This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft File: 8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft (raw, json) Hash identifier: 4MNcFCu5ZCXLiGst5xh7AVz3Yc01q3KHIvtkELJrbYc= Subject key identifier: 6E:4C:1A:C9:B6:3F:6B:67:6F:67:6B:1F:41:20:26:BF:DE:DD:C1:44 Authority key identifier: F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02 Certificate issuer: /CN=f16090c5f6233cbaeaf319dcfae692a956eea102 Certificate serial: 019B6D33B2D252F84581A92269C78BA0AF8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft Manifest number: 17A1 Signing time: Tue 30 Dec 2025 03:01:03 +0000 Manifest this update: Tue 30 Dec 2025 03:01:03 +0000 Manifest next update: Wed 31 Dec 2025 03:01:03 +0000 Files and hashes: 1: 7Kmoa0mTT-hmQesiS2Vd310k5jw.roa (hash: USbTJdTp4AkhAgtWaDPdpVWCdumqCodGAPlzgsbWpqI=) 2: 8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl (hash: R+Cmn6mCi+cbxazfp8H2ne278loaaBN9lUm1MLflk0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:b2:d2:52:f8:45:81:a9:22:69:c7:8b:a0:af:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f16090c5f6233cbaeaf319dcfae692a956eea102 Validity Not Before: Dec 30 03:01:03 2025 GMT Not After : Dec 31 03:01:03 2025 GMT Subject: CN=6e4c1ac9b63f6b676f676b1f412026bfdeddc144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:87:22:ce:9f:08:7d:a3:fb:0e:18:ab:19:b1: ad:22:2d:71:69:5b:4f:64:a2:21:c2:dc:ff:f1:ce: 8b:80:8c:27:35:e6:55:1a:48:e4:be:7c:bb:56:28: 2e:4f:73:fa:08:d3:ae:25:5c:8b:f2:c3:8e:9d:10: 78:45:58:33:a0:ce:c8:5b:7c:bc:bd:13:b1:b1:ac: e0:58:d5:6a:2a:96:c4:82:5b:8b:59:84:a0:aa:e5: 87:fa:c3:ef:6c:c5:d3:00:75:9f:a2:20:78:31:9a: 3f:8d:1c:d3:41:92:28:92:4b:e7:49:c1:9f:3e:06: aa:2b:dd:da:ed:5b:2e:c3:bf:b7:5a:f8:63:17:76: 36:a6:c1:10:50:74:a5:1f:a0:00:ad:52:53:e4:5b: 77:cb:9a:3e:e6:7c:49:94:f5:6d:bc:ca:c4:fd:40: 61:be:7c:fa:4a:c2:f3:3e:89:a4:27:13:44:ca:a4: 56:87:2e:4d:6c:cc:16:b5:b9:a2:e3:a9:f8:90:d9: 86:8e:fc:02:23:e5:08:d4:17:05:1b:2d:82:67:21: b8:ce:65:90:5a:34:eb:76:58:20:fc:07:a5:fc:21: 85:09:6f:3b:a7:fa:2f:dc:98:0f:15:06:ec:46:e2: a1:3a:36:23:a5:0a:2c:1f:24:a9:45:5f:32:b3:56: ec:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4C:1A:C9:B6:3F:6B:67:6F:67:6B:1F:41:20:26:BF:DE:DD:C1:44 X509v3 Authority Key Identifier: keyid:F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:96:55:e9:4c:3d:ac:85:e8:9c:0e:91:b6:16:02:ba:89:4e: 