This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft File: s8hW6VbErdthWY88JInyvfbtHRg.mft (raw, json) Hash identifier: zQ3OMZsEu+Emf4MoZsxJ/7L86Uz4aMcNnSvd5NlYFbU= Subject key identifier: AE:3D:92:EA:FC:EA:F5:39:DF:60:AA:99:60:64:E9:2E:DA:12:F6:BA Authority key identifier: B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18 Certificate issuer: /CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18 Certificate serial: 019B05C6EE5D2DA881FCDE1C41B7A41F9EF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft Manifest number: 16FC Signing time: Wed 10 Dec 2025 01:01:21 +0000 Manifest this update: Wed 10 Dec 2025 01:01:21 +0000 Manifest next update: Thu 11 Dec 2025 01:01:21 +0000 Files and hashes: 1: Kc4V5tzdi4xhmWeJoyXZlmZAD6U.roa (hash: gVw1MMRDs2rY597vN0xWVEhdeHW2cAUodm7HsTOIyc8=) 2: s8hW6VbErdthWY88JInyvfbtHRg.crl (hash: w5QYnymQPs098RNZOO2vZC4ZuI8tGv1Ts1XIOAYzkCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 21:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:c6:ee:5d:2d:a8:81:fc:de:1c:41:b7:a4:1f:9e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18 Validity Not Before: Dec 10 01:01:21 2025 GMT Not After : Dec 11 01:01:21 2025 GMT Subject: CN=ae3d92eafceaf539df60aa996064e92eda12f6ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:54:d2:7a:39:5a:da:98:5f:5e:ae:08:2c:5b: 58:9e:b9:f2:e5:40:eb:e2:51:8c:56:7f:11:48:97: b1:49:e4:e1:e8:a9:c5:8a:60:0f:b4:59:96:b6:c9: fb:dd:a4:4b:c3:54:1c:a2:4f:b9:de:7e:7d:95:b1: ef:84:00:fb:46:f5:2b:e8:6c:6b:45:25:a0:67:c7: cb:e8:d4:1b:18:ed:6d:2b:4d:eb:32:84:9d:90:c9: a2:d8:8b:cc:13:b5:40:51:ce:a9:ed:ee:d4:ee:a5: 2d:68:fb:47:24:a2:64:90:7b:d5:a5:df:90:ab:4b: 52:7d:bc:e2:30:44:66:2e:3a:8d:50:de:a4:f1:31: 42:f3:4a:9d:5b:0b:ab:06:cd:c4:d3:32:a5:48:1b: b8:56:1e:73:d0:60:60:1e:4d:f5:8c:a7:69:46:c7: 1c:86:9c:5a:7b:08:12:48:a9:4a:4d:ac:04:29:d5: 85:ae:4c:81:49:ea:8a:07:9d:9e:f1:e3:32:02:33: 2e:20:83:42:ed:3e:57:4a:c4:e8:32:f6:fa:80:f1: 59:cd:a3:8c:f5:cc:9a:09:8b:4c:dd:f4:ea:b8:49: b3:44:b4:44:15:ec:45:93:f8:54:c4:42:bc:68:8f: 0f:7e:f9:bc:10:3c:4a:64:54:eb:d6:84:62:bf:35: ef:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3D:92:EA:FC:EA:F5:39:DF:60:AA:99:60:64:E9:2E:DA:12:F6:BA X509v3 Authority Key Identifier: keyid:B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:7e:1a:b8:0b:ac:a1:eb:cb:08:84:12:84:1b:38:2b:a7:51: d6:f0:74:a2:22:12:2f:d6:28:db:df:d6:1d:04:65:54:71:8e: