This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft File: h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft (raw, json) Hash identifier: Gm+Q/FcxXxBlR2f36H1l0nFewO2WTrhUTmjLwAD+JZE= Subject key identifier: C8:75:F1:8C:B5:41:59:E3:13:92:30:2F:7C:1E:4C:36:0C:B9:0F:3A Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD Certificate issuer: /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd Certificate serial: 019AF80AC80C43B57D9600CC54883D0BEF06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft Manifest number: 1767 Signing time: Sun 07 Dec 2025 09:00:47 +0000 Manifest this update: Sun 07 Dec 2025 09:00:47 +0000 Manifest next update: Mon 08 Dec 2025 09:00:47 +0000 Files and hashes: 1: FsLVTd1Z_Y1_QKD3XsSC6T-7WSc.roa (hash: MfqtShshWzvZLLqxVYU/rnjLf5/rPRnD2xrlVc90HQU=) 2: O26SvIi-iLlAArpGPoL_kcRMLz8.roa (hash: x6EwUP7G9se/ub/wgAs57oTYgG0nrtLTkuveOv5jyO4=) 3: eXFZQO35x46hI1_B-kM0oX7ba3w.roa (hash: IKEAMPDMrBLKazuRwlONi5mwZJ2E45qg/Wd4/iF4QYg=) 4: h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl (hash: Xk6n5gDd81v25O0P3fx/i4Z1DPHSWnh8DJMGIfYB6tI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:0a:c8:0c:43:b5:7d:96:00:cc:54:88:3d:0b:ef:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd Validity Not Before: Dec 7 09:00:47 2025 GMT Not After : Dec 8 09:00:47 2025 GMT Subject: CN=c875f18cb54159e31392302f7c1e4c360cb90f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c1:e6:ba:87:8d:e0:b2:1a:93:6a:5a:6b:24: 75:b1:b8:8f:d3:f1:4b:5e:3c:82:45:af:42:e0:46: 0a:6c:d4:4e:7b:8d:24:4d:4e:f3:49:3b:8f:43:37: 65:d6:d6:98:b0:85:aa:23:74:a3:36:6f:d0:0a:bc: 76:76:3d:78:14:d9:b6:8c:70:74:98:d3:3d:61:06: a3:45:8d:87:c3:68:af:99:17:ea:00:80:22:b2:12: a4:d6:7e:1f:f8:43:a0:95:07:e8:00:f5:a8:c5:d3: c7:a1:b0:c0:18:ea:20:52:42:06:c4:3a:01:00:f3: 33:74:50:ab:af:66:9d:6b:a6:80:c7:f5:7b:c0:91: 57:f1:35:31:66:5e:a3:ec:bb:bc:12:69:12:6d:2f: f2:79:ea:af:99:9d:47:84:40:94:f2:3a:16:06:65: db:73:17:dc:3d:4f:49:ea:07:56:da:02:ab:16:00: 64:70:75:be:f4:b3:c3:a7:61:00:0d:89:e3:d1:77: fc:64:c6:3b:0f:ef:53:5b:02:85:2b:42:ec:66:73: 25:b8:c4:6f:04:ea:ef:56:0d:db:ed:fc:7f:90:9d: eb:03:cc:89:b4:4d:e7:ac:20:dd:c1:d3:43:1a:a7: 8c:0a:48:79:55:fb:b7:3e:e0:cb:5c:8f:1f:34:d9: 00:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:75:F1:8C:B5:41:59:E3:13:92:30:2F:7C:1E:4C:36:0C:B9:0F:3A X509v3 Authority Key Identifier: keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:09:e8:8f:43:0b:ad:b9:16:01:c2:14:e2:20:dd:a2:8f:a2: a7:73:c3:78:4c:03:cc:6b:71:ba:c7:e1:2e:eb:3b:d6:0b:51: 05:f6:63:eb:e8:8b:df:10:27:b7:88:8f:39:1b:b6:74:80:e9: d7:30:61:67:12:94:13:86:94:92:18:c2:ce:1b:39:d2:bf:97: 52:c4:5f:1a:87:81:5a:dc:96:cc:ae:fc:eb:66:54:77:4a:73: c6:3f:29:9d:80:38:f1:ea:a1:fd:6c:58:52:99:cf:d1:0f:09: 74:37:b7:7c:68:c5:ac:37:23:d7:e6:c1:97:3b:01:06:4c:de: 6f:af:0a:e3:d6:5d:36:a2:e8:a8:7d:4c:2c:44:89:6b:54:42: 4c:fe:c1:7a:8a:96:66:31:46:8b:60:6c:77:55:86:98:5c:41: 0e:ce:9d:a6:f0:07:5b:ea:70:81:cf:13:86:cb:85:5a:65:f4: ef:c6:d2:83:a3:f8:56:99:de:f3:98:37:01:d9:27:47:f3:0a: f6:73:64:10:7a:d1:60:39:4a:2f:a0:1b:88:f3:dd:00:16:0c: a8:64:53:6c:d7:61:9c:5e:c7:7d:cd:23:50:3d:2d:cb:d9:6e: ed:6c:94:d0:f4:be:90:4d:cc:ef:af:59:fc:a9:99:e5:54:ef: 8f:c7:f3:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4CsgMQ7V9lgDMVIg9C+8GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YzM3ZDAzNWQ5NWZlZmJhMWQ0N2Y5OGI5ZmY0OTczZjE3 ZGY2Y2QwHhcNMjUxMjA3MDkwMDQ3WhcNMjUxMjA4MDkwMDQ3WjAzMTEwLwYDVQQD EyhjODc1ZjE4Y2I1NDE1OWUzMTM5MjMwMmY3YzFlNGMzNjBjYjkwZjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcHmuoeN4LIak2paayR1sbiP0/FL XjyCRa9C4EYKbNROe40kTU7zSTuPQzdl1taYsIWqI3SjNm/QCrx2dj14FNm2jHB0 mNM9YQajRY2Hw2ivmRfqAIAishKk1n4f+EOglQfoAPWoxdPHobDAGOogUkIGxDoB APMzdFCrr2ada6aAx/V7wJFX8TUxZl6j7Lu8EmkSbS/yeeqvmZ1HhECU8joWBmXb cxfcPU9J6gdW2gKrFgBkcHW+9LPDp2EADYnj0Xf8ZMY7D+9TWwKFK0LsZnMluMRv BOrvVg3b7fx/kJ3rA8yJtE3nrCDdwdNDGqeMCkh5Vfu3PuDLXI8fNNkA5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMh18Yy1QVnjE5IwL3weTDYMuQ86MB8GA1UdIwQY MBaAFIfDfQNdlf77odR/mLn/SXPxffbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDhOOUExMlZfdnVoMUgtWXVmOUpjX0Y5OXMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81ZWYwNjAtZjQ3My00MDQzLWI4YTIt ZTFiN2M3NjQ5ZmEzLzEvaDhOOUExMlZfdnVoMUgtWXVmOUpjX0Y5OXMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS81ZWYwNjAtZjQ3My00MDQzLWI4YTItZTFiN2M3NjQ5ZmEz LzEvaDhOOUExMlZfdnVoMUgtWXVmOUpjX0Y5OXMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAnoj0ML rbkWAcIU4iDdoo+ip3PDeEwDzGtxusfhLus71gtRBfZj6+iL3xAnt4iPORu2dIDp 1zBhZxKUE4aUkhjCzhs50r+XUsRfGoeBWtyWzK7862ZUd0pzxj8pnYA48eqh/WxY UpnP0Q8JdDe3fGjFrDcj1+bBlzsBBkzeb68K49ZdNqLoqH1MLESJa1RCTP7BeoqW ZjFGi2Bsd1WGmFxBDs6dpvAHW+pwgc8ThsuFWmX078bSg6P4Vpne85g3AdknR/MK 9nNkEHrRYDlKL6AbiPPdABYMqGRTbNdhnF7Hfc0jUD0ty9lu7WyU0PS+kE3M769Z /KmZ5VTvj8fzbg== -----END CERTIFICATE-----Generated at Sun Dec 7 10:50:25 2025 by rpki-client