This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft File: c8_hHopwk73JW8AeINtDduIqpRY.mft (raw, json) Hash identifier: KnFB7z6F+A3nXxY5GursA0gDJfcYeDwuhGA5av9E3u4= Subject key identifier: A5:FE:8C:64:77:2B:0C:BE:EA:59:41:24:28:F4:60:03:85:81:66:1A Authority key identifier: 73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16 Certificate issuer: /CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516 Certificate serial: 019B59E433A04AAAA45B9CE9146BFFBCB1F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft Manifest number: 04AA Signing time: Fri 26 Dec 2025 09:01:26 +0000 Manifest this update: Fri 26 Dec 2025 09:01:26 +0000 Manifest next update: Sat 27 Dec 2025 09:01:26 +0000 Files and hashes: 1: SVFNCXAgs-J1Ur0M2wuVWaTBzQI.roa (hash: rGZg6LxxY7ku4GUoLGf94rOsH2eH6eg3rUYHF4vWHMk=) 2: c8_hHopwk73JW8AeINtDduIqpRY.crl (hash: 769dJJyLyBa7Cp1aYFmwzXbUwZlwr0xjAMBheviQxJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:33:a0:4a:aa:a4:5b:9c:e9:14:6b:ff:bc:b1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516 Validity Not Before: Dec 26 09:01:26 2025 GMT Not After : Dec 27 09:01:26 2025 GMT Subject: CN=a5fe8c64772b0cbeea59412428f460038581661a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:dd:28:86:be:43:32:55:2a:13:dd:70:6a:bd: 41:95:1b:1f:d4:af:77:51:de:91:1e:f6:b6:7b:20: 76:f7:ac:24:05:4d:e3:5b:8e:47:33:dc:15:bf:cb: b7:2d:5a:6c:32:70:a1:59:53:6e:1e:d3:88:4c:48: 2c:8f:ed:69:43:f9:c0:05:d3:b1:5f:a5:96:d8:b2: 5e:c7:8a:a6:9c:6f:ed:16:74:75:5c:29:dd:9e:31: c4:4f:36:77:04:6b:fb:34:e4:9d:44:94:95:eb:b3: c6:b1:f9:29:e8:67:0f:94:17:34:61:c8:e4:0f:57: da:dd:d7:68:49:49:2b:74:97:45:73:71:8f:ed:ba: 9f:79:4c:37:f0:ec:e5:79:b4:82:e1:d7:5a:a9:a4: 36:e7:50:b3:36:77:03:1b:01:4f:92:fd:e7:5c:47: 67:26:45:54:54:87:7c:f7:1e:0f:76:4a:01:21:fb: 2e:c3:62:fb:60:ae:6d:8c:2e:01:65:40:ff:4f:78: 91:be:d3:20:52:a8:d8:ab:67:be:6e:b1:a4:38:8f: f3:c4:99:7b:e5:31:3a:06:56:3d:e8:02:6b:22:25: 71:96:d9:d9:14:19:ad:b7:5c:74:92:19:c7:bb:e5: 5c:58:cb:5d:7d:fb:94:29:1c:b1:f9:44:0f:d7:75: 08:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FE:8C:64:77:2B:0C:BE:EA:59:41:24:28:F4:60:03:85:81:66:1A X509v3 Authority Key Identifier: keyid:73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:f6:5c:a5:7a:d2:a9:5d:c6:87:2f:12:51:a1:8e:d2:00:d0: 6a:f2:15:19:d0:19:ab:61:9a:b9:62:e7:63:f2:25:c8:7f:9c: 