This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft File: 8JLOTWiFNFSE6Zp312Fm_HICIDM.mft (raw, json) Hash identifier: dr7LAFyTIvoX9Merqwjs6b82HysuptenDhRXolgvRwc= Subject key identifier: A7:33:E4:B0:CA:E5:45:26:70:F5:51:3A:3B:53:29:CC:C6:7C:D8:27 Authority key identifier: F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33 Certificate issuer: /CN=f092ce4d6885345484e99a77d76166fc72022033 Certificate serial: 019AF3F74FF4A037E58EF6CC72891178894E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 14:01:02 +0000 Manifest this update: Sat 06 Dec 2025 14:01:02 +0000 Manifest next update: Sun 07 Dec 2025 14:01:02 +0000 Files and hashes: 1: 8JLOTWiFNFSE6Zp312Fm_HICIDM.crl (hash: +DJ5i0st1//dV+yUS3tfHf/4Q2wQleDBwycCb3+RegU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:4f:f4:a0:37:e5:8e:f6:cc:72:89:11:78:89:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f092ce4d6885345484e99a77d76166fc72022033 Validity Not Before: Dec 6 14:01:02 2025 GMT Not After : Dec 7 14:01:02 2025 GMT Subject: CN=a733e4b0cae5452670f5513a3b5329ccc67cd827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:73:71:41:48:f0:7d:a1:ac:2b:e8:31:5e:77: 15:d1:77:30:f7:8e:33:07:2b:15:35:e5:0d:34:df: db:99:a4:73:79:13:fc:bd:96:6a:af:e0:de:8e:4a: 2c:e3:1d:88:be:00:c6:42:e5:71:bc:4b:30:b4:b5: d1:43:ac:95:ec:53:94:40:a8:5f:67:3f:7b:00:2c: 21:6e:fb:ab:23:8b:3d:49:2f:5b:3b:2f:05:34:f1: 68:74:18:1d:22:2a:8d:89:27:90:c7:3a:e9:ec:0b: 17:cd:91:c9:c3:62:9d:20:23:e6:ad:c4:e6:e1:4b: dd:94:bb:73:f7:db:25:c5:68:ce:64:2d:0a:56:00: f6:09:1a:23:ae:02:43:35:99:c0:80:a2:7f:5d:94: 9a:92:dc:42:ab:13:35:a4:b1:32:0b:21:84:f6:ec: a8:9a:92:a6:d1:96:03:a5:1b:43:85:40:42:ba:59: 87:ca:2f:2f:99:a7:20:42:ed:98:77:fd:54:e9:3e: c0:dd:f2:f8:d8:3c:81:90:83:eb:0b:18:6e:a6:6b: dc:27:e8:1b:4b:21:f3:b9:7c:28:78:20:14:03:b1: 27:dd:50:63:a8:74:be:79:8f:c0:c0:61:bd:64:db: ce:2e:0d:52:5f:2e:35:52:ff:27:60:d6:43:f7:bd: af:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:33:E4:B0:CA:E5:45:26:70:F5:51:3A:3B:53:29:CC:C6:7C:D8:27 X509v3 Authority Key Identifier: keyid:F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:3d:e3:72:67:e3:67:06:e0:86:1d:af:bc:76:4f:55:f6:87: 70:c8:4e:d2:14:c6:42:ee:9d:23:74:93:81:32:eb:8b:c5:0e: e5:1b:d9:2e:ff:8a:4f:46:4f:d8:1c:a3:f2:dc:06:14:e2:78: f0:41:6e:10:00:5f:30:31:ab:63:ac:e8:c5:e2:d6:0c:4f:dd: 8c:7b:71:01:06:65:ae:0e:d5:de:f8:1d:fb:d8:6b:df:47:0b: e9:97:3d:dc:f8:51:37:f2:6c:4c:17:49:a3:49:c0:48:e0:2e: 13:5c:15:17:22:60:1a:2e:77:f0:7d:67:c1:f1:1b:7b:2b:82: 58:f5:49:2f:4b:83:5e:d7:c9:a7:16:a9:86:55:1c:4f:f3:75: 2b:87:10:94:44:3b:5c:75:23:82:50:54:92:fe:43:e6:d7:f5: 33:b2:0d:5b:ea:9d:74:76:81:7b:bf:e7:4f:1f:83:5b:f0:c2: 5c:4b:4c:25:6d:96:af:38:26:21:d7:ee:8a:aa:a1:bb:b9:36: e8:9c:ec:92:9b:55:82:ec:a7:b0:80:00:2a:f6:d1:89:77:f8: 6d:24:2d:43:d1:4b:81:3c:00:1e:7c:d9:80:da:9e:d3:58:f2: 2d:60:44:c6:de:7c:32:73:9e:6c:44:02:1e:33:65:05:b3:c9: 7c:c9:de:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz90/0oDfljvbMcokReIlOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwOTJjZTRkNjg4NTM0NTQ4NGU5OWE3N2Q3NjE2NmZjNzIw MjIwMzMwHhcNMjUxMjA2MTQwMTAyWhcNMjUxMjA3MTQwMTAyWjAzMTEwLwYDVQQD EyhhNzMzZTRiMGNhZTU0NTI2NzBmNTUxM2EzYjUzMjljY2M2N2NkODI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83NxQUjwfaGsK+gxXncV0Xcw944z BysVNeUNNN/bmaRzeRP8vZZqr+Dejkos4x2IvgDGQuVxvEswtLXRQ6yV7FOUQKhf Zz97ACwhbvurI4s9SS9bOy8FNPFodBgdIiqNiSeQxzrp7AsXzZHJw2KdICPmrcTm 4UvdlLtz99slxWjOZC0KVgD2CRojrgJDNZnAgKJ/XZSaktxCqxM1pLEyCyGE9uyo mpKm0ZYDpRtDhUBCulmHyi8vmacgQu2Yd/1U6T7A3fL42DyBkIPrCxhupmvcJ+gb SyHzuXwoeCAUA7En3VBjqHS+eY/AwGG9ZNvOLg1SXy41Uv8nYNZD972vowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcz5LDK5UUmcPVROjtTKczGfNgnMB8GA1UdIwQY MBaAFPCSzk1ohTRUhOmad9dhZvxyAiAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEpMT1RXaUZORlNFNlpwMzEyRm1fSElDSURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kMDIyMTgtNWRmOS00M2ZkLWJlZWMt MDMxNTk2MTEyNDgwLzEvOEpMT1RXaUZORlNFNlpwMzEyRm1fSElDSURNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kMDIyMTgtNWRmOS00M2ZkLWJlZWMtMDMxNTk2MTEyNDgw LzEvOEpMT1RXaUZORlNFNlpwMzEyRm1fSElDSURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARj3jcmfj Zwbghh2vvHZPVfaHcMhO0hTGQu6dI3STgTLri8UO5RvZLv+KT0ZP2Byj8twGFOJ4 8EFuEABfMDGrY6zoxeLWDE/djHtxAQZlrg7V3vgd+9hr30cL6Zc93PhRN/JsTBdJ o0nASOAuE1wVFyJgGi538H1nwfEbeyuCWPVJL0uDXtfJpxaphlUcT/N1K4cQlEQ7 XHUjglBUkv5D5tf1M7INW+qddHaBe7/nTx+DW/DCXEtMJW2WrzgmIdfuiqqhu7k2 6JzskptVguynsIAAKvbRiXf4bSQtQ9FLgTwAHnzZgNqe01jyLWBExt58MnOebEQC HjNlBbPJfMneWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:02:38 2025 by rpki-client