This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft File: 8HH00RnQt0-2bjen74eNRJ1U3cg.mft (raw, json) Hash identifier: UqYQpi+TKLYPlLGi8p4paBWLfQqEro4XVwHm1PKQIJY= Subject key identifier: 25:9A:1E:EB:E1:A2:73:C7:D9:C9:64:47:4D:46:90:A1:67:DE:75:0E Authority key identifier: F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8 Certificate issuer: /CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8 Certificate serial: 019AF12DCBB20973047D8E6FA31D073D4897 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 01:01:41 +0000 Manifest this update: Sat 06 Dec 2025 01:01:41 +0000 Manifest next update: Sun 07 Dec 2025 01:01:41 +0000 Files and hashes: 1: 8HH00RnQt0-2bjen74eNRJ1U3cg.crl (hash: L9N6DaTW6ZskWiiPJLE61tVJSZSvoCP828Raw90L2HU=) 2: uzaT_8pYRSOjnRLn-VDCRDMHjkw.roa (hash: BTL6zzsEp/zMhbPEtqOYQnpjz6sJkx1lWw25F56hHZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:cb:b2:09:73:04:7d:8e:6f:a3:1d:07:3d:48:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8 Validity Not Before: Dec 6 01:01:41 2025 GMT Not After : Dec 7 01:01:41 2025 GMT Subject: CN=259a1eebe1a273c7d9c964474d4690a167de750e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:97:99:74:19:53:61:ea:75:f3:7b:a5:e4:68: 08:32:fb:02:f0:d4:ec:3e:5b:42:5f:93:fb:9e:15: da:3e:12:5f:63:b3:10:1f:78:eb:3d:ef:b3:90:f2: e5:34:92:9c:1a:05:41:54:f5:fb:3e:25:49:cf:43: 70:99:48:95:45:17:dd:6d:63:fa:0f:33:74:4c:cc: 9a:d3:1a:29:5f:1a:e7:97:66:5a:5d:d1:fe:77:e0: 0d:b6:51:30:31:ab:84:ce:a9:41:50:61:18:e6:92: 08:0d:13:fb:5b:85:59:e9:3e:14:eb:a9:0a:11:36: 29:80:c2:46:39:ee:be:b1:53:03:4a:1a:e5:3b:b3: c1:4e:92:e5:46:08:14:43:1d:ee:b8:34:39:c9:4b: a6:32:73:42:48:66:64:5b:41:0d:e7:1b:47:b7:e6: 19:fe:bc:ba:34:fe:c2:dd:b4:17:7f:3b:b2:bf:de: 96:80:48:5f:28:f4:48:ba:ca:d3:a2:6b:f8:08:03: c3:8f:6c:a8:71:df:fb:a5:89:db:e1:c2:a1:bc:fc: b5:84:23:56:f5:ea:d5:08:4f:74:b9:13:66:88:74: 13:8c:ee:91:8a:ae:56:43:f4:5a:34:1f:da:fe:39: a4:2c:e6:e9:5c:7d:47:2f:44:a5:dc:7b:a9:d3:d1: 2f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9A:1E:EB:E1:A2:73:C7:D9:C9:64:47:4D:46:90:A1:67:DE:75:0E X509v3 Authority Key Identifier: keyid:F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:9c:52:6b:b3:61:1d:12:02:dd:d4:b0:eb:3f:d5:ce:81:c4: 3e:65:6f:b1:54:0b:c2:34:09:0e:7d:a2:a2:99:75:41:e6:29: 27:50:a3:cb:9f:85:2c:40:38:0f:03:62:8b:68:e4:f7:ae:48: cc:09:35:fe:3b:c4:3c:02:83:18:5f:bb:6a:b2:43:bf:79:94: c7:79:b8:ff:07:54:6d:ea:ae:d2:c9:f5:ad:1d:05:a9:a5:7e: 50:90:7e:5c:60:ad:7e:54:16:e5:fe:df:20:f1:1e:b0:3d:12: 0d:11:3a:03:a2:35:7a:56:e9:65:b6:d3:47:82:51:90:62:18: c6:a5:34:56:21:6a:b6:a0:7d:f1:dc:41:a7:b1:89:9d:a8:96: cd:5b:02:a6:e5:a9:99:ba:73:b2:3e:12:ed:c4:66:f5:40:ab: 9a:0a:27:bd:9a:68:55:6e:f2:dd:ab:d5:ea:69:ae:95:62:a0: 2a:da:11:14:e8:e4:ec:a8:89:2b:3e:18:e8:5a:e0:99:d2:1c: 30:39:79:0c:f0:bd:d2:8a:ea:1f:5a:6c:28:e5:e4:59:03:5a: 85:5b:28:ea:b3:f6:41:23:d5:c7:8f:61:9b:d2:69:79:ee:9f: c7:ca:4a:b7:7f:fa:7e:2e:35:d5:f7:30:34:b8:1d:c0:be:0a: 4f:3b:1c:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLcuyCXMEfY5vox0HPUiXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNzFmNGQxMTlkMGI3NGZiNjZlMzdhN2VmODc4ZDQ0OWQ1 NGRkYzgwHhcNMjUxMjA2MDEwMTQxWhcNMjUxMjA3MDEwMTQxWjAzMTEwLwYDVQQD EygyNTlhMWVlYmUxYTI3M2M3ZDljOTY0NDc0ZDQ2OTBhMTY3ZGU3NTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJeZdBlTYep183ul5GgIMvsC8NTs PltCX5P7nhXaPhJfY7MQH3jrPe+zkPLlNJKcGgVBVPX7PiVJz0NwmUiVRRfdbWP6 DzN0TMya0xopXxrnl2ZaXdH+d+ANtlEwMauEzqlBUGEY5pIIDRP7W4VZ6T4U66kK ETYpgMJGOe6+sVMDShrlO7PBTpLlRggUQx3uuDQ5yUumMnNCSGZkW0EN5xtHt+YZ /ry6NP7C3bQXfzuyv96WgEhfKPRIusrTomv4CAPDj2yocd/7pYnb4cKhvPy1hCNW 9erVCE90uRNmiHQTjO6Riq5WQ/RaNB/a/jmkLObpXH1HL0Sl3Hup09EvFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWaHuvhonPH2clkR01GkKFn3nUOMB8GA1UdIwQY MBaAFPBx9NEZ0LdPtm43p++HjUSdVN3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEhIMDBSblF0MC0yYmplbjc0ZU5SSjFVM2NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82YTk2ODItMjAxYi00ZTAxLWJhMDkt MDc0NzQ1MjRlZjlhLzEvOEhIMDBSblF0MC0yYmplbjc0ZU5SSjFVM2NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny82YTk2ODItMjAxYi00ZTAxLWJhMDktMDc0NzQ1MjRlZjlh LzEvOEhIMDBSblF0MC0yYmplbjc0ZU5SSjFVM2NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJxSa7Nh HRIC3dSw6z/VzoHEPmVvsVQLwjQJDn2iopl1QeYpJ1Cjy5+FLEA4DwNii2jk965I zAk1/jvEPAKDGF+7arJDv3mUx3m4/wdUbequ0sn1rR0FqaV+UJB+XGCtflQW5f7f IPEesD0SDRE6A6I1elbpZbbTR4JRkGIYxqU0ViFqtqB98dxBp7GJnaiWzVsCpuWp mbpzsj4S7cRm9UCrmgonvZpoVW7y3avV6mmulWKgKtoRFOjk7KiJKz4Y6FrgmdIc MDl5DPC90orqH1psKOXkWQNahVso6rP2QSPVx49hm9Jpee6fx8pKt3/6fi411fcw NLgdwL4KTzsc6g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:13:47 2025 by rpki-client