This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft File: S8hY5QhWNUaEpdBKPsw1klgNVI0.mft (raw, json) Hash identifier: 85NDzkl3hKZVvGMJW36ij8yLiSeT69gGqarJAbbSmrQ= Subject key identifier: D2:B1:27:71:EA:C0:AF:07:1E:CC:96:81:D8:35:77:12:E9:15:10:D0 Authority key identifier: 4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D Certificate issuer: /CN=4bc858e50856354684a5d04a3ecc3592580d548d Certificate serial: 019B077E01A207542C71019A5EEE404BCC4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft Manifest number: 0A2A Signing time: Wed 10 Dec 2025 09:00:57 +0000 Manifest this update: Wed 10 Dec 2025 09:00:57 +0000 Manifest next update: Thu 11 Dec 2025 09:00:57 +0000 Files and hashes: 1: 1kPYBeHFqZcRahwRlHXvuPvT0zI.roa (hash: qhycFEi6FwqVVERso5+P+dTV24QXX6z3cT56YMpxbXU=) 2: S8hY5QhWNUaEpdBKPsw1klgNVI0.crl (hash: 9HoZ3g5LuGJ03iX4o6Aa/oB+MEOt0bmafcBVA9wIk+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 09:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:7e:01:a2:07:54:2c:71:01:9a:5e:ee:40:4b:cc:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bc858e50856354684a5d04a3ecc3592580d548d Validity Not Before: Dec 10 09:00:57 2025 GMT Not After : Dec 11 09:00:57 2025 GMT Subject: CN=d2b12771eac0af071ecc9681d8357712e91510d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5b:10:61:24:bf:37:6b:30:92:59:65:c8:fa: ca:e7:cc:dc:9f:6e:d9:f3:7d:1a:9e:5c:13:d2:65: 74:07:2f:0a:f2:f0:91:b4:cf:a1:57:8a:74:37:12: 32:bf:a4:9d:c2:b8:43:c9:50:2f:61:8c:1b:41:e2: 42:d3:ee:19:46:5c:bf:f7:e2:b8:1c:a0:3d:62:fc: ef:81:3d:cd:dc:49:07:ae:7e:cc:80:53:0b:c7:97: 38:04:60:26:9e:f6:41:bb:a4:96:43:45:6a:d9:44: b6:98:5d:68:28:21:4c:46:09:a9:e5:39:df:5b:05: 45:ff:c6:80:30:15:c7:76:a3:d7:68:a9:d3:d1:07: 0c:5a:27:e6:d7:f3:43:a8:c6:a0:35:3c:2b:4e:d0: b0:c6:cd:62:66:f9:61:20:98:32:3b:90:9b:c3:4c: dd:23:00:d6:2d:20:97:7a:b5:13:ef:5f:62:51:6b: 23:5c:ee:62:b3:88:e6:e7:c1:ef:0c:6c:24:83:eb: 80:d0:4f:ce:08:10:91:e7:1a:14:0b:e3:ec:d4:b4: 32:af:bf:4f:c4:39:f5:e4:9c:32:c4:96:92:ef:7c: 47:43:92:55:fb:ec:68:bb:39:52:3d:1c:e5:89:e7: 1c:53:a4:08:dc:cf:71:81:ee:0c:32:61:6e:ec:d4: b4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B1:27:71:EA:C0:AF:07:1E:CC:96:81:D8:35:77:12:E9:15:10:D0 X509v3 Authority Key Identifier: keyid:4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:69:05:0d:7f:1f:c1:79:24:85:e3:4e:3c:57:0d:fb:27:f6: 