This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft File: 8UHWZGmLcP-yom9oS0fetsjVmlM.mft (raw, json) Hash identifier: imh9FDXY4RAeWi8mNxNzec79Os/Qjm4SKRmxTDfXek4= Subject key identifier: A6:3D:D6:1C:99:87:26:80:C8:9E:8A:FE:44:0C:44:42:7E:55:81:AA Authority key identifier: F1:41:D6:64:69:8B:70:FF:B2:A2:6F:68:4B:47:DE:B6:C8:D5:9A:53 Certificate issuer: /CN=f141d664698b70ffb2a26f684b47deb6c8d59a53 Certificate serial: 019AF38945DADABB6F66BC6487CB23F15B4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft Manifest number: 119A Signing time: Sat 06 Dec 2025 12:00:51 +0000 Manifest this update: Sat 06 Dec 2025 12:00:51 +0000 Manifest next update: Sun 07 Dec 2025 12:00:51 +0000 Files and hashes: 1: 4T4WQHYVEwM6aHV5StYkGf2jN5Y.roa (hash: KlTVObGFhQ/EitqWP5C6TUwR0SNqxo8YoBWHXEsTCiE=) 2: 8UHWZGmLcP-yom9oS0fetsjVmlM.crl (hash: 6oflwZoKzh4s1dNeX+TaIa2rBDtvFTbGWaew5+xI7MY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.crl rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:45:da:da:bb:6f:66:bc:64:87:cb:23:f1:5b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f141d664698b70ffb2a26f684b47deb6c8d59a53 Validity Not Before: Dec 6 12:00:51 2025 GMT Not After : Dec 7 12:00:51 2025 GMT Subject: CN=a63dd61c99872680c89e8afe440c44427e5581aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3a:9a:48:27:33:30:96:b1:81:0f:0e:0a:73: fd:91:b1:00:e6:d3:02:24:a1:73:a6:f9:c7:ac:32: 06:1c:8a:0b:79:e0:90:e6:ac:ef:da:32:e4:a1:c7: 41:ae:6f:c1:78:df:11:ce:fb:f4:43:ae:78:e7:bc: f8:61:d5:d2:c1:34:ec:35:b1:48:92:80:d3:d9:a1: b4:c2:bd:ef:cf:0b:1d:98:1e:20:68:37:88:81:86: d3:ea:2f:79:c5:fc:ab:40:f6:1e:47:f2:57:e3:80: 8d:70:ac:45:0e:4b:0d:fb:4e:bb:83:a0:ae:a0:fa: 99:d8:cf:67:52:af:63:d8:5c:c5:e4:fa:a6:ea:27: 3b:66:df:c3:5e:93:55:73:b4:ce:ad:ca:fc:26:4b: 71:b7:36:7d:7b:92:c6:07:22:dc:4d:63:43:07:6f: 59:ed:6d:a1:73:93:46:c1:80:7f:bf:3c:ee:de:3a: 7b:fd:ea:68:91:be:f4:90:3a:fa:38:33:19:20:3d: 3d:cc:e6:50:02:af:f4:01:33:e9:7b:47:01:52:31: e4:c9:d7:be:18:8e:e3:db:c7:8a:22:ed:3d:a5:d5: 52:32:21:18:ac:b3:4b:3c:85:02:e5:7e:44:ce:48: f1:a9:2e:30:14:5c:44:70:ef:1d:73:a6:a3:be:45: 4d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3D:D6:1C:99:87:26:80:C8:9E:8A:FE:44:0C:44:42:7E:55:81:AA X509v3 Authority Key Identifier: keyid:F1:41:D6:64:69:8B:70:FF:B2:A2:6F:68:4B:47:DE:B6:C8:D5:9A:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:0a:34:43:81:12:a1:ba:95:a7:8c:c6:f9:12:6c:2a:64:36: 