This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft File: s8k12EMWos9WpllXttebevgRpwc.mft (raw, json) Hash identifier: b43V12HsSxOwSiEvcaT3u1ZevLqbSZA0YH3ikUgAbNw= Subject key identifier: 20:C4:1A:AC:16:9A:88:C3:FF:B8:DE:F0:23:B0:31:7A:2C:6D:85:35 Authority key identifier: B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07 Certificate issuer: /CN=b3c935d84316a2cf56a65957b6d79b7af811a707 Certificate serial: 019B53AB8BF571406B117C518A74A8567FE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft Manifest number: 0A86 Signing time: Thu 25 Dec 2025 04:01:49 +0000 Manifest this update: Thu 25 Dec 2025 04:01:49 +0000 Manifest next update: Fri 26 Dec 2025 04:01:49 +0000 Files and hashes: 1: s8k12EMWos9WpllXttebevgRpwc.crl (hash: JzcmkTB4sstkWnLxEj1ae0jGjnBrBiJFQhQFJlS5EeQ=) 2: udh3xGDNJXhOcF-5H4cWJu3ktiY.roa (hash: ocPGT+ldVCPhS+IwJUZcLKrDX+p6H2fIq+UgAUlkPrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:8b:f5:71:40:6b:11:7c:51:8a:74:a8:56:7f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c935d84316a2cf56a65957b6d79b7af811a707 Validity Not Before: Dec 25 04:01:49 2025 GMT Not After : Dec 26 04:01:49 2025 GMT Subject: CN=20c41aac169a88c3ffb8def023b0317a2c6d8535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ce:4f:ff:69:a3:77:b1:f4:fa:20:d7:63:50: 2c:e1:2d:37:ff:e3:0c:bc:cf:8d:07:1c:2d:c1:e5: 41:4f:69:ab:d1:5b:fb:71:5a:91:6e:4a:a4:47:94: 1d:58:d1:5d:c3:f4:c9:d6:b1:a6:0b:8c:ea:a1:41: 9e:c9:6e:d3:ef:04:f0:66:26:9c:54:ac:63:d4:7d: dc:b1:c3:95:3e:64:cf:9e:2a:1b:97:46:71:57:96: 8e:a1:79:29:fd:2f:b9:50:9c:02:81:34:2f:29:ab: 00:19:80:4b:99:43:76:bd:aa:c3:cd:d1:bc:52:e8: fa:b5:d4:8b:ba:66:81:f8:3d:4b:68:b2:17:73:be: ca:46:50:9b:ca:0f:6f:dc:b6:33:b6:4e:08:6b:4d: 24:7d:e6:09:9e:91:f3:60:2c:0e:30:3a:f7:d8:3c: 47:35:67:73:eb:af:d0:6a:dd:ac:c6:11:27:c4:14: 6c:a5:c8:96:a6:4d:bc:c1:35:bc:31:00:69:60:28: 48:ee:b0:9a:96:cd:b0:fe:50:27:c3:c3:d0:56:3f: 36:66:8c:e2:27:94:80:11:08:fb:87:28:9d:08:bc: 1a:fb:84:fb:ab:21:86:bb:90:ef:0f:fb:65:50:87: 96:01:96:cf:1a:c4:4d:a8:26:09:8b:6d:91:ad:5c: 99:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C4:1A:AC:16:9A:88:C3:FF:B8:DE:F0:23:B0:31:7A:2C:6D:85:35 X509v3 Authority Key Identifier: keyid:B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:fe:c4:f1:31:1f:e8:11:15:94:cc:32:a8:c3:a6:91:08:db: 87:95:ba:52:18:2c:a4:40:21:50:bb:a2:5c:92:77:8d:eb:e5: 