This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft File: R8CqLp6CAO7mcCaUKixSSIAvM7g.mft (raw, json) Hash identifier: AaOGQGSFlcbWdTN8MdlAkg8cNLckxgdJEq68wLsJyXg= Subject key identifier: 07:34:67:E6:BE:97:78:0E:B5:6E:03:B8:46:78:86:E2:C8:2D:46:E2 Authority key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8 Certificate issuer: /CN=47c0aa2e9e8200eee67026942a2c5248802f33b8 Certificate serial: 019B269B651BDD1961CDBB043FCCBD2426CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft Manifest number: 1571 Signing time: Tue 16 Dec 2025 10:01:16 +0000 Manifest this update: Tue 16 Dec 2025 10:01:16 +0000 Manifest next update: Wed 17 Dec 2025 10:01:16 +0000 Files and hashes: 1: R8CqLp6CAO7mcCaUKixSSIAvM7g.crl (hash: x6ao5HWcVD17jblx43EhkyOduZGE+uokDF6/oatPDGI=) 2: qkYxxaIiN3jcZulu8UiMqofxjLE.roa (hash: cRshqAIAXgfUlz/OBpedkq/8h7RRrBNX/FMXdEVJZFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9b:65:1b:dd:19:61:cd:bb:04:3f:cc:bd:24:26:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8 Validity Not Before: Dec 16 10:01:16 2025 GMT Not After : Dec 17 10:01:16 2025 GMT Subject: CN=073467e6be97780eb56e03b8467886e2c82d46e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7f:af:29:75:48:ad:18:ba:14:a5:73:36:51: 12:f2:4f:0a:28:82:a6:81:d4:38:de:e4:9f:35:45: 3f:43:c9:25:d8:e4:d7:70:ab:c8:f5:88:2e:ca:b4: 06:40:eb:30:64:33:3b:e5:c1:d6:27:62:c5:98:01: 85:4a:7f:e4:95:3e:8f:19:46:64:94:37:30:92:2d: 9c:8a:6f:a3:4c:9a:a0:7a:e8:73:d6:9d:ea:03:62: 54:bc:55:c4:d2:9a:eb:f0:df:e9:38:8d:da:4b:61: e5:b5:2a:93:8e:ba:a9:a6:08:d0:2b:2b:ce:bf:dc: 98:7b:4c:7e:75:05:a5:e0:6d:76:d7:22:07:91:77: 85:89:88:62:31:78:a5:3c:3e:c8:48:eb:c9:ee:2e: ea:20:f5:32:8c:11:f1:bd:d2:07:12:67:a7:27:4a: 93:2a:34:b7:18:25:0e:e6:f0:2e:19:30:5d:d9:73: b4:05:22:bb:c7:ab:d9:80:31:0e:16:82:9d:46:4a: d4:dd:5b:9a:89:d6:46:f4:90:e3:d9:0a:5e:0d:46: 02:dd:86:8e:c5:1a:c4:9e:82:6b:8b:00:6c:88:be: eb:b6:bb:60:8e:b2:17:25:7c:84:e7:75:16:be:e7: 91:ed:19:25:de:e0:6f:e8:25:92:b3:66:52:db:a7: 43:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:34:67:E6:BE:97:78:0E:B5:6E:03:B8:46:78:86:E2:C8:2D:46:E2 X509v3 Authority Key Identifier: keyid:47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:af:49:5c:68:dc:33:09:6e:d9:ca:c5:08:35:39:a2:87:53: e1:b8:9f:64:c6:08:7b:dd:48:df:ec:9a:10:e9:39:23:5f:81: 