21:a1:3c:83:f7:1a:cd:65:fb:07:3d:76:29:be:47:62:02:c3: 65:bc:11:f2:9f:b5:f0:c5:28:b2:60:10:18:39:a2:e7:a3:d2: 53:7d:6f:c2:9f:ee:ee:0f:d9:34:c0:f5:4f:a3:f5:22:51:88: 22:7c:48:a6:c4:0c:b6:bf:1a:82:76:f7:b2:fd:0e:91:32:aa: 9f:5d:1f:9d:3d:bd:10:3f:80:55:af:1d:4c:06:90:37:9f:6f: 0c:9a:ff:08:be:1a:82:dc:e7:25:5d:95:f3:83:b6:b8:de:1a: 54:b8:a5:ec:9c:69:3e:b9:4b:72:f2:5b:ac:7f:a1:60:aa:a6: 2d:bd:21:3b:97:b4:05:ac:40:e7:5c:8f:57:ca:45:55:3c:24: 0c:e5:30:9c:20:e6:28:79:2b:02:5e:7f:e5:b1:c6:f7:af:de: 21:11:a4:a1:13:6c:2c:b9:44:5e:32:c8:fb:7b:23:f1:e4:2b: d4:f7:1d:e4:92:70:49:5e:6f:9a:c7:d4:03:4b:be:a1:00:40: e2:47:62:f9:96:a1:c7:ed:a9:15:d3:67:5e:eb:68:15:40:be: 28:c4:55:02:0b:1d:d6:32:95:dc:70:b4:15:33:ed:0c:a0:c1: c3:5a:6d:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziUXa2rtvZrxkh8sj8VtNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNDFkNjY0Njk4YjcwZmZiMmEyNmY2ODRiNDdkZWI2Yzhk NTlhNTMwHhcNMjUxMjA2MTIwMDUxWhcNMjUxMjA3MTIwMDUxWjAzMTEwLwYDVQQD EyhhNjNkZDYxYzk5ODcyNjgwYzg5ZThhZmU0NDBjNDQ0MjdlNTU4MWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzqaSCczMJaxgQ8OCnP9kbEA5tMC JKFzpvnHrDIGHIoLeeCQ5qzv2jLkocdBrm/BeN8Rzvv0Q65457z4YdXSwTTsNbFI koDT2aG0wr3vzwsdmB4gaDeIgYbT6i95xfyrQPYeR/JX44CNcKxFDksN+067g6Cu oPqZ2M9nUq9j2FzF5Pqm6ic7Zt/DXpNVc7TOrcr8JktxtzZ9e5LGByLcTWNDB29Z 7W2hc5NGwYB/vzzu3jp7/epokb70kDr6ODMZID09zOZQAq/0ATPpe0cBUjHkyde+ GI7j28eKIu09pdVSMiEYrLNLPIUC5X5EzkjxqS4wFFxEcO8dc6ajvkVNfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKY91hyZhyaAyJ6K/kQMREJ+VYGqMB8GA1UdIwQY MBaAFPFB1mRpi3D/sqJvaEtH3rbI1ZpTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFVIV1pHbUxjUC15b205b1MwZmV0c2pWbWxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yZThhYmUtOGU3MC00NzE1LTkxYWUt OTYzZDEzZmQwOWJiLzEvOFVIV1pHbUxjUC15b205b1MwZmV0c2pWbWxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8yZThhYmUtOGU3MC00NzE1LTkxYWUtOTYzZDEzZmQwOWJi LzEvOFVIV1pHbUxjUC15b205b1MwZmV0c2pWbWxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvAo0Q4ES obqVp4zG+RJsKmQ2IaE8g/cazWX7Bz12Kb5HYgLDZbwR8p+18MUosmAQGDmi56PS U31vwp/u7g/ZNMD1T6P1IlGIInxIpsQMtr8agnb3sv0OkTKqn10fnT29ED+AVa8d TAaQN59vDJr/CL4agtznJV2V84O2uN4aVLil7JxpPrlLcvJbrH+hYKqmLb0hO5e0 BaxA51yPV8pFVTwkDOUwnCDmKHkrAl5/5bHG96/eIRGkoRNsLLlEXjLI+3sj8eQr 1Pcd5JJwSV5vmsfUA0u+oQBA4kdi+Zahx+2pFdNnXutoFUC+KMRVAgsd1jKV3HC0 FTPtDKDBw1ptdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:23:25 2025 by rpki-client