This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft File: h_S8G8xE8-kQBwQ1297UG25ILmg.mft (raw, json) Hash identifier: bDA66WfbefvrlDIddm6tNLEzUJNvdHREhzNR4NRhbec= Subject key identifier: F8:D4:AB:AA:3B:D7:CB:7E:18:3A:AF:74:20:2D:B5:6C:AF:53:BB:1B Authority key identifier: 87:F4:BC:1B:CC:44:F3:E9:10:07:04:35:DB:DE:D4:1B:6E:48:2E:68 Certificate issuer: /CN=87f4bc1bcc44f3e910070435dbded41b6e482e68 Certificate serial: 019AF2ADE3A8BB1C33E6B6C596A7E7A3B827 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft Manifest number: 0595 Signing time: Sat 06 Dec 2025 08:01:13 +0000 Manifest this update: Sat 06 Dec 2025 08:01:13 +0000 Manifest next update: Sun 07 Dec 2025 08:01:13 +0000 Files and hashes: 1: h_S8G8xE8-kQBwQ1297UG25ILmg.crl (hash: wY4kB0tddvazs0ZlaPNyKchKwEf6NVlRP1dXgSNr6kk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:e3:a8:bb:1c:33:e6:b6:c5:96:a7:e7:a3:b8:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87f4bc1bcc44f3e910070435dbded41b6e482e68 Validity Not Before: Dec 6 08:01:13 2025 GMT Not After : Dec 7 08:01:13 2025 GMT Subject: CN=f8d4abaa3bd7cb7e183aaf74202db56caf53bb1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a9:37:4f:fa:0a:56:65:81:76:b7:00:ac:d0: c7:8b:2f:7e:2d:ed:7c:e8:eb:62:5a:1b:2c:cd:15: d6:cf:40:eb:c8:f0:bf:72:ff:f9:a1:f7:a8:1a:3a: df:55:97:15:60:50:17:e7:af:4a:40:6c:6e:59:52: 2d:79:05:96:59:5d:0b:78:ce:7e:b2:28:18:88:22: 17:e8:47:98:50:59:b3:0c:1f:21:0f:1b:a2:9f:a8: 38:81:2e:5a:3b:45:a0:67:63:0b:87:64:ee:98:a4: 5d:13:a9:28:17:01:a5:d9:32:49:22:22:24:b4:91: 00:44:40:ed:50:b8:08:7d:ef:ba:30:3c:31:49:b6: e9:e0:df:a4:64:5a:2c:e0:a6:dd:ce:1b:f4:b9:e0: 3c:60:d2:a0:19:e3:9c:7b:70:b9:36:28:18:e5:a9: 15:50:bd:d4:d1:a2:af:6b:ac:1e:03:b8:1b:ff:5c: a1:31:00:bd:72:f0:70:ed:da:6a:ea:59:7c:e9:5d: e7:36:9f:9a:b0:c2:fb:a0:4c:06:83:c2:68:61:ea: f0:88:67:64:7d:15:a0:34:70:e6:22:f2:5b:b1:06: 24:f3:13:86:42:85:ae:0c:13:23:f0:23:dc:10:c6: e2:49:c5:ec:59:45:ed:a7:c8:27:9f:1d:b8:1b:59: a7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D4:AB:AA:3B:D7:CB:7E:18:3A:AF:74:20:2D:B5:6C:AF:53:BB:1B X509v3 Authority Key Identifier: keyid:87:F4:BC:1B:CC:44:F3:E9:10:07:04:35:DB:DE:D4:1B:6E:48:2E:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:0c:43:72:6c:32:8d:9d:f4:c5:2e:f8:2b:b9:05:0f:1a:67: e3:a5:2c:20:76:21:66:58:00:0a:4a:07:58:ea:72:ea:17:66: 