This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft File: 8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft (raw, json) Hash identifier: 2Oatf9Vpe9t2g7s5ph/blb2ufSggNKk7dSEX9QKlEsI= Subject key identifier: 5D:91:BF:8D:B4:7E:00:44:58:38:BD:02:6D:DF:6B:D0:95:0F:88:A4 Authority key identifier: F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7 Certificate issuer: /CN=f219383a3e3f116a9bcc4769c8517cdce40765c7 Certificate serial: 019B1ACD707ED29B0D9783E095ABA6A28204 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft Manifest number: 035E Signing time: Sun 14 Dec 2025 03:00:29 +0000 Manifest this update: Sun 14 Dec 2025 03:00:29 +0000 Manifest next update: Mon 15 Dec 2025 03:00:29 +0000 Files and hashes: 1: 0c_l4ysRLhoLyNhVK3O7GIWEcSo.roa (hash: wCgtD5GTaTUHzlGOdOblih6qPlBPABAlJQ113X+Jw+c=) 2: 5jOb8o1BbBXO52drtCV8RnZe9h0.roa (hash: fEi3qbuXq214iH/x1u07FGO1olTWt/av+qXuhlLn1AY=) 3: 8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl (hash: uQhcgJooefI+06idomZ5o6Ky0UfCUybjar8VRFvrHfQ=) 4: 97Bdc61qbgqdAvjBmYkfFO0y1Ww.roa (hash: oUOsuSRnUrU8knVeKfFc9QKPrgL79MjXgwUrkum1/pg=) 5: Z29YwFdCw8mb-MR3SYDyBs3lmMg.roa (hash: J+lE3dbsGRla43+sCei9+kYRVYFXdgjow6d3cOzy75c=) 6: bFysswJxqvMNZTsaf64flp1ZIQc.roa (hash: uwCDzi7rd+IXP1Mw2HNimdPO1YXu5Quq3N1iTcDCSa4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:cd:70:7e:d2:9b:0d:97:83:e0:95:ab:a6:a2:82:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f219383a3e3f116a9bcc4769c8517cdce40765c7 Validity Not Before: Dec 14 03:00:29 2025 GMT Not After : Dec 15 03:00:29 2025 GMT Subject: CN=5d91bf8db47e00445838bd026ddf6bd0950f88a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b6:93:be:e3:8d:50:23:2d:36:8d:d1:8b:13: 6f:d2:4a:ad:c2:db:95:d4:67:71:31:eb:91:2e:3b: 33:8f:e6:aa:02:43:02:3e:5d:e5:2f:19:76:b6:2f: 8d:ef:51:94:e9:6e:79:87:70:ba:53:50:84:45:e1: b1:fc:4b:26:d8:c1:8e:c1:0e:3d:af:9b:fa:c5:a2: dd:ab:cd:03:8e:80:77:d7:ab:6e:e9:14:2e:8d:cb: 9a:bf:0a:f4:3b:aa:3d:54:9d:3c:66:a1:6c:70:81: 21:49:89:13:e3:3c:80:38:02:ff:c7:c4:eb:18:de: f5:e8:55:3b:71:78:a4:e7:7c:41:f5:8e:4b:d5:50: f8:f6:e1:7e:36:df:7f:7c:93:0c:52:42:47:f1:32: f2:d4:08:a8:67:9f:5f:a1:7f:68:6d:81:54:0a:be: 57:b2:95:fd:f6:d7:df:11:05:d9:8f:07:b8:1a:ac: c1:9b:70:1b:ae:31:7c:7e:8d:ca:21:f4:e4:bf:c5: 03:9c:04:b5:85:6b:cb:64:8c:80:9f:6d:55:70:48: 93:5f:a3:a1:2f:b7:36:da:cb:06:38:bf:98:09:80: d3:89:e9:33:2b:e8:e1:2b:a9:b0:45:24:27:6f:ec: e6:05:8e:3c:a4:4c:c5:4d:58:4a:c2:40:69:d6:25: c5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:91:BF:8D:B4:7E:00:44:58:38:BD:02:6D:DF:6B:D0:95:0F:88:A4 