This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft File: 8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft (raw, json) Hash identifier: 2Lkb8qsZjnC1JpoXy4eaB2aN4xAC/J0FakiiIdudzWg= Subject key identifier: 3C:E5:CE:C1:1B:11:68:89:0A:2D:E4:BC:7E:92:7C:DA:49:82:52:44 Authority key identifier: F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7 Certificate issuer: /CN=f219383a3e3f116a9bcc4769c8517cdce40765c7 Certificate serial: 019AF23FFA1A6B6928543E9F73CCB2FE6743 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft Manifest number: 0349 Signing time: Sat 06 Dec 2025 06:01:10 +0000 Manifest this update: Sat 06 Dec 2025 06:01:10 +0000 Manifest next update: Sun 07 Dec 2025 06:01:10 +0000 Files and hashes: 1: 0c_l4ysRLhoLyNhVK3O7GIWEcSo.roa (hash: wCgtD5GTaTUHzlGOdOblih6qPlBPABAlJQ113X+Jw+c=) 2: 5jOb8o1BbBXO52drtCV8RnZe9h0.roa (hash: fEi3qbuXq214iH/x1u07FGO1olTWt/av+qXuhlLn1AY=) 3: 8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl (hash: 8K1FRzM4fQTkjjNAB12dQU3F8XJ0crsxgivh2Ku1Shs=) 4: 97Bdc61qbgqdAvjBmYkfFO0y1Ww.roa (hash: oUOsuSRnUrU8knVeKfFc9QKPrgL79MjXgwUrkum1/pg=) 5: Z29YwFdCw8mb-MR3SYDyBs3lmMg.roa (hash: J+lE3dbsGRla43+sCei9+kYRVYFXdgjow6d3cOzy75c=) 6: bFysswJxqvMNZTsaf64flp1ZIQc.roa (hash: uwCDzi7rd+IXP1Mw2HNimdPO1YXu5Quq3N1iTcDCSa4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:fa:1a:6b:69:28:54:3e:9f:73:cc:b2:fe:67:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f219383a3e3f116a9bcc4769c8517cdce40765c7 Validity Not Before: Dec 6 06:01:10 2025 GMT Not After : Dec 7 06:01:10 2025 GMT Subject: CN=3ce5cec11b1168890a2de4bc7e927cda49825244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:85:92:cd:38:8a:7c:b6:ad:45:96:89:e4:84: 4a:1f:70:23:49:43:03:cc:59:a5:8d:1f:c4:75:cd: b4:1d:7f:0d:ad:d8:87:00:a5:f8:6f:b7:bd:9e:3b: fb:92:81:8c:a7:25:5b:f7:29:f3:3e:1b:e7:e5:aa: d9:13:a6:db:f3:af:e4:c9:94:13:18:bf:24:60:87: 32:f3:fe:30:0d:2b:55:52:d5:5f:e7:b6:93:40:de: 47:57:ec:a1:74:3a:75:51:6d:39:10:8d:48:d0:86: 8a:6c:13:6a:cf:6b:74:7e:c3:30:99:fa:32:4a:39: 8b:b9:df:5c:c3:76:64:68:92:e5:9b:69:cb:5a:3b: 1c:a0:95:fe:65:a9:c0:2f:27:14:2c:22:54:bb:a2: 42:3b:f9:fd:88:d8:ed:59:85:e8:20:0f:d2:ca:1b: fe:c4:f6:27:c1:ab:f5:84:b5:a1:fd:06:2c:55:d2: a4:38:08:3c:05:98:43:e8:d6:29:be:85:64:c3:dd: 1a:37:e4:d5:3c:f3:ac:f4:98:01:d8:88:c3:1d:56: d2:07:0f:44:0d:46:50:0c:4c:b4:b1:23:2e:da:85: 35:2b:04:82:a7:d5:ae:da:7a:8f:72:1a:89:ce:d4: a7:c6:b1:8e:8a:2a:2a:68:18:04:17:10:6a:e3:c0: a6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E5:CE:C1:1B:11:68:89:0A:2D:E4:BC:7E:92:7C:DA:49:82:52:44 