This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json) Hash identifier: 0jFDAs6AAM7Pr5JiJ1hcTRcezf66reA9h3VUwMKPOAA= Subject key identifier: E0:A1:47:45:21:A5:C3:F2:9A:6B:4D:12:EC:65:F0:E1:65:BB:37:70 Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2 Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2 Certificate serial: 019AF2768198769AE1DA4665EECAF5CB6D7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft Manifest number: 12E8 Signing time: Sat 06 Dec 2025 07:00:43 +0000 Manifest this update: Sat 06 Dec 2025 07:00:43 +0000 Manifest next update: Sun 07 Dec 2025 07:00:43 +0000 Files and hashes: 1: 4cnRWY5gtsfuxJysdz-vN0qrOUs.roa (hash: 93jxXfokl+svyBU1O0Hr6w6zv+AavA15Ll9wQ0fHJCo=) 2: 7L93z_qlhSOtd1RZOlWCJUWvg_o.roa (hash: vV2gGeYtK37+wnV0Ydlju7P2SHZgL0mA9o+Vjq7iAwY=) 3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: LAfRqwu30abQlU4swMh1l+sI4bpOMpsa33Geq54zXD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:81:98:76:9a:e1:da:46:65:ee:ca:f5:cb:6d:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2 Validity Not Before: Dec 6 07:00:43 2025 GMT Not After : Dec 7 07:00:43 2025 GMT Subject: CN=e0a1474521a5c3f29a6b4d12ec65f0e165bb3770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:fc:c2:8a:0f:3e:fa:a5:86:82:af:f4:52:94: 22:53:2c:f2:1c:a0:4b:12:e3:f9:f6:d9:f1:bd:f0: ac:06:a8:df:a6:6e:10:46:00:37:7a:a5:0a:a5:c3: f9:e2:49:ae:39:4e:45:1b:cc:7d:38:d9:16:9d:c6: 92:ae:06:24:66:87:bd:82:c0:96:ef:17:d9:70:d1: 3a:fa:ee:fc:43:7e:c1:06:78:42:41:16:72:a5:23: 1b:d7:ee:42:f2:82:a8:ad:d6:22:25:7b:81:0b:46: 51:3d:45:53:1d:0e:ed:eb:a2:71:8c:f3:c2:5a:b8: 22:b9:80:82:48:51:0a:00:68:52:4f:7c:5f:df:01: 66:e6:20:69:e1:aa:24:fe:a6:be:2a:d8:d8:ba:1d: 07:4b:f5:62:99:6b:a2:8b:33:f0:49:c4:ed:21:78: dc:d9:d9:ab:df:88:f7:28:68:93:f3:ad:db:83:e8: 6d:21:ac:84:74:a4:b8:b3:16:83:d2:c4:9a:97:09: 51:3c:36:16:e0:a0:bc:46:65:86:96:71:cd:18:0f: a6:44:b2:f2:d2:c4:2a:f4:fb:82:4b:35:1d:9d:2f: 57:05:59:bf:df:13:a6:5b:8b:e3:6c:27:60:30:38: c9:ad:a1:17:fa:9e:d3:ab:22:ea:f1:26:f3:90:89: 4e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A1:47:45:21:A5:C3:F2:9A:6B:4D:12:EC:65:F0:E1:65:BB:37:70 X509v3 Authority Key Identifier: keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:c2:d9:14:a5:d0:7e:6b:23:69:ef:9a:97:bc:25:4e:cd:e8: 94:c8:0c:98:d0:5d:f1:89:c9:99:5b:a4:5c:0e:51:00:7e:74: a1:7e:19:c8:4e:79:6f:fa:73:68:e1:e4:cb:b6:aa:c9:ef:fb: 3f:38:be:4a:cc:c9:6e:a0:93:37:42:78:6a:65:ac:0c:5e:86: 73:5f:9d:b5:6f:ff:26:f4:57:65:8a:53:e0:2a:06:d3:3f:f0: 50:d8:dd:03:ad:f1:36:50:b6:42:f8:d5:35:e5:98:10:52:31: ad:65:0b:26:d7:51:96:2a:80:fa:92:30:cb:24:1d:72:d0:ee: dd:d0:76:c0:8a:b2:9f:cc:2d:f6:26:65:a3:d4:cc:2d:1b:ab: 61:10:73:7e:93:da:d7:ba:6d:5c:45:09:60:46:a0:a9:24:23: cb:3e:c0:fc:40:0b:a0:fe:d4:d1:28:7b:cf:d9:1f:56:f0:a7: 1d:97:9b:8e:34:8b:2c:4a:82:ad:6b:e1:2f:cf:4f:d4:05:b9: 96:5e:fb:07:e8:bc:25:53:3b:ed:45:a4:c9:21:40:5a:62:6a: 50:ef:71:e7:6f:52:40:d9:6c:6a:cc:06:78:3a:81:a4:95:49: 7a:b1:e0:ae:9e:e8:89:99:93:9a:1b:d9:bf:85:4e:25:2f:21: 11:f5:67:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoGYdprh2kZl7sr1y219MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2YWYyYzcxNjZiYjM0YTY5NmZkZTJmYmFjZWY0MDAxYjBh OGU3ZTIwHhcNMjUxMjA2MDcwMDQzWhcNMjUxMjA3MDcwMDQzWjAzMTEwLwYDVQQD EyhlMGExNDc0NTIxYTVjM2YyOWE2YjRkMTJlYzY1ZjBlMTY1YmIzNzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fzCig8++qWGgq/0UpQiUyzyHKBL EuP59tnxvfCsBqjfpm4QRgA3eqUKpcP54kmuOU5FG8x9ONkWncaSrgYkZoe9gsCW 7xfZcNE6+u78Q37BBnhCQRZypSMb1+5C8oKordYiJXuBC0ZRPUVTHQ7t66JxjPPC WrgiuYCCSFEKAGhST3xf3wFm5iBp4aok/qa+KtjYuh0HS/VimWuiizPwScTtIXjc 2dmr34j3KGiT863bg+htIayEdKS4sxaD0sSalwlRPDYW4KC8RmWGlnHNGA+mRLLy 0sQq9PuCSzUdnS9XBVm/3xOmW4vjbCdgMDjJraEX+p7TqyLq8SbzkIlO8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOChR0UhpcPymmtNEuxl8OFluzdwMB8GA1UdIwQY MBaAFIavLHFmuzSmlv3i+6zvQAGwqOfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEt ZTRmNTg3MDQ4MDRlLzEvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEtZTRmNTg3MDQ4MDRl LzEvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMLZFKXQ fmsjae+al7wlTs3olMgMmNBd8YnJmVukXA5RAH50oX4ZyE55b/pzaOHky7aqye/7 Pzi+SszJbqCTN0J4amWsDF6Gc1+dtW//JvRXZYpT4CoG0z/wUNjdA63xNlC2QvjV NeWYEFIxrWULJtdRliqA+pIwyyQdctDu3dB2wIqyn8wt9iZlo9TMLRurYRBzfpPa 17ptXEUJYEagqSQjyz7A/EALoP7U0Sh7z9kfVvCnHZebjjSLLEqCrWvhL89P1AW5 ll77B+i8JVM77UWkySFAWmJqUO9x529SQNlsaswGeDqBpJVJerHgrp7oiZmTmhvZ v4VOJS8hEfVnVg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:35:32 2025 by rpki-client