This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft File: s8hW6VbErdthWY88JInyvfbtHRg.mft (raw, json) Hash identifier: qyc5OXgGpbuwQ0jA9a6px1eVUkKvE+/rL+ePsQ1N51E= Subject key identifier: 50:CB:A2:15:40:1B:12:3F:5F:BF:76:9E:46:90:58:63:1F:04:1E:30 Authority key identifier: B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18 Certificate issuer: /CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18 Certificate serial: 019AF276E85A95080518546DC4C311E62922 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 07:01:10 +0000 Manifest this update: Sat 06 Dec 2025 07:01:10 +0000 Manifest next update: Sun 07 Dec 2025 07:01:10 +0000 Files and hashes: 1: Kc4V5tzdi4xhmWeJoyXZlmZAD6U.roa (hash: gVw1MMRDs2rY597vN0xWVEhdeHW2cAUodm7HsTOIyc8=) 2: s8hW6VbErdthWY88JInyvfbtHRg.crl (hash: K0YARfsSvfnaxXnCcQ06wGGXZ2KXAj2I7AlfybKTHZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e8:5a:95:08:05:18:54:6d:c4:c3:11:e6:29:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18 Validity Not Before: Dec 6 07:01:10 2025 GMT Not After : Dec 7 07:01:10 2025 GMT Subject: CN=50cba215401b123f5fbf769e469058631f041e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4b:09:0d:0c:54:6a:8c:7a:d8:19:15:d7:6c: 28:a1:72:f4:ad:b5:90:64:ef:f4:fa:55:e2:e7:6b: b7:88:ea:e4:f0:95:fb:30:0a:b1:8c:5f:1b:e3:00: e7:0a:54:0b:d9:17:43:5b:3e:ee:06:45:fc:2e:ff: 13:17:6e:39:58:c8:b2:e7:f7:b8:71:26:b3:b7:6a: ce:42:96:41:f4:1a:8d:f4:14:29:35:57:ca:8d:56: 92:66:00:04:de:ef:f5:b1:ff:58:f5:39:21:65:37: f9:58:d5:83:23:88:9d:47:e0:30:7a:72:91:4a:f0: ff:8a:6e:28:16:40:e1:2c:f7:e0:aa:93:a2:4a:f5: 38:37:59:b7:cf:29:21:01:03:18:9e:28:61:9e:d0: d1:7a:09:24:29:b9:80:a4:8c:d3:0a:7b:f9:55:75: d5:34:48:96:1a:bf:67:04:b2:9d:13:96:8a:74:9b: 16:e0:65:dd:56:14:e6:40:a9:78:ce:a2:06:f3:f6: ff:39:a1:3a:15:ea:2e:ba:81:af:a9:e3:24:29:5a: 5d:25:0d:68:71:66:2f:b2:11:51:e8:35:a3:d0:a9: ba:6c:1a:84:01:cd:39:d1:5c:92:13:de:5a:e9:08: 2d:03:dd:75:e3:1f:6f:18:00:b3:31:75:76:ed:20: 0f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:CB:A2:15:40:1B:12:3F:5F:BF:76:9E:46:90:58:63:1F:04:1E:30 X509v3 Authority Key Identifier: keyid:B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:6d:87:07:cb:62:4d:e5:07:f7:17:ea:c6:5e:fd:f2:a8:9d: 38:db:16:8c:fa:7a:41:94:35:df:f9:19:a8:c3:25:48:da:48: 8d:d6:2e:44:6c:60:18:10:df:37:75:b2:fc:62:fd:b0:a6:fc: 92:c1:10:a4:66:3e:e7:78:81:82:02:61:c0:5d:0a:ed:f9:f3: 9b:0e:4b:55:cb:b4:18:a4:d7:72:0d:dc:0f:a0:2b:63:e8:ec: 6f:f4:18:9d:f7:87:83:80:ca:22:91:cb:d2:6a:63:4b:13:a1: a5:7b:6c:68:c5:f9:00:ad:79:dc:e8:fa:ac:c3:0a:8b:d3:24: 1d:8c:67:e6:c9:62:e3:99:c2:17:5e:10:97:29:b0:fb:03:19: d3:3e:74:72:c2:33:f7:ca:8a:db:20:dc:51:21:c9:66:19:9f: 3b:1b:5d:6e:f8:ec:e5:f2:c1:24:59:fb:b1:c6:1b:ab:25:c3: 77:23:e2:f3:b2:82:57:a8:78:6d:36:fe:48:e2:7b:56:11:6d: a1:97:09:dd:f7:25:7d:6f:2c:8e:83:43:3a:e2:7f:05:54:3e: 7d:fe:66:fb:c0:80:fe:03:f2:28:47:89:0f:0c:b9:5a:fb:cf: a5:a6:c1:be:a8:93:50:73:2a:49:91:8e:7b:ff:27:8f:52:07: b7:57:c7:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryduhalQgFGFRtxMMR5ikiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzg1NmU5NTZjNGFkZGI2MTU5OGYzYzI0ODlmMmJkZjZl ZDFkMTgwHhcNMjUxMjA2MDcwMTEwWhcNMjUxMjA3MDcwMTEwWjAzMTEwLwYDVQQD Eyg1MGNiYTIxNTQwMWIxMjNmNWZiZjc2OWU0NjkwNTg2MzFmMDQxZTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50sJDQxUaox62BkV12wooXL0rbWQ ZO/0+lXi52u3iOrk8JX7MAqxjF8b4wDnClQL2RdDWz7uBkX8Lv8TF245WMiy5/e4 cSazt2rOQpZB9BqN9BQpNVfKjVaSZgAE3u/1sf9Y9TkhZTf5WNWDI4idR+AwenKR SvD/im4oFkDhLPfgqpOiSvU4N1m3zykhAQMYnihhntDRegkkKbmApIzTCnv5VXXV NEiWGr9nBLKdE5aKdJsW4GXdVhTmQKl4zqIG8/b/OaE6FeouuoGvqeMkKVpdJQ1o cWYvshFR6DWj0Km6bBqEAc050VySE95a6QgtA9114x9vGACzMXV27SAPdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDLohVAGxI/X792nkaQWGMfBB4wMB8GA1UdIwQY MBaAFLPIVulWxK3bYVmPPCSJ8r327R0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhoVzZWYkVyZHRoV1k4OEpJbnl2ZmJ0SFJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jNTViZTctZmU2NC00ZTczLWEwNjMt MWIwZWY0NGY3ODg0LzEvczhoVzZWYkVyZHRoV1k4OEpJbnl2ZmJ0SFJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9jNTViZTctZmU2NC00ZTczLWEwNjMtMWIwZWY0NGY3ODg0 LzEvczhoVzZWYkVyZHRoV1k4OEpJbnl2ZmJ0SFJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI22HB8ti TeUH9xfqxl798qidONsWjPp6QZQ13/kZqMMlSNpIjdYuRGxgGBDfN3Wy/GL9sKb8 ksEQpGY+53iBggJhwF0K7fnzmw5LVcu0GKTXcg3cD6ArY+jsb/QYnfeHg4DKIpHL 0mpjSxOhpXtsaMX5AK153Oj6rMMKi9MkHYxn5sli45nCF14Qlymw+wMZ0z50csIz 98qK2yDcUSHJZhmfOxtdbvjs5fLBJFn7scYbqyXDdyPi87KCV6h4bTb+SOJ7VhFt oZcJ3fclfW8sjoNDOuJ/BVQ+ff5m+8CA/gPyKEeJDwy5WvvPpabBvqiTUHMqSZGO e/8nj1IHt1fHJw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:53 2025 by rpki-client