a4:6c:90:21:7e:45:c0:91:69:36:79:ca:fd:9b:da:71:e8:4e: d7:0f:87:32:be:96:27:4a:0f:e4:5a:65:f3:3e:95:19:87:24: 83:a2:3b:64:a4:72:dd:b6:fe:e5:34:76:44:c5:38:b3:51:91: 78:9d:09:4e:1d:ec:d6:3d:27:e3:f3:b9:9b:06:ea:b6:a6:18: 3a:b8:47:ff:65:c4:fe:a4:e9:42:3a:16:bd:8a:a0:b1:c3:24: 16:0b:01:91:a8:86:c4:27:fb:ff:63:fe:30:55:9d:e8:ca:ba: eb:60:f9:e1:06:a2:6b:c2:92:87:a9:b8:7c:2d:2c:39:90:26: 5b:7b:c2:77:51:45:39:1b:85:b0:bd:63:c5:d3:2d:c2:b1:bd: b9:2b:f8:a3:a1:ac:e1:d5:f6:0b:61:c5:c4:d0:36:9f:53:a8: cf:85:28:8d:40:13:e7:71:32:2f:7f:4a:17:61:6f:5e:a0:1f: 87:d3:c7:e9:16:c1:98:22:ff:4b:dd:65:b0:32:1a:d4:e5:e1: 02:d8:8c:ae:8f:55:80:9e:b7:e5:7c:8d:a2:25:86:c6:41:45: fd:b2:a4:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFxu5dLaiB/N4cQbekH572MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzg1NmU5NTZjNGFkZGI2MTU5OGYzYzI0ODlmMmJkZjZl ZDFkMTgwHhcNMjUxMjEwMDEwMTIxWhcNMjUxMjExMDEwMTIxWjAzMTEwLwYDVQQD EyhhZTNkOTJlYWZjZWFmNTM5ZGY2MGFhOTk2MDY0ZTkyZWRhMTJmNmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolTSejla2phfXq4ILFtYnrny5UDr 4lGMVn8RSJexSeTh6KnFimAPtFmWtsn73aRLw1Qcok+53n59lbHvhAD7RvUr6Gxr RSWgZ8fL6NQbGO1tK03rMoSdkMmi2IvME7VAUc6p7e7U7qUtaPtHJKJkkHvVpd+Q q0tSfbziMERmLjqNUN6k8TFC80qdWwurBs3E0zKlSBu4Vh5z0GBgHk31jKdpRscc hpxaewgSSKlKTawEKdWFrkyBSeqKB52e8eMyAjMuIINC7T5XSsToMvb6gPFZzaOM 9cyaCYtM3fTquEmzRLREFexFk/hUxEK8aI8Pfvm8EDxKZFTr1oRivzXvrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK49kur86vU532CqmWBk6S7aEva6MB8GA1UdIwQY MBaAFLPIVulWxK3bYVmPPCSJ8r327R0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhoVzZWYkVyZHRoV1k4OEpJbnl2ZmJ0SFJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jNTViZTctZmU2NC00ZTczLWEwNjMt MWIwZWY0NGY3ODg0LzEvczhoVzZWYkVyZHRoV1k4OEpJbnl2ZmJ0SFJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9jNTViZTctZmU2NC00ZTczLWEwNjMtMWIwZWY0NGY3ODg0 LzEvczhoVzZWYkVyZHRoV1k4OEpJbnl2ZmJ0SFJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAun4auAus oevLCIQShBs4K6dR1vB0oiISL9Yo29/WHQRlVHGOpGyQIX5FwJFpNnnK/ZvacehO 1w+HMr6WJ0oP5Fpl8z6VGYckg6I7ZKRy3bb+5TR2RMU4s1GReJ0JTh3s1j0n4/O5 mwbqtqYYOrhH/2XE/qTpQjoWvYqgscMkFgsBkaiGxCf7/2P+MFWd6Mq662D54Qai a8KSh6m4fC0sOZAmW3vCd1FFORuFsL1jxdMtwrG9uSv4o6Gs4dX2C2HFxNA2n1Oo z4UojUAT53EyL39KF2FvXqAfh9PH6RbBmCL/S91lsDIa1OXhAtiMro9VgJ635XyN oiWGxkFF/bKkUw== -----END CERTIFICATE-----Generated at Wed Dec 10 03:11:07 2025 by rpki-client