This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft File: h8SPxcLrLHSiQqR70yFXfo8eanE.mft (raw, json) Hash identifier: JaKLsdNzET3Cu9DqD3SzDuZWExVJdMUk8rqbYkNRAgc= Subject key identifier: 1C:C4:3F:31:01:AF:CD:F6:4B:66:BA:FE:ED:F6:B4:C5:91:C1:9D:85 Authority key identifier: 87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71 Certificate issuer: /CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71 Certificate serial: 019B593EE8103542543D8B6C71C38EF76DB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft Manifest number: 31 Signing time: Fri 26 Dec 2025 06:00:53 +0000 Manifest this update: Fri 26 Dec 2025 06:00:53 +0000 Manifest next update: Sat 27 Dec 2025 06:00:53 +0000 Files and hashes: 1: h4-lyNbmhBm-KugKTQkiHt5LRM8.roa (hash: Ok+4+JLkto4cQeBc0AplqkJV6J8J1cpNrnKlwegFWS4=) 2: h8SPxcLrLHSiQqR70yFXfo8eanE.crl (hash: rDIv/RBuww51t0P0aO3wl54wVy5R8FfsDCBoJks4aa8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:e8:10:35:42:54:3d:8b:6c:71:c3:8e:f7:6d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71 Validity Not Before: Dec 26 06:00:53 2025 GMT Not After : Dec 27 06:00:53 2025 GMT Subject: CN=1cc43f3101afcdf64b66bafeedf6b4c591c19d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6d:f7:93:ad:b4:5b:e0:68:30:3e:9f:c8:16: 1a:b6:8a:8a:f2:9d:d1:31:50:84:5d:9a:83:9b:f3: ce:38:15:b4:c1:04:66:59:5c:46:21:0f:6d:00:7d: c8:dc:a3:35:5c:0c:34:4c:7f:b5:de:cc:08:81:c6: 7c:6c:66:9c:a6:6a:04:c3:49:38:cc:58:34:27:61: 00:3f:7a:aa:01:74:2e:a5:bd:f8:a3:1d:cd:5d:79: 43:89:b2:51:0c:33:eb:67:e3:35:5c:bf:f4:14:d3: ea:d8:b4:10:2f:a0:45:29:e3:3f:9d:ed:b9:2e:6b: af:0d:e1:b7:b7:16:f4:62:96:fa:8d:ee:2b:2e:fb: 56:7b:cc:67:7e:85:71:01:08:e0:ab:98:14:95:82: 15:33:9c:83:95:d8:6f:ca:d6:2c:87:33:cc:06:a6: 9a:e2:25:7b:be:80:30:23:d0:c5:d5:2c:f1:30:01: a0:f2:50:0d:b6:01:90:29:c8:58:17:2b:14:e8:ea: 36:aa:cd:a0:37:02:c1:60:2c:c9:e5:b3:b6:de:03: 0f:ee:c9:6b:f5:c7:4f:a3:ac:3a:aa:3d:60:57:bb: cf:59:8e:d4:c1:ac:c8:80:6e:c5:8d:63:22:5e:73: ec:2c:c6:0e:b9:ec:bf:27:b9:2f:e8:26:2c:6d:f1: 86:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C4:3F:31:01:AF:CD:F6:4B:66:BA:FE:ED:F6:B4:C5:91:C1:9D:85 X509v3 Authority Key Identifier: keyid:87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:8e:ad:72:aa:88:43:77:6c:6b:1f:d0:73:d0:f2:5a:c9:43: 6b:c2:4c:2c:ba:44:e3:7e:c3:c6:0b:ba:b5:cf:11:67:b2:38: 