X509v3 Authority Key Identifier: keyid:F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d9:02:17:47:aa:83:a3:a0:15:76:50:54:90:7f:06:df:52: 3b:87:fe:ca:0a:14:7f:91:2b:08:23:2f:db:74:c8:49:96:1b: 43:17:ac:87:42:00:70:4f:35:25:ff:6a:7b:ed:83:9a:31:3b: dd:5b:1d:a7:29:18:db:59:ce:e0:5c:22:bd:46:35:d6:10:1d: a3:af:22:1f:f1:a1:be:72:59:29:ef:08:ba:04:26:4f:f8:9e: c9:14:9c:9d:d8:d8:0c:3a:d0:b3:36:4f:e1:3a:21:3b:55:82: 81:84:91:a1:53:94:5d:ea:05:f9:94:09:73:50:19:95:25:8c: aa:50:31:36:f2:ab:a1:7b:63:eb:24:08:9d:21:dc:84:ee:aa: f0:eb:cf:c9:ac:1b:a6:d5:e2:04:52:51:d5:9d:94:c1:4b:8e: 7b:b8:7e:d1:19:fd:0a:ad:03:24:0b:b5:3f:3c:66:73:bb:0e: 8e:07:34:f2:23:9d:ef:d5:6e:e9:28:51:94:f6:a5:8b:09:df: a8:3e:63:78:f6:cc:33:80:22:42:57:e0:cd:e2:5b:06:2e:4a: 2e:4e:58:1f:86:10:ec:2a:f6:fe:9b:da:4f:60:08:d7:c1:83: 92:f1:98:9c:a9:d5:b1:33:fd:49:d9:27:3d:44:ec:3e:ed:a3: 7b:d9:c3:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/oaa2koVD6fc8yy/mdDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMTkzODNhM2UzZjExNmE5YmNjNDc2OWM4NTE3Y2RjZTQw NzY1YzcwHhcNMjUxMjA2MDYwMTEwWhcNMjUxMjA3MDYwMTEwWjAzMTEwLwYDVQQD EygzY2U1Y2VjMTFiMTE2ODg5MGEyZGU0YmM3ZTkyN2NkYTQ5ODI1MjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YWSzTiKfLatRZaJ5IRKH3AjSUMD zFmljR/Edc20HX8NrdiHAKX4b7e9njv7koGMpyVb9ynzPhvn5arZE6bb86/kyZQT GL8kYIcy8/4wDStVUtVf57aTQN5HV+yhdDp1UW05EI1I0IaKbBNqz2t0fsMwmfoy SjmLud9cw3ZkaJLlm2nLWjscoJX+ZanALycULCJUu6JCO/n9iNjtWYXoIA/Syhv+ xPYnwav1hLWh/QYsVdKkOAg8BZhD6NYpvoVkw90aN+TVPPOs9JgB2IjDHVbSBw9E DUZQDEy0sSMu2oU1KwSCp9Wu2nqPchqJztSnxrGOiioqaBgEFxBq48CmUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzlzsEbEWiJCi3kvH6SfNpJglJEMB8GA1UdIwQY MBaAFPIZODo+PxFqm8xHachRfNzkB2XHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGhrNE9qNF9FV3FiekVkcHlGRjgzT1FIWmNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS83Y2YwYjEtMjI5OC00NDg0LWJkODAt NmNjOWY2Y2JhYWM0LzEvOGhrNE9qNF9FV3FiekVkcHlGRjgzT1FIWmNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS83Y2YwYjEtMjI5OC00NDg0LWJkODAtNmNjOWY2Y2JhYWM0 LzEvOGhrNE9qNF9FV3FiekVkcHlGRjgzT1FIWmNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9kCF0eq g6OgFXZQVJB/Bt9SO4f+ygoUf5ErCCMv23TISZYbQxesh0IAcE81Jf9qe+2DmjE7 3VsdpykY21nO4FwivUY11hAdo68iH/GhvnJZKe8IugQmT/ieyRScndjYDDrQszZP 4TohO1WCgYSRoVOUXeoF+ZQJc1AZlSWMqlAxNvKroXtj6yQInSHchO6q8OvPyawb ptXiBFJR1Z2UwUuOe7h+0Rn9Cq0DJAu1Pzxmc7sOjgc08iOd79Vu6ShRlPaliwnf qD5jePbMM4AiQlfgzeJbBi5KLk5YH4YQ7Cr2/pvaT2AI18GDkvGYnKnVsTP9Sdkn PUTsPu2je9nD9g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:30:12 2025 by rpki-client