This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft File: 8gwo0Z4N-1NIJqojqlBq9oowW3o.mft (raw, json) Hash identifier: 41wpl4GaiO0vSPKx2m37xdRgRTeltmVH+j34I+sf53U= Subject key identifier: 76:3F:B9:62:2B:88:7A:A3:21:60:7E:53:F2:7C:F1:60:30:A3:D9:23 Authority key identifier: F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A Certificate issuer: /CN=f20c28d19e0dfb534826aa23aa506af68a305b7a Certificate serial: 019B4438F379D28A0B3D8B9B6F87AB76D58E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft Manifest number: 171E Signing time: Mon 22 Dec 2025 04:02:21 +0000 Manifest this update: Mon 22 Dec 2025 04:02:21 +0000 Manifest next update: Tue 23 Dec 2025 04:02:21 +0000 Files and hashes: 1: 8gwo0Z4N-1NIJqojqlBq9oowW3o.crl (hash: Gb6enysSjBWuri1DjUh2glZ0R0emjcZrLP6Bm+2sWhk=) 2: eCt_o7wQa4uTOlJ8RZzlmDoTQs4.roa (hash: PGIcRqsMSnRyuLEgYQdmyq8FNdFdg9Cwl+Xi/IOiL8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:f3:79:d2:8a:0b:3d:8b:9b:6f:87:ab:76:d5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f20c28d19e0dfb534826aa23aa506af68a305b7a Validity Not Before: Dec 22 04:02:21 2025 GMT Not After : Dec 23 04:02:21 2025 GMT Subject: CN=763fb9622b887aa321607e53f27cf16030a3d923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7c:8b:9f:76:3c:db:e4:40:c3:2b:eb:8a:64: e8:9d:80:66:7d:18:29:a4:6a:b3:44:d8:94:b5:8c: 11:96:36:44:75:6e:be:6b:7e:9e:90:a6:ba:18:9e: ae:d3:c0:58:1f:7d:77:f3:f2:aa:ae:42:e8:30:8e: 20:83:57:64:24:dd:52:ef:77:72:91:4f:6c:34:ae: c4:a7:0e:33:8c:bb:f4:37:bb:43:e0:4c:24:2f:e5: 15:3a:b7:6e:12:1b:09:ea:e7:1b:63:cc:1b:87:0d: db:97:65:d1:de:c3:be:56:60:15:13:1e:0a:d5:9d: 71:35:22:7b:19:46:99:46:f0:f0:e1:29:0f:f4:a0: f9:99:ac:48:7a:3c:7d:f7:bb:04:f8:a4:02:7b:a3: 7e:25:bd:34:34:eb:a1:eb:cb:92:53:09:50:75:ed: 6c:51:cb:c4:3d:ac:66:ba:31:1e:60:80:d6:eb:78: 0f:93:7e:3b:0b:38:8b:6b:2d:e8:b6:4a:2f:7f:33: 60:e4:7d:0e:f0:28:5d:65:99:fd:75:e8:26:9b:81: 40:a8:d8:02:b1:79:59:2c:c0:0c:c4:e3:c8:97:c3: ab:c2:64:26:c7:de:a6:07:df:c5:23:f4:5f:3f:1d: a3:27:76:26:62:60:e0:0c:b1:5e:d5:81:15:18:5c: f1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3F:B9:62:2B:88:7A:A3:21:60:7E:53:F2:7C:F1:60:30:A3:D9:23 X509v3 Authority Key Identifier: keyid:F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:2d:98:eb:0d:f0:fe:d7:e7:2e:9d:f0:bf:f6:e3:de:64:f9: c8:17:e7:1a:90:c6:6e:3a:75:bd:6d:98:32:99:58:95:39:1d: d4:03:20:52:6a:9d:26:f6:39:04:49:91:00:1b:03:6c:60:8e: b2:4d:e4:00:97:ac:20:3d:ca:55:ee:35:e4:a7:4d:a6:c7:b4: 06:ec:55:4a:11:6c:d6:4a:c9:9d:22:6d:8f:ff:a9:c0:57:d5: 72:1a:c5:d1:b8:57:ea:4e:71:10:bd:60:86:ed:c4:9e:c9:00: 8a:a3:b7:22:67:cd:77:70:78:58:48:fe:0c:71:06:a4:f9:c7: 47:46:2d:6b:54:f4:b2:fe:f5:91:9b:6d:8f:d5:87:94:1d:01: 8b:90:78:2f:cc:41:c2:67:83:e6:6e:7c:23:b7:d9:e0:ac:e5: fd:d0:db:ba:d9:4a:4e:aa:d1:f7:0c:93:07:73:61:8c:fa:77: fd:09:62:45:dd:8d:00:7d:2b:86:81:09:4e:48:1b:2b:8f:c3: 27:47:24:37:0a:96:6a:75:7a:b9:45:d1:44:4a:1b:65:ba:61: 05:fa:6b:9b:64:c9:3a:8e:c4:c5:48:07:e6:95:f6:8f:3a:0e: 74:3d:f3:77:d4:45:5e:2e:1b:8d:f0:4a:85:60:95:ac:53:fa: f8:8f:be:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOPN50ooLPYubb4erdtWOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMGMyOGQxOWUwZGZiNTM0ODI2YWEyM2FhNTA2YWY2OGEz MDViN2EwHhcNMjUxMjIyMDQwMjIxWhcNMjUxMjIzMDQwMjIxWjAzMTEwLwYDVQQD Eyg3NjNmYjk2MjJiODg3YWEzMjE2MDdlNTNmMjdjZjE2MDMwYTNkOTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXyLn3Y82+RAwyvrimTonYBmfRgp pGqzRNiUtYwRljZEdW6+a36ekKa6GJ6u08BYH3138/KqrkLoMI4gg1dkJN1S73dy kU9sNK7Epw4zjLv0N7tD4EwkL+UVOrduEhsJ6ucbY8wbhw3bl2XR3sO+VmAVEx4K 1Z1xNSJ7GUaZRvDw4SkP9KD5maxIejx997sE+KQCe6N+Jb00NOuh68uSUwlQde1s UcvEPaxmujEeYIDW63gPk347CziLay3otkovfzNg5H0O8ChdZZn9degmm4FAqNgC sXlZLMAMxOPIl8OrwmQmx96mB9/FI/RfPx2jJ3YmYmDgDLFe1YEVGFzxlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHY/uWIriHqjIWB+U/J88WAwo9kjMB8GA1UdIwQY MBaAFPIMKNGeDftTSCaqI6pQavaKMFt6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGd3bzBaNE4tMU5JSnFvanFsQnE5b293VzNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMDdlMTgtMmM2YS00OTMwLWJlMTct ZTVkN2YyZGRkNGMyLzEvOGd3bzBaNE4tMU5JSnFvanFsQnE5b293VzNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hMDdlMTgtMmM2YS00OTMwLWJlMTctZTVkN2YyZGRkNGMy LzEvOGd3bzBaNE4tMU5JSnFvanFsQnE5b293VzNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUC2Y6w3w /tfnLp3wv/bj3mT5yBfnGpDGbjp1vW2YMplYlTkd1AMgUmqdJvY5BEmRABsDbGCO sk3kAJesID3KVe415KdNpse0BuxVShFs1krJnSJtj/+pwFfVchrF0bhX6k5xEL1g hu3EnskAiqO3ImfNd3B4WEj+DHEGpPnHR0Yta1T0sv71kZttj9WHlB0Bi5B4L8xB wmeD5m58I7fZ4Kzl/dDbutlKTqrR9wyTB3NhjPp3/QliRd2NAH0rhoEJTkgbK4/D J0ckNwqWanV6uUXRREobZbphBfprm2TJOo7ExUgH5pX2jzoOdD3zd9RFXi4bjfBK hWCVrFP6+I++YQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:31:39 2025 by rpki-client