This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft File: 8-hh3LY0GJOsTmMm723kNEHmaUM.mft (raw, json) Hash identifier: tgWBDBguBjwb4mlw0eIkNKabGCqFdaud7sbJhPsBWkU= Subject key identifier: 61:AB:9E:DF:F7:AA:07:F1:14:F3:F1:5E:C0:E9:20:1A:75:BF:6E:1A Authority key identifier: F3:E8:61:DC:B6:34:18:93:AC:4E:63:26:EF:6D:E4:34:41:E6:69:43 Certificate issuer: /CN=f3e861dcb6341893ac4e6326ef6de43441e66943 Certificate serial: 019AF31D030834B5C5CB1C238B0FE35AF383 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-hh3LY0GJOsTmMm723kNEHmaUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft Manifest number: C5 Signing time: Sat 06 Dec 2025 10:02:36 +0000 Manifest this update: Sat 06 Dec 2025 10:02:36 +0000 Manifest next update: Sun 07 Dec 2025 10:02:36 +0000 Files and hashes: 1: 8-hh3LY0GJOsTmMm723kNEHmaUM.crl (hash: kfUU7JnuknK8hKQpeREcnZKI+RSemvaoMP6IJk92gvc=) 2: jAxXi4dUNmTHbgKfycTi4Xg81pk.roa (hash: BYka2JYpc3kzPhjSRnrgUiQAaeJD/015bVnwQgLkDLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.crl rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8-hh3LY0GJOsTmMm723kNEHmaUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:03:08:34:b5:c5:cb:1c:23:8b:0f:e3:5a:f3:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3e861dcb6341893ac4e6326ef6de43441e66943 Validity Not Before: Dec 6 10:02:36 2025 GMT Not After : Dec 7 10:02:36 2025 GMT Subject: CN=61ab9edff7aa07f114f3f15ec0e9201a75bf6e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e3:e7:d6:8f:32:80:7e:65:dd:2d:c8:78:37: 3e:9c:1f:af:48:87:e3:58:d2:8b:3b:d4:5b:b0:70: ab:10:92:71:4c:1d:70:40:c0:c7:a9:5a:53:c9:9c: ae:40:84:07:f6:06:7f:4d:dc:47:e6:3f:ad:ac:97: 2c:99:fe:76:47:b7:7b:1b:62:12:a0:0d:1c:2b:a8: e1:58:8d:1c:ee:b8:de:47:7a:48:cd:08:56:1d:95: 1b:f6:e6:86:2c:18:b9:52:c4:67:0e:fc:c3:9f:5b: 9f:d2:4e:ea:08:4f:59:87:18:29:3d:39:86:c5:90: ad:93:cd:42:cd:7f:45:d1:73:29:c4:32:4a:c6:f8: 2f:bf:b7:4c:6a:03:ee:27:8d:b8:8b:29:2f:c3:2a: f5:96:da:0b:c0:20:06:89:f4:31:4b:9a:10:99:4b: 72:3e:e2:6a:f5:d0:86:7f:6e:1a:d7:9f:02:a2:44: a8:fa:ad:45:da:d1:e1:d3:91:d1:62:e2:0f:92:3c: a3:a8:f0:1b:a1:8f:26:50:3d:c6:27:f8:03:92:c0: 43:8f:5a:dc:c1:19:7f:d7:1c:0f:34:4c:82:c8:82: 93:03:6b:b2:2e:53:52:f0:76:59:e6:73:69:b2:a2: 1f:2b:4c:cb:1e:a6:a7:a9:89:1b:cf:93:1f:7a:8c: e5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AB:9E:DF:F7:AA:07:F1:14:F3:F1:5E:C0:E9:20:1A:75:BF:6E:1A X509v3 Authority Key Identifier: