This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft File: hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft (raw, json) Hash identifier: oOBOxlNR0e4LSCmFYe1PYenbi0BIIsDl26ioNblqQbY= Subject key identifier: F1:E6:E0:9A:57:BE:5B:97:55:5B:D2:E2:27:90:05:C6:5F:FA:52:9E Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E Certificate issuer: /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e Certificate serial: 019AF3F75CE865DC66F6996D7E0E68630109 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 14:01:05 +0000 Manifest this update: Sat 06 Dec 2025 14:01:05 +0000 Manifest next update: Sun 07 Dec 2025 14:01:05 +0000 Files and hashes: 1: 0mePZR1kaf-hX2Yp4hjxtaHCXOY.roa (hash: Iz51+DSbV7Tr3oZnznfPb0ztDkoHj3CGvdnh39JEVfU=) 2: Dh6Kyc_0YRpUkQaciLKNTFpj2yY.roa (hash: XwxfewChyQGnh/6DJxz8pIZg+xrexkVvjsVCqgpoH3U=) 3: ZovzMlbHa6h-Fl7gDQG_Zq7WfR4.roa (hash: H/iI+5AR6wdmCN1X+mmy0vutxGeF8cVAtih493U1ycg=) 4: hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl (hash: vdZgWKzjE16GjOgFGyprEgpLRKoj/B1WN1NcnI2LpFU=) 5: l73B-rq6PzNDiKoxaYkXjLCugtw.roa (hash: 3VSqbyAVKfkVsGJFnzfZhKO8PUH5YDBnP4CFYJUZ7hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:5c:e8:65:dc:66:f6:99:6d:7e:0e:68:63:01:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e Validity Not Before: Dec 6 14:01:05 2025 GMT Not After : Dec 7 14:01:05 2025 GMT Subject: CN=f1e6e09a57be5b97555bd2e2279005c65ffa529e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fa:5f:98:da:1d:0d:07:66:f0:e1:99:83:de: f3:8c:9f:e0:56:80:17:13:9e:e6:cb:40:f0:e3:c5: 16:b5:0c:5b:f8:46:98:a9:fd:40:2c:44:f6:f2:32: de:10:ee:58:1f:27:2a:6f:c9:fd:d5:cf:e3:6f:a6: 0e:c7:67:52:f0:ce:71:28:b9:20:e2:f9:70:2e:63: 50:b9:60:d4:10:70:41:63:1c:42:69:17:d6:11:8a: dd:73:a1:a0:8a:36:16:92:b5:d9:f7:84:02:0f:a2: fa:5f:a8:de:d3:55:76:81:8b:d9:9c:f8:7d:96:77: 72:ba:de:05:c7:63:6d:70:7c:e9:6b:26:09:f5:48: ee:68:65:d3:f2:4e:45:a4:70:11:41:3c:69:62:62: 87:d0:1a:73:68:29:a9:36:47:1a:db:64:d6:d9:b5: c0:25:d9:bb:a1:29:ac:1b:24:76:4e:e1:60:3c:d6: 2d:71:45:50:17:f0:f9:8d:a6:f6:de:c8:23:2c:39: b2:6f:d1:fd:bc:a1:e3:b2:40:25:04:30:e5:a2:32: e3:5a:81:c0:dc:ad:79:58:36:89:f1:b2:0e:c1:c1: 38:a0:29:67:7d:75:b6:02:6e:23:11:9a:fe:32:87: f5:07:10:94:fe:8d:71:03:20:f8:03:5d:a9:96:37: 85:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E6:E0:9A:57:BE:5B:97:55:5B:D2:E2:27:90:05:C6:5F:FA:52:9E X509v3 Authority Key Identifier: keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ef:65:96:df:13:db:60:78:12:bd:b8:e8:55:0d:6e:0e:00: 