This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft File: 8hVRewsgMJ6RZAW54e0hoEaaaJU.mft (raw, json) Hash identifier: UTVcv5r0Ic3kuz33YKYiwUkWglZuLJ7sivBZFsKAPUM= Subject key identifier: A8:D1:C7:3C:73:A1:22:BE:05:F2:15:2E:39:2D:1A:DC:FA:B2:5C:0F Authority key identifier: F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95 Certificate issuer: /CN=f215517b0b20309e916405b9e1ed21a0469a6895 Certificate serial: 019AF208B7304AFE43159FCA4903559D542D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft Manifest number: 038F Signing time: Sat 06 Dec 2025 05:00:48 +0000 Manifest this update: Sat 06 Dec 2025 05:00:48 +0000 Manifest next update: Sun 07 Dec 2025 05:00:48 +0000 Files and hashes: 1: 8hVRewsgMJ6RZAW54e0hoEaaaJU.crl (hash: 51k9T2Se04rGIFVWexVaoUr3QXyJdpbAGdbBw/2Qsuo=) 2: qCeXwVNQp66WQ27Det0b9KrkJEc.roa (hash: WoKc3ldX5sHKUSOKMyS/VBt9xUxQrJ5xCbXpuIjQb48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b7:30:4a:fe:43:15:9f:ca:49:03:55:9d:54:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f215517b0b20309e916405b9e1ed21a0469a6895 Validity Not Before: Dec 6 05:00:48 2025 GMT Not After : Dec 7 05:00:48 2025 GMT Subject: CN=a8d1c73c73a122be05f2152e392d1adcfab25c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:79:2a:d5:2e:e1:e5:01:23:6c:1b:ad:d9:0b: 2c:dc:a9:77:0c:a5:71:16:25:e1:6b:e5:75:c5:1e: 2b:26:4b:55:33:50:b7:94:b3:26:00:91:e2:55:70: 0e:78:a9:42:08:9e:23:da:19:96:28:9f:9a:14:f5: 6b:e4:09:ae:b3:a2:83:3b:d5:7c:04:96:50:c1:d9: 19:a0:aa:cc:0c:31:36:fe:38:8c:54:92:52:e6:a7: f4:82:06:f1:6a:3d:1a:d2:fc:85:c3:44:98:a9:4c: 81:84:d4:c9:37:8a:cd:3f:cb:a4:77:d0:37:d8:30: 33:ab:5c:0e:73:a6:16:d4:96:d8:2f:72:a5:7c:52: e4:48:46:98:3d:5c:cd:3b:4c:ec:67:f2:11:db:21: bd:c6:da:55:39:c2:bd:97:b9:1e:ce:63:68:a3:bd: ae:cc:2b:4e:3d:94:0e:50:30:6e:0a:d7:0f:5b:05: c7:61:83:81:68:74:f0:aa:a1:91:2e:b5:74:39:75: 52:f4:17:f5:04:9a:61:40:d2:ef:80:9b:c2:4f:e9: 61:e8:27:ad:79:de:75:bc:08:6e:56:c2:c0:18:8c: bc:24:74:84:aa:39:fb:0e:20:57:19:3b:20:d0:bb: fd:c8:e1:19:88:fc:9c:43:89:ea:37:f6:b5:83:ba: 75:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D1:C7:3C:73:A1:22:BE:05:F2:15:2E:39:2D:1A:DC:FA:B2:5C:0F X509v3 Authority Key Identifier: keyid:F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:0c:9d:ce:58:72:f3:c7:16:ad:83:72:24:fe:1e:e7:e1:6a: 21:ac:45:6a:75:ac:55:bc:6b:dc:5a:81:fe:4d:19:36:52:65: 