This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft File: 8hWid5SXEbLAHNxmnkDhcTlYVbs.mft (raw, json) Hash identifier: o7G6QRmMSMiMuryHd3zP7j3zjf92lew4G47v8TOxf0E= Subject key identifier: E2:AB:FF:D5:3F:E0:D1:69:D7:10:22:72:1B:A2:B5:2F:9B:18:DA:61 Authority key identifier: F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB Certificate issuer: /CN=f215a277949711b2c01cdc669e40e171395855bb Certificate serial: 019AF208D067E65FD9AF614D06DB5289348C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 05:00:55 +0000 Manifest this update: Sat 06 Dec 2025 05:00:55 +0000 Manifest next update: Sun 07 Dec 2025 05:00:55 +0000 Files and hashes: 1: 8hWid5SXEbLAHNxmnkDhcTlYVbs.crl (hash: EcQKV2JhWi8VtEDCgR7oPy6zrrFjqCNaygzIo+Y3ews=) 2: e9rn6bxSsUmtvRo7sJ4lEtK6S2Q.roa (hash: lsA08XTxVJOQQYnez6W7EOdFIkHihRjO9Y7qKfekirQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d0:67:e6:5f:d9:af:61:4d:06:db:52:89:34:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f215a277949711b2c01cdc669e40e171395855bb Validity Not Before: Dec 6 05:00:55 2025 GMT Not After : Dec 7 05:00:55 2025 GMT Subject: CN=e2abffd53fe0d169d71022721ba2b52f9b18da61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9c:59:f1:41:50:c7:46:fd:12:86:74:5a:85: d2:81:21:65:5d:c5:27:6e:86:72:03:5f:24:7d:16: 18:66:b7:e8:6e:ce:24:bc:e9:71:31:ec:31:58:d9: f8:f8:a8:03:04:f7:c6:6c:e6:50:59:92:37:99:4c: d9:83:7f:fe:a1:14:36:55:27:1c:22:82:ea:a2:92: e0:b3:05:4c:17:c1:a0:e1:37:71:3b:1f:d1:ae:fa: d0:f3:1f:eb:f7:38:97:f8:0f:20:10:91:8a:8c:ff: e1:f4:ab:8b:b2:2f:2c:62:b8:49:70:ba:dd:a7:8f: fa:95:57:78:03:8c:a9:97:2c:33:7c:c4:45:98:13: 38:34:4b:c8:cc:93:09:50:f0:4c:4b:ba:13:d3:eb: 5d:d3:d6:3f:f7:fd:1f:d9:47:80:ae:63:e0:d3:3b: d4:55:4e:b9:a0:56:29:62:8d:7a:b4:7a:2a:b7:45: be:db:ad:31:89:84:0d:d0:34:51:bf:1c:7d:88:5c: 50:52:b6:8a:96:0f:72:59:6a:37:43:90:9d:4d:4c: b8:88:7f:e9:a3:b5:6b:ac:f1:5c:f2:c4:2a:94:9c: 61:ea:d6:a3:75:a5:e4:36:5e:a1:b9:37:f7:46:5e: b7:3b:9a:76:9d:44:05:48:b4:ae:a0:e1:16:22:30: 34:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AB:FF:D5:3F:E0:D1:69:D7:10:22:72:1B:A2:B5:2F:9B:18:DA:61 X509v3 Authority Key Identifier: keyid:F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0b:9b:3c:4a:e1:2e:2c:dd:1f:0f:98:45:6f:c5:d0:f6:f5: 5a:0d:70:ca:86:c4:b4:21:78:e1:09:f0:cc:f3:d7:09:94:b7: 