keyid:F3:E8:61:DC:B6:34:18:93:AC:4E:63:26:EF:6D:E4:34:41:E6:69:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-hh3LY0GJOsTmMm723kNEHmaUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f74463-4b52-4883-8529-34ea021d9733/1/8-hh3LY0GJOsTmMm723kNEHmaUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:2d:e5:f8:2f:83:eb:8b:0f:0f:c8:57:c9:4b:90:85:35:62: 57:45:a7:d2:db:21:3c:8b:cd:8e:c3:71:5b:1d:f0:8b:a4:3e: b4:bd:56:59:3f:3c:ff:15:dd:11:00:0a:8c:e3:64:73:e1:b9: 37:ee:cd:88:38:6a:cd:14:d8:0e:15:57:e1:e6:d6:bc:e3:07: 98:4b:c0:c4:ca:93:5f:01:e4:15:68:2b:cf:32:ba:88:55:d2: 21:04:b7:8c:d6:16:a0:22:3c:5e:d5:8a:92:59:66:e4:de:a6: 84:43:45:4a:16:9c:db:07:ef:db:27:6c:02:41:15:51:c6:54: e1:c6:17:1a:52:29:3d:fc:09:53:97:d9:7b:d6:d2:57:fe:5c: 26:59:4e:38:c7:85:34:70:ec:8e:77:39:64:3c:1c:fc:b2:f0: 1b:6e:94:c4:61:bb:c1:86:3d:85:2e:00:7a:77:c2:5a:56:3e: 14:c4:9b:9e:dd:52:bc:a5:c9:03:d0:7c:7d:f8:b9:bc:2e:c2: 7d:6c:76:f4:b8:90:c9:34:23:13:14:6e:c5:97:75:e0:50:83: 7e:74:4b:af:35:aa:d5:bd:68:50:8b:ba:93:68:6b:22:b2:f5: 5c:56:44:81:17:88:63:d5:1d:6a:ec:a1:81:a1:5e:5a:16:12: e6:f3:32:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHQMINLXFyxwjiw/jWvODMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzZTg2MWRjYjYzNDE4OTNhYzRlNjMyNmVmNmRlNDM0NDFl NjY5NDMwHhcNMjUxMjA2MTAwMjM2WhcNMjUxMjA3MTAwMjM2WjAzMTEwLwYDVQQD Eyg2MWFiOWVkZmY3YWEwN2YxMTRmM2YxNWVjMGU5MjAxYTc1YmY2ZTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uPn1o8ygH5l3S3IeDc+nB+vSIfj WNKLO9RbsHCrEJJxTB1wQMDHqVpTyZyuQIQH9gZ/TdxH5j+trJcsmf52R7d7G2IS oA0cK6jhWI0c7rjeR3pIzQhWHZUb9uaGLBi5UsRnDvzDn1uf0k7qCE9ZhxgpPTmG xZCtk81CzX9F0XMpxDJKxvgvv7dMagPuJ424iykvwyr1ltoLwCAGifQxS5oQmUty PuJq9dCGf24a158CokSo+q1F2tHh05HRYuIPkjyjqPAboY8mUD3GJ/gDksBDj1rc wRl/1xwPNEyCyIKTA2uyLlNS8HZZ5nNpsqIfK0zLHqanqYkbz5MfeozlawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGrnt/3qgfxFPPxXsDpIBp1v24aMB8GA1UdIwQY MBaAFPPoYdy2NBiTrE5jJu9t5DRB5mlDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOC1oaDNMWTBHSk9zVG1NbTcyM2tORUhtYVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mNzQ0NjMtNGI1Mi00ODgzLTg1Mjkt MzRlYTAyMWQ5NzMzLzEvOC1oaDNMWTBHSk9zVG1NbTcyM2tORUhtYVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9mNzQ0NjMtNGI1Mi00ODgzLTg1MjktMzRlYTAyMWQ5NzMz LzEvOC1oaDNMWTBHSk9zVG1NbTcyM2tORUhtYVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFS3l+C+D 64sPD8hXyUuQhTViV0Wn0tshPIvNjsNxWx3wi6Q+tL1WWT88/xXdEQAKjONkc+G5 N+7NiDhqzRTYDhVX4ebWvOMHmEvAxMqTXwHkFWgrzzK6iFXSIQS3jNYWoCI8XtWK kllm5N6mhENFShac2wfv2ydsAkEVUcZU4cYXGlIpPfwJU5fZe9bSV/5cJllOOMeF NHDsjnc5ZDwc/LLwG26UxGG7wYY9hS4AenfCWlY+FMSbnt1SvKXJA9B8ffi5vC7C fWx29LiQyTQjExRuxZd14FCDfnRLrzWq1b1oUIu6k2hrIrL1XFZEgReIY9Udauyh gaFeWhYS5vMymg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:07:32 2025 by rpki-client