This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.mft File: i8Wo923xVof4NEHJprVUV48831c.mft (raw, json) Hash identifier: m1MF2pQ8zZ8hUvQoMDEwPYN72EpsrS5GVRwOpU1qQrU= Subject key identifier: 75:8F:09:09:1B:9B:BD:E1:83:8B:2B:0D:8D:7F:C4:7D:48:AB:3E:1D Authority key identifier: 8B:C5:A8:F7:6D:F1:56:87:F8:34:41:C9:A6:B5:54:57:8F:3C:DF:57 Certificate issuer: /CN=8bc5a8f76df15687f83441c9a6b554578f3cdf57 Certificate serial: 019B500519543E6D0C556FC383F6BFD8FE63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8Wo923xVof4NEHJprVUV48831c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.mft Manifest number: 0430 Signing time: Wed 24 Dec 2025 11:01:09 +0000 Manifest this update: Wed 24 Dec 2025 11:01:09 +0000 Manifest next update: Thu 25 Dec 2025 11:01:09 +0000 Files and hashes: 1: i8Wo923xVof4NEHJprVUV48831c.crl (hash: ibacDJjLCd3eGA3Cj8I6MRfN+Al7jG+q17+F+F/Fkr0=) 2: xqruQTCgxIM4PNAxf9wXVycyPyQ.roa (hash: hdKTf9nYGB8AkPxxLnuI6L7FG/INFNDmxrZRzLc1Xt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.crl rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.mft rsync://rpki.ripe.net/repository/DEFAULT/i8Wo923xVof4NEHJprVUV48831c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:05:19:54:3e:6d:0c:55:6f:c3:83:f6:bf:d8:fe:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bc5a8f76df15687f83441c9a6b554578f3cdf57 Validity Not Before: Dec 24 11:01:09 2025 GMT Not After : Dec 25 11:01:09 2025 GMT Subject: CN=758f09091b9bbde1838b2b0d8d7fc47d48ab3e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ab:57:68:dc:5b:bf:56:b6:3a:cd:d6:3a:5f: dc:6a:72:81:fe:35:c6:14:b6:cf:51:74:c9:8b:55: fa:91:ba:cf:13:e0:06:10:59:13:42:cc:0a:ec:27: 97:e2:2f:cb:df:70:a4:8b:74:1a:eb:eb:23:e1:5b: 46:23:ce:d3:e2:1a:44:58:21:cd:10:81:e9:5c:34: 91:c1:36:5f:65:b7:93:35:3b:ec:fb:ce:ef:d3:8f: 5a:8a:6e:81:a5:d6:a7:21:82:fd:d3:5a:be:00:5d: d9:e7:da:40:c5:76:43:ba:98:3e:85:9e:ad:9f:2c: f2:da:82:23:dc:3e:ff:49:e6:35:64:f0:4d:55:99: 01:82:6b:8d:c0:7a:37:04:26:6a:e2:af:10:47:8c: 9e:08:85:b9:1c:de:da:89:34:76:da:42:d1:ef:3f: e8:8b:61:53:53:d0:69:a1:2f:e4:f3:3e:bf:5d:71: f4:78:9d:04:90:0e:bf:80:6c:15:e0:93:00:eb:50: 87:fa:14:ac:1b:de:f6:e8:ef:d4:23:e4:41:df:f9: 3a:ba:17:fd:87:e7:c1:5f:85:3e:ea:a3:6b:64:b1: 59:69:57:de:bb:d3:1f:8e:9c:d1:31:20:1a:d7:c3: 99:a0:5e:38:ff:1c:c1:1b:02:dd:8c:e7:85:6f:e6: 05:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8F:09:09:1B:9B:BD:E1:83:8B:2B:0D:8D:7F:C4:7D:48:AB:3E:1D X509v3 Authority Key Identifier: keyid:8B:C5:A8:F7:6D:F1:56:87:F8:34:41:C9:A6:B5:54:57:8F:3C:DF:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8Wo923xVof4NEHJprVUV48831c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/25e83d-2365-4126-9aa7-94b9cf2cd2ef/1/i8Wo923xVof4NEHJprVUV48831c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:56:91:69:25:10:8a:ef:9a:15:65:25:42:3b:53:d3:b2:50: 86:6b:f8:de:88:27:34:37:d2:7f:eb:2b:7d:bb:5f:7b:6f:42: c6:dc:50:e4:41:42:43:d5:f1:04:ab:a2:4b:fc:1c:2f:ab:f6: 20:f7:cf:29:3d:3f:db:8c:25:a5:e8:0c:39:29:10:9c:b7:bf: 73:fe:ff:c3:aa:4a:9c:de:0c:5f:d8:48:e8:81:6d:1b:b7:a0: d1:b6:91:dc:dc:dd:29:a0:d1:a8:30:71:5a:6d:a5:b9:4f:d5: cd:e1:57:b9:d5:79:3f:90:ca:3e:59:5b:eb:bc:44:ee:3b:57: 26:9d:03:4c:e7:98:f5:64:3f:8d:e5:f5:5b:86:47:04:d5:2e: cb:42:3b:bd:d9:7c:bd:ed:fa:13:57:40:15:58:fc:af:09:fa: 60:85:88:1d:3a:1d:54:43:ba:79:f2:bf:48:f2:28:ac:7b:45: 63:ba:da:f7:d0:bf:64:f7:0a:ac:2a:54:f1:21:2a:50:92:9b: 7b:0d:c6:d7:30:3a:9b:83:70:08:46:ab:58:01:3d:37:36:c3: 0d:ed:8c:f7:22:2c:27:ee:58:37:e6:a0:2a:f6:c3:a4:9d:e7: b2:a0:4b:7f:f1:12:11:8f:49:29:d4:7b:68:dc:68:fe:cd:f1: 5f:aa:67:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQBRlUPm0MVW/Dg/a/2P5jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYzVhOGY3NmRmMTU2ODdmODM0NDFjOWE2YjU1NDU3OGYz Y2RmNTcwHhcNMjUxMjI0MTEwMTA5WhcNMjUxMjI1MTEwMTA5WjAzMTEwLwYDVQQD Eyg3NThmMDkwOTFiOWJiZGUxODM4YjJiMGQ4ZDdmYzQ3ZDQ4YWIzZTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6atXaNxbv1a2Os3WOl/canKB/jXG FLbPUXTJi1X6kbrPE+AGEFkTQswK7CeX4i/L33Cki3Qa6+sj4VtGI87T4hpEWCHN EIHpXDSRwTZfZbeTNTvs+87v049aim6BpdanIYL901q+AF3Z59pAxXZDupg+hZ6t nyzy2oIj3D7/SeY1ZPBNVZkBgmuNwHo3BCZq4q8QR4yeCIW5HN7aiTR22kLR7z/o i2FTU9BpoS/k8z6/XXH0eJ0EkA6/gGwV4JMA61CH+hSsG9726O/UI+RB3/k6uhf9 h+fBX4U+6qNrZLFZaVfeu9MfjpzRMSAa18OZoF44/xzBGwLdjOeFb+YFNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWPCQkbm73hg4srDY1/xH1Iqz4dMB8GA1UdIwQY MBaAFIvFqPdt8VaH+DRByaa1VFePPN9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaThXbzkyM3hWb2Y0TkVISnByVlVWNDg4MzFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yNWU4M2QtMjM2NS00MTI2LTlhYTct OTRiOWNmMmNkMmVmLzEvaThXbzkyM3hWb2Y0TkVISnByVlVWNDg4MzFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8yNWU4M2QtMjM2NS00MTI2LTlhYTctOTRiOWNmMmNkMmVm LzEvaThXbzkyM3hWb2Y0TkVISnByVlVWNDg4MzFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1aRaSUQ iu+aFWUlQjtT07JQhmv43ognNDfSf+srfbtfe29CxtxQ5EFCQ9XxBKuiS/wcL6v2 IPfPKT0/24wlpegMOSkQnLe/c/7/w6pKnN4MX9hI6IFtG7eg0baR3NzdKaDRqDBx Wm2luU/VzeFXudV5P5DKPllb67xE7jtXJp0DTOeY9WQ/jeX1W4ZHBNUuy0I7vdl8 ve36E1dAFVj8rwn6YIWIHTodVEO6efK/SPIorHtFY7ra99C/ZPcKrCpU8SEqUJKb ew3G1zA6m4NwCEarWAE9NzbDDe2M9yIsJ+5YN+agKvbDpJ3nsqBLf/ESEY9JKdR7 aNxo/s3xX6pn1Q== -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:31 2025 by rpki-client