03:1c:19:4e:d7:05:b9:d3:b5:70:56:65:ac:36:5d:74:91:6b: c5:bf:73:65:ff:ef:ed:31:e6:74:cb:15:4a:d7:49:cd:5c:13: fb:4f:1c:b4:89:96:7d:6d:e8:f3:32:d5:99:13:44:cd:8d:ee: bb:b8:1e:04:94:b7:bf:bc:44:33:6f:68:51:ca:fc:bf:42:9c: 95:90:38:05:a5:1c:a9:7f:13:27:6a:7d:28:ef:f7:32:3b:d4: 79:44:d9:54:b6:6d:b6:b0:d5:e0:8e:c1:72:83:6d:4f:14:d0: 1a:a3:f0:9c:8d:7f:d9:a7:66:58:93:f4:b4:16:4f:91:78:cd: 58:5e:07:70:03:9e:57:64:30:f4:a3:c8:a2:4a:ab:4c:51:e1: 77:9c:89:c6:b4:09:ee:1b:a0:d5:0a:d2:3f:54:44:6d:bf:1d: 33:d2:03:0e:74:c8:38:5a:c8:c7:5b:e9:9e:d8:62:61:f8:4b: 67:5d:7b:06:61:5a:06:a8:4b:20:8d:3d:ff:ca:b3:bb:68:db: d0:51:57:f8:9f:5c:ce:e5:1f:75:0a:63:b8:15:2c:37:2b:4f: 0a:d7:72:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5DOgSqqkW5zpFGv/vLHwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczY2ZlMTFlOGE3MDkzYmRjOTViYzAxZTIwZGI0Mzc2ZTIy YWE1MTYwHhcNMjUxMjI2MDkwMTI2WhcNMjUxMjI3MDkwMTI2WjAzMTEwLwYDVQQD EyhhNWZlOGM2NDc3MmIwY2JlZWE1OTQxMjQyOGY0NjAwMzg1ODE2NjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2t0ohr5DMlUqE91war1BlRsf1K93 Ud6RHva2eyB296wkBU3jW45HM9wVv8u3LVpsMnChWVNuHtOITEgsj+1pQ/nABdOx X6WW2LJex4qmnG/tFnR1XCndnjHETzZ3BGv7NOSdRJSV67PGsfkp6GcPlBc0Ycjk D1fa3ddoSUkrdJdFc3GP7bqfeUw38OzlebSC4ddaqaQ251CzNncDGwFPkv3nXEdn JkVUVId89x4PdkoBIfsuw2L7YK5tjC4BZUD/T3iRvtMgUqjYq2e+brGkOI/zxJl7 5TE6BlY96AJrIiVxltnZFBmtt1x0khnHu+VcWMtdffuUKRyx+UQP13UIdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKX+jGR3Kwy+6llBJCj0YAOFgWYaMB8GA1UdIwQY MBaAFHPP4R6KcJO9yVvAHiDbQ3biKqUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhfaEhvcHdrNzNKVzhBZUlOdERkdUlxcFJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iYWY5ZjMtMGU0OC00YzQ3LWJjMjYt MWIxMTAwNzMxNDQ4LzEvYzhfaEhvcHdrNzNKVzhBZUlOdERkdUlxcFJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9iYWY5ZjMtMGU0OC00YzQ3LWJjMjYtMWIxMTAwNzMxNDQ4 LzEvYzhfaEhvcHdrNzNKVzhBZUlOdERkdUlxcFJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVvZcpXrS qV3Ghy8SUaGO0gDQavIVGdAZq2GauWLnY/IlyH+cAxwZTtcFudO1cFZlrDZddJFr xb9zZf/v7THmdMsVStdJzVwT+08ctImWfW3o8zLVmRNEzY3uu7geBJS3v7xEM29o Ucr8v0KclZA4BaUcqX8TJ2p9KO/3MjvUeUTZVLZttrDV4I7BcoNtTxTQGqPwnI1/ 2admWJP0tBZPkXjNWF4HcAOeV2Qw9KPIokqrTFHhd5yJxrQJ7hug1QrSP1REbb8d M9IDDnTIOFrIx1vpnthiYfhLZ117BmFaBqhLII09/8qzu2jb0FFX+J9czuUfdQpj uBUsNytPCtdycQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:49 2025 by rpki-client