6e:23:af:46:a4:a4:b1:dc:d6:6b:01:89:4d:7f:96:34:71:e0: 20:bc:96:e8:b0:be:5b:d4:65:a8:45:2d:3a:37:1a:35:cb:8e: a2:e1:92:96:03:96:b0:f2:2e:32:55:58:46:19:12:d7:51:a6: 2a:3f:8f:0e:59:92:bd:e3:91:83:47:9e:c8:b9:39:f9:1f:73: 8b:24:7a:ff:14:9d:8e:1a:0b:47:53:de:be:85:1d:70:2e:87: f7:d7:09:5f:18:cf:8e:7b:82:91:bb:40:40:5e:a2:e8:95:14: c8:d7:82:fb:c0:2d:ba:e8:d1:99:26:a3:3c:16:e3:9a:d6:f5: 9c:02:24:38:6a:5d:b4:f4:e1:e5:a9:43:f7:be:fc:c8:7d:09: 0b:e1:e7:bb:d0:b6:8d:42:60:f2:6d:40:ac:64:22:fc:30:18: 5b:7c:c4:46:fe:44:09:3b:6c:69:dd:fe:6d:91:d9:37:15:95: e8:44:09:e8:53:c5:9e:9b:da:fa:4a:aa:53:01:40:8b:4e:17: 1a:2a:ec:61:9c:31:e6:c3:16:6a:3c:d2:fc:71:ca:02:07:01: b9:c4:14:82:c1:88:32:5a:74:b9:8b:5b:89:d6:9e:d4:f3:36: fe:55:57:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHfgGiB1QscQGaXu5AS8xPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYzg1OGU1MDg1NjM1NDY4NGE1ZDA0YTNlY2MzNTkyNTgw ZDU0OGQwHhcNMjUxMjEwMDkwMDU3WhcNMjUxMjExMDkwMDU3WjAzMTEwLwYDVQQD EyhkMmIxMjc3MWVhYzBhZjA3MWVjYzk2ODFkODM1NzcxMmU5MTUxMGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFsQYSS/N2swklllyPrK58zcn27Z 830anlwT0mV0By8K8vCRtM+hV4p0NxIyv6SdwrhDyVAvYYwbQeJC0+4ZRly/9+K4 HKA9YvzvgT3N3EkHrn7MgFMLx5c4BGAmnvZBu6SWQ0Vq2US2mF1oKCFMRgmp5Tnf WwVF/8aAMBXHdqPXaKnT0QcMWifm1/NDqMagNTwrTtCwxs1iZvlhIJgyO5Cbw0zd IwDWLSCXerUT719iUWsjXO5is4jm58HvDGwkg+uA0E/OCBCR5xoUC+Ps1LQyr79P xDn15JwyxJaS73xHQ5JV++xouzlSPRzlieccU6QI3M9xge4MMmFu7NS0mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKxJ3HqwK8HHsyWgdg1dxLpFRDQMB8GA1UdIwQY MBaAFEvIWOUIVjVGhKXQSj7MNZJYDVSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzhoWTVRaFdOVWFFcGRCS1BzdzFrbGdOVkkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yNjc5NjYtZjAzOS00MTc0LTgxMGQt M2Y0ZWY4MWEyZTUzLzEvUzhoWTVRaFdOVWFFcGRCS1BzdzFrbGdOVkkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yNjc5NjYtZjAzOS00MTc0LTgxMGQtM2Y0ZWY4MWEyZTUz LzEvUzhoWTVRaFdOVWFFcGRCS1BzdzFrbGdOVkkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWkFDX8f wXkkheNOPFcN+yf2biOvRqSksdzWawGJTX+WNHHgILyW6LC+W9RlqEUtOjcaNcuO ouGSlgOWsPIuMlVYRhkS11GmKj+PDlmSveORg0eeyLk5+R9ziyR6/xSdjhoLR1Pe voUdcC6H99cJXxjPjnuCkbtAQF6i6JUUyNeC+8AtuujRmSajPBbjmtb1nAIkOGpd tPTh5alD9778yH0JC+Hnu9C2jUJg8m1ArGQi/DAYW3zERv5ECTtsad3+bZHZNxWV 6EQJ6FPFnpva+kqqUwFAi04XGirsYZwx5sMWajzS/HHKAgcBucQUgsGIMlp0uYtb idae1PM2/lVXPQ== -----END CERTIFICATE-----Generated at Wed Dec 10 11:59:20 2025 by rpki-client