This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft File: c8_hHopwk73JW8AeINtDduIqpRY.mft (raw, json) Hash identifier: UtKW69LPZpIqQ7W/HqolutK6VNPSx97uFig9C3dBPGU= Subject key identifier: 0E:9C:86:46:30:C0:D0:E7:50:CB:09:B9:40:D0:E4:34:D6:CE:F4:2C Authority key identifier: 73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16 Certificate issuer: /CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516 Certificate serial: 019B3CEC05414F86C14F4D3EDBAC3149DF8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft Manifest number: 049B Signing time: Sat 20 Dec 2025 18:00:59 +0000 Manifest this update: Sat 20 Dec 2025 18:00:59 +0000 Manifest next update: Sun 21 Dec 2025 18:00:59 +0000 Files and hashes: 1: SVFNCXAgs-J1Ur0M2wuVWaTBzQI.roa (hash: rGZg6LxxY7ku4GUoLGf94rOsH2eH6eg3rUYHF4vWHMk=) 2: c8_hHopwk73JW8AeINtDduIqpRY.crl (hash: FUnqM+aPwHSSZvpOY9Oj6uHh1C4n58EkM17KNCPKr0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:05:41:4f:86:c1:4f:4d:3e:db:ac:31:49:df:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516 Validity Not Before: Dec 20 18:00:59 2025 GMT Not After : Dec 21 18:00:59 2025 GMT Subject: CN=0e9c864630c0d0e750cb09b940d0e434d6cef42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b8:ea:2d:84:ad:7d:6e:ea:61:d8:45:33:9b: dc:0f:d3:aa:d5:49:72:86:c9:d0:31:2a:10:a1:6b: 56:12:a5:87:e2:a0:68:4f:9d:58:46:4f:22:c2:bc: a2:9a:63:45:2e:37:e1:ad:a1:65:51:9c:28:c4:ee: e5:35:29:0b:27:49:49:cc:73:5c:9b:a7:dc:44:a8: be:7e:04:72:3f:dd:f7:a1:a3:2a:3c:50:d4:d1:5c: 4f:4c:57:e7:4b:29:24:37:04:ea:79:be:a7:16:05: e2:73:1f:15:38:78:55:28:92:79:0f:c3:0b:55:59: 02:53:95:cf:40:03:3c:42:a9:5b:4f:a7:8b:a8:0b: 5a:f3:9d:88:1d:91:ee:66:69:26:12:55:65:dd:20: d5:a1:e6:23:ba:97:42:1e:09:d4:aa:e5:a2:df:cb: f0:7a:3d:3d:47:f9:ac:b8:64:1c:1d:70:2f:63:3b: 1b:43:db:5c:f1:01:5a:8d:98:24:f1:2e:ef:36:e9: 5b:26:fe:5d:f9:bb:fa:2e:c3:34:ea:ff:41:ec:25: bf:5d:91:51:d9:99:e1:65:49:ab:66:a6:d3:d7:f6: 34:91:e0:4b:05:db:f1:a1:15:75:91:4c:97:70:e1: e2:ba:5f:37:f6:94:cf:5b:14:0d:c6:03:28:bc:ab: 85:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9C:86:46:30:C0:D0:E7:50:CB:09:B9:40:D0:E4:34:D6:CE:F4:2C X509v3 Authority Key Identifier: keyid:73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ce:bb:77:1c:14:fa:a4:05:2d:45:9d:d9:b8:c8:ec:fb:87: 9a:dd:07:37:1c:88:e2:f3:f0:03:d0:fe:a2:92:c8:a5:10:e9: f2:99:6b:f0:16:31:a9:9d:4b:91:f5:f4:7e:d0:56:ed:e2:33: dc:d4:55:fa:20:2e:5a:7b:94:88:b4:a7:03:4a:d8:39:d1:88: bd:d6:64:d3:23:6a:1d:9d:cd:5b:72:e5:5a:e4:08:12:1f:99: 8f:a8:3d:31:d3:9a:61:78:93:cc:f5:18:08:8b:82:63:3c:c9: d1:d5:58:0e:51:35:e7:7a:53:c7:14:fe:87:fe:17:ff:97:89: d6:4f:31:e4:44:42:55:39:bc:8b:e1:98:9e:5c:2c:c2:0d:69: f5:59:32:bb:c9:43:33:a0:10:4d:04:2f:5c:1f:9e:75:19:59: 7a:5e:0d:26:d4:89:61:bc:ff:a3:81:54:99:15:c9:75:29:9f: e6:46:35:33:b6:e1:fa:f8:c1:62:24:f4:1a:c8:bf:1b:ab:2e: f0:43:cd:09:79:5a:83:9e:3f:b4:37:91:7d:a8:89:1c:ca:81: ff:98:5f:d1:ae:82:30:38:da:17:c5:5d:fd:b8:fc:9e:29:6f: bd:c0:05:e7:86:fb:4c:50:b0:ed:83:38:99:a8:48:9d:e5:ca: 7c:ec:34:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87AVBT4bBT00+26wxSd+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczY2ZlMTFlOGE3MDkzYmRjOTViYzAxZTIwZGI0Mzc2ZTIy YWE1MTYwHhcNMjUxMjIwMTgwMDU5WhcNMjUxMjIxMTgwMDU5WjAzMTEwLwYDVQQD EygwZTljODY0NjMwYzBkMGU3NTBjYjA5Yjk0MGQwZTQzNGQ2Y2VmNDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrjqLYStfW7qYdhFM5vcD9Oq1Uly hsnQMSoQoWtWEqWH4qBoT51YRk8iwryimmNFLjfhraFlUZwoxO7lNSkLJ0lJzHNc m6fcRKi+fgRyP933oaMqPFDU0VxPTFfnSykkNwTqeb6nFgXicx8VOHhVKJJ5D8ML VVkCU5XPQAM8QqlbT6eLqAta852IHZHuZmkmElVl3SDVoeYjupdCHgnUquWi38vw ej09R/msuGQcHXAvYzsbQ9tc8QFajZgk8S7vNulbJv5d+bv6LsM06v9B7CW/XZFR 2ZnhZUmrZqbT1/Y0keBLBdvxoRV1kUyXcOHiul839pTPWxQNxgMovKuFOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6chkYwwNDnUMsJuUDQ5DTWzvQsMB8GA1UdIwQY MBaAFHPP4R6KcJO9yVvAHiDbQ3biKqUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhfaEhvcHdrNzNKVzhBZUlOdERkdUlxcFJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iYWY5ZjMtMGU0OC00YzQ3LWJjMjYt MWIxMTAwNzMxNDQ4LzEvYzhfaEhvcHdrNzNKVzhBZUlOdERkdUlxcFJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9iYWY5ZjMtMGU0OC00YzQ3LWJjMjYtMWIxMTAwNzMxNDQ4 LzEvYzhfaEhvcHdrNzNKVzhBZUlOdERkdUlxcFJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADs67dxwU +qQFLUWd2bjI7PuHmt0HNxyI4vPwA9D+opLIpRDp8plr8BYxqZ1LkfX0ftBW7eIz 3NRV+iAuWnuUiLSnA0rYOdGIvdZk0yNqHZ3NW3LlWuQIEh+Zj6g9MdOaYXiTzPUY CIuCYzzJ0dVYDlE153pTxxT+h/4X/5eJ1k8x5ERCVTm8i+GYnlwswg1p9Vkyu8lD M6AQTQQvXB+edRlZel4NJtSJYbz/o4FUmRXJdSmf5kY1M7bh+vjBYiT0Gsi/G6su 8EPNCXlag54/tDeRfaiJHMqB/5hf0a6CMDjaF8Vd/bj8nilvvcAF54b7TFCw7YM4 mahIneXKfOw0yA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:27:58 2025 by rpki-client