This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft File: 8hVRewsgMJ6RZAW54e0hoEaaaJU.mft (raw, json) Hash identifier: tj+XncpweAXRakYFNB1Z8U4AkqGCr1dDF2HofQQ/A04= Subject key identifier: C7:E1:6F:AC:1E:4E:E2:AD:03:9C:F8:11:7E:CB:B2:09:5B:FD:D2:0B Authority key identifier: F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95 Certificate issuer: /CN=f215517b0b20309e916405b9e1ed21a0469a6895 Certificate serial: 019B262D5837B403EF0306C62EDA6DDB34A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft Manifest number: 03AA Signing time: Tue 16 Dec 2025 08:01:04 +0000 Manifest this update: Tue 16 Dec 2025 08:01:04 +0000 Manifest next update: Wed 17 Dec 2025 08:01:04 +0000 Files and hashes: 1: 8hVRewsgMJ6RZAW54e0hoEaaaJU.crl (hash: sbHaAI4i9b/sfSjYpzqxazJbUSZpE46OfPDLbrr9PVQ=) 2: qCeXwVNQp66WQ27Det0b9KrkJEc.roa (hash: WoKc3ldX5sHKUSOKMyS/VBt9xUxQrJ5xCbXpuIjQb48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:58:37:b4:03:ef:03:06:c6:2e:da:6d:db:34:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f215517b0b20309e916405b9e1ed21a0469a6895 Validity Not Before: Dec 16 08:01:04 2025 GMT Not After : Dec 17 08:01:04 2025 GMT Subject: CN=c7e16fac1e4ee2ad039cf8117ecbb2095bfdd20b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:99:50:90:6b:e2:6e:21:3a:5b:55:9c:07:e8: d6:f6:02:50:f9:77:42:90:27:b1:eb:53:57:07:07: 3e:b4:9c:52:1b:5b:d7:0d:32:fc:a9:92:c8:4b:d8: fb:c7:cc:64:88:21:32:75:ff:4e:ab:d8:18:2a:d3: 99:3d:50:dd:e4:35:40:d0:d9:de:24:c9:dd:ed:1d: 5d:89:c5:e8:fd:95:5a:74:e7:f8:81:ec:2f:6c:bd: 18:f8:f9:84:b9:e3:4b:70:44:19:42:28:41:a8:41: a9:9e:c8:c9:79:50:f3:24:46:fc:d9:69:41:de:58: a1:6f:dd:ac:f4:0c:65:03:5a:91:90:00:d2:b7:59: 75:c8:01:94:cb:40:d8:8e:e1:62:c0:31:60:bb:6a: 00:e5:7d:58:2d:39:c6:4b:87:a7:3c:5f:74:9b:9a: dd:dd:44:b1:20:37:68:4b:01:b1:9d:7c:8b:44:bf: 5a:0e:aa:60:74:fc:ac:69:a7:4d:a0:a2:78:84:76: 2a:17:2d:d4:b1:d7:fc:cd:62:bf:5c:0a:e2:0d:99: fd:cb:63:0b:1c:d8:78:74:75:06:cb:82:ad:25:ee: bc:f0:e8:07:2b:d0:d8:fb:64:dc:18:52:b0:73:34: f5:8a:7f:d2:13:23:24:b1:a3:37:c7:5c:5e:eb:cd: da:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E1:6F:AC:1E:4E:E2:AD:03:9C:F8:11:7E:CB:B2:09:5B:FD:D2:0B X509v3 Authority Key Identifier: keyid:F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c9:b1:74:cc:2a:27:5b:e1:5a:4a:80:e4:58:8f:e5:0c:7b: d0:59:6b:d1:3b:bc:89:61:fa:a1:a8:90:1e:e0:e1:2f:b7:38: 