fb:66:66:c9:84:a5:a0:0f:58:42:c1:8b:71:46:b1:65:a3: db:58:47:29:c1:a3:a8:06:ea:45:1c:81:08:92:a6:56:d2:a4: 4c:10:c7:11:fa:77:26:65:07:b9:3b:00:f8:49:75:a3:67:fc: eb:ac:bb:cc:b1:b6:e9:2c:69:4d:dd:ca:a5:f9:1c:6a:ce:f4: 82:a1:1b:ad:fa:78:2c:8e:83:86:71:ff:7a:f8:17:3e:4e:af: 1a:b0:3d:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLY5e337z0ywp0+5WdDL1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMjg1ZDc0MGE1ZTg5MmNkMGJlNmYyMjRmNGQzZjRlOWQ2 ZGQxYzQwHhcNMjUxMjA2MDEwMTI1WhcNMjUxMjA3MDEwMTI1WjAzMTEwLwYDVQQD EyhjMjFiZTY3NzJjYzUxZDcxMDEwZjE2MDY2MzZhNzEwYzc1NDA1NmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv15fi4MbXEdiu2n07s236Nxh9Itc WGdE7oTJTLSLVsByNlu3wnQbM8oI/G2FOi9Yq1RMKkCYW+w5+akjItSJfHkPHU01 n70fwNEWbVFhKd7A5tt4Xn+xUkOFkICgT1sDhc0ngLK9kCWmCOY53dwLuiV7gm6/ 7A5juABe1OQRT0Th4Bo/be58AMf1pMUv8msjI+g+pKZe2AQ0vUO4QxUp7x3tpQQt kaUaNv/5eItYCJnktCNYnXRaXNtVfe6lX7uvkWc9xubJ96CqCsLV+tym5BEh9La1 9wp38iliJHZZAlQgEjipVZLo6M6JHsGfZB7nKyWoo7/rIEVLkjxTvdX1BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIb5ncsxR1xAQ8WBmNqcQx1QFbKMB8GA1UdIwQY MBaAFPIoXXQKXoks0L5vIk9NP06dbdHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGloZGRBcGVpU3pRdm04aVQwMF9UcDF0MGNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zMzBlNmItNTY3NS00YTI2LWI4NDkt ZjFjMjU5ZGJlNjNlLzEvOGloZGRBcGVpU3pRdm04aVQwMF9UcDF0MGNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zMzBlNmItNTY3NS00YTI2LWI4NDktZjFjMjU5ZGJlNjNl LzEvOGloZGRBcGVpU3pRdm04aVQwMF9UcDF0MGNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAts2ojiLI BFY1Nobag8UvcV24+2se6qFEVUHcD8ucet+w3guXBYAzoe60ntc1akfct42gsbT/ SweTz8t8CiElVZMT/WhqJ/QObti59Rjhvl7C2uSJSEtYW66mU9t73hL7574LhRr7 nvkAbG870K1ItWArQakg+ig5FOwCby48RcJVeR++WcAPs69m3vykIPyS5QAiMk4x LFo9s2jTJoYbVp9Ce/tmZsmEpaAPWELBi3FGsWWj21hHKcGjqAbqRRyBCJKmVtKk TBDHEfp3JmUHuTsA+El1o2f866y7zLG26SxpTd3Kpfkcas70gqEbrfp4LI6DhnH/ evgXPk6vGrA9rw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:38 2025 by rpki-client