9a:ac:8a:4a:11:bc:c4:42:08:7c:48:57:44:cf:e2:05:31:ca: 52:df:8d:5a:63:25:82:56:87:42:2b:a3:0b:ed:f9:3b:fd:fe: 84:35:4a:0c:bc:bd:7d:84:bc:21:43:68:7a:8c:5a:5e:2c:2a: 99:f8:8b:e4:a4:af:ca:0a:44:13:f0:d3:2a:4b:02:e0:5d:d9: c3:ab:7a:f2:39:36:09:e4:10:28:ed:25:be:21:22:60:59:82: 65:59:0e:75:26:0e:b0:de:1d:bc:c5:e6:ba:99:fd:f0:77:3f: ef:15:3b:62:d6:97:f5:62:d6:3d:09:1f:fe:86:56:d8:a4:1a: 7a:f4:de:d5:e1:d0:8c:15:e4:7f:52:56:c0:b9:26:b3:e7:9a: e8:ac:cb:a4:f9:e9:3f:88:2e:0c:e9:cc:41:f6:ea:7f:e7:e0: c6:78:f2:b6:9e:db:b4:29:3d:0f:4c:08:29:eb:0b:b7:39:34: 84:9b:33:d0:5b:e9:75:4f:fa:22:7c:87:e8:e4:b1:34:b9:0b: 77:84:58:74:27:89:9c:a2:38:5c:6a:5f:96:0e:d1:a2:1f:9c: 97:95:4e:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryreOouxwz5rbFlqfno7gnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZjRiYzFiY2M0NGYzZTkxMDA3MDQzNWRiZGVkNDFiNmU0 ODJlNjgwHhcNMjUxMjA2MDgwMTEzWhcNMjUxMjA3MDgwMTEzWjAzMTEwLwYDVQQD EyhmOGQ0YWJhYTNiZDdjYjdlMTgzYWFmNzQyMDJkYjU2Y2FmNTNiYjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqk3T/oKVmWBdrcArNDHiy9+Le18 6OtiWhsszRXWz0DryPC/cv/5ofeoGjrfVZcVYFAX569KQGxuWVIteQWWWV0LeM5+ sigYiCIX6EeYUFmzDB8hDxuin6g4gS5aO0WgZ2MLh2TumKRdE6koFwGl2TJJIiIk tJEAREDtULgIfe+6MDwxSbbp4N+kZFos4Kbdzhv0ueA8YNKgGeOce3C5NigY5akV UL3U0aKva6weA7gb/1yhMQC9cvBw7dpq6ll86V3nNp+asML7oEwGg8JoYerwiGdk fRWgNHDmIvJbsQYk8xOGQoWuDBMj8CPcEMbiScXsWUXtp8gnnx24G1mnwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjUq6o718t+GDqvdCAttWyvU7sbMB8GA1UdIwQY MBaAFIf0vBvMRPPpEAcENdve1BtuSC5oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaF9TOEc4eEU4LWtRQndRMTI5N1VHMjVJTG1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wYjViNmQtN2Y0Ni00NDdhLTg5NDYt N2U3ODE2ODBkMWQyLzEvaF9TOEc4eEU4LWtRQndRMTI5N1VHMjVJTG1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wYjViNmQtN2Y0Ni00NDdhLTg5NDYtN2U3ODE2ODBkMWQy LzEvaF9TOEc4eEU4LWtRQndRMTI5N1VHMjVJTG1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQxDcmwy jZ30xS74K7kFDxpn46UsIHYhZlgACkoHWOpy6hdmmqyKShG8xEIIfEhXRM/iBTHK Ut+NWmMlglaHQiujC+35O/3+hDVKDLy9fYS8IUNoeoxaXiwqmfiL5KSvygpEE/DT KksC4F3Zw6t68jk2CeQQKO0lviEiYFmCZVkOdSYOsN4dvMXmupn98Hc/7xU7YtaX 9WLWPQkf/oZW2KQaevTe1eHQjBXkf1JWwLkms+ea6KzLpPnpP4guDOnMQfbqf+fg xnjytp7btCk9D0wIKesLtzk0hJsz0FvpdU/6InyH6OSxNLkLd4RYdCeJnKI4XGpf lg7Roh+cl5VONA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:59:58 2025 by rpki-client