This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft File: 8WBdCa0sbEN7bC-Gg___viF0_mw.mft (raw, json) Hash identifier: D78vvZ9pSG2BPFrEgNSQOoIazYhEODCfH3ms9eKYp5Y= Subject key identifier: 89:15:54:9E:2D:CC:57:9B:90:3B:5A:80:9C:D8:15:ED:4A:2C:E8:C4 Authority key identifier: F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C Certificate issuer: /CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c Certificate serial: 019B397DAEDA18C7E038B3F49528C677D166 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft Manifest number: 10F1 Signing time: Sat 20 Dec 2025 02:01:36 +0000 Manifest this update: Sat 20 Dec 2025 02:01:36 +0000 Manifest next update: Sun 21 Dec 2025 02:01:36 +0000 Files and hashes: 1: 8WBdCa0sbEN7bC-Gg___viF0_mw.crl (hash: cCXwRtvU8SfujrIG42QxlrEwoNUSbkn7fRwG15xWTzI=) 2: j3qkWwGkWnrxhLgyGwrcFzXJWM4.roa (hash: tCyqkdV84n1oHfUiO9Wnf9/3f5vZVsXyCuIYwhEsEzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:ae:da:18:c7:e0:38:b3:f4:95:28:c6:77:d1:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c Validity Not Before: Dec 20 02:01:36 2025 GMT Not After : Dec 21 02:01:36 2025 GMT Subject: CN=8915549e2dcc579b903b5a809cd815ed4a2ce8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:0f:15:b0:6a:54:88:a0:dc:6e:1f:e4:ac:e5: 46:ca:20:d9:b5:4c:d3:de:62:e1:d6:bd:b1:eb:5e: 07:ee:ee:e6:1a:fd:3f:3f:54:28:ab:04:3d:fb:11: c7:d2:12:f7:98:57:98:da:ba:e2:18:6d:9f:c7:c8: 1c:2e:91:b0:08:09:45:81:fe:ab:b3:43:db:a7:43: bb:0d:60:44:2a:73:3f:53:b4:57:3c:70:50:7e:bc: 97:48:4f:75:11:09:7c:d3:da:1a:24:c3:47:80:69: 01:cc:9a:0d:e4:87:24:12:30:f8:3a:d6:45:56:43: dd:3a:c3:ad:58:07:60:64:98:ab:bf:9e:43:7c:17: a8:2c:65:52:96:96:c7:7d:e7:d3:b2:6b:69:08:0f: 53:f4:6c:9d:b4:73:90:72:a0:98:8f:bc:f1:b9:93: 02:d0:28:e2:3e:ba:16:46:ec:92:7c:eb:05:c2:2c: 5f:fb:da:f1:34:27:82:b6:10:bb:f0:2e:d6:27:18: c2:09:6a:12:bd:ee:b2:19:f2:05:aa:65:8e:12:24: 31:41:17:58:20:4c:b0:d7:83:a5:ff:9b:37:b9:49: 18:8d:8d:1f:f2:70:c1:dc:a7:38:e6:2e:cb:3b:5e: 61:8e:e7:9e:31:3f:1d:ea:60:d0:08:18:84:fd:7c: a7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:15:54:9E:2D:CC:57:9B:90:3B:5A:80:9C:D8:15:ED:4A:2C:E8:C4 X509v3 Authority Key Identifier: keyid:F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f3:fd:c3:60:57:0b:fc:d3:12:25:45:cc:ed:34:b8:36:cc: 6f:0f:d5:5e:90:04:0b:4b:bb:76:cb:98:56:39:56:b5:87:c6: 