This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft File: c8_hHopwk73JW8AeINtDduIqpRY.mft (raw, json) Hash identifier: wGrXV/pdak4WLrMmqhzquFijWy7bTmpakefLyiltEy8= Subject key identifier: D4:34:03:E6:60:2A:18:17:A5:2C:6C:3E:52:92:43:EF:45:32:61:CD Authority key identifier: 73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16 Certificate issuer: /CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516 Certificate serial: 019AF19BB43E152832967E88B2AF1ED9F3B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft Manifest number: 0474 Signing time: Sat 06 Dec 2025 03:01:44 +0000 Manifest this update: Sat 06 Dec 2025 03:01:44 +0000 Manifest next update: Sun 07 Dec 2025 03:01:44 +0000 Files and hashes: 1: SVFNCXAgs-J1Ur0M2wuVWaTBzQI.roa (hash: rGZg6LxxY7ku4GUoLGf94rOsH2eH6eg3rUYHF4vWHMk=) 2: c8_hHopwk73JW8AeINtDduIqpRY.crl (hash: HaBBubD6ID/NIgAcAa52faCkzdtJjSG93GdjOup8xU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b4:3e:15:28:32:96:7e:88:b2:af:1e:d9:f3:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516 Validity Not Before: Dec 6 03:01:44 2025 GMT Not After : Dec 7 03:01:44 2025 GMT Subject: CN=d43403e6602a1817a52c6c3e529243ef453261cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fa:b7:ef:21:8c:37:e2:e1:15:b1:39:aa:67: 8e:08:1d:f0:50:00:b9:e4:e1:75:8c:d9:ca:9d:97: d5:12:b6:8a:51:7b:c1:61:ce:be:2f:b0:bb:61:69: b9:4c:44:57:33:a0:28:10:c2:37:ef:56:fd:04:08: 9d:47:39:7d:d7:d2:a3:e9:d1:7d:ac:41:22:a5:6e: 6e:ab:e2:3c:d6:66:b9:61:7f:14:0f:e0:19:bc:05: 2c:c1:7a:b9:b4:26:20:28:42:9f:84:b1:96:b4:df: ed:0c:a7:87:95:4e:53:de:70:5b:62:6a:41:ab:ae: cb:05:87:0b:f9:c8:0e:f5:36:f6:38:27:74:00:ea: 26:45:a2:52:be:cd:b7:e5:a4:f0:69:c6:59:7c:66: a5:4b:f8:3a:a3:b0:93:94:52:08:94:0f:d7:bf:aa: f2:4a:a8:05:18:26:67:7a:6c:37:a8:6a:95:79:0e: b6:1d:27:5a:a0:51:c1:4f:b8:71:48:c5:9a:bd:e9: 3a:71:0e:a7:c1:1c:a7:b3:60:52:c7:ac:80:e1:5e: 7e:e8:89:f3:f1:43:fd:22:e4:ca:b0:fc:3d:b6:b7: ba:40:63:35:ea:5c:d5:0b:34:39:27:8d:70:9e:bc: 22:8c:43:f9:5a:63:3c:a5:64:ff:e6:40:97:d4:15: c9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:34:03:E6:60:2A:18:17:A5:2C:6C:3E:52:92:43:EF:45:32:61:CD X509v3 Authority Key Identifier: keyid:73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d0:b1:6b:1d:c2:04:0d:e0:73:64:4a:e5:cf:8d:55:9c:34: 08:70:b8:c9:cb:ac:f1:ea:df:47:f5:de:6a:4d:31:c1:9d:9a: e0:35:54:c7:10:4f:7a:93:fc:03:13:6b:46:9b:d0:43:01:32: a1:3c:a8:bb:88:a0:bf:bf:77:4c:b2:5d:88:c9:3e:f5:3b:4f: 18:c7:b2:9e:4d:a6:1b:ce:04:9a:99:2b:6b:07:87:9a:b3:c2: 26:58:7b:e3:05:95:77:19:85:ea:de:cc:19:d6:12:82:f0:5b: 7f:12:fe:5f:2f:e2:87:e5:b1:16:a6:46:c7:67:e8:50:0d:e9: 59:9b:09:c4:9c:58:3a:54:0e:a5:5f:65:b8:e1:98:1f:ab:ff: 6d:90:df:00:b7:f4:de:61:cf:0f:b0:87:1b:8f:a9:9f:44:c7: a4:a0:f1:a1:33:ad:85:e2:60:dd:cc:bc:fa:7d:c0:03:0a:c4: 34:5f:b2:c6:fe:c7:bb:84:14:d1:cb:6c:9d:4f:73:4d:d9:27: a6:9e:5b:87:2b:b4:cb:c2:61:9a:37:86:c5:da:c2:cd:a0:2b: 1f:03:5b:66:fc:b6:c3:a9:6d:a5:bc:53:6b:99:2b:de:eb:39: 94:de:98:67:51:bd:c1:48:43:6b:cf:6e:d1:b3:e6:ef:4e:7b: aa:59:6b:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7Q+FSgyln6Isq8e2fO0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczY2ZlMTFlOGE3MDkzYmRjOTViYzAxZTIwZGI0Mzc2ZTIy YWE1MTYwHhcNMjUxMjA2MDMwMTQ0WhcNMjUxMjA3MDMwMTQ0WjAzMTEwLwYDVQQD EyhkNDM0MDNlNjYwMmExODE3YTUyYzZjM2U1MjkyNDNlZjQ1MzI2MWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vq37yGMN+LhFbE5qmeOCB3wUAC5 5OF1jNnKnZfVEraKUXvBYc6+L7C7YWm5TERXM6AoEMI371b9BAidRzl919Kj6dF9 rEEipW5uq+I81ma5YX8UD+AZvAUswXq5tCYgKEKfhLGWtN/tDKeHlU5T3nBbYmpB q67LBYcL+cgO9Tb2OCd0AOomRaJSvs235aTwacZZfGalS/g6o7CTlFIIlA/Xv6ry SqgFGCZnemw3qGqVeQ62HSdaoFHBT7hxSMWavek6cQ6nwRyns2BSx6yA4V5+6Inz 8UP9IuTKsPw9tre6QGM16lzVCzQ5J41wnrwijEP5WmM8pWT/5kCX1BXJ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQ0A+ZgKhgXpSxsPlKSQ+9FMmHNMB8GA1UdIwQY MBaAFHPP4R6KcJO9yVvAHiDbQ3biKqUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhfaEhvcHdrNzNKVzhBZUlOdERkdUlxcFJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iYWY5ZjMtMGU0OC00YzQ3LWJjMjYt MWIxMTAwNzMxNDQ4LzEvYzhfaEhvcHdrNzNKVzhBZUlOdERkdUlxcFJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9iYWY5ZjMtMGU0OC00YzQ3LWJjMjYtMWIxMTAwNzMxNDQ4 LzEvYzhfaEhvcHdrNzNKVzhBZUlOdERkdUlxcFJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9Cxax3C BA3gc2RK5c+NVZw0CHC4ycus8erfR/Xeak0xwZ2a4DVUxxBPepP8AxNrRpvQQwEy oTyou4igv793TLJdiMk+9TtPGMeynk2mG84EmpkraweHmrPCJlh74wWVdxmF6t7M GdYSgvBbfxL+Xy/ih+WxFqZGx2foUA3pWZsJxJxYOlQOpV9luOGYH6v/bZDfALf0 3mHPD7CHG4+pn0THpKDxoTOtheJg3cy8+n3AAwrENF+yxv7Hu4QU0ctsnU9zTdkn pp5bhyu0y8JhmjeGxdrCzaArHwNbZvy2w6ltpbxTa5kr3us5lN6YZ1G9wUhDa89u 0bPm7057qllrKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:26 2025 by rpki-client