This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft File: R8x-nha98tTmHHXufgADPnZvmJc.mft (raw, json) Hash identifier: G0JLoqv7b36f+7DDy9bmWAUB6CCOzu66C8ZsEzOHkgg= Subject key identifier: C4:37:E1:14:56:7D:BC:ED:A7:EA:D0:D6:FF:BF:52:B1:90:74:CC:FB Authority key identifier: 47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97 Certificate issuer: /CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897 Certificate serial: 019AF276ECA4F294175B1A2292C1D301E54A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 07:01:11 +0000 Manifest this update: Sat 06 Dec 2025 07:01:11 +0000 Manifest next update: Sun 07 Dec 2025 07:01:11 +0000 Files and hashes: 1: R8x-nha98tTmHHXufgADPnZvmJc.crl (hash: OtQb7KeUH02dzZrr2JrsWqjYsHNveWgj8KiFYJiUR9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ec:a4:f2:94:17:5b:1a:22:92:c1:d3:01:e5:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897 Validity Not Before: Dec 6 07:01:11 2025 GMT Not After : Dec 7 07:01:11 2025 GMT Subject: CN=c437e114567dbceda7ead0d6ffbf52b19074ccfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bb:f0:6b:ac:6f:df:d6:da:fc:f9:fd:9a:53: 09:ea:57:2c:a6:41:8b:a7:5d:3b:49:12:6f:b4:5b: 63:94:ec:e4:65:62:dc:67:96:ac:7f:30:fb:ac:06: 62:ed:89:74:5c:1c:88:de:d9:d9:6a:e4:e7:93:b0: e4:67:ef:dc:c4:5e:c6:96:66:fb:d0:f2:1e:46:66: 1a:28:5b:46:9e:22:8f:3d:a7:a1:f5:0b:12:f9:36: f3:32:64:a5:81:92:6a:7d:da:f8:60:a3:b3:0f:98: 4a:57:82:12:41:0e:ac:fd:c0:32:96:56:61:6d:6e: 37:99:3d:33:63:51:ab:43:4a:e3:8c:12:17:15:59: 87:b9:93:91:32:64:d1:20:90:31:af:f2:41:d4:3e: 15:64:fa:fe:e6:50:38:ae:7e:8d:0f:77:41:2f:c8: 23:23:11:85:9a:ea:ff:4e:01:91:84:f3:30:24:73: d5:64:71:04:5e:b3:8b:2a:cb:a1:c9:df:9d:ad:33: fa:30:38:57:9d:68:1a:a7:3e:2a:2e:14:13:32:0c: 2f:55:95:ff:39:f7:ab:a4:63:01:39:05:f1:f2:0d: 94:8a:d7:ca:12:2e:09:1e:f4:ab:18:1a:67:b6:85: c3:38:7b:65:00:26:14:32:f0:d8:b6:26:76:96:87: f8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:37:E1:14:56:7D:BC:ED:A7:EA:D0:D6:FF:BF:52:B1:90:74:CC:FB X509v3 Authority Key Identifier: keyid:47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:fc:97:ff:d8:1b:44:1f:01:c1:30:bb:b1:65:ae:8d:b7:49: f2:9b:3b:e7:a3:d0:80:9e:d7:d3:34:75:2d:3f:73:9e:ea:b6: 13:7a:97:61:6a:fc:e1:ca:05:24:6f:af:4c:57:61:ff:61:10: c6:f2:87:9f:62:4d:52:33:15:8b:c8:7f:94:40:36:3a:40:46: 43:b2:1a:ab:46:ad:03:24:4b:03:14:82:47:50:d8:e2:83:59: f1:1e:43:50:88:1b:76:20:3f:b1:ee:85:63:a1:c3:69:c3:ef: 77:ad:62:fa:cd:b5:4e:4c:ce:19:4c:6a:99:20:d8:03:5d:e7: eb:ec:7e:a0:a9:1b:c5:79:1a:03:db:a5:a5:08:af:96:46:e3: 0e:3b:86:ab:44:c3:18:aa:11:b0:31:1f:15:59:4f:38:6d:93: db:a5:e8:36:b2:01:29:e2:e9:90:9a:c4:73:75:be:21:0e:2c: bc:ae:b1:6e:de:2d:7f:f9:0e:78:0f:24:9a:f3:0c:91:39:52: 83:42:d9:b8:a5:a5:f8:3f:da:50:f2:b6:30:dc:88:eb:8b:e3: b1:66:fc:e2:08:0e:5f:7a:59:58:d2:b2:e2:87:b1:f2:80:6b: bd:c3:8f:8a:2e:73:92:bd:f0:5d:e2:49:38:af:da:da:3b:16: b8:37:a4:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryduyk8pQXWxoiksHTAeVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3Y2M3ZTllMTZiZGYyZDRlNjFjNzVlZTdlMDAwMzNlNzY2 Zjk4OTcwHhcNMjUxMjA2MDcwMTExWhcNMjUxMjA3MDcwMTExWjAzMTEwLwYDVQQD EyhjNDM3ZTExNDU2N2RiY2VkYTdlYWQwZDZmZmJmNTJiMTkwNzRjY2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rvwa6xv39ba/Pn9mlMJ6lcspkGL p107SRJvtFtjlOzkZWLcZ5asfzD7rAZi7Yl0XByI3tnZauTnk7DkZ+/cxF7Glmb7 0PIeRmYaKFtGniKPPaeh9QsS+TbzMmSlgZJqfdr4YKOzD5hKV4ISQQ6s/cAyllZh bW43mT0zY1GrQ0rjjBIXFVmHuZORMmTRIJAxr/JB1D4VZPr+5lA4rn6ND3dBL8gj IxGFmur/TgGRhPMwJHPVZHEEXrOLKsuhyd+drTP6MDhXnWgapz4qLhQTMgwvVZX/ OferpGMBOQXx8g2UitfKEi4JHvSrGBpntoXDOHtlACYUMvDYtiZ2lof4bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQ34RRWfbztp+rQ1v+/UrGQdMz7MB8GA1UdIwQY MBaAFEfMfp4WvfLU5hx17n4AAz52b5iXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjh4LW5oYTk4dFRtSEhYdWZnQURQblp2bUpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jYTViN2ItYjVkNi00MGFmLTg3N2Mt MWE3Zjg0YjQwNzkyLzEvUjh4LW5oYTk4dFRtSEhYdWZnQURQblp2bUpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jYTViN2ItYjVkNi00MGFmLTg3N2MtMWE3Zjg0YjQwNzky LzEvUjh4LW5oYTk4dFRtSEhYdWZnQURQblp2bUpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvyX/9gb RB8BwTC7sWWujbdJ8ps756PQgJ7X0zR1LT9znuq2E3qXYWr84coFJG+vTFdh/2EQ xvKHn2JNUjMVi8h/lEA2OkBGQ7Iaq0atAyRLAxSCR1DY4oNZ8R5DUIgbdiA/se6F Y6HDacPvd61i+s21TkzOGUxqmSDYA13n6+x+oKkbxXkaA9ulpQivlkbjDjuGq0TD GKoRsDEfFVlPOG2T26XoNrIBKeLpkJrEc3W+IQ4svK6xbt4tf/kOeA8kmvMMkTlS g0LZuKWl+D/aUPK2MNyI64vjsWb84ggOX3pZWNKy4oex8oBrvcOPii5zkr3wXeJJ OK/a2jsWuDekfw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:03 2025 by rpki-client