This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json) Hash identifier: DOJZJV2Fb+nkNOWRk9N/L+SEhKeNH3XPE5kWDtXx0fk= Subject key identifier: E8:AC:81:A1:61:25:90:FD:79:E1:8B:1A:88:2A:E7:FD:05:00:7D:D3 Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2 Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2 Certificate serial: 019B07B51A861595BAB26590FB660B4ECED6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft Manifest number: 12F3 Signing time: Wed 10 Dec 2025 10:01:07 +0000 Manifest this update: Wed 10 Dec 2025 10:01:07 +0000 Manifest next update: Thu 11 Dec 2025 10:01:07 +0000 Files and hashes: 1: 4cnRWY5gtsfuxJysdz-vN0qrOUs.roa (hash: 93jxXfokl+svyBU1O0Hr6w6zv+AavA15Ll9wQ0fHJCo=) 2: 7L93z_qlhSOtd1RZOlWCJUWvg_o.roa (hash: vV2gGeYtK37+wnV0Ydlju7P2SHZgL0mA9o+Vjq7iAwY=) 3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: LZb2ncGUgmIzmC5Ux6FHfBWa1j6CAk2KX4wpCLtJjgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:1a:86:15:95:ba:b2:65:90:fb:66:0b:4e:ce:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2 Validity Not Before: Dec 10 10:01:07 2025 GMT Not After : Dec 11 10:01:07 2025 GMT Subject: CN=e8ac81a1612590fd79e18b1a882ae7fd05007dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f9:94:7b:0c:09:76:60:3c:23:aa:86:b1:c5: 0e:a8:67:7a:d7:b2:8a:0d:5d:a1:c6:f6:51:49:f5: e8:af:f8:4e:fe:df:18:cc:48:72:bf:43:8e:e1:d3: 82:7d:93:a1:3e:f9:c3:bc:d7:3c:55:37:a2:25:08: 5b:ef:1e:ba:5f:ee:36:b3:69:49:4c:11:5d:4f:98: cd:2c:2f:de:29:db:be:3c:64:c3:1b:91:e0:d1:a3: b0:14:db:e4:1a:45:b2:1d:88:19:b2:dc:ed:5b:d3: 2a:df:df:90:7f:dc:3a:3d:2e:32:40:c2:0a:10:3f: ac:3d:96:0f:15:b4:c2:e1:b7:60:5e:a5:e6:2b:f3: 54:8a:6b:3c:2f:2f:05:ce:17:8a:97:a1:96:e7:37: ff:ab:a6:26:76:2e:b9:aa:d2:c7:35:b2:57:7e:92: 8d:9c:d1:dc:b7:7b:40:b3:e7:c2:23:9b:a1:f6:c0: 80:75:a2:06:d2:47:c0:5a:d0:1e:cb:d0:6e:65:85: 9e:b2:b7:ec:50:06:24:d2:ff:3e:a1:b8:b3:59:37: 24:6b:32:5f:91:c3:5d:c1:c7:1b:6f:69:a7:16:f2: 14:4d:ff:33:2f:ff:0b:1c:d2:96:79:48:9e:66:ef: f2:04:9b:86:e1:98:c0:8d:c9:54:d3:5d:ad:4a:ff: 7a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AC:81:A1:61:25:90:FD:79:E1:8B:1A:88:2A:E7:FD:05:00:7D:D3 X509v3 Authority Key Identifier: keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:82:9d:c3:a9:c4:f6:2e:37:cf:41:37:4d:76:57:e3:86:54: d7:23:6a:25:21:ea:9b:c8:72:b0:15:cb:0f:ec:97:8f:ad:a1: 74:dd:61:5f:fc:88:83:11:84:1e:c3:21:c5:f7:4a:9b:9e:e9: bf:3c:c8:19:12:3d:8b:f2:89:fb:e7:9b:96:8a:87:15:94:ca: 15:ea:e8:1a:c3:4a:a6:00:e6:51:df:7a:e3:41:94:fd:00:7f: 27:21:a8:81:a8:21:18:7e:ef:03:76:c2:2f:e0:71:8d:c0:84: 5b:95:6b:2f:46:01:80:18:73:eb:ff:c4:a4:78:c7:a2:73:7a: cd:a5:9b:2c:79:ab:84:ec:f9:76:dc:b5:9e:5b:82:96:73:28: 3e:bf:f5:c7:1f:09:f7:59:75:2d:9d:37:75:ed:28:2f:54:b5: 40:9e:0e:6b:ba:7f:f9:1d:21:ed:14:65:b1:f4:69:6f:e9:7c: 93:61:52:36:c1:fa:53:2b:fb:6d:f8:74:57:96:fe:61:a7:d2: d2:20:a0:74:da:2c:ee:1a:e4:78:79:cf:3e:1e:57:16:1b:9b: 8d:bd:8f:62:8b:75:5f:6f:31:89:2c:a0:31:0a:49:6f:22:f3: 31:6f:93:3c:1a:44:7f:a4:b9:e0:ba:cc:2c:21:91:25:cb:ac: 34:55:4e:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtRqGFZW6smWQ+2YLTs7WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2YWYyYzcxNjZiYjM0YTY5NmZkZTJmYmFjZWY0MDAxYjBh OGU3ZTIwHhcNMjUxMjEwMTAwMTA3WhcNMjUxMjExMTAwMTA3WjAzMTEwLwYDVQQD EyhlOGFjODFhMTYxMjU5MGZkNzllMThiMWE4ODJhZTdmZDA1MDA3ZGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/mUewwJdmA8I6qGscUOqGd617KK DV2hxvZRSfXor/hO/t8YzEhyv0OO4dOCfZOhPvnDvNc8VTeiJQhb7x66X+42s2lJ TBFdT5jNLC/eKdu+PGTDG5Hg0aOwFNvkGkWyHYgZstztW9Mq39+Qf9w6PS4yQMIK ED+sPZYPFbTC4bdgXqXmK/NUims8Ly8FzheKl6GW5zf/q6Ymdi65qtLHNbJXfpKN nNHct3tAs+fCI5uh9sCAdaIG0kfAWtAey9BuZYWesrfsUAYk0v8+obizWTckazJf kcNdwccbb2mnFvIUTf8zL/8LHNKWeUieZu/yBJuG4ZjAjclU012tSv96AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOisgaFhJZD9eeGLGogq5/0FAH3TMB8GA1UdIwQY MBaAFIavLHFmuzSmlv3i+6zvQAGwqOfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEt ZTRmNTg3MDQ4MDRlLzEvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEtZTRmNTg3MDQ4MDRl LzEvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYKdw6nE 9i43z0E3TXZX44ZU1yNqJSHqm8hysBXLD+yXj62hdN1hX/yIgxGEHsMhxfdKm57p vzzIGRI9i/KJ++ebloqHFZTKFeroGsNKpgDmUd9640GU/QB/JyGogaghGH7vA3bC L+BxjcCEW5VrL0YBgBhz6//EpHjHonN6zaWbLHmrhOz5dty1nluClnMoPr/1xx8J 91l1LZ03de0oL1S1QJ4Oa7p/+R0h7RRlsfRpb+l8k2FSNsH6Uyv7bfh0V5b+YafS 0iCgdNos7hrkeHnPPh5XFhubjb2PYot1X28xiSygMQpJbyLzMW+TPBpEf6S54LrM LCGRJcusNFVOhg== -----END CERTIFICATE-----Generated at Wed Dec 10 11:59:45 2025 by rpki-client