This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft File: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft (raw, json) Hash identifier: G79X/PcnP8ZbBZdHEh1alx2WNcJRBen9B6WXRdurjeI= Subject key identifier: 29:36:9A:81:97:33:2E:56:6A:95:C6:1F:7A:17:D4:79:97:F8:2D:89 Authority key identifier: F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26 Certificate issuer: /CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26 Certificate serial: 019B3BD960DCC00EA3A4D79444ADBC845BB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft Manifest number: 0707 Signing time: Sat 20 Dec 2025 13:01:00 +0000 Manifest this update: Sat 20 Dec 2025 13:01:00 +0000 Manifest next update: Sun 21 Dec 2025 13:01:00 +0000 Files and hashes: 1: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl (hash: C/MmkDzgmymbGrMvTEdwFSJpdMNoBkg+18zRoxp/75Y=) 2: 9LD-hrLWBwUSPOko1WfMuzpukWE.roa (hash: IlW9fI4rY7r7GVZoUndhpUDRIk8UJ5M6N9Zdn/noO1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:60:dc:c0:0e:a3:a4:d7:94:44:ad:bc:84:5b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26 Validity Not Before: Dec 20 13:01:00 2025 GMT Not After : Dec 21 13:01:00 2025 GMT Subject: CN=29369a8197332e566a95c61f7a17d47997f82d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b8:de:80:3a:15:65:e7:91:ad:1f:0f:ba:ce: eb:a9:e2:fc:c7:d8:db:d5:6e:94:e8:16:4b:16:c2: e8:f8:ec:78:41:ca:39:48:c8:24:aa:eb:19:17:31: d7:14:27:37:14:6e:9b:89:2e:90:63:9e:2d:18:9a: e7:27:01:85:b2:35:18:15:13:e9:40:b5:5f:16:01: c6:4b:6b:68:d1:98:88:2c:c5:82:0e:76:21:f6:ad: f7:83:ed:3b:75:d1:75:91:08:41:04:24:aa:42:23: a3:55:c8:09:16:30:e2:5f:e8:ad:75:2c:3d:c2:a1: 0b:63:0f:08:cc:8a:56:ff:e8:83:4f:ef:f4:e5:06: 4e:dc:50:8b:45:b2:87:5c:56:54:43:23:9a:3a:45: 7a:cd:43:32:cb:4e:4c:4e:6a:e9:cd:55:e2:a6:14: 7a:67:49:e3:5e:6a:92:04:51:19:32:15:2c:42:d6: 84:b8:dc:ba:8f:85:aa:a5:c5:48:58:bb:62:7a:19: 16:01:46:bf:74:d8:5c:92:1f:8e:02:46:17:66:20: 46:ab:07:13:24:16:5c:d7:3b:be:74:e2:7d:32:ae: f2:90:96:83:2d:17:36:a2:ca:7d:fd:a2:2d:e8:1f: a2:2e:1d:ec:9b:e3:3c:6d:51:40:90:a9:3b:30:f0: c9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:36:9A:81:97:33:2E:56:6A:95:C6:1F:7A:17:D4:79:97:F8:2D:89 X509v3 Authority Key Identifier: keyid:F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:85:71:87:3b:1e:b7:7b:d3:78:ec:16:d5:9f:d4:8d:64:32: fe:25:3e:dd:e6:9d:d0:00:68:a4:e0:d3:28:74:a6:37:a9:e0: 74:bc:82:b9:7a:9e:48:57:9c:8d:44:97:72:2e:2a:4b:ea:34: d9:89:ba:da:72:e9:fb:dc:32:3f:ef:c7:54:2c:06:d6:7a:0e: 33:01:ba:f7:44:40:b9:a9:46:81:dc:83:8d:8d:c6:c3:8e:9a: bb:40:4b:1c:b3:0e:77:b9:53:e2:02:72:bd:1e:f6:e9:c6:3b: 4b:be:f5:57:5d:74:8f:9e:40:f9:43:37:36:db:3f:55:05:23: fe:6b:71:36:a9:9a:6a:c5:45:ef:27:fa:5c:95:c1:0e:e6:16: f9:88:77:36:3f:58:c5:47:d4:a0:ca:66:c8:46:4b:e4:f6:df: 7c:a6:9d:59:e2:e6:71:76:09:da:9a:62:97:0b:f7:9d:78:96: c2:c5:29:40:09:de:48:15:ff:61:bd:be:58:87:0b:32:63:b6: f4:53:89:e5:dd:ac:2e:35:04:c8:b5:dd:f4:e5:3d:6f:00:fd: e6:ca:76:db:92:74:d4:71:64:13:5b:63:0c:54:21:36:79:8e: 35:e4:ee:0a:72:30:d7:13:3d:ca:c2:eb:18:ba:ab:94:7c:29: 7f:cc:a5:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72WDcwA6jpNeURK28hFu1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMzFjMmRhNmJiOWE1NmMyOGVmZWVjNGU0ZGYwNzU4Y2My NGViMjYwHhcNMjUxMjIwMTMwMTAwWhcNMjUxMjIxMTMwMTAwWjAzMTEwLwYDVQQD EygyOTM2OWE4MTk3MzMyZTU2NmE5NWM2MWY3YTE3ZDQ3OTk3ZjgyZDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLjegDoVZeeRrR8Pus7rqeL8x9jb 1W6U6BZLFsLo+Ox4Qco5SMgkqusZFzHXFCc3FG6biS6QY54tGJrnJwGFsjUYFRPp QLVfFgHGS2to0ZiILMWCDnYh9q33g+07ddF1kQhBBCSqQiOjVcgJFjDiX+itdSw9 wqELYw8IzIpW/+iDT+/05QZO3FCLRbKHXFZUQyOaOkV6zUMyy05MTmrpzVXiphR6 Z0njXmqSBFEZMhUsQtaEuNy6j4WqpcVIWLtiehkWAUa/dNhckh+OAkYXZiBGqwcT JBZc1zu+dOJ9Mq7ykJaDLRc2osp9/aIt6B+iLh3sm+M8bVFAkKk7MPDJ9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCk2moGXMy5WapXGH3oX1HmX+C2JMB8GA1UdIwQY MBaAFPAxwtpruaVsKO/uxOTfB1jMJOsmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOERIQzJtdTVwV3dvNy03RTVOOEhXTXdrNnlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kZDcwNGItYzczNS00NGRmLWE3OTYt Zjg2MjQzYTljMmIzLzEvOERIQzJtdTVwV3dvNy03RTVOOEhXTXdrNnlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9kZDcwNGItYzczNS00NGRmLWE3OTYtZjg2MjQzYTljMmIz LzEvOERIQzJtdTVwV3dvNy03RTVOOEhXTXdrNnlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdoVxhzse t3vTeOwW1Z/UjWQy/iU+3ead0ABopODTKHSmN6ngdLyCuXqeSFecjUSXci4qS+o0 2Ym62nLp+9wyP+/HVCwG1noOMwG690RAualGgdyDjY3Gw46au0BLHLMOd7lT4gJy vR726cY7S771V110j55A+UM3Nts/VQUj/mtxNqmaasVF7yf6XJXBDuYW+Yh3Nj9Y xUfUoMpmyEZL5PbffKadWeLmcXYJ2ppilwv3nXiWwsUpQAneSBX/Yb2+WIcLMmO2 9FOJ5d2sLjUEyLXd9OU9bwD95sp225J01HFkE1tjDFQhNnmONeTuCnIw1xM9ysLr GLqrlHwpf8ylEw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:33:05 2025 by rpki-client