47:b1:87:c7:3a:0e:07:a9:1b:22:2e:d7:ea:60:9a:d7:0f:3f: ea:ed:91:6f:b5:85:e4:ce:bf:90:0e:44:aa:c8:d1:32:e0:df: e8:1f:90:56:ff:e9:05:96:96:15:9b:06:ca:3c:72:f3:5e:25: 46:1f:2e:6e:b1:a5:3f:52:9b:9b:81:8d:ff:39:d5:e7:84:e9: be:59:60:46:ba:20:bf:f9:9f:0f:d5:73:62:d2:c4:d5:2b:69: b5:35:c5:cd:c1:94:0b:15:5b:21:a8:c9:86:d2:b1:71:65:08: 18:11:0a:f9:03:55:a4:77:f0:b9:d7:33:b9:02:b6:12:ca:87: 5e:c3:0f:37:2e:5a:10:8e:65:f1:ad:6e:8b:77:f6:e6:8d:c8: fb:bd:13:85:b4:69:d8:42:3a:5b:6d:08:d0:76:ed:27:10:23: b8:da:50:b3:94:b5:d0:b9:1e:92:18:23:48:c2:a9:69:14:95: d0:ca:d4:d0:f0:b2:b0:d2:7b:27:82:86:c7:82:49:34:33:98: c1:95:c9:28:05:51:6a:95:9c:35:c9:fa:30:97:fe:33:91:4c: 99:88:24:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNBn5l/Zr2FNBttSiTSMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMTVhMjc3OTQ5NzExYjJjMDFjZGM2NjllNDBlMTcxMzk1 ODU1YmIwHhcNMjUxMjA2MDUwMDU1WhcNMjUxMjA3MDUwMDU1WjAzMTEwLwYDVQQD EyhlMmFiZmZkNTNmZTBkMTY5ZDcxMDIyNzIxYmEyYjUyZjliMThkYTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JxZ8UFQx0b9EoZ0WoXSgSFlXcUn boZyA18kfRYYZrfobs4kvOlxMewxWNn4+KgDBPfGbOZQWZI3mUzZg3/+oRQ2VScc IoLqopLgswVMF8Gg4TdxOx/RrvrQ8x/r9ziX+A8gEJGKjP/h9KuLsi8sYrhJcLrd p4/6lVd4A4yplywzfMRFmBM4NEvIzJMJUPBMS7oT0+td09Y/9/0f2UeArmPg0zvU VU65oFYpYo16tHoqt0W+260xiYQN0DRRvxx9iFxQUraKlg9yWWo3Q5CdTUy4iH/p o7VrrPFc8sQqlJxh6tajdaXkNl6huTf3Rl63O5p2nUQFSLSuoOEWIjA0XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKr/9U/4NFp1xAichuitS+bGNphMB8GA1UdIwQY MBaAFPIVoneUlxGywBzcZp5A4XE5WFW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGhXaWQ1U1hFYkxBSE54bW5rRGhjVGxZVmJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mMDhkNDUtNTQzYy00OWY3LTllNzgt OTAzYzE5ODU5MGZhLzEvOGhXaWQ1U1hFYkxBSE54bW5rRGhjVGxZVmJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9mMDhkNDUtNTQzYy00OWY3LTllNzgtOTAzYzE5ODU5MGZh LzEvOGhXaWQ1U1hFYkxBSE54bW5rRGhjVGxZVmJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAubPErh LizdHw+YRW/F0Pb1Wg1wyobEtCF44QnwzPPXCZS3R7GHxzoOB6kbIi7X6mCa1w8/ 6u2Rb7WF5M6/kA5EqsjRMuDf6B+QVv/pBZaWFZsGyjxy814lRh8ubrGlP1Kbm4GN /znV54TpvllgRrogv/mfD9VzYtLE1StptTXFzcGUCxVbIajJhtKxcWUIGBEK+QNV pHfwudczuQK2EsqHXsMPNy5aEI5l8a1ui3f25o3I+70ThbRp2EI6W20I0HbtJxAj uNpQs5S10LkekhgjSMKpaRSV0MrU0PCysNJ7J4KGx4JJNDOYwZXJKAVRapWcNcn6 MJf+M5FMmYgkZg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:04 2025 by rpki-client