This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft File: 8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft (raw, json) Hash identifier: upJvsv6OwgfUlKK8tmOLaLH9RL8w2ynIdAaoVjQqDXU= Subject key identifier: 19:89:90:A2:2C:9C:8D:2A:37:D5:01:B2:A9:DA:94:83:4C:B4:5F:A7 Authority key identifier: F0:7B:E9:D1:18:97:71:B7:33:7E:FC:1C:ED:2C:82:5D:C2:47:2A:56 Certificate issuer: /CN=f07be9d1189771b7337efc1ced2c825dc2472a56 Certificate serial: 019AF2AD992D1E09F973EC8BD6F184187F8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft Manifest number: 048A Signing time: Sat 06 Dec 2025 08:00:54 +0000 Manifest this update: Sat 06 Dec 2025 08:00:54 +0000 Manifest next update: Sun 07 Dec 2025 08:00:54 +0000 Files and hashes: 1: 8Hvp0RiXcbczfvwc7SyCXcJHKlY.crl (hash: BnvKELgtbZ/2dkVOVU4IOEnk0A+H5lTq4+0vjhi1ZFg=) 2: J2wzb8YKKVcFBB9aw2nmFsUG6Ac.roa (hash: uNatwiz0kls9jaP1S1snowxFlS7dqcfH880Un/eLhPs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft rsync://rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:99:2d:1e:09:f9:73:ec:8b:d6:f1:84:18:7f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f07be9d1189771b7337efc1ced2c825dc2472a56 Validity Not Before: Dec 6 08:00:54 2025 GMT Not After : Dec 7 08:00:54 2025 GMT Subject: CN=198990a22c9c8d2a37d501b2a9da94834cb45fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:91:84:b2:2b:c0:1f:94:e5:86:3d:02:0e:10: be:13:d5:2f:41:0e:b4:f4:29:82:2a:7f:35:f0:74: e3:a8:fb:07:b0:2b:ce:c2:a7:45:c1:c5:af:0f:8d: 90:aa:99:a2:a5:d6:2e:ec:e3:1d:d0:46:48:b9:f8: 4d:f2:a0:87:11:13:f2:71:22:81:50:d3:c4:d3:42: 34:72:f7:02:8a:f6:2a:44:52:da:bb:2a:a0:da:47: 3f:a9:4f:1c:7d:95:11:42:3c:93:4d:42:80:5a:23: b1:b7:2c:69:64:91:db:9a:0d:e0:53:52:9e:58:23: c2:bc:14:52:a6:15:05:39:36:89:51:25:53:4a:db: 20:eb:9b:94:58:9e:3d:bb:4b:ee:83:10:be:de:2c: 74:b8:81:a7:ee:77:ef:78:0d:cf:28:1d:37:24:20: a2:42:e9:3e:a9:8b:64:dd:53:ef:34:14:6e:fa:65: 76:cb:ac:14:12:a2:0c:1e:91:57:e0:c6:95:09:70: d1:09:15:98:75:64:96:f6:19:e5:97:cd:3e:75:ec: 99:c3:62:30:02:d5:52:14:7d:65:59:1a:5b:70:1d: 56:74:2a:24:6e:64:9b:44:2c:38:82:91:42:60:2a: dd:6d:4e:50:9b:2b:29:4d:00:b4:00:63:61:74:21: 69:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:89:90:A2:2C:9C:8D:2A:37:D5:01:B2:A9:DA:94:83:4C:B4:5F:A7 X509v3 Authority Key Identifier: keyid:F0:7B:E9:D1:18:97:71:B7:33:7E:FC:1C:ED:2C:82:5D:C2:47:2A:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:80:23:47:f3:74:e3:e9:63:29:5d:6c:3b:d4:37:7f:d8:d8: 