This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft File: RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft (raw, json) Hash identifier: ZUjAaesEBHfRcKy+LXjeYylg+hJju3TazKaAdqO/C9I= Subject key identifier: 6B:A7:44:73:BB:98:86:C2:5F:82:5F:D0:86:2C:BD:8B:6F:84:19:65 Authority key identifier: 44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62 Certificate issuer: /CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62 Certificate serial: 019B32D7294F7D1C7A176B7BABABD95FBCEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft Manifest number: 1786 Signing time: Thu 18 Dec 2025 19:02:00 +0000 Manifest this update: Thu 18 Dec 2025 19:02:00 +0000 Manifest next update: Fri 19 Dec 2025 19:02:00 +0000 Files and hashes: 1: RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl (hash: OdMlfZrhJhfQP8UKXrb5kNx5guy8cJ7bjHZZOY4E/Dc=) 2: eIPu-oRSt6i1dIgnDCklFRUAlSQ.roa (hash: Sgde8KLLocp16u9bpO8WIWMRQrBpRylsfdhGYkOvJ1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:29:4f:7d:1c:7a:17:6b:7b:ab:ab:d9:5f:bc:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62 Validity Not Before: Dec 18 19:02:00 2025 GMT Not After : Dec 19 19:02:00 2025 GMT Subject: CN=6ba74473bb9886c25f825fd0862cbd8b6f841965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:27:37:51:30:a5:ad:58:75:a7:33:b0:88:dc: 4a:1c:39:e7:35:21:5e:17:43:e5:60:da:ff:90:4c: 74:0e:d1:02:10:e7:6b:67:24:ee:5a:5e:9b:1c:1a: 16:58:a7:8d:74:69:54:df:fb:36:ed:94:05:ad:d3: cd:38:7f:3c:ba:c8:d0:9e:8d:1d:d6:67:f0:81:66: 6d:f3:23:3c:33:48:2a:7e:d0:38:b5:c5:42:47:e9: 9c:5c:5c:47:b6:75:fb:72:ed:04:56:85:4f:9b:78: f6:73:d5:88:68:ab:28:19:d1:4c:01:d1:22:d7:56: b8:7e:69:b2:38:66:dc:69:c3:90:eb:3a:80:94:ab: 95:cb:5a:c5:f1:41:fe:fd:dc:a8:1a:7a:62:85:cd: fe:29:78:5c:03:cf:23:dd:55:dc:2c:1b:26:fe:b5: a9:6f:e2:ef:9d:a7:de:4f:f3:5b:4c:1b:ca:bc:c9: 0e:ea:b0:08:36:a1:91:85:f5:72:81:a0:c0:71:fe: e3:06:fb:05:b3:31:aa:87:8e:17:da:a5:15:6e:a6: 3b:6d:4f:1c:52:4b:2b:b1:9f:16:2b:03:61:21:04: f9:9b:fc:46:7b:f5:3e:08:6e:16:02:67:4f:4f:ae: 65:96:11:a6:76:cb:8b:71:a9:d2:fd:85:df:5d:fe: 71:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A7:44:73:BB:98:86:C2:5F:82:5F:D0:86:2C:BD:8B:6F:84:19:65 X509v3 Authority Key Identifier: keyid:44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:2b:77:3c:25:5d:60:c9:47:32:77:91:ca:73:d4:26:6f:47: 9b:87:2b:ad:93:d8:86:7b:fd:51:70:e5:eb:4b:a6:a3:b1:ca: e9:dc:5c:28:e2:64:e6:94:8e:48:d1:f9:ee:f0:f8:4f:17:ef: 6e:f8:e5:e4:07:d6:ed:0f:e0:cd:7c:5b:f2:7a:99:8d:0d:bc: 50:c8:15:6e:9a:47:eb:9b:b1:99:96:2c:f4:e8:53:32:3c:e1: ce:54:1d:24:23:d6:d2:49:c7:e7:7a:7f:c9:1f:4b:78:73:69: 2e:20:49:90:f3:fe:35:02:5f:3a:c5:ef:eb:8f:96:be:ef:20: 86:87:50:4e:39:6f:89:60:46:ae:b6:76:8d:9d:f8:02:41:63: 53:ab:5e:44:70:b0:dc:3f:88:dc:f7:ab:e1:e5:a5:aa:0e:7c: bc:c0:0c:02:86:9d:15:6b:7f:a8:31:7d:aa:3f:0d:6f:ad:fd: 0a:e6:9f:4a:44:e4:5e:df:99:a9:15:5f:da:2d:f9:64:f7:05: a1:48:48:e2:5b:99:56:58:5d:3f:46:33:0d:08:aa:58:89:20: 1e:14:aa:a5:3b:b5:4b:5f:de:1a:d3:bb:4c:1d:df:30:5c:81: b6:51:a5:29:77:fa:17:da:ae:d9:f5:df:fe:91:3c:f2:a5:f4: 43:f2:7a:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1ylPfRx6F2t7q6vZX7zuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0Y2YzZmE3MDc0ZTczMDRiMWYzMmUxNjY0YWQ1ZjcxNTdk NjVkNjIwHhcNMjUxMjE4MTkwMjAwWhcNMjUxMjE5MTkwMjAwWjAzMTEwLwYDVQQD Eyg2YmE3NDQ3M2JiOTg4NmMyNWY4MjVmZDA4NjJjYmQ4YjZmODQxOTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCc3UTClrVh1pzOwiNxKHDnnNSFe F0PlYNr/kEx0DtECEOdrZyTuWl6bHBoWWKeNdGlU3/s27ZQFrdPNOH88usjQno0d 1mfwgWZt8yM8M0gqftA4tcVCR+mcXFxHtnX7cu0EVoVPm3j2c9WIaKsoGdFMAdEi 11a4fmmyOGbcacOQ6zqAlKuVy1rF8UH+/dyoGnpihc3+KXhcA88j3VXcLBsm/rWp b+LvnafeT/NbTBvKvMkO6rAINqGRhfVygaDAcf7jBvsFszGqh44X2qUVbqY7bU8c UksrsZ8WKwNhIQT5m/xGe/U+CG4WAmdPT65llhGmdsuLcanS/YXfXf5x+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGunRHO7mIbCX4Jf0IYsvYtvhBllMB8GA1UdIwQY MBaAFETPP6cHTnMEsfMuFmStX3FX1l1iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk04X3B3ZE9jd1N4OHk0V1pLMWZjVmZXWFdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84OTMxNDktZGQyNS00NTk2LWJhZDgt MWRlOTMzZDlmODQzLzEvUk04X3B3ZE9jd1N4OHk0V1pLMWZjVmZXWFdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS84OTMxNDktZGQyNS00NTk2LWJhZDgtMWRlOTMzZDlmODQz LzEvUk04X3B3ZE9jd1N4OHk0V1pLMWZjVmZXWFdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPit3PCVd YMlHMneRynPUJm9Hm4crrZPYhnv9UXDl60umo7HK6dxcKOJk5pSOSNH57vD4Txfv bvjl5AfW7Q/gzXxb8nqZjQ28UMgVbppH65uxmZYs9OhTMjzhzlQdJCPW0knH53p/ yR9LeHNpLiBJkPP+NQJfOsXv64+Wvu8ghodQTjlviWBGrrZ2jZ34AkFjU6teRHCw 3D+I3Per4eWlqg58vMAMAoadFWt/qDF9qj8Nb639CuafSkTkXt+ZqRVf2i35ZPcF oUhI4luZVlhdP0YzDQiqWIkgHhSqpTu1S1/eGtO7TB3fMFyBtlGlKXf6F9qu2fXf /pE88qX0Q/J6QA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:25:39 2025 by rpki-client