04:d7:00:e3:f5:67:b1:6e:19:18:e5:98:30:94:81:42:48:56: ee:80:d8:a1:92:64:30:87:76:d7:d2:22:f1:2b:2c:39:0f:0a: a2:5c:6b:6c:e8:b3:de:e4:a6:1f:b1:2f:a1:c6:24:d0:53:7c: 04:c4:5b:1c:52:28:10:fa:0c:83:0b:20:75:70:25:48:62:1a: 70:85:87:92:ab:58:d9:0f:dd:fc:e8:e2:fd:28:83:ae:6e:a7: fe:44:6a:e9:75:bb:ea:bb:92:7e:9c:c4:fa:0b:3f:09:37:b3: c1:de:fe:48:c3:e3:01:29:9e:f8:0e:85:19:c8:04:1a:2c:42: c4:4d:81:19:63:4c:dd:52:91:1f:b5:17:bb:ee:c1:3b:b5:af: 3f:7f:1d:63:10:28:31:eb:da:27:85:70:80:0f:ca:b3:ea:97: 05:fd:df:74:8a:1d:df:a9:0f:1e:30:29:c7:64:14:1c:da:d4: 78:76:45:c8:76:2f:e5:ea:82:65:95:07:44:75:e3:16:53:73: 6e:79:df:87:0a:bc:96:6a:de:a5:ae:df:3e:e1:82:d3:30:c9: 84:89:f7:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmm2Ub3RlhzbsEP8y9JCbOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3YzBhYTJlOWU4MjAwZWVlNjcwMjY5NDJhMmM1MjQ4ODAy ZjMzYjgwHhcNMjUxMjE2MTAwMTE2WhcNMjUxMjE3MTAwMTE2WjAzMTEwLwYDVQQD EygwNzM0NjdlNmJlOTc3ODBlYjU2ZTAzYjg0Njc4ODZlMmM4MmQ0NmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH+vKXVIrRi6FKVzNlES8k8KKIKm gdQ43uSfNUU/Q8kl2OTXcKvI9YguyrQGQOswZDM75cHWJ2LFmAGFSn/klT6PGUZk lDcwki2cim+jTJqgeuhz1p3qA2JUvFXE0prr8N/pOI3aS2HltSqTjrqppgjQKyvO v9yYe0x+dQWl4G121yIHkXeFiYhiMXilPD7ISOvJ7i7qIPUyjBHxvdIHEmenJ0qT KjS3GCUO5vAuGTBd2XO0BSK7x6vZgDEOFoKdRkrU3VuaidZG9JDj2QpeDUYC3YaO xRrEnoJriwBsiL7rtrtgjrIXJXyE53UWvueR7Rkl3uBv6CWSs2ZS26dDPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAc0Z+a+l3gOtW4DuEZ4huLILUbiMB8GA1UdIwQY MBaAFEfAqi6eggDu5nAmlCosUkiALzO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjhDcUxwNkNBTzdtY0NhVUtpeFNTSUF2TTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84NDZhZTItN2RkZi00MzMyLWEzNjMt YzY5Mjc4MjA2NGIwLzEvUjhDcUxwNkNBTzdtY0NhVUtpeFNTSUF2TTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My84NDZhZTItN2RkZi00MzMyLWEzNjMtYzY5Mjc4MjA2NGIw LzEvUjhDcUxwNkNBTzdtY0NhVUtpeFNTSUF2TTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAya9JXGjc Mwlu2crFCDU5oodT4bifZMYIe91I3+yaEOk5I1+BBNcA4/VnsW4ZGOWYMJSBQkhW 7oDYoZJkMId219Ii8SssOQ8KolxrbOiz3uSmH7EvocYk0FN8BMRbHFIoEPoMgwsg dXAlSGIacIWHkqtY2Q/d/Oji/SiDrm6n/kRq6XW76ruSfpzE+gs/CTezwd7+SMPj ASme+A6FGcgEGixCxE2BGWNM3VKRH7UXu+7BO7WvP38dYxAoMevaJ4VwgA/Ks+qX Bf3fdIod36kPHjApx2QUHNrUeHZFyHYv5eqCZZUHRHXjFlNzbnnfhwq8lmrepa7f PuGC0zDJhIn3PA== -----END CERTIFICATE-----Generated at Tue Dec 16 14:20:03 2025 by rpki-client