69:99:02:9a:1c:cd:ef:1d:c9:5e:55:21:f4:23:68:6d:ef:e2: a2:4a:b2:7d:fb:8a:4c:ec:90:4e:b9:b1:84:00:b1:fc:6d:e5: fc:92:34:3f:99:06:45:27:76:7e:e6:15:f5:8b:27:26:46:65: a9:cd:a8:95:e2:82:f8:59:97:b1:d5:88:4d:34:30:8d:49:b8: 4e:54:89:72:a2:7d:c0:9b:62:31:f8:2e:9a:e6:7f:a6:aa:fb: 30:4e:ea:a0:21:74:05:67:63:15:81:63:ea:98:fa:d4:12:0c: 21:95:3f:dc:95:64:4e:0b:1a:0a:bf:6e:ec:90:70:8b:52:19: a5:3a:19:d0:92:28:b0:c3:0b:f0:f4:bf:ce:50:9d:08:a7:7c: ad:68:f1:98:aa:56:d8:f6:42:03:7c:26:c9:d1:37:24:00:b7: 69:83:48:e1:a1:c2:d7:f9:3a:10:39:d1:fd:24:e3:53:f9:c5: 92:c5:0b:e8:04:c9:65:4a:c9:aa:e2:5d:a6:02:b4:45:dc:23: fc:8b:24:cd:84:c9:77:39:e3:10:23:08:2e:26:1d:c8:7e:43: 8d:3b:78:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq4v1cUBrEXxRinSoVn/pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzkzNWQ4NDMxNmEyY2Y1NmE2NTk1N2I2ZDc5YjdhZjgx MWE3MDcwHhcNMjUxMjI1MDQwMTQ5WhcNMjUxMjI2MDQwMTQ5WjAzMTEwLwYDVQQD EygyMGM0MWFhYzE2OWE4OGMzZmZiOGRlZjAyM2IwMzE3YTJjNmQ4NTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM5P/2mjd7H0+iDXY1As4S03/+MM vM+NBxwtweVBT2mr0Vv7cVqRbkqkR5QdWNFdw/TJ1rGmC4zqoUGeyW7T7wTwZiac VKxj1H3cscOVPmTPniobl0ZxV5aOoXkp/S+5UJwCgTQvKasAGYBLmUN2varDzdG8 Uuj6tdSLumaB+D1LaLIXc77KRlCbyg9v3LYztk4Ia00kfeYJnpHzYCwOMDr32DxH NWdz66/Qat2sxhEnxBRspciWpk28wTW8MQBpYChI7rCals2w/lAnw8PQVj82Zozi J5SAEQj7hyidCLwa+4T7qyGGu5DvD/tlUIeWAZbPGsRNqCYJi22RrVyZewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDEGqwWmojD/7je8COwMXosbYU1MB8GA1UdIwQY MBaAFLPJNdhDFqLPVqZZV7bXm3r4EacHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhrMTJFTVdvczlXcGxsWHR0ZWJldmdScHdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81NTc5NjItMDUxYS00NmM1LThhOTMt MWNjMWE1MzhjM2NlLzEvczhrMTJFTVdvczlXcGxsWHR0ZWJldmdScHdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81NTc5NjItMDUxYS00NmM1LThhOTMtMWNjMWE1MzhjM2Nl LzEvczhrMTJFTVdvczlXcGxsWHR0ZWJldmdScHdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARP7E8TEf 6BEVlMwyqMOmkQjbh5W6UhgspEAhULuiXJJ3jevlaZkCmhzN7x3JXlUh9CNobe/i okqyffuKTOyQTrmxhACx/G3l/JI0P5kGRSd2fuYV9YsnJkZlqc2oleKC+FmXsdWI TTQwjUm4TlSJcqJ9wJtiMfgumuZ/pqr7ME7qoCF0BWdjFYFj6pj61BIMIZU/3JVk TgsaCr9u7JBwi1IZpToZ0JIosMML8PS/zlCdCKd8rWjxmKpW2PZCA3wmydE3JAC3 aYNI4aHC1/k6EDnR/STjU/nFksUL6ATJZUrJquJdpgK0Rdwj/IskzYTJdznjECMI LiYdyH5DjTt4ww== -----END CERTIFICATE-----Generated at Thu Dec 25 11:17:11 2025 by rpki-client