This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft File: 8W6j8DMLITLQ33UvUfDgv-89G64.mft (raw, json) Hash identifier: 9JQEmoPm9x6kbqLyUoSmVwZW26OW3J0Ki3HKG6pggd8= Subject key identifier: 72:BA:B9:98:86:DA:EE:52:98:CB:D3:1E:7F:57:CE:53:C5:05:56:D6 Authority key identifier: F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE Certificate issuer: /CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae Certificate serial: 019B5072A5FE215FB1C740F6FCB37971C2DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 13:00:49 +0000 Manifest this update: Wed 24 Dec 2025 13:00:49 +0000 Manifest next update: Thu 25 Dec 2025 13:00:49 +0000 Files and hashes: 1: 8W6j8DMLITLQ33UvUfDgv-89G64.crl (hash: Xppxz0KA5vUdPlGesNhw6Mwk3eh50CXcsxI2sGJUfSM=) 2: Im2JQRLROW71vKm8r2oO6Xo1LEY.roa (hash: MahGrn/8hOcGcxLx7I6GfG5YqTkwO2eBFakKNoAC1GA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:a5:fe:21:5f:b1:c7:40:f6:fc:b3:79:71:c2:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae Validity Not Before: Dec 24 13:00:49 2025 GMT Not After : Dec 25 13:00:49 2025 GMT Subject: CN=72bab99886daee5298cbd31e7f57ce53c50556d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:8c:83:34:ce:7a:8c:16:91:5a:93:76:a1: a3:c1:f1:37:c3:c0:e9:70:aa:b2:a4:01:aa:ef:88: 78:86:35:73:0e:05:33:76:3d:6e:6a:fe:5c:42:cf: 0f:4c:d3:18:86:a2:ea:9c:7b:47:2e:fb:6a:74:f8: 23:f5:ab:94:b6:e4:60:7d:62:05:f1:61:0f:de:ab: 5e:27:29:b0:00:a5:7d:50:52:9b:e7:af:ec:8b:98: ba:c9:98:18:dc:7a:6a:13:77:f2:b2:35:e4:3d:bc: cf:46:44:54:9a:44:6f:d7:c4:c6:4e:e2:bd:8f:37: d0:c8:01:9e:5c:ed:ab:00:98:30:34:e5:08:27:5b: 1a:37:e9:92:4f:ec:ea:a4:2f:f3:99:e3:9c:c0:fd: 83:bc:d2:bf:d3:6f:19:34:2c:9c:1f:96:aa:9a:e0: 50:75:c9:35:39:f2:c8:0a:63:64:8f:64:2f:87:1a: aa:9c:59:7e:35:de:98:27:f9:18:f1:cf:13:75:96: 56:59:3f:59:16:52:79:a5:50:cc:8c:cf:33:05:c7: 65:31:e7:62:fd:09:47:a0:e5:24:b1:ee:e8:db:e2: 13:7e:67:55:a5:a0:04:0e:7a:af:4a:46:5c:f5:e9: 8f:3a:df:22:df:11:44:69:a3:fa:2a:9e:ed:6d:c8: a3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BA:B9:98:86:DA:EE:52:98:CB:D3:1E:7F:57:CE:53:C5:05:56:D6 X509v3 Authority Key Identifier: keyid:F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:7f:04:48:a6:69:d5:e9:10:4a:53:c7:5c:b3:fe:0f:f3:cb: d7:4c:6e:df:a9:36:d8:c7:d4:70:72:99:e4:74:c0:53:01:6d: 9a:23:cb:6f:47:77:43:e7:05:ed:53:c5:eb:56:15:0c:54:e2: 