This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft File: w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft (raw, json) Hash identifier: VMjeQALTzj30LG56vYn9BarPbBw5w2719r+TOSrmrlA= Subject key identifier: BF:73:38:7F:69:32:91:69:AE:46:8E:2E:9B:AE:3B:84:55:F3:60:E5 Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F Certificate issuer: /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f Certificate serial: 019B397DCC4ACB524CC6452F43B62F2CD00E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft Manifest number: 1795 Signing time: Sat 20 Dec 2025 02:01:44 +0000 Manifest this update: Sat 20 Dec 2025 02:01:44 +0000 Manifest next update: Sun 21 Dec 2025 02:01:44 +0000 Files and hashes: 1: 1boXTnOi8yL5Hll7tfY-9_7bPY4.roa (hash: KPR+ZDFPh0t0TA0879PU7vOzqYh+MAaViQePiv4fMCU=) 2: 2BUGtHga-91WOayxMZ7EN3sAoUE.roa (hash: 40eNzoOdvf9iy0CU470Iq6VAmpCnU36Mg3hoCFP9r9Q=) 3: Ka5Exl1GeddcELNpCklBpS5TlPs.roa (hash: kRYcEd/x8/mlJ+CtYhq56IHy4jqYQVlovD2KG8xYqY4=) 4: i5mGJT0yJZDnIoQ1wNKAWKtKyaQ.roa (hash: RYHnkpcFD3LGUlEQEfMbI20B/0yaDUu4RMrbiJV8nWc=) 5: i88zMmXzCBoDMfGPSbM5OiNgXEw.roa (hash: 6iGdBiaP+5LlV9eR+5c4Z/1rG+HN7bLDtInFrN8ONTs=) 6: w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl (hash: poGnH0QFEG72hgveD/L1pPPSPd/lmX+24cmzOjGdg4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:cc:4a:cb:52:4c:c6:45:2f:43:b6:2f:2c:d0:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f Validity Not Before: Dec 20 02:01:44 2025 GMT Not After : Dec 21 02:01:44 2025 GMT Subject: CN=bf73387f69329169ae468e2e9bae3b8455f360e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dd:f3:c6:10:54:f1:db:7a:be:9f:a1:f3:30: 2e:74:6d:c6:0c:ad:39:d5:a1:1b:a5:06:cd:0c:ff: 77:98:55:92:46:4c:b3:aa:2a:12:5b:5e:e2:ed:e1: 55:f0:0f:c1:b0:54:38:09:37:f3:40:bf:2e:d4:0f: 04:17:8a:d7:f5:72:7d:93:43:45:10:53:06:2a:98: 09:ab:39:11:bd:4d:02:24:35:34:11:2a:2b:8c:09: c0:b7:15:15:ae:82:bc:30:a7:25:e9:bb:48:bd:bb: b5:cf:f6:c7:fe:02:7c:8c:12:72:69:fb:a2:4c:e5: c5:80:11:02:7c:41:26:02:9a:87:44:9c:1a:e7:29: 73:c0:ed:2d:69:a8:c7:68:b8:23:4d:ec:8d:06:33: 9f:fc:81:90:65:28:ce:80:38:ba:2d:65:76:aa:5d: a4:b9:f4:3d:c5:a4:3a:0e:a0:6d:41:3b:0c:b0:bb: 17:34:8c:00:d5:32:00:76:c5:58:63:74:8d:f3:b5: a3:e5:7c:24:4d:87:84:92:55:11:2a:70:3c:62:9a: 93:61:6f:ad:d2:5d:3a:bf:27:82:f4:81:77:9a:f8: 0a:64:60:1f:82:b7:91:6f:9a:ae:a0:02:79:f4:17: 13:14:16:98:b5:0e:f5:e0:c5:f6:d8:98:65:c5:4c: ec:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:73:38:7F:69:32:91:69:AE:46:8E:2E:9B:AE:3B:84:55:F3:60:E5 X509v3 Authority Key Identifier: keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:0b:ab:ff:92:b1:1c:b5:52:50:e1:11:8b:cf:df:8e:f0:90: 10:e9:5e:de:01:3e:21:d3:89:59:03:e8:12:98:7b:1c:7d:c1: f6:6d:ab:7a:8a:81:28:c5:7f:0d:3e:42:1c:bf:af:ae:2f:85: b4:79:74:d9:e8:f0:df:17:56:e6:6f:48:2f:89:a7:28:82:15: eb:5e:5e:71:47:51:a4:11:f3:9b:dd:eb:aa:a6:38:85:06:61: bb:47:5d:29:4e:8c:c9:80:57:ea:d2:25:db:d7:2f:74:8e:b7: 0e:e1:38:9e:29:83:27:f4:d0:d7:11:39:cc:ec:56:0e:60:7f: 97:ee:9f:42:f4:c4:c9:bd:7f:6d:c1:26:ac:1b:84:cb:9f:10: b6:7b:ce:6f:9b:da:f7:b5:3c:25:60:d2:6b:b0:d8:3c:60:ea: 33:ac:f8:eb:52:f4:64:51:2c:2d:36:1b:b9:b8:d3:03:bf:b0: 54:6e:d0:a1:21:40:db:82:cb:17:1e:ca:4f:84:9f:79:bf:48: bf:49:d6:66:12:31:74:ff:c4:94:74:d7:a2:b2:99:1a:05:bc: cf:de:16:dd:85:ef:cd:4a:27:e6:79:10:d1:ad:cc:b5:0c:23: 28:09:55:50:76:ee:36:a9:47:da:ca:3d:d6:48:92:80:6d:14: e1:d3:70:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fcxKy1JMxkUvQ7YvLNAOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzA1OTFlMmViNDlkMDU1OWU2ZmNlN2VlMmFhODFmMGY1 OWJhNmYwHhcNMjUxMjIwMDIwMTQ0WhcNMjUxMjIxMDIwMTQ0WjAzMTEwLwYDVQQD EyhiZjczMzg3ZjY5MzI5MTY5YWU0NjhlMmU5YmFlM2I4NDU1ZjM2MGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd3zxhBU8dt6vp+h8zAudG3GDK05 1aEbpQbNDP93mFWSRkyzqioSW17i7eFV8A/BsFQ4CTfzQL8u1A8EF4rX9XJ9k0NF EFMGKpgJqzkRvU0CJDU0ESorjAnAtxUVroK8MKcl6btIvbu1z/bH/gJ8jBJyafui TOXFgBECfEEmApqHRJwa5ylzwO0taajHaLgjTeyNBjOf/IGQZSjOgDi6LWV2ql2k ufQ9xaQ6DqBtQTsMsLsXNIwA1TIAdsVYY3SN87Wj5XwkTYeEklURKnA8YpqTYW+t 0l06vyeC9IF3mvgKZGAfgreRb5quoAJ59BcTFBaYtQ714MX22JhlxUzsqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9zOH9pMpFprkaOLpuuO4RV82DlMB8GA1UdIwQY MBaAFMPAWR4utJ0FWeb85+4qqB8PWbpvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80YjhhYWItMjA5OS00M2FmLWI0MWQt ZTM0MDcxNzQ2NjNiLzEvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy80YjhhYWItMjA5OS00M2FmLWI0MWQtZTM0MDcxNzQ2NjNi LzEvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqAur/5Kx HLVSUOERi8/fjvCQEOle3gE+IdOJWQPoEph7HH3B9m2reoqBKMV/DT5CHL+vri+F tHl02ejw3xdW5m9IL4mnKIIV615ecUdRpBHzm93rqqY4hQZhu0ddKU6MyYBX6tIl 29cvdI63DuE4nimDJ/TQ1xE5zOxWDmB/l+6fQvTEyb1/bcEmrBuEy58QtnvOb5va 97U8JWDSa7DYPGDqM6z461L0ZFEsLTYbubjTA7+wVG7QoSFA24LLFx7KT4Sfeb9I v0nWZhIxdP/ElHTXorKZGgW8z94W3YXvzUon5nkQ0a3MtQwjKAlVUHbuNqlH2so9 1kiSgG0U4dNwUw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:35:31 2025 by rpki-client