This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft File: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json) Hash identifier: xE1cwJUPLyQDh3VzZnZ7hC0vTN7lADOVrup7nyfmqts= Subject key identifier: 78:95:3C:6C:46:10:B7:A7:C9:04:8B:3A:92:DF:84:9C:C3:CE:77:4C Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5 Certificate issuer: /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5 Certificate serial: 019B42495D9C6B9C6743A21B4F41A87AB01B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft Manifest number: 117B Signing time: Sun 21 Dec 2025 19:01:02 +0000 Manifest this update: Sun 21 Dec 2025 19:01:02 +0000 Manifest next update: Mon 22 Dec 2025 19:01:02 +0000 Files and hashes: 1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: OgVXdGg0IXqe7XqHdkxD4d6FbkB3fjKZA0TOI3WFz64=) 2: qPfR7RG57f18LNEfOXECDUWuxuU.roa (hash: QgXqOHY45cNI3RJ9Yex5GhM6/GX8GPU2S0Ij2p9Y640=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:5d:9c:6b:9c:67:43:a2:1b:4f:41:a8:7a:b0:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5 Validity Not Before: Dec 21 19:01:02 2025 GMT Not After : Dec 22 19:01:02 2025 GMT Subject: CN=78953c6c4610b7a7c9048b3a92df849cc3ce774c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fb:26:80:80:14:84:36:a8:d5:1c:30:01:76: 04:0a:59:5a:c8:1e:0c:20:ad:50:df:bf:e0:25:e4: e1:a0:1d:c2:43:1d:b5:83:5f:d8:be:12:8a:8d:65: 62:fd:a9:06:8a:c6:e3:e1:57:d3:bb:6a:d1:44:0e: 62:70:3f:f3:b3:ac:e8:99:9a:cf:34:22:0b:ab:1f: cc:f9:79:94:dc:cb:b6:9c:4a:97:31:89:eb:aa:81: 2c:32:84:1e:23:8f:fc:81:6d:98:1d:05:59:e0:31: 52:9a:04:a8:a6:d9:86:49:37:1e:6e:82:ad:86:e2: 17:e6:f0:1f:be:71:11:73:63:f8:64:19:27:4b:71: c4:1d:88:ee:01:9f:e2:92:0b:cb:32:a7:ca:a6:b0: ec:8a:e7:3f:5c:71:30:71:61:34:29:c6:23:f8:24: 11:a1:2c:27:32:78:af:64:0a:1b:db:eb:f9:8c:b6: 2d:53:dc:be:88:8f:bc:9b:4e:31:06:d6:04:ea:7f: 29:54:47:6d:f0:20:29:2f:ce:bf:4a:0a:19:4c:63: 78:c0:02:9f:55:21:eb:10:72:61:37:55:d6:41:9c: 54:3e:4a:4f:88:13:ca:c7:ef:d8:e6:8a:e0:bc:a0: d0:63:ae:de:81:45:a4:6d:ab:56:01:10:2c:33:ee: 70:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:95:3C:6C:46:10:B7:A7:C9:04:8B:3A:92:DF:84:9C:C3:CE:77:4C X509v3 Authority Key Identifier: keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:5c:4b:f2:3a:e0:70:96:8c:06:2d:df:a6:50:9d:b1:f2:e5: 38:e5:93:89:c6:d6:a4:e2:5e:85:a2:ec:f1:94:e5:65:92:65: d8:5e:26:80:31:30:3a:10:1c:18:b3:4e:f7:f1:12:fb:fd:bf: 1f:04:55:3c:85:58:69:10:5e:dc:61:8a:b1:ed:a5:f0:78:40: 69:35:3a:c5:2d:58:f5:14:bf:37:c9:15:ee:02:c1:3f:a2:9f: 30:02:a7:57:83:81:43:6a:0b:1f:6f:0c:4b:08:3d:57:2a:f3: c7:e3:e6:25:3b:7a:43:d5:5b:1d:a0:a7:01:8c:9c:6d:ec:e5: 49:1d:14:75:9b:8c:fe:49:93:7f:77:b5:a6:79:11:18:b6:5b: 47:6a:cc:a5:a6:66:f0:af:e5:27:16:c6:d1:3a:31:33:01:ac: ee:f3:03:6f:75:23:0a:0a:03:b5:06:0b:d0:ea:6d:b4:3d:c4: e2:6e:0c:43:19:ec:03:31:ae:af:1d:12:ea:15:80:fe:d3:e6: 61:b1:87:e5:05:07:76:8f:a8:35:d6:69:e6:b6:ce:f9:36:22: ac:10:54:cc:01:fa:1f:ec:04:0c:be:67:67:0c:c7:be:49:8a: 05:32:d2:cf:75:9c:64:6d:c8:e7:67:31:ff:66:9e:2f:13:b2: 65:c2:bc:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSV2ca5xnQ6IbT0GoerAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMDAzZDJjNzFhYjA3Njk5MWZiMDNlZDY2MDBiZjFkNDhi NzJiZTUwHhcNMjUxMjIxMTkwMTAyWhcNMjUxMjIyMTkwMTAyWjAzMTEwLwYDVQQD Eyg3ODk1M2M2YzQ2MTBiN2E3YzkwNDhiM2E5MmRmODQ5Y2MzY2U3NzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPsmgIAUhDao1RwwAXYECllayB4M IK1Q37/gJeThoB3CQx21g1/YvhKKjWVi/akGisbj4VfTu2rRRA5icD/zs6zomZrP NCILqx/M+XmU3Mu2nEqXMYnrqoEsMoQeI4/8gW2YHQVZ4DFSmgSoptmGSTceboKt huIX5vAfvnERc2P4ZBknS3HEHYjuAZ/ikgvLMqfKprDsiuc/XHEwcWE0KcYj+CQR oSwnMnivZAob2+v5jLYtU9y+iI+8m04xBtYE6n8pVEdt8CApL86/SgoZTGN4wAKf VSHrEHJhN1XWQZxUPkpPiBPKx+/Y5orgvKDQY67egUWkbatWARAsM+5wHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiVPGxGELenyQSLOpLfhJzDzndMMB8GA1UdIwQY MBaAFPEAPSxxqwdpkfsD7WYAvx1ItyvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84NDZhMDMtZGUyNC00ODViLWI5Yjct YzRiYzgwM2Q4OTNmLzEvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC84NDZhMDMtZGUyNC00ODViLWI5YjctYzRiYzgwM2Q4OTNm LzEvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVxL8jrg cJaMBi3fplCdsfLlOOWTicbWpOJehaLs8ZTlZZJl2F4mgDEwOhAcGLNO9/ES+/2/ HwRVPIVYaRBe3GGKse2l8HhAaTU6xS1Y9RS/N8kV7gLBP6KfMAKnV4OBQ2oLH28M Swg9Vyrzx+PmJTt6Q9VbHaCnAYycbezlSR0UdZuM/kmTf3e1pnkRGLZbR2rMpaZm 8K/lJxbG0ToxMwGs7vMDb3UjCgoDtQYL0OpttD3E4m4MQxnsAzGurx0S6hWA/tPm YbGH5QUHdo+oNdZp5rbO+TYirBBUzAH6H+wEDL5nZwzHvkmKBTLSz3WcZG3I52cx /2aeLxOyZcK8bw== -----END CERTIFICATE-----Generated at Sun Dec 21 23:00:46 2025 by rpki-client