7d:2d:16:3b:45:ff:7e:d2:e7:e0:5c:71:3f:06:08:3b:a3:ba: ae:4e:e4:e4:b5:18:97:0d:76:de:49:7c:92:51:91:aa:b8:c1: 80:9a:ba:14:be:2a:9d:12:6a:2d:cc:32:54:f2:fc:b8:55:b8: 48:7a:4b:cb:7f:7d:44:92:11:4e:84:b6:2e:2a:ec:84:9c:58: a5:d9:36:40:ec:67:cb:e1:84:08:9f:fa:d7:40:db:7e:ce:a6: 4e:7e:3a:3d:45:9b:19:30:13:6f:37:d4:0f:13:d7:37:a4:41: c1:cc:60:03:9f:74:90:76:09:a5:32:1e:d9:56:c4:06:21:16: f0:20:d1:af:16:28:fc:59:82:e4:04:49:20:32:ec:26:98:42: ba:14:67:78:ff:0a:3e:95:83:87:a9:b5:fd:54:f9:ec:92:5b: 85:de:ff:71:a5:b3:ba:8f:af:f1:60:d0:08:4b:44:9d:51:c0: c0:15:01:2b:60:46:44:fd:a9:9e:3a:3a:c0:18:c5:55:62:97: 77:8c:e0:d5:a3:1e:80:59:72:c1:38:c6:bc:4c:02:87:6d:ff: 94:a2:a2:6b:d6:e4:1d:fb:40:2c:c1:a6:55:f7:cd:4e:0b:3b: 04:cc:c0:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz91zoZdxm9pltfg5oYwEJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NmYwYzkwMDczYWZiOGVjZGU3ZTgzNDA5Y2VhYmRiOTNi NDFhNGUwHhcNMjUxMjA2MTQwMTA1WhcNMjUxMjA3MTQwMTA1WjAzMTEwLwYDVQQD EyhmMWU2ZTA5YTU3YmU1Yjk3NTU1YmQyZTIyNzkwMDVjNjVmZmE1MjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPpfmNodDQdm8OGZg97zjJ/gVoAX E57my0Dw48UWtQxb+EaYqf1ALET28jLeEO5YHycqb8n91c/jb6YOx2dS8M5xKLkg 4vlwLmNQuWDUEHBBYxxCaRfWEYrdc6GgijYWkrXZ94QCD6L6X6je01V2gYvZnPh9 lndyut4Fx2NtcHzpayYJ9UjuaGXT8k5FpHARQTxpYmKH0BpzaCmpNkca22TW2bXA Jdm7oSmsGyR2TuFgPNYtcUVQF/D5jab23sgjLDmyb9H9vKHjskAlBDDlojLjWoHA 3K15WDaJ8bIOwcE4oClnfXW2Am4jEZr+Mof1BxCU/o1xAyD4A12pljeFTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHm4JpXvluXVVvS4ieQBcZf+lKeMB8GA1UdIwQY MBaAFIVvDJAHOvuOzefoNAnOq9uTtBpOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFc4TWtBYzYtNDdONS1nMENjNnIyNU8wR2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8yMDQyNjgtNjA3OC00YjUzLTk0ZDIt NDRmZGU5NmI4YWVjLzEvaFc4TWtBYzYtNDdONS1nMENjNnIyNU8wR2s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8yMDQyNjgtNjA3OC00YjUzLTk0ZDItNDRmZGU5NmI4YWVj LzEvaFc4TWtBYzYtNDdONS1nMENjNnIyNU8wR2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUe9llt8T 22B4Er246FUNbg4AfS0WO0X/ftLn4FxxPwYIO6O6rk7k5LUYlw123kl8klGRqrjB gJq6FL4qnRJqLcwyVPL8uFW4SHpLy399RJIRToS2LirshJxYpdk2QOxny+GECJ/6 10Dbfs6mTn46PUWbGTATbzfUDxPXN6RBwcxgA590kHYJpTIe2VbEBiEW8CDRrxYo /FmC5ARJIDLsJphCuhRneP8KPpWDh6m1/VT57JJbhd7/caWzuo+v8WDQCEtEnVHA wBUBK2BGRP2pnjo6wBjFVWKXd4zg1aMegFlywTjGvEwCh23/lKKia9bkHftALMGm VffNTgs7BMzAfw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:06:11 2025 by rpki-client