This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft File: j8HWvjunicXa61l6E13l7Myrj5U.mft (raw, json) Hash identifier: t0NHACfKrwZIhmLD9/0KYPGbbZsIafkj+aOndm/00yI= Subject key identifier: E7:A6:AA:47:0F:1C:8F:AE:1F:1A:FD:12:3B:36:64:CF:0A:89:1F:69 Authority key identifier: 8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95 Certificate issuer: /CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95 Certificate serial: 019AF1D19C6BBE6AEE96C97A1A5949A017BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft Manifest number: 1651 Signing time: Sat 06 Dec 2025 04:00:37 +0000 Manifest this update: Sat 06 Dec 2025 04:00:37 +0000 Manifest next update: Sun 07 Dec 2025 04:00:37 +0000 Files and hashes: 1: j8HWvjunicXa61l6E13l7Myrj5U.crl (hash: dMFPXqTlMvnPo1KlmTb9MKjgcRULn0PJMZOOnpKvzTc=) 2: ns9Iu925uNPqm9SyfjZghoXo_D0.roa (hash: 5KxIGOmUfDj5TmcmXox7HeyHg9DfY+4gQjDvtCkMxCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:9c:6b:be:6a:ee:96:c9:7a:1a:59:49:a0:17:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95 Validity Not Before: Dec 6 04:00:37 2025 GMT Not After : Dec 7 04:00:37 2025 GMT Subject: CN=e7a6aa470f1c8fae1f1afd123b3664cf0a891f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:28:16:0b:97:b5:cf:30:30:d9:93:37:86:70: fc:af:bd:28:b1:47:64:3c:60:75:d9:ba:3d:57:9a: 00:a1:e1:2a:90:06:ff:73:3e:d4:51:6f:e6:5e:ca: b1:33:51:bf:fc:25:4b:09:97:68:1f:00:38:43:88: 6c:d9:dd:2a:6e:c4:1e:e0:6d:cd:c0:ee:66:8a:11: d2:e4:5a:f1:28:b7:1d:df:01:1f:c2:d8:b0:4a:cf: 8f:9a:04:4f:2b:1d:90:c0:de:aa:78:d0:ef:d4:79: 8f:54:15:e7:13:b2:7c:54:18:b7:40:0a:e0:e7:d3: 1b:f5:a2:0a:af:07:88:12:a0:4a:db:1a:d2:a7:04: 9c:44:4d:77:3f:53:5b:93:6e:a5:71:46:9d:c0:8c: d9:30:24:51:f1:d9:99:31:d8:b6:d3:72:1e:60:e9: b7:f0:ec:67:bd:48:43:52:49:e6:88:89:b4:1c:ba: 37:1c:0d:8a:99:bc:aa:2d:ce:04:54:b8:e9:77:22: e6:a8:8e:66:ea:14:12:2d:4e:14:13:1e:58:e2:e4: 52:d4:21:4e:17:95:2a:de:4a:ba:71:bf:6e:06:41: e8:57:45:c3:31:a2:f6:ad:24:73:5c:13:7c:4c:2d: e8:fa:fd:3b:10:6e:01:38:42:d6:a8:a8:68:70:da: bd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A6:AA:47:0F:1C:8F:AE:1F:1A:FD:12:3B:36:64:CF:0A:89:1F:69 X509v3 Authority Key Identifier: keyid:8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f8:3c:1b:aa:67:96:19:ba:3d:cd:27:98:1f:5f:b4:67:80: 88:f0:71:a6:78:c2:ac:5d:c7:6d:57:16:05:19:5c:88:b6:90: ac:47:a7:7a:61:27:7a:80:f3:82:a8:f8:17:1e:b5:47:4b:8a: 25:f4:1c:9d:92:3c:31:24:2e:aa:f3:0f:33:8e:6a:b5:a0:69: 81:d9:83:c5:16:8b:01:4e:1f:64:2b:e9:4a:31:9a:19:db:55: 1c:33:c6:c6:6e:1b:49:29:83:e7:0c:e5:a1:bc:55:6a:cc:23: c2:77:03:03:6f:c0:e3:a9:9c:8e:8a:eb:87:79:fe:d3:a5:0d: b0:e5:c4:a7:dc:f2:fa:9a:15:b6:63:69:ed:02:48:35:1d:04: 9b:76:04:2d:67:aa:ed:38:53:e5:e7:9b:6a:fd:62:cf:f4:42: 8b:9f:2f:8a:6f:60:4d:7f:3c:c2:d1:05:5a:a0:a4:c1:8d:9d: ea:7e:75:d3:01:c8:d3:1c:d3:09:fc:c7:32:3b:49:06:3b:6f: 8e:48:27:db:7b:3d:71:07:47:2f:09:77:9c:29:c6:61:30:02: b7:87:35:08:e4:ef:77:7b:f9:9b:a2:3c:62:70:c0:64:be:9c: 1d:cf:af:6a:a1:24:dd:c1:94:a4:44:13:1b:5f:bf:fa:18:3c: dd:54:09:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Zxrvmrulsl6GllJoBe7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzFkNmJlM2JhNzg5YzVkYWViNTk3YTEzNWRlNWVjY2Nh YjhmOTUwHhcNMjUxMjA2MDQwMDM3WhcNMjUxMjA3MDQwMDM3WjAzMTEwLwYDVQQD EyhlN2E2YWE0NzBmMWM4ZmFlMWYxYWZkMTIzYjM2NjRjZjBhODkxZjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCgWC5e1zzAw2ZM3hnD8r70osUdk PGB12bo9V5oAoeEqkAb/cz7UUW/mXsqxM1G//CVLCZdoHwA4Q4hs2d0qbsQe4G3N wO5mihHS5FrxKLcd3wEfwtiwSs+PmgRPKx2QwN6qeNDv1HmPVBXnE7J8VBi3QArg 59Mb9aIKrweIEqBK2xrSpwScRE13P1Nbk26lcUadwIzZMCRR8dmZMdi203IeYOm3 8OxnvUhDUknmiIm0HLo3HA2KmbyqLc4EVLjpdyLmqI5m6hQSLU4UEx5Y4uRS1CFO F5Uq3kq6cb9uBkHoV0XDMaL2rSRzXBN8TC3o+v07EG4BOELWqKhocNq9pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOemqkcPHI+uHxr9Ejs2ZM8KiR9pMB8GA1UdIwQY MBaAFI/B1r47p4nF2utZehNd5ezMq4+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhIV3ZqdW5pY1hhNjFsNkUxM2w3TXlyajVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80NGVlOGQtMmFlOC00ODQ0LWE5MzUt ZDI0YzJjZTIzYWI3LzEvajhIV3ZqdW5pY1hhNjFsNkUxM2w3TXlyajVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi80NGVlOGQtMmFlOC00ODQ0LWE5MzUtZDI0YzJjZTIzYWI3 LzEvajhIV3ZqdW5pY1hhNjFsNkUxM2w3TXlyajVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfg8G6pn lhm6Pc0nmB9ftGeAiPBxpnjCrF3HbVcWBRlciLaQrEenemEneoDzgqj4Fx61R0uK JfQcnZI8MSQuqvMPM45qtaBpgdmDxRaLAU4fZCvpSjGaGdtVHDPGxm4bSSmD5wzl obxVaswjwncDA2/A46mcjorrh3n+06UNsOXEp9zy+poVtmNp7QJINR0Em3YELWeq 7ThT5eebav1iz/RCi58vim9gTX88wtEFWqCkwY2d6n510wHI0xzTCfzHMjtJBjtv jkgn23s9cQdHLwl3nCnGYTACt4c1COTvd3v5m6I8YnDAZL6cHc+vaqEk3cGUpEQT G1+/+hg83VQJIw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:51:29 2025 by rpki-client