2e:25:b5:c6:d3:c0:5a:4a:9d:8d:63:16:67:10:d3:c5:d7:bf: e7:9d:17:7d:32:6b:6a:f6:0d:37:ef:e4:3f:fb:9b:f6:75:b3: 5b:3d:dc:08:51:ec:eb:7b:69:37:64:dc:53:83:25:78:e2:9e: b9:e4:76:8d:6f:40:a3:2c:b3:20:7a:5a:a3:19:96:c4:43:2c: df:58:c6:2e:81:4a:1f:8b:da:cb:50:87:5a:fb:e0:7b:af:36: 3e:f2:42:cd:a6:c4:ac:c8:ec:89:b8:97:02:76:98:4e:25:15: 53:18:8d:b2:0e:9d:51:70:0e:ba:82:5f:b7:f7:4b:13:dd:1e: 4f:4d:48:38:35:04:fa:fc:8c:d0:31:72:e5:7d:39:99:a3:63: 1b:0d:98:8b:7e:dc:da:28:d7:ff:56:09:99:a8:92:33:8c:b5: 0c:99:70:e6:c2:35:5d:d2:16:3c:c6:01:c8:3c:b0:00:a2:ae: 0b:cf:bf:b9:49:d9:b9:c3:7f:f3:b3:6e:09:44:14:51:65:63: d2:35:98:19:eb:1a:0b:22:2d:7d:2f:d7:1a:3f:c3:b8:fc:fc: 25:d3:e0:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLcwSv5DFZ/KSQNVnVQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMTU1MTdiMGIyMDMwOWU5MTY0MDViOWUxZWQyMWEwNDY5 YTY4OTUwHhcNMjUxMjA2MDUwMDQ4WhcNMjUxMjA3MDUwMDQ4WjAzMTEwLwYDVQQD EyhhOGQxYzczYzczYTEyMmJlMDVmMjE1MmUzOTJkMWFkY2ZhYjI1YzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXkq1S7h5QEjbBut2Qss3Kl3DKVx FiXha+V1xR4rJktVM1C3lLMmAJHiVXAOeKlCCJ4j2hmWKJ+aFPVr5Amus6KDO9V8 BJZQwdkZoKrMDDE2/jiMVJJS5qf0ggbxaj0a0vyFw0SYqUyBhNTJN4rNP8ukd9A3 2DAzq1wOc6YW1JbYL3KlfFLkSEaYPVzNO0zsZ/IR2yG9xtpVOcK9l7kezmNoo72u zCtOPZQOUDBuCtcPWwXHYYOBaHTwqqGRLrV0OXVS9Bf1BJphQNLvgJvCT+lh6Cet ed51vAhuVsLAGIy8JHSEqjn7DiBXGTsg0Lv9yOEZiPycQ4nqN/a1g7p1awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjRxzxzoSK+BfIVLjktGtz6slwPMB8GA1UdIwQY MBaAFPIVUXsLIDCekWQFueHtIaBGmmiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGhWUmV3c2dNSjZSWkFXNTRlMGhvRWFhYUpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84M2NlYmUtYzhjZS00ODlkLWEyZjAt Yjk1YTE2NDE2YjU2LzEvOGhWUmV3c2dNSjZSWkFXNTRlMGhvRWFhYUpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi84M2NlYmUtYzhjZS00ODlkLWEyZjAtYjk1YTE2NDE2YjU2 LzEvOGhWUmV3c2dNSjZSWkFXNTRlMGhvRWFhYUpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwydzlhy 88cWrYNyJP4e5+FqIaxFanWsVbxr3FqB/k0ZNlJlLiW1xtPAWkqdjWMWZxDTxde/ 550XfTJravYNN+/kP/ub9nWzWz3cCFHs63tpN2TcU4MleOKeueR2jW9AoyyzIHpa oxmWxEMs31jGLoFKH4vay1CHWvvge682PvJCzabErMjsibiXAnaYTiUVUxiNsg6d UXAOuoJft/dLE90eT01IODUE+vyM0DFy5X05maNjGw2Yi37c2ijX/1YJmaiSM4y1 DJlw5sI1XdIWPMYByDywAKKuC8+/uUnZucN/87NuCUQUUWVj0jWYGesaCyItfS/X Gj/DuPz8JdPg1A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:08 2025 by rpki-client