This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft File: R8x-nha98tTmHHXufgADPnZvmJc.mft (raw, json) Hash identifier: Gu1kXjTpa6cCzT8FKCfFMn+whAowvnjpcvpqc4X07Z0= Subject key identifier: 06:1A:A4:C8:7E:4D:8B:55:35:E0:E8:3F:32:91:30:D0:3F:E3:90:56 Authority key identifier: 47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97 Certificate issuer: /CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897 Certificate serial: 019B24ACF520AF0FD04E04E0E8D7F314A2AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft Manifest number: 1779 Signing time: Tue 16 Dec 2025 01:01:13 +0000 Manifest this update: Tue 16 Dec 2025 01:01:13 +0000 Manifest next update: Wed 17 Dec 2025 01:01:13 +0000 Files and hashes: 1: R8x-nha98tTmHHXufgADPnZvmJc.crl (hash: bUiYOfJJoLbd51zYCNqPu8KXNtov+c15ZVSKJKb8viE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:f5:20:af:0f:d0:4e:04:e0:e8:d7:f3:14:a2:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897 Validity Not Before: Dec 16 01:01:13 2025 GMT Not After : Dec 17 01:01:13 2025 GMT Subject: CN=061aa4c87e4d8b5535e0e83f329130d03fe39056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:56:9a:4c:8e:d1:f6:f1:cb:ff:ea:a5:e3:96: 78:35:9f:10:a8:a7:a8:c6:12:30:84:da:17:5d:94: 56:d4:39:12:6a:e6:f2:9b:25:7d:cf:88:b6:85:e0: af:76:d6:9e:2f:9e:80:0a:b8:16:00:63:74:17:1c: c5:10:27:74:a8:4c:5d:1f:eb:d2:4a:2a:ce:48:3b: 5b:48:95:69:96:56:65:51:62:a7:27:dd:5e:52:5c: a5:8f:91:50:70:9e:96:96:af:8c:53:ed:13:67:9f: e8:5c:c1:9e:d7:b9:c8:b1:b9:7b:d4:c3:51:21:51: 40:81:23:43:58:d6:3c:96:55:60:32:48:1b:ec:2a: b5:8d:1e:b8:29:d6:94:bc:42:0b:f1:2d:36:28:81: cd:e4:78:3c:4b:ea:f5:88:b8:eb:a2:e6:f4:10:cc: 13:19:7a:d3:61:aa:ff:83:cf:ad:6b:53:bd:8c:2f: 4a:c4:25:6f:78:7b:22:7c:3c:96:65:9c:7d:8e:16: a8:06:3f:de:76:2e:d0:39:5c:5e:5c:54:92:82:f4: c1:ea:ae:84:ee:3c:63:6a:da:a6:75:b2:c5:e4:c1: 9a:29:28:15:05:2b:2c:b3:86:72:f3:a7:5b:30:04: 10:d4:a2:ac:6d:75:02:d4:93:ab:8a:86:c7:96:b8: 25:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1A:A4:C8:7E:4D:8B:55:35:E0:E8:3F:32:91:30:D0:3F:E3:90:56 X509v3 Authority Key Identifier: keyid:47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:75:e3:c3:fe:69:23:48:d2:cf:7f:34:92:43:6e:13:ce:87: d1:45:43:38:d5:ab:e6:f7:ee:6b:c3:64:05:ef:92:fa:99:a4: ed:5b:65:42:0d:1a:98:a6:88:cc:2e:f5:4d:f0:9a:9d:18:f3: 89:00:bc:37:4f:a1:02:9a:e4:5e:de:12:b7:0f:2f:26:67:56: 22:d3:4f:77:f3:6a:36:7f:24:8d:68:c7:28:b2:30:0c:f1:bc: 7b:11:b4:36:d9:d5:f2:85:9b:a4:8b:65:93:ab:fe:d9:77:db: bf:6b:4f:24:96:18:58:ee:b0:b8:dd:85:15:89:e1:3b:b0:ca: a7:59:ea:18:0d:36:09:f8:cf:0a:e8:9f:32:41:52:40:ec:a7: 70:c1:3d:0b:40:7c:98:67:bf:01:a4:3b:23:9c:1b:39:b9:98: 49:ec:61:b7:32:f8:c7:dc:70:17:2a:4b:e7:8a:8b:5e:1a:91: 25:7c:82:30:ae:88:ef:43:14:be:f1:b2:f7:6a:28:2b:a2:9a: 4f:d8:f1:30:47:9f:df:b7:1d:4c:6d:9b:dd:d3:1d:cf:33:99: 0e:aa:30:c0:13:33:22:80:d0:22:14:ac:5c:35:91:74:62:1c: 8e:e4:91:aa:84:b4:64:4e:59:1b:59:48:f7:80:e1:f5:2f:71: 75:12:af:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrPUgrw/QTgTg6NfzFKKuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3Y2M3ZTllMTZiZGYyZDRlNjFjNzVlZTdlMDAwMzNlNzY2 Zjk4OTcwHhcNMjUxMjE2MDEwMTEzWhcNMjUxMjE3MDEwMTEzWjAzMTEwLwYDVQQD EygwNjFhYTRjODdlNGQ4YjU1MzVlMGU4M2YzMjkxMzBkMDNmZTM5MDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVaaTI7R9vHL/+ql45Z4NZ8QqKeo xhIwhNoXXZRW1DkSaubymyV9z4i2heCvdtaeL56ACrgWAGN0FxzFECd0qExdH+vS SirOSDtbSJVpllZlUWKnJ91eUlylj5FQcJ6Wlq+MU+0TZ5/oXMGe17nIsbl71MNR IVFAgSNDWNY8llVgMkgb7Cq1jR64KdaUvEIL8S02KIHN5Hg8S+r1iLjroub0EMwT GXrTYar/g8+ta1O9jC9KxCVveHsifDyWZZx9jhaoBj/edi7QOVxeXFSSgvTB6q6E 7jxjatqmdbLF5MGaKSgVBSsss4Zy86dbMAQQ1KKsbXUC1JOriobHlrgltQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYapMh+TYtVNeDoPzKRMNA/45BWMB8GA1UdIwQY MBaAFEfMfp4WvfLU5hx17n4AAz52b5iXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjh4LW5oYTk4dFRtSEhYdWZnQURQblp2bUpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jYTViN2ItYjVkNi00MGFmLTg3N2Mt MWE3Zjg0YjQwNzkyLzEvUjh4LW5oYTk4dFRtSEhYdWZnQURQblp2bUpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jYTViN2ItYjVkNi00MGFmLTg3N2MtMWE3Zjg0YjQwNzky LzEvUjh4LW5oYTk4dFRtSEhYdWZnQURQblp2bUpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuXXjw/5p I0jSz380kkNuE86H0UVDONWr5vfua8NkBe+S+pmk7VtlQg0amKaIzC71TfCanRjz iQC8N0+hAprkXt4Stw8vJmdWItNPd/NqNn8kjWjHKLIwDPG8exG0NtnV8oWbpItl k6v+2Xfbv2tPJJYYWO6wuN2FFYnhO7DKp1nqGA02CfjPCuifMkFSQOyncME9C0B8 mGe/AaQ7I5wbObmYSexhtzL4x9xwFypL54qLXhqRJXyCMK6I70MUvvGy92ooK6Ka T9jxMEef37cdTG2b3dMdzzOZDqowwBMzIoDQIhSsXDWRdGIcjuSRqoS0ZE5ZG1lI 94Dh9S9xdRKvfg== -----END CERTIFICATE-----Generated at Tue Dec 16 05:22:56 2025 by rpki-client