This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft File: M8Ww18CpzSS3PNy5LIdG6FpKW48.mft (raw, json) Hash identifier: ImtWdaNrYFu41/F3ebWIsYiAtSoTBSMJNoN8wZ/Z4sw= Subject key identifier: C3:5B:BF:76:CC:B9:4B:A2:30:06:23:FB:14:C4:BD:C6:B5:B7:1B:92 Authority key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F Certificate issuer: /CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f Certificate serial: 019B70A40D147DA0810A36F755EFE0F8DB6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft Manifest number: 0BC8 Signing time: Tue 30 Dec 2025 19:02:37 +0000 Manifest this update: Tue 30 Dec 2025 19:02:37 +0000 Manifest next update: Wed 31 Dec 2025 19:02:37 +0000 Files and hashes: 1: G9IMCDRzOQuPbahdvenWDMel-ec.roa (hash: KIE/h3OnsvTFha1HUMyujy3OIfah+sKBRWCgbRO+mg8=) 2: M8Ww18CpzSS3PNy5LIdG6FpKW48.crl (hash: zorPjQOzZb+yvaCgzrYOgpBCiIw4pzyE0f6amGAYgH8=) 3: kaCKh69UCH1e8YxXvfDRSIMinp4.roa (hash: 1RbgYWWGOgFXxNNpggiv1pAr13/5f1ITVmQGcqYLD8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a4:0d:14:7d:a0:81:0a:36:f7:55:ef:e0:f8:db:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f Validity Not Before: Dec 30 19:02:37 2025 GMT Not After : Dec 31 19:02:37 2025 GMT Subject: CN=c35bbf76ccb94ba2300623fb14c4bdc6b5b71b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2f:c0:62:42:e0:e5:72:34:11:1b:c4:5c:66: f6:38:88:a3:a6:92:cb:f3:74:9a:f0:73:e0:6f:8b: f2:9c:01:17:7f:bb:4d:a0:39:8e:91:d2:d0:40:e8: 35:49:11:2a:05:b4:a4:0e:61:c9:47:ed:21:63:78: 85:bb:fa:75:b8:76:f7:d1:20:3d:bc:eb:01:08:79: 23:8f:27:c7:49:63:da:e5:87:42:36:65:0e:b8:d7: 3e:f9:23:f0:ae:37:c7:17:20:ee:87:ae:c7:ea:8c: a7:59:26:87:b5:5c:bf:43:44:3f:10:51:c6:ae:54: 95:f2:83:ad:27:ae:ef:ff:e0:da:d8:22:76:ae:3f: 50:a4:08:29:6c:ae:7a:d6:ca:03:1a:5d:ba:6f:1b: 2a:e1:ed:d0:c0:ff:88:ce:fe:9c:44:2f:e8:74:0a: c5:7f:1d:0d:3b:2a:74:ac:f2:9d:46:b5:2a:30:77: cb:6c:b0:c8:05:13:36:10:80:df:33:40:d0:8b:bb: 94:3f:15:1a:58:be:f8:58:72:f1:8e:77:e2:b3:62: fa:18:a9:43:4d:53:16:eb:1d:80:d5:dd:16:99:37: 00:d3:64:f6:14:1c:66:2b:e8:87:70:d5:87:32:49: 93:a5:0d:29:8a:97:52:1e:f1:9e:6d:13:d9:04:1b: 52:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5B:BF:76:CC:B9:4B:A2:30:06:23:FB:14:C4:BD:C6:B5:B7:1B:92 X509v3 Authority Key Identifier: keyid:33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:6c:23:38:82:d6:75:f1:e9:92:b9:39:78:f5:21:e4:bc:61: fd:d9:02:e8:d4:dc:7c:51:91:4e:ef:47:76:ca:9c:3d:b7:33: 85:5c:d6:d5:31:51:01:fe:7e:81:28:19:19:6a:44:ce:ac:a0: c7:93:31:98:3d:54:38:72:16:c9:e5:f9:05:3f:c6:a3:44:98: 37:d4:9d:7f:4e:7a:ae:ba:c8:37:55:54:61:af:2e:e9:f5:8c: e1:02:0e:b4:d3:4f:cd:05:59:bd:fd:b3:6c:5a:e7:4f:e9:25: 7b:94:1c:41:94:96:0a:9e:86:6c:88:19:fa:97:30:a5:6b:93: fe:bf:6e:c3:82:66:20:65:75:ce:1a:8f:93:94:32:5f:c7:16: 5f:6a:64:2b:92:91:13:e8:0b:c2:b6:cf:b6:83:fb:72:8f:75: 66:44:90:37:ff:fa:f0:d8:7a:9a:4d:06:8d:23:76:0a:82:69: da:42:52:24:6c:af:3a:ab:d2:2e:b1:d2:99:55:05:26:c6:b4: f1:9e:9a:b6:d6:4d:8a:fa:a5:2a:4e:bb:9c:e6:5f:d1:12:58: 93:ab:35:90:e1:67:0e:39:5d:84:d2:b0:6a:c3:62:f7:09:14: 39:45:72:bb:66:20:34:43:cc:08:76:f0:d2:ee:2c:e1:79:d0: 8d:b7:f7:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwpA0UfaCBCjb3Ve/g+NtrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzViMGQ3YzBhOWNkMjRiNzNjZGNiOTJjODc0NmU4NWE0 YTViOGYwHhcNMjUxMjMwMTkwMjM3WhcNMjUxMjMxMTkwMjM3WjAzMTEwLwYDVQQD EyhjMzViYmY3NmNjYjk0YmEyMzAwNjIzZmIxNGM0YmRjNmI1YjcxYjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS/AYkLg5XI0ERvEXGb2OIijppLL 83Sa8HPgb4vynAEXf7tNoDmOkdLQQOg1SREqBbSkDmHJR+0hY3iFu/p1uHb30SA9 vOsBCHkjjyfHSWPa5YdCNmUOuNc++SPwrjfHFyDuh67H6oynWSaHtVy/Q0Q/EFHG rlSV8oOtJ67v/+Da2CJ2rj9QpAgpbK561soDGl26bxsq4e3QwP+Izv6cRC/odArF fx0NOyp0rPKdRrUqMHfLbLDIBRM2EIDfM0DQi7uUPxUaWL74WHLxjnfis2L6GKlD TVMW6x2A1d0WmTcA02T2FBxmK+iHcNWHMkmTpQ0pipdSHvGebRPZBBtSxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNbv3bMuUuiMAYj+xTEvca1txuSMB8GA1UdIwQY MBaAFDPFsNfAqc0ktzzcuSyHRuhaSluPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNTgxZjQtODQxMC00YTQzLTkxODYt MGZhYjIyNjllYThlLzEvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8yNTgxZjQtODQxMC00YTQzLTkxODYtMGZhYjIyNjllYThl LzEvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2wjOILW dfHpkrk5ePUh5Lxh/dkC6NTcfFGRTu9HdsqcPbczhVzW1TFRAf5+gSgZGWpEzqyg x5MxmD1UOHIWyeX5BT/Go0SYN9Sdf056rrrIN1VUYa8u6fWM4QIOtNNPzQVZvf2z bFrnT+kle5QcQZSWCp6GbIgZ+pcwpWuT/r9uw4JmIGV1zhqPk5QyX8cWX2pkK5KR E+gLwrbPtoP7co91ZkSQN//68Nh6mk0GjSN2CoJp2kJSJGyvOqvSLrHSmVUFJsa0 8Z6attZNivqlKk67nOZf0RJYk6s1kOFnDjldhNKwasNi9wkUOUVyu2YgNEPMCHbw 0u4s4XnQjbf3kQ== -----END CERTIFICATE-----Generated at Tue Dec 30 20:21:04 2025 by rpki-client