This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json) Hash identifier: 9AgkJBDQiLTqVzTf+ERd4CSi2ubCrDuxtJpZ41mvkL8= Subject key identifier: 34:26:8B:36:1D:22:15:8E:99:C3:EB:16:BA:44:71:F1:4D:E9:D7:29 Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29 Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429 Certificate serial: 019B68EA7A3EBC4167E0604CCD81BF0B1120 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft Manifest number: 091E Signing time: Mon 29 Dec 2025 07:02:35 +0000 Manifest this update: Mon 29 Dec 2025 07:02:35 +0000 Manifest next update: Tue 30 Dec 2025 07:02:35 +0000 Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: DMw3U6H0bT8XE9vI6N+Sv3PW3RtSiWG7ijv7IpF/4+Y=) 2: KzntsBKC6xHsM4irrwPpJqTMjrE.roa (hash: rsuAHxEKxQodmj4NlR88Fkx1NvrEvEln4AFpUG54lbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:ea:7a:3e:bc:41:67:e0:60:4c:cd:81:bf:0b:11:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429 Validity Not Before: Dec 29 07:02:35 2025 GMT Not After : Dec 30 07:02:35 2025 GMT Subject: CN=34268b361d22158e99c3eb16ba4471f14de9d729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8c:89:04:02:60:e9:1c:19:e1:18:7a:dd:9e: 73:a2:17:65:73:d9:a4:06:8e:1e:92:5d:d8:40:72: f7:7b:d0:6f:4c:70:04:78:95:00:17:dd:eb:2d:ec: 0c:28:de:35:71:e5:06:6f:c8:7b:f3:cc:17:db:7e: a5:34:7c:cd:b0:41:6f:40:5f:12:b5:58:24:2d:20: 16:18:66:0f:8f:10:ea:64:9f:dc:4d:13:37:8e:1d: c3:4f:fe:88:59:3b:3d:fd:76:66:2b:92:95:e7:fa: a1:34:cd:7f:1d:ed:a4:d3:7d:98:c2:08:45:bf:42: d2:d6:ee:cd:99:6d:71:32:f2:6f:23:ac:39:e9:e7: db:2c:44:36:d4:a9:8e:19:98:23:99:c2:64:69:e0: 0f:11:79:67:f3:d1:a2:2c:cf:de:d6:e9:3e:1b:a0: 87:0d:8f:0b:ef:d7:c8:05:19:9c:2e:9a:0b:ad:9a: 12:0b:cd:8f:a5:84:d3:66:97:cd:ba:5c:31:b7:36: 57:37:16:e6:fc:e0:48:0f:82:80:5b:a2:b9:86:1c: 1d:0a:5a:10:cf:dc:fe:d9:9e:7d:aa:0a:f9:3f:56: 5b:15:c2:2d:5f:11:ab:2b:c8:f7:0c:cc:27:ac:a0: b6:24:22:0b:ba:de:cf:62:e5:c8:5b:03:07:41:c7: fb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:26:8B:36:1D:22:15:8E:99:C3:EB:16:BA:44:71:F1:4D:E9:D7:29 X509v3 Authority Key Identifier: keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a4:9a:75:18:94:ba:77:e8:6d:cd:e1:dc:6b:b6:d9:a0:06: 3a:f2:dd:a9:18:ee:87:b2:dd:25:f7:5d:82:17:17:08:08:a7: 69:48:94:aa:8d:a7:3f:30:b8:46:ba:8d:2c:27:7f:f3:e4:6b: 91:ad:94:17:77:9b:44:de:2a:c4:38:de:64:51:bc:92:c3:61: b1:b5:9f:6c:63:50:be:55:7f:f9:e5:ef:7a:60:74:09:f7:fc: e3:97:89:c7:42:aa:a0:6e:01:41:9b:22:e8:62:09:92:d3:54: 3e:c4:71:58:93:0d:73:c0:91:70:9f:0b:e6:db:f7:43:d5:34: 35:2f:86:9f:f8:1c:a6:99:76:3f:a2:8f:ae:ff:4e:32:e8:91: b7:11:67:8f:90:51:c1:e1:74:61:8e:3b:d8:2b:b2:8c:cf:a2: db:be:73:d0:25:c3:1d:44:36:b8:a3:65:0c:7d:91:5f:f9:93: db:8f:c7:06:30:fa:bc:fb:26:cf:c5:c8:40:3e:d4:f0:66:57: ca:10:5e:6b:99:50:62:67:f7:8d:8e:17:64:5a:08:d7:6e:af: 58:4b:e7:35:5c:07:c4:28:a6:33:d7:70:57:29:8e:b1:10:7e: a7:e0:b1:23:3d:5e:3b:0e:9b:8e:5c:5e:a9:e1:5e:79:b4:12: ff:35:d4:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6no+vEFn4GBMzYG/CxEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNjIyNWE1MDA0NTRlNjJmMWQyNTI1M2JhN2EyZDhjMWUy NTQ0MjkwHhcNMjUxMjI5MDcwMjM1WhcNMjUxMjMwMDcwMjM1WjAzMTEwLwYDVQQD EygzNDI2OGIzNjFkMjIxNThlOTljM2ViMTZiYTQ0NzFmMTRkZTlkNzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIyJBAJg6RwZ4Rh63Z5zohdlc9mk Bo4ekl3YQHL3e9BvTHAEeJUAF93rLewMKN41ceUGb8h788wX236lNHzNsEFvQF8S tVgkLSAWGGYPjxDqZJ/cTRM3jh3DT/6IWTs9/XZmK5KV5/qhNM1/He2k032YwghF v0LS1u7NmW1xMvJvI6w56efbLEQ21KmOGZgjmcJkaeAPEXln89GiLM/e1uk+G6CH DY8L79fIBRmcLpoLrZoSC82PpYTTZpfNulwxtzZXNxbm/OBID4KAW6K5hhwdCloQ z9z+2Z59qgr5P1ZbFcItXxGrK8j3DMwnrKC2JCILut7PYuXIWwMHQcf7ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQmizYdIhWOmcPrFrpEcfFN6dcpMB8GA1UdIwQY MBaAFPFiJaUARU5i8dJSU7p6LYweJUQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmIt NTZmYWRjOTJlNDAwLzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmItNTZmYWRjOTJlNDAw LzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbaSadRiU unfobc3h3Gu22aAGOvLdqRjuh7LdJfddghcXCAinaUiUqo2nPzC4RrqNLCd/8+Rr ka2UF3ebRN4qxDjeZFG8ksNhsbWfbGNQvlV/+eXvemB0Cff845eJx0KqoG4BQZsi 6GIJktNUPsRxWJMNc8CRcJ8L5tv3Q9U0NS+Gn/gcppl2P6KPrv9OMuiRtxFnj5BR weF0YY472CuyjM+i275z0CXDHUQ2uKNlDH2RX/mT24/HBjD6vPsmz8XIQD7U8GZX yhBea5lQYmf3jY4XZFoI126vWEvnNVwHxCimM9dwVymOsRB+p+CxIz1eOw6bjlxe qeFeebQS/zXU6A== -----END CERTIFICATE-----Generated at Mon Dec 29 14:54:44 2025 by rpki-client