This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft File: s8k12EMWos9WpllXttebevgRpwc.mft (raw, json) Hash identifier: DhU6rGLpyZM7B0Lr50NTBHLDM05dOV85Id6Bstvkag0= Subject key identifier: 3A:8E:BD:AC:73:9F:C4:DB:A1:EC:1C:A0:31:F1:23:FA:C5:7E:4D:B3 Authority key identifier: B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07 Certificate issuer: /CN=b3c935d84316a2cf56a65957b6d79b7af811a707 Certificate serial: 019B4DE10B7FB876C81CB34B00A21B7ED3EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft Manifest number: 0A83 Signing time: Wed 24 Dec 2025 01:02:32 +0000 Manifest this update: Wed 24 Dec 2025 01:02:32 +0000 Manifest next update: Thu 25 Dec 2025 01:02:32 +0000 Files and hashes: 1: s8k12EMWos9WpllXttebevgRpwc.crl (hash: bayW7/3X5SC4nOxYJsSabd4yVLwr5y120zRIYCvYYQA=) 2: udh3xGDNJXhOcF-5H4cWJu3ktiY.roa (hash: ocPGT+ldVCPhS+IwJUZcLKrDX+p6H2fIq+UgAUlkPrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e1:0b:7f:b8:76:c8:1c:b3:4b:00:a2:1b:7e:d3:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c935d84316a2cf56a65957b6d79b7af811a707 Validity Not Before: Dec 24 01:02:32 2025 GMT Not After : Dec 25 01:02:32 2025 GMT Subject: CN=3a8ebdac739fc4dba1ec1ca031f123fac57e4db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7e:df:b6:44:99:ab:c5:fb:51:96:01:fb:1f: 4f:ab:db:92:7c:06:0e:b9:11:d8:71:1e:e9:2c:96: 89:b6:cc:65:30:c6:c4:ab:22:08:1c:3d:4e:f7:86: 42:cd:07:74:93:7d:1d:3a:53:89:66:ae:f1:76:de: 84:04:9e:dc:b4:d1:95:82:74:0a:74:ab:be:72:47: fc:c8:93:aa:e9:8e:04:3a:c3:75:82:a5:fe:6b:27: bd:27:57:f7:2a:60:c9:d8:47:17:5c:78:f3:93:1a: 2b:09:5d:e7:e6:14:33:3b:a6:97:82:62:ea:3d:82: df:8c:41:4d:67:09:3e:7a:fa:56:19:0b:82:e0:08: cb:b0:aa:c1:86:d1:7c:e5:95:74:e0:43:a3:61:db: 97:86:2d:92:63:b2:38:00:f9:c4:0d:4d:4c:b1:4e: 1a:b6:8d:26:7d:70:a0:a0:b2:93:7c:b2:94:65:36: 27:44:99:3b:aa:7b:68:e1:37:03:11:c4:12:d0:ef: 3b:bf:54:58:6a:4f:08:f2:aa:db:9d:1f:f9:8f:c7: 2f:60:e2:24:1a:95:8f:aa:41:d5:5e:65:26:6d:00: 14:01:c3:22:b8:51:78:cd:d4:1b:aa:f0:9f:95:42: 7a:ca:f0:85:f3:28:6b:02:3d:8a:f4:4b:26:6f:20: 0f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8E:BD:AC:73:9F:C4:DB:A1:EC:1C:A0:31:F1:23:FA:C5:7E:4D:B3 X509v3 Authority Key Identifier: keyid:B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:50:93:58:cb:dd:a5:33:20:4b:99:bf:80:32:37:86:9a:bf: 03:84:05:44:95:dc:ef:7a:3c:7d:ac:55:11:ae:a6:7f:95:21: 