This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json) Hash identifier: kPmMRF9UuSI/fXudBD9RXFovrbq36nBzGRDvZ8dZQGo= Subject key identifier: 04:8D:8D:51:B3:8D:F6:73:39:EC:EE:6E:E3:22:26:7A:49:95:9C:2E Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29 Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429 Certificate serial: 019B66FC11EB1A92BE66B41B52757A11186F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft Manifest number: 091D Signing time: Sun 28 Dec 2025 22:02:33 +0000 Manifest this update: Sun 28 Dec 2025 22:02:33 +0000 Manifest next update: Mon 29 Dec 2025 22:02:33 +0000 Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: Vx4CvWuMhdAfMljgHJH0QsUmmh061UEiYxEWp+GHs04=) 2: KzntsBKC6xHsM4irrwPpJqTMjrE.roa (hash: rsuAHxEKxQodmj4NlR88Fkx1NvrEvEln4AFpUG54lbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fc:11:eb:1a:92:be:66:b4:1b:52:75:7a:11:18:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429 Validity Not Before: Dec 28 22:02:33 2025 GMT Not After : Dec 29 22:02:33 2025 GMT Subject: CN=048d8d51b38df67339ecee6ee322267a49959c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6e:9d:65:ba:a4:81:80:a4:ca:8e:9b:f9:9b: 48:23:cd:09:65:af:56:76:12:e0:d3:29:ca:86:de: a5:7a:bf:1c:67:7a:8b:33:2a:db:14:bf:de:3d:c1: 81:7f:4a:29:20:52:a8:4d:d5:02:a0:22:e7:03:a5: d0:ca:ac:19:e3:b0:da:87:f8:56:89:2a:4e:4f:c4: 59:f6:65:7a:19:7b:63:e8:fe:de:bc:7a:33:f0:e5: b4:2e:90:8a:aa:a6:a1:c5:ea:48:bf:8b:f5:a4:58: 9a:c1:13:40:71:cb:04:7a:b2:67:7f:ef:e1:28:28: 0b:99:ae:7f:4b:c7:05:55:00:e2:d3:d7:b6:6c:e7: e1:a9:4e:e4:6c:d4:ff:8b:70:d4:7f:01:dd:75:28: 1c:58:06:90:e5:0e:af:43:e9:f3:66:6e:ea:84:13: c3:5e:78:db:01:17:8c:d4:be:bd:a1:2b:af:bb:0f: 25:34:09:fd:15:61:c5:0f:8c:cb:bb:08:59:77:89: 95:38:4e:fc:07:bb:5f:27:74:51:7e:b2:6a:9e:58: 2e:4a:bc:f5:18:ce:36:5d:e6:1b:eb:3e:8b:48:c2: 3c:6e:39:6c:86:c7:85:42:81:76:c6:03:cd:fc:ba: 82:9e:41:e7:5e:72:66:29:91:12:5d:cf:02:72:f1: 4b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8D:8D:51:B3:8D:F6:73:39:EC:EE:6E:E3:22:26:7A:49:95:9C:2E X509v3 Authority Key Identifier: keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:81:a2:e0:4a:7d:bc:b0:d3:96:87:1f:ed:f9:84:2d:cf:50: e1:e7:99:5f:a4:58:37:67:b3:72:92:b6:44:7b:f9:35:5f:cc: a8:9f:72:8f:fc:e9:8b:2c:0e:b0:8e:8c:7e:bc:b7:f9:02:91: e6:bd:ec:ad:b0:70:0d:d6:e0:44:07:ec:15:65:6c:1b:48:16: bf:f4:bd:4c:ff:1a:44:be:3b:fe:8a:37:7b:78:58:79:fb:e7: 72:01:c7:55:ca:88:30:27:55:1a:05:95:8b:71:2a:4e:73:4c: 41:ec:57:9e:96:ef:1b:58:0d:dd:ea:29:0b:0e:65:74:b6:de: d8:56:b1:70:f9:a8:cb:38:53:e7:be:e2:59:7f:a1:c7:a1:39: 72:6f:0c:d8:09:c1:fe:07:bb:8d:60:8e:40:6f:3a:e1:0e:45: 50:61:9b:0f:8c:23:4b:2e:c1:23:ab:5d:c9:48:24:51:53:2b: 4d:e4:23:8f:44:fd:35:05:e0:60:f2:b4:b6:79:57:d5:2b:21: fb:38:04:f9:64:7f:28:f2:9e:9e:89:37:a4:70:fd:3e:3f:12: d1:0f:a1:36:39:a8:02:0e:c8:73:25:d2:87:d7:66:d8:a7:fc: a5:ab:d0:f8:cc:79:8c:ae:f1:a2:c8:b1:cb:0d:8b:ea:18:b2: 05:84:62:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm/BHrGpK+ZrQbUnV6ERhvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNjIyNWE1MDA0NTRlNjJmMWQyNTI1M2JhN2EyZDhjMWUy NTQ0MjkwHhcNMjUxMjI4MjIwMjMzWhcNMjUxMjI5MjIwMjMzWjAzMTEwLwYDVQQD EygwNDhkOGQ1MWIzOGRmNjczMzllY2VlNmVlMzIyMjY3YTQ5OTU5YzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6m6dZbqkgYCkyo6b+ZtII80JZa9W dhLg0ynKht6ler8cZ3qLMyrbFL/ePcGBf0opIFKoTdUCoCLnA6XQyqwZ47Dah/hW iSpOT8RZ9mV6GXtj6P7evHoz8OW0LpCKqqahxepIv4v1pFiawRNAccsEerJnf+/h KCgLma5/S8cFVQDi09e2bOfhqU7kbNT/i3DUfwHddSgcWAaQ5Q6vQ+nzZm7qhBPD XnjbAReM1L69oSuvuw8lNAn9FWHFD4zLuwhZd4mVOE78B7tfJ3RRfrJqnlguSrz1 GM42XeYb6z6LSMI8bjlshseFQoF2xgPN/LqCnkHnXnJmKZESXc8CcvFLbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASNjVGzjfZzOezubuMiJnpJlZwuMB8GA1UdIwQY MBaAFPFiJaUARU5i8dJSU7p6LYweJUQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmIt NTZmYWRjOTJlNDAwLzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmItNTZmYWRjOTJlNDAw LzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4Gi4Ep9 vLDTlocf7fmELc9Q4eeZX6RYN2ezcpK2RHv5NV/MqJ9yj/zpiywOsI6Mfry3+QKR 5r3srbBwDdbgRAfsFWVsG0gWv/S9TP8aRL47/oo3e3hYefvncgHHVcqIMCdVGgWV i3EqTnNMQexXnpbvG1gN3eopCw5ldLbe2FaxcPmoyzhT577iWX+hx6E5cm8M2AnB /ge7jWCOQG864Q5FUGGbD4wjSy7BI6tdyUgkUVMrTeQjj0T9NQXgYPK0tnlX1Ssh +zgE+WR/KPKenok3pHD9Pj8S0Q+hNjmoAg7IcyXSh9dm2Kf8pavQ+Mx5jK7xosix yw2L6hiyBYRing== -----END CERTIFICATE-----Generated at Mon Dec 29 04:27:43 2025 by rpki-client