2a:86:36:4d:53:c3:7f:0b:af:b9:20:c7:6c:ba:66:57:aa:20: e9:e2:9f:b8:ac:d3:7b:45:60:24:99:af:38:47:0a:8d:74:b1: da:3e:a1:41:eb:df:14:34:31:e1:a8:76:87:2b:1b:cb:e7:ba: 82:88:f9:5e:8f:b1:15:da:df:79:29:8e:8d:57:75:9d:ae:9e: 60:88:99:bc:bb:cc:0c:46:56:3c:59:1b:e2:1d:03:8a:71:ae: af:af:d4:73:74:4a:3b:f9:64:ce:47:d0:88:7a:04:26:b6:84: da:32:75:83:68:e9:5d:36:75:93:08:d8:ef:18:2f:04:70:a0: 01:96:0e:47:d3:3d:82:01:84:3b:0d:fc:00:44:c3:e0:f4:62: a9:87:aa:7b:fe:bd:93:13:ec:f7:a4:32:30:55:e6:cd:15:58: 6c:50:f7:58:88:fa:3e:f8:b6:90:de:9c:7f:be:aa:ed:db:9f: d7:88:fa:b8:3c:7a:12:ac:f6:dd:8e:da:22:80:ec:1a:a3:c4: 3d:53:f9:36:11:98:eb:8e:f8:b2:ee:ef:36:83:6e:43:8b:f6: 99:8d:82:1c:ae:6a:f5:36:32:ff:b7:e3:1c:96:15:8b:0b:8d: bf:f1:c5:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZktHgn5c+yL1vGEGH+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwN2JlOWQxMTg5NzcxYjczMzdlZmMxY2VkMmM4MjVkYzI0 NzJhNTYwHhcNMjUxMjA2MDgwMDU0WhcNMjUxMjA3MDgwMDU0WjAzMTEwLwYDVQQD EygxOTg5OTBhMjJjOWM4ZDJhMzdkNTAxYjJhOWRhOTQ4MzRjYjQ1ZmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZGEsivAH5Tlhj0CDhC+E9UvQQ60 9CmCKn818HTjqPsHsCvOwqdFwcWvD42QqpmipdYu7OMd0EZIufhN8qCHERPycSKB UNPE00I0cvcCivYqRFLauyqg2kc/qU8cfZURQjyTTUKAWiOxtyxpZJHbmg3gU1Ke WCPCvBRSphUFOTaJUSVTStsg65uUWJ49u0vugxC+3ix0uIGn7nfveA3PKB03JCCi Quk+qYtk3VPvNBRu+mV2y6wUEqIMHpFX4MaVCXDRCRWYdWSW9hnll80+deyZw2Iw AtVSFH1lWRpbcB1WdCokbmSbRCw4gpFCYCrdbU5QmyspTQC0AGNhdCFpvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmJkKIsnI0qN9UBsqnalINMtF+nMB8GA1UdIwQY MBaAFPB76dEYl3G3M378HO0sgl3CRypWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEh2cDBSaVhjYmN6ZnZ3YzdTeUNYY0pIS2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lYzE4MTYtNTQ2Ni00NWE2LWFlNjEt M2ZiMDg3MGVhMjU5LzEvOEh2cDBSaVhjYmN6ZnZ3YzdTeUNYY0pIS2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9lYzE4MTYtNTQ2Ni00NWE2LWFlNjEtM2ZiMDg3MGVhMjU5 LzEvOEh2cDBSaVhjYmN6ZnZ3YzdTeUNYY0pIS2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYAjR/N0 4+ljKV1sO9Q3f9jYKoY2TVPDfwuvuSDHbLpmV6og6eKfuKzTe0VgJJmvOEcKjXSx 2j6hQevfFDQx4ah2hysby+e6goj5Xo+xFdrfeSmOjVd1na6eYIiZvLvMDEZWPFkb 4h0DinGur6/Uc3RKO/lkzkfQiHoEJraE2jJ1g2jpXTZ1kwjY7xgvBHCgAZYOR9M9 ggGEOw38AETD4PRiqYeqe/69kxPs96QyMFXmzRVYbFD3WIj6Pvi2kN6cf76q7duf 14j6uDx6Eqz23Y7aIoDsGqPEPVP5NhGY6474su7vNoNuQ4v2mY2CHK5q9TYy/7fj HJYViwuNv/HFPg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:29:33 2025 by rpki-client