9b:19:3f:2c:41:c0:74:d9:8d:dd:32:17:98:f5:d7:7c:b9:90: d1:e5:30:41:72:cf:5b:dd:73:27:39:39:25:b8:35:31:29:1f: da:59:73:b5:e0:fb:57:1e:ae:48:30:0d:18:8d:d3:19:e1:ec: 1a:6f:6e:ed:6a:28:36:a5:5d:69:58:86:b3:63:22:68:84:85: 64:68:9b:2f:96:69:ca:e8:18:41:d2:d4:ab:f9:22:cf:b8:2e: a1:17:7f:cb:a1:35:a2:bc:55:9d:38:c1:a0:bf:cc:17:0b:0e: 02:20:b2:da:73:0d:89:a3:f1:58:b7:40:26:a5:14:c5:c7:34: ed:35:81:d7:82:9b:d5:f1:fd:0b:24:4b:25:c5:19:1c:d5:47: 03:77:f4:fb:59:b7:76:9b:f0:80:70:2c:e4:69:8e:7f:8a:97: 1f:07:85:8b:a4:93:29:bd:01:7f:fd:f7:12:3d:5f:ee:cc:34: 4b:79:c6:2a:ce:9f:7a:4f:41:ee:3f:3b:3c:aa:2a:e5:e4:53: 87:d7:a2:02:db:02:d1:b3:16:ea:42:35:22:8e:bd:4b:92:4a: 0f:be:dd:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPugQNUJUPYtsccOO9224MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YzQ4ZmM1YzJlYjJjNzRhMjQyYTQ3YmQzMjE1NzdlOGYx ZTZhNzEwHhcNMjUxMjI2MDYwMDUzWhcNMjUxMjI3MDYwMDUzWjAzMTEwLwYDVQQD EygxY2M0M2YzMTAxYWZjZGY2NGI2NmJhZmVlZGY2YjRjNTkxYzE5ZDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2m33k620W+BoMD6fyBYatoqK8p3R MVCEXZqDm/POOBW0wQRmWVxGIQ9tAH3I3KM1XAw0TH+13swIgcZ8bGacpmoEw0k4 zFg0J2EAP3qqAXQupb34ox3NXXlDibJRDDPrZ+M1XL/0FNPq2LQQL6BFKeM/ne25 LmuvDeG3txb0Ypb6je4rLvtWe8xnfoVxAQjgq5gUlYIVM5yDldhvytYshzPMBqaa 4iV7voAwI9DF1SzxMAGg8lANtgGQKchYFysU6Oo2qs2gNwLBYCzJ5bO23gMP7slr 9cdPo6w6qj1gV7vPWY7UwazIgG7FjWMiXnPsLMYOuey/J7kv6CYsbfGG8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzEPzEBr832S2a6/u32tMWRwZ2FMB8GA1UdIwQY MBaAFIfEj8XC6yx0okKke9MhV36PHmpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDhTUHhjTHJMSFNpUXFSNzB5RlhmbzhlYW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZDIzNTktMmM0YS00MWI2LWExYjYt NTVlNGM5MmE1ZDUwLzEvaDhTUHhjTHJMSFNpUXFSNzB5RlhmbzhlYW5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZDIzNTktMmM0YS00MWI2LWExYjYtNTVlNGM5MmE1ZDUw LzEvaDhTUHhjTHJMSFNpUXFSNzB5RlhmbzhlYW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKY6tcqqI Q3dsax/Qc9DyWslDa8JMLLpE437Dxgu6tc8RZ7I4mxk/LEHAdNmN3TIXmPXXfLmQ 0eUwQXLPW91zJzk5Jbg1MSkf2llzteD7Vx6uSDANGI3TGeHsGm9u7WooNqVdaViG s2MiaISFZGibL5ZpyugYQdLUq/kiz7guoRd/y6E1orxVnTjBoL/MFwsOAiCy2nMN iaPxWLdAJqUUxcc07TWB14Kb1fH9CyRLJcUZHNVHA3f0+1m3dpvwgHAs5GmOf4qX HweFi6STKb0Bf/33Ej1f7sw0S3nGKs6fek9B7j87PKoq5eRTh9eiAtsC0bMW6kI1 Io69S5JKD77dqw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:15 2025 by rpki-client