98:e7:5e:e7:da:c2:ba:e5:b2:ec:d6:c4:e5:0b:9f:7d:98:0b: d7:58:23:0b:66:64:81:3a:1c:34:68:d2:5f:af:38:e8:b5:cf: f6:bc:94:86:db:63:46:97:f6:0f:13:5f:b6:1a:55:00:66:30: 7b:a1:8e:57:42:4c:b6:6b:9c:7f:be:61:90:92:b8:17:d9:e6: f6:d8:66:e3:43:7a:83:6d:f1:59:38:6f:8b:63:82:f6:cf:74: 39:e9:8e:e1:00:eb:13:56:e5:7b:8b:0a:de:72:a6:92:6f:2a: 16:0c:52:64:9c:e6:60:2e:db:26:63:66:4d:2f:89:ca:e9:e5: 90:0d:fc:9b:ab:a3:4b:34:eb:bb:c5:c5:81:9d:71:b8:a1:1e: b1:bd:30:8c:1d:36:ef:3a:e1:db:11:8f:e0:75:9f:39:f0:93: 03:df:53:46:a6:0e:14:ba:9b:af:af:75:a3:f9:73:b7:d1:42: dc:05:95:4f:2e:44:67:25:3e:48:09:fc:04:80:fc:5c:cc:b7: 4b:bf:1c:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcqX+IV+xx0D2/LN5ccLfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNmVhM2YwMzMwYjIxMzJkMGRmNzUyZjUxZjBlMGJmZWYz ZDFiYWUwHhcNMjUxMjI0MTMwMDQ5WhcNMjUxMjI1MTMwMDQ5WjAzMTEwLwYDVQQD Eyg3MmJhYjk5ODg2ZGFlZTUyOThjYmQzMWU3ZjU3Y2U1M2M1MDU1NmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYeMgzTOeowWkVqTdqGjwfE3w8Dp cKqypAGq74h4hjVzDgUzdj1uav5cQs8PTNMYhqLqnHtHLvtqdPgj9auUtuRgfWIF 8WEP3qteJymwAKV9UFKb56/si5i6yZgY3HpqE3fysjXkPbzPRkRUmkRv18TGTuK9 jzfQyAGeXO2rAJgwNOUIJ1saN+mST+zqpC/zmeOcwP2DvNK/028ZNCycH5aqmuBQ dck1OfLICmNkj2QvhxqqnFl+Nd6YJ/kY8c8TdZZWWT9ZFlJ5pVDMjM8zBcdlMedi /QlHoOUkse7o2+ITfmdVpaAEDnqvSkZc9emPOt8i3xFEaaP6Kp7tbcijMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHK6uZiG2u5SmMvTHn9XzlPFBVbWMB8GA1UdIwQY MBaAFPFuo/AzCyEy0N91L1Hw4L/vPRuuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFc2ajhETUxJVExRMzNVdlVmRGd2LTg5RzY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lODY2N2EtYjdmZC00ZWE4LWJhZTkt NjAwN2JiYWQ4NmQ2LzEvOFc2ajhETUxJVExRMzNVdlVmRGd2LTg5RzY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9lODY2N2EtYjdmZC00ZWE4LWJhZTktNjAwN2JiYWQ4NmQ2 LzEvOFc2ajhETUxJVExRMzNVdlVmRGd2LTg5RzY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl38ESKZp 1ekQSlPHXLP+D/PL10xu36k22MfUcHKZ5HTAUwFtmiPLb0d3Q+cF7VPF61YVDFTi mOde59rCuuWy7NbE5QuffZgL11gjC2ZkgTocNGjSX6846LXP9ryUhttjRpf2DxNf thpVAGYwe6GOV0JMtmucf75hkJK4F9nm9thm40N6g23xWThvi2OC9s90OemO4QDr E1ble4sK3nKmkm8qFgxSZJzmYC7bJmNmTS+JyunlkA38m6ujSzTru8XFgZ1xuKEe sb0wjB027zrh2xGP4HWfOfCTA99TRqYOFLqbr691o/lzt9FC3AWVTy5EZyU+SAn8 BID8XMy3S78cRw== -----END CERTIFICATE-----Generated at Wed Dec 24 18:26:40 2025 by rpki-client