05:fb:4d:50:d5:b4:4a:1d:4b:b3:99:f5:fc:f4:db:79:91:5d: b0:5c:30:20:04:83:3e:69:f5:ea:a5:21:70:a0:fb:02:a3:32: 3b:8e:49:06:ba:53:31:dd:07:83:f4:32:de:93:93:b3:65:2b: 1d:26:1e:b2:f9:b8:36:71:e1:4e:51:0b:99:73:fb:66:af:ad: 91:fc:2c:ca:d0:f2:54:2f:0d:2c:2d:30:95:13:cb:b6:81:65: a8:3c:c3:7a:7e:64:0a:24:5a:6e:0a:7f:27:c5:14:ed:64:66: 9b:74:7f:e3:fa:7a:fb:47:cd:23:47:d8:61:4d:cc:d7:0c:8f: 33:65:32:1b:da:7e:a7:7d:27:ef:bc:4f:79:ee:d4:a6:09:9a: cc:0e:42:8b:79:72:fc:0e:bb:6b:11:da:92:87:da:58:50:d2: a0:6c:32:9f:bb:e3:72:6a:ba:57:e1:30:d2:87:1a:7c:83:98: 33:c4:48:50:36:24:23:e5:1f:d5:55:ec:43:18:61:52:1b:c8: b4:cd:90:70:09:6b:d3:32:89:03:27:4d:00:ab:05:6a:f0:05: 17:a1:a9:20:56:a5:b2:04:87:81:81:d2:65:a6:1a:75:a4:d0: a8:fe:b0:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttM7LSUvhFgakiaceLoK+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNjA5MGM1ZjYyMzNjYmFlYWYzMTlkY2ZhZTY5MmE5NTZl ZWExMDIwHhcNMjUxMjMwMDMwMTAzWhcNMjUxMjMxMDMwMTAzWjAzMTEwLwYDVQQD Eyg2ZTRjMWFjOWI2M2Y2YjY3NmY2NzZiMWY0MTIwMjZiZmRlZGRjMTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwocizp8IfaP7DhirGbGtIi1xaVtP ZKIhwtz/8c6LgIwnNeZVGkjkvny7ViguT3P6CNOuJVyL8sOOnRB4RVgzoM7IW3y8 vROxsazgWNVqKpbEgluLWYSgquWH+sPvbMXTAHWfoiB4MZo/jRzTQZIokkvnScGf PgaqK93a7Vsuw7+3WvhjF3Y2psEQUHSlH6AArVJT5Ft3y5o+5nxJlPVtvMrE/UBh vnz6SsLzPomkJxNEyqRWhy5NbMwWtbmi46n4kNmGjvwCI+UI1BcFGy2CZyG4zmWQ WjTrdlgg/Ael/CGFCW87p/ov3JgPFQbsRuKhOjYjpQosHySpRV8ys1bszQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5MGsm2P2tnb2drH0EgJr/e3cFEMB8GA1UdIwQY MBaAFPFgkMX2Izy66vMZ3PrmkqlW7qECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFdDUXhmWWpQTHJxOHhuYy11YVNxVmJ1b1FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jYmFjMDgtYzExZS00ODA2LWEyZmQt N2M4OGM0ZTA0ZjkxLzEvOFdDUXhmWWpQTHJxOHhuYy11YVNxVmJ1b1FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jYmFjMDgtYzExZS00ODA2LWEyZmQtN2M4OGM0ZTA0Zjkx LzEvOFdDUXhmWWpQTHJxOHhuYy11YVNxVmJ1b1FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx5ZV6Uw9 rIXonA6RthYCuolOBftNUNW0Sh1Ls5n1/PTbeZFdsFwwIASDPmn16qUhcKD7AqMy O45JBrpTMd0Hg/Qy3pOTs2UrHSYesvm4NnHhTlELmXP7Zq+tkfwsytDyVC8NLC0w lRPLtoFlqDzDen5kCiRabgp/J8UU7WRmm3R/4/p6+0fNI0fYYU3M1wyPM2UyG9p+ p30n77xPee7UpgmazA5Ci3ly/A67axHakofaWFDSoGwyn7vjcmq6V+Ew0ocafIOY M8RIUDYkI+Uf1VXsQxhhUhvItM2QcAlr0zKJAydNAKsFavAFF6GpIFalsgSHgYHS ZaYadaTQqP6wGA== -----END CERTIFICATE-----Generated at Tue Dec 30 10:53:25 2025 by rpki-client