7e:a6:1e:91:ac:d1:89:d5:92:b8:29:d5:ec:a5:9c:b5:ff:4b: 06:18:33:16:08:d5:de:14:7e:a7:ec:45:9d:70:97:0f:d7:91: af:81:ce:57:3f:46:0b:f0:3b:f5:3e:28:db:6f:99:9b:66:25: f4:c7:6e:18:5b:63:fb:a1:f2:76:49:96:5a:32:92:e0:7c:24: 2c:19:be:ac:d6:95:22:bd:01:cd:92:a5:dc:0e:35:44:d0:0a: f2:6e:ae:c3:7f:f1:1f:02:16:ea:52:76:52:a6:60:81:29:6d: 99:43:a9:28:b0:6f:e9:30:02:91:4d:5e:6b:ac:eb:d4:94:b4: ab:82:d7:c7:b6:c2:80:30:cc:c2:92:36:d9:ae:3b:07:38:4f: b8:30:b8:02:f3:01:46:bf:64:51:98:76:4b:f1:38:c0:98:81: e5:a0:ed:18:e9:66:f1:e0:5e:bf:4d:c5:3c:9d:e2:15:41:e8: 40:6a:bb:55:97:6b:c0:42:4e:1c:0a:84:21:ef:2a:a0:8b:cf: bc:b6:1c:46:75:ae:f3:f6:6a:a3:ad:93:99:28:d8:a6:b2:44: 18:1f:00:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4Qt/uHbIHLNLAKIbftPvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzkzNWQ4NDMxNmEyY2Y1NmE2NTk1N2I2ZDc5YjdhZjgx MWE3MDcwHhcNMjUxMjI0MDEwMjMyWhcNMjUxMjI1MDEwMjMyWjAzMTEwLwYDVQQD EygzYThlYmRhYzczOWZjNGRiYTFlYzFjYTAzMWYxMjNmYWM1N2U0ZGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA037ftkSZq8X7UZYB+x9Pq9uSfAYO uRHYcR7pLJaJtsxlMMbEqyIIHD1O94ZCzQd0k30dOlOJZq7xdt6EBJ7ctNGVgnQK dKu+ckf8yJOq6Y4EOsN1gqX+aye9J1f3KmDJ2EcXXHjzkxorCV3n5hQzO6aXgmLq PYLfjEFNZwk+evpWGQuC4AjLsKrBhtF85ZV04EOjYduXhi2SY7I4APnEDU1MsU4a to0mfXCgoLKTfLKUZTYnRJk7qnto4TcDEcQS0O87v1RYak8I8qrbnR/5j8cvYOIk GpWPqkHVXmUmbQAUAcMiuFF4zdQbqvCflUJ6yvCF8yhrAj2K9EsmbyAPzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqOvaxzn8TboewcoDHxI/rFfk2zMB8GA1UdIwQY MBaAFLPJNdhDFqLPVqZZV7bXm3r4EacHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhrMTJFTVdvczlXcGxsWHR0ZWJldmdScHdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81NTc5NjItMDUxYS00NmM1LThhOTMt MWNjMWE1MzhjM2NlLzEvczhrMTJFTVdvczlXcGxsWHR0ZWJldmdScHdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81NTc5NjItMDUxYS00NmM1LThhOTMtMWNjMWE1MzhjM2Nl LzEvczhrMTJFTVdvczlXcGxsWHR0ZWJldmdScHdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVCTWMvd pTMgS5m/gDI3hpq/A4QFRJXc73o8faxVEa6mf5UhfqYekazRidWSuCnV7KWctf9L BhgzFgjV3hR+p+xFnXCXD9eRr4HOVz9GC/A79T4o22+Zm2Yl9MduGFtj+6HydkmW WjKS4HwkLBm+rNaVIr0BzZKl3A41RNAK8m6uw3/xHwIW6lJ2UqZggSltmUOpKLBv 6TACkU1ea6zr1JS0q4LXx7bCgDDMwpI22a47BzhPuDC4AvMBRr9kUZh2S/E4wJiB 5aDtGOlm8eBev03FPJ3iFUHoQGq7VZdrwEJOHAqEIe8qoIvPvLYcRnWu8/Zqo62T mSjYprJEGB8AaQ== -----END CERTIFICATE-----Generated at Wed Dec 24 10:30:54 2025 by rpki-client