This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json) Hash identifier: OTsGrO69WIOR/AyixYB+WYetAoLgJg7BltNdB4Gn04M= Subject key identifier: 2E:0F:9A:8F:63:04:F1:24:C7:1B:3C:F3:91:5D:86:10:5E:87:1E:4D Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2 Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2 Certificate serial: 019B3DC78881C114CAF296E6CF7497031C65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft Manifest number: 130F Signing time: Sat 20 Dec 2025 22:00:45 +0000 Manifest this update: Sat 20 Dec 2025 22:00:45 +0000 Manifest next update: Sun 21 Dec 2025 22:00:45 +0000 Files and hashes: 1: 4cnRWY5gtsfuxJysdz-vN0qrOUs.roa (hash: 93jxXfokl+svyBU1O0Hr6w6zv+AavA15Ll9wQ0fHJCo=) 2: 7L93z_qlhSOtd1RZOlWCJUWvg_o.roa (hash: vV2gGeYtK37+wnV0Ydlju7P2SHZgL0mA9o+Vjq7iAwY=) 3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: dcjqrxq372SMizc1F3ma9LcrrGM2AwSRQ2tpZvBNrOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:88:81:c1:14:ca:f2:96:e6:cf:74:97:03:1c:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2 Validity Not Before: Dec 20 22:00:45 2025 GMT Not After : Dec 21 22:00:45 2025 GMT Subject: CN=2e0f9a8f6304f124c71b3cf3915d86105e871e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c4:37:0f:7f:68:3d:7a:1e:e1:af:1f:4f:c2: 64:e8:68:14:34:2f:69:a9:4e:7d:4e:fc:7a:85:9e: 08:1b:0f:68:8d:51:b4:e4:aa:ad:21:e0:d3:ed:ca: ae:db:41:3d:c3:7b:9e:ce:a7:ea:e6:79:56:e9:a7: 22:e1:97:87:93:c3:39:dc:e5:26:d1:de:42:4d:1d: c3:aa:5a:87:33:5a:9d:fb:7f:1f:27:f1:f6:46:41: 4a:ee:c8:b3:4f:d4:33:f3:56:5e:12:d0:57:46:d8: bd:71:50:9d:58:92:42:09:aa:e1:2e:de:f0:11:47: 8f:17:06:71:81:5a:fd:45:88:86:49:de:57:5d:d0: 34:d5:89:28:b8:26:2a:4f:cb:20:42:77:0c:d7:02: 67:84:88:b8:74:f9:4d:7b:3f:c9:df:c3:de:c2:ff: 99:ac:14:2e:d1:8a:92:a5:42:8b:3f:74:7a:a3:55: 44:2d:97:82:49:ad:fa:75:74:5f:fd:39:17:21:de: 79:ef:64:31:25:de:04:aa:72:c2:d5:0a:a2:e3:59: 10:9c:c5:41:92:a6:bb:e4:f3:09:11:de:fe:92:9b: 3e:57:6c:44:42:65:0d:a8:fe:53:6a:3b:9f:de:e9: f1:8b:1e:54:40:b0:cd:78:3a:97:01:76:d6:69:31: 06:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:0F:9A:8F:63:04:F1:24:C7:1B:3C:F3:91:5D:86:10:5E:87:1E:4D X509v3 Authority Key Identifier: keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:dd:c7:6b:63:29:34:2c:e6:5c:f4:69:92:cd:01:24:aa:c1: c4:12:7a:66:8a:1e:d0:26:2b:06:5f:c0:07:1d:10:a0:31:79: 31:45:c4:95:58:c2:f8:54:6f:7a:ed:16:f6:b6:04:c0:41:8c: 8e:4a:6c:1c:0b:ec:09:d7:6b:03:60:90:b2:a2:9e:05:5a:b7: b8:e2:a3:8e:c6:02:01:6b:d6:19:37:76:44:ca:b0:7a:53:26: df:9b:fa:ac:32:3c:08:fb:6e:f6:9a:bf:89:91:3a:9c:be:eb: 05:f0:dc:dd:63:04:01:4d:32:eb:db:d0:27:2f:17:04:62:5c: 50:dc:1f:86:96:2c:67:64:6f:29:8a:0f:22:bc:44:c2:a8:64: fd:97:7f:76:30:43:b3:1a:3e:a9:ff:13:7e:34:44:79:e5:52: f8:e9:d2:e3:ff:7d:b4:51:21:f9:5b:2d:4a:1c:be:ab:54:48: a2:6d:c8:cb:65:f9:30:5a:8d:63:47:0e:8d:6d:a7:01:fa:fb: 3e:3a:1e:54:5a:4d:fd:02:06:04:22:a9:f2:4f:0d:c7:65:27: 9a:44:0c:84:3f:bf:17:02:bd:8f:2f:23:ed:8c:0c:68:03:48: 35:62:c5:50:43:44:d6:3a:b1:68:09:1e:4c:2a:27:ec:93:e7: 7f:dd:da:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x4iBwRTK8pbmz3SXAxxlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2YWYyYzcxNjZiYjM0YTY5NmZkZTJmYmFjZWY0MDAxYjBh OGU3ZTIwHhcNMjUxMjIwMjIwMDQ1WhcNMjUxMjIxMjIwMDQ1WjAzMTEwLwYDVQQD EygyZTBmOWE4ZjYzMDRmMTI0YzcxYjNjZjM5MTVkODYxMDVlODcxZTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8Q3D39oPXoe4a8fT8Jk6GgUNC9p qU59Tvx6hZ4IGw9ojVG05KqtIeDT7cqu20E9w3uezqfq5nlW6aci4ZeHk8M53OUm 0d5CTR3DqlqHM1qd+38fJ/H2RkFK7sizT9Qz81ZeEtBXRti9cVCdWJJCCarhLt7w EUePFwZxgVr9RYiGSd5XXdA01YkouCYqT8sgQncM1wJnhIi4dPlNez/J38Pewv+Z rBQu0YqSpUKLP3R6o1VELZeCSa36dXRf/TkXId5572QxJd4EqnLC1Qqi41kQnMVB kqa75PMJEd7+kps+V2xEQmUNqP5Tajuf3unxix5UQLDNeDqXAXbWaTEG5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4Pmo9jBPEkxxs885FdhhBehx5NMB8GA1UdIwQY MBaAFIavLHFmuzSmlv3i+6zvQAGwqOfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEt ZTRmNTg3MDQ4MDRlLzEvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEtZTRmNTg3MDQ4MDRl LzEvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmN3Ha2Mp NCzmXPRpks0BJKrBxBJ6Zooe0CYrBl/ABx0QoDF5MUXElVjC+FRveu0W9rYEwEGM jkpsHAvsCddrA2CQsqKeBVq3uOKjjsYCAWvWGTd2RMqwelMm35v6rDI8CPtu9pq/ iZE6nL7rBfDc3WMEAU0y69vQJy8XBGJcUNwfhpYsZ2RvKYoPIrxEwqhk/Zd/djBD sxo+qf8TfjREeeVS+OnS4/99tFEh+VstShy+q1RIom3Iy2X5MFqNY0cOjW2nAfr7 PjoeVFpN/QIGBCKp8k8Nx2UnmkQMhD+/FwK9jy8j7YwMaANINWLFUENE1jqxaAke TCon7JPnf93aKA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:31:49 2025 by rpki-client