0f:af:b0:0b:49:04:1c:76:83:d5:16:31:25:06:1a:2e:14:ee: 15:dc:4e:7b:ac:a4:bc:bc:2e:2f:14:d7:0f:5b:35:ce:bd:83: 1c:41:f2:d9:92:14:cd:a9:50:ef:bd:4f:df:dd:81:e6:8b:b3: f6:0c:c7:c7:f2:d4:ae:bd:80:4f:3b:b9:d4:80:11:23:55:a4: c2:eb:db:32:61:7f:3f:95:5d:14:5e:84:5b:4b:a2:5f:8c:0a: 25:95:f0:17:a5:d6:fa:22:48:e7:e0:64:f2:bc:53:73:52:5f: 4d:9f:83:9c:e8:8c:52:cb:3d:32:d5:7c:5c:fa:b8:ff:c6:4c: c4:06:d7:7e:52:a9:fc:e9:c8:36:b0:43:37:e3:0f:2c:36:be: 6d:dd:47:3f:fb:8f:1a:b5:2b:b8:73:10:c2:09:33:3f:16:af: f7:48:8a:86:11:14:70:a0:60:eb:98:24:0d:ac:70:e5:20:ed: c5:31:f7:24:db:3c:d3:b1:24:c9:6c:fd:93:a2:d9:8b:9a:28: 96:04:30:36:21:77:c4:2f:c1:62:f6:c7:b4:47:44:8f:2b:c1: 16:08:34:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fa7aGMfgOLP0lSjGd9FmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNjA1ZDA5YWQyYzZjNDM3YjZjMmY4NjgzZmZmZmJlMjE3 NGZlNmMwHhcNMjUxMjIwMDIwMTM2WhcNMjUxMjIxMDIwMTM2WjAzMTEwLwYDVQQD Eyg4OTE1NTQ5ZTJkY2M1NzliOTAzYjVhODA5Y2Q4MTVlZDRhMmNlOGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5A8VsGpUiKDcbh/krOVGyiDZtUzT 3mLh1r2x614H7u7mGv0/P1QoqwQ9+xHH0hL3mFeY2rriGG2fx8gcLpGwCAlFgf6r s0Pbp0O7DWBEKnM/U7RXPHBQfryXSE91EQl809oaJMNHgGkBzJoN5IckEjD4OtZF VkPdOsOtWAdgZJirv55DfBeoLGVSlpbHfefTsmtpCA9T9GydtHOQcqCYj7zxuZMC 0CjiProWRuySfOsFwixf+9rxNCeCthC78C7WJxjCCWoSve6yGfIFqmWOEiQxQRdY IEyw14Ol/5s3uUkYjY0f8nDB3Kc45i7LO15hjueeMT8d6mDQCBiE/XynEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkVVJ4tzFebkDtagJzYFe1KLOjEMB8GA1UdIwQY MBaAFPFgXQmtLGxDe2wvhoP//74hdP5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFdCZENhMHNiRU43YkMtR2dfX192aUYwX213LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zNmIwNDAtZjU3Yi00YWUyLWFiNDIt MjI4NzMzMjQ1Y2QxLzEvOFdCZENhMHNiRU43YkMtR2dfX192aUYwX213Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8zNmIwNDAtZjU3Yi00YWUyLWFiNDItMjI4NzMzMjQ1Y2Qx LzEvOFdCZENhMHNiRU43YkMtR2dfX192aUYwX213LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfP9w2BX C/zTEiVFzO00uDbMbw/VXpAEC0u7dsuYVjlWtYfGD6+wC0kEHHaD1RYxJQYaLhTu FdxOe6ykvLwuLxTXD1s1zr2DHEHy2ZIUzalQ771P392B5ouz9gzHx/LUrr2ATzu5 1IARI1WkwuvbMmF/P5VdFF6EW0uiX4wKJZXwF6XW+iJI5+Bk8rxTc1JfTZ+DnOiM Uss9MtV8XPq4/8ZMxAbXflKp/OnINrBDN+MPLDa+bd1HP/uPGrUruHMQwgkzPxav 90iKhhEUcKBg65gkDaxw5SDtxTH3JNs807EkyWz9k6LZi5oolgQwNiF3xC/BYvbH tEdEjyvBFgg0GQ== -----END CERTIFICATE-----Generated at Sat Dec 20 10:42:48 2025 by rpki-client