85:64:6b:46:fa:4a:32:9a:54:0f:e7:09:2e:ba:2e:20:f1:2b: 59:6c:d0:55:10:28:fa:12:9c:73:6e:51:d2:09:af:4a:82:c8: b3:96:4b:4a:6b:ae:43:4b:f5:00:7b:8e:3c:90:54:46:04:cf: ec:67:45:fb:ae:65:b4:d2:a3:1f:c3:78:d4:1a:8f:46:f0:ec: d0:fc:21:f1:30:b5:c9:78:88:aa:71:48:48:8f:27:ef:35:24: 8f:7c:35:a8:12:35:25:8e:bb:52:de:d0:94:d1:e5:51:da:53: 0a:e6:37:a7:20:e8:10:be:ae:cf:c4:a4:e5:4c:84:ed:38:3b: 15:02:60:54:be:3d:43:5b:9c:17:ea:30:c5:f4:c5:db:45:d1: f4:59:02:96:57:a8:f0:f9:6f:e3:84:3a:f5:94:05:f1:3b:49: f5:80:d6:eb:12:88:3d:2b:e9:45:01:41:2c:00:87:e4:92:ff: d5:27:f6:7e:84:b8:98:46:b1:3d:44:db:a6:01:fd:56:51:77: 52:33:a3:6d:b3:03:7b:65:a1:60:76:fa:76:65:db:10:93:76: 4c:49:4f:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLVg3tAPvAwbGLtpt2zShMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMTU1MTdiMGIyMDMwOWU5MTY0MDViOWUxZWQyMWEwNDY5 YTY4OTUwHhcNMjUxMjE2MDgwMTA0WhcNMjUxMjE3MDgwMTA0WjAzMTEwLwYDVQQD EyhjN2UxNmZhYzFlNGVlMmFkMDM5Y2Y4MTE3ZWNiYjIwOTViZmRkMjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZlQkGvibiE6W1WcB+jW9gJQ+XdC kCex61NXBwc+tJxSG1vXDTL8qZLIS9j7x8xkiCEydf9Oq9gYKtOZPVDd5DVA0Nne JMnd7R1dicXo/ZVadOf4gewvbL0Y+PmEueNLcEQZQihBqEGpnsjJeVDzJEb82WlB 3lihb92s9AxlA1qRkADSt1l1yAGUy0DYjuFiwDFgu2oA5X1YLTnGS4enPF90m5rd 3USxIDdoSwGxnXyLRL9aDqpgdPysaadNoKJ4hHYqFy3Usdf8zWK/XAriDZn9y2ML HNh4dHUGy4KtJe688OgHK9DY+2TcGFKwczT1in/SEyMksaM3x1xe683avwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfhb6weTuKtA5z4EX7Lsglb/dILMB8GA1UdIwQY MBaAFPIVUXsLIDCekWQFueHtIaBGmmiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGhWUmV3c2dNSjZSWkFXNTRlMGhvRWFhYUpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84M2NlYmUtYzhjZS00ODlkLWEyZjAt Yjk1YTE2NDE2YjU2LzEvOGhWUmV3c2dNSjZSWkFXNTRlMGhvRWFhYUpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi84M2NlYmUtYzhjZS00ODlkLWEyZjAtYjk1YTE2NDE2YjU2 LzEvOGhWUmV3c2dNSjZSWkFXNTRlMGhvRWFhYUpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMmxdMwq J1vhWkqA5FiP5Qx70Flr0Tu8iWH6oaiQHuDhL7c4hWRrRvpKMppUD+cJLrouIPEr WWzQVRAo+hKcc25R0gmvSoLIs5ZLSmuuQ0v1AHuOPJBURgTP7GdF+65ltNKjH8N4 1BqPRvDs0Pwh8TC1yXiIqnFISI8n7zUkj3w1qBI1JY67Ut7QlNHlUdpTCuY3pyDo EL6uz8Sk5UyE7Tg7FQJgVL49Q1ucF+owxfTF20XR9FkClleo8Plv44Q69ZQF8TtJ 9YDW6xKIPSvpRQFBLACH5JL/1Sf2foS4mEaxPUTbpgH9VlF3UjOjbbMDe2WhYHb6 dmXbEJN2TElPPw== -----END CERTIFICATE-----Generated at Tue Dec 16 11:37:19 2025 by rpki-client