X509v3 Authority Key Identifier: keyid:F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:73:37:4d:dc:c9:12:d4:27:5e:5a:0d:53:0a:b4:ef:de:46: b5:6d:a2:5a:f0:9a:ec:75:c8:59:86:79:0b:ec:98:97:81:6f: 47:1b:2a:c9:51:56:e1:84:7c:6f:b8:b5:72:d6:10:d3:46:e5: fb:46:66:64:e3:69:9f:98:ed:52:1d:f0:37:87:38:bd:c1:19: 6d:a7:f8:2b:d2:6d:23:92:13:44:97:1f:ae:ed:96:44:52:d0: 34:7e:f2:1a:78:b5:6b:08:42:a2:90:73:05:53:7d:af:36:cf: 15:6b:93:e2:e8:c9:fa:15:ee:76:a6:2c:c7:54:e9:c8:21:e3: 73:70:af:05:df:b6:84:3a:79:99:b0:e9:31:4b:8c:49:ed:34: 89:37:4e:9c:e9:ea:8e:14:19:81:34:31:18:3c:68:9b:dc:40: 44:e5:86:bf:b6:ac:25:9a:c0:5b:61:73:bd:50:e6:a7:98:62: f2:0f:47:71:8d:bd:35:42:7a:9b:1c:62:f7:79:b5:f3:89:e8: 52:97:51:e0:cd:e0:8c:53:3c:a0:c4:aa:28:7e:8c:7c:a6:12: d9:69:23:99:c4:1d:49:87:25:07:a9:bc:b8:7c:4b:a9:f2:70: 61:f9:ef:cf:75:d4:ab:e5:07:be:a3:e7:90:e3:71:b9:a8:f8: 2f:93:6b:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsazXB+0psNl4PglaumooIEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMTkzODNhM2UzZjExNmE5YmNjNDc2OWM4NTE3Y2RjZTQw NzY1YzcwHhcNMjUxMjE0MDMwMDI5WhcNMjUxMjE1MDMwMDI5WjAzMTEwLwYDVQQD Eyg1ZDkxYmY4ZGI0N2UwMDQ0NTgzOGJkMDI2ZGRmNmJkMDk1MGY4OGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7aTvuONUCMtNo3RixNv0kqtwtuV 1GdxMeuRLjszj+aqAkMCPl3lLxl2ti+N71GU6W55h3C6U1CEReGx/Esm2MGOwQ49 r5v6xaLdq80DjoB316tu6RQujcuavwr0O6o9VJ08ZqFscIEhSYkT4zyAOAL/x8Tr GN716FU7cXik53xB9Y5L1VD49uF+Nt9/fJMMUkJH8TLy1AioZ59foX9obYFUCr5X spX99tffEQXZjwe4GqzBm3AbrjF8fo3KIfTkv8UDnAS1hWvLZIyAn21VcEiTX6Oh L7c22ssGOL+YCYDTiekzK+jhK6mwRSQnb+zmBY48pEzFTVhKwkBp1iXFHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2Rv420fgBEWDi9Am3fa9CVD4ikMB8GA1UdIwQY MBaAFPIZODo+PxFqm8xHachRfNzkB2XHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGhrNE9qNF9FV3FiekVkcHlGRjgzT1FIWmNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS83Y2YwYjEtMjI5OC00NDg0LWJkODAt NmNjOWY2Y2JhYWM0LzEvOGhrNE9qNF9FV3FiekVkcHlGRjgzT1FIWmNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS83Y2YwYjEtMjI5OC00NDg0LWJkODAtNmNjOWY2Y2JhYWM0 LzEvOGhrNE9qNF9FV3FiekVkcHlGRjgzT1FIWmNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwnM3TdzJ EtQnXloNUwq0795GtW2iWvCa7HXIWYZ5C+yYl4FvRxsqyVFW4YR8b7i1ctYQ00bl +0ZmZONpn5jtUh3wN4c4vcEZbaf4K9JtI5ITRJcfru2WRFLQNH7yGni1awhCopBz BVN9rzbPFWuT4ujJ+hXudqYsx1TpyCHjc3CvBd+2hDp5mbDpMUuMSe00iTdOnOnq jhQZgTQxGDxom9xAROWGv7asJZrAW2FzvVDmp5hi8g9HcY29NUJ6mxxi93m184no UpdR4M3gjFM8oMSqKH6MfKYS2WkjmcQdSYclB6m8uHxLqfJwYfnvz3XUq+UHvqPn kONxuaj4L5NrXA== -----END CERTIFICATE-----Generated at Sun Dec 14 06:07:11 2025 by rpki-client