This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json) Hash identifier: IYnvxBU3BNqW1lRVgliTeJ6Ub6kP+B04uHBwGtg/ikk= Subject key identifier: 91:D2:AE:CD:F6:E7:5B:A1:8C:D4:95:F9:6C:BF:1A:9E:A6:28:3E:20 Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29 Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429 Certificate serial: 019B3C7E98675BB4FE186A313814FFBD2987 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft Manifest number: 0907 Signing time: Sat 20 Dec 2025 16:01:28 +0000 Manifest this update: Sat 20 Dec 2025 16:01:28 +0000 Manifest next update: Sun 21 Dec 2025 16:01:28 +0000 Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: dKsrOd91yAyiYkIodT6XwOtEyQhOnu8+03p4Ts/YrDc=) 2: KzntsBKC6xHsM4irrwPpJqTMjrE.roa (hash: rsuAHxEKxQodmj4NlR88Fkx1NvrEvEln4AFpUG54lbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:98:67:5b:b4:fe:18:6a:31:38:14:ff:bd:29:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429 Validity Not Before: Dec 20 16:01:28 2025 GMT Not After : Dec 21 16:01:28 2025 GMT Subject: CN=91d2aecdf6e75ba18cd495f96cbf1a9ea6283e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e5:eb:dd:f6:fd:4c:f0:1d:ff:61:b7:99:b3: c8:1d:cb:9e:cc:fa:52:70:05:79:53:12:51:24:6f: 85:d5:b5:4e:3b:da:c7:30:49:a6:61:00:b0:88:58: d2:bc:0c:42:43:b7:d6:0c:35:74:7a:cf:45:ac:70: 5d:89:c3:b4:8e:d6:bf:12:a0:a1:26:1e:99:6d:5a: 72:e6:5d:11:b8:59:8f:14:cb:6e:d3:9f:cd:eb:6d: 84:ca:25:b5:b6:70:70:e3:34:73:d3:da:cb:e2:a7: db:8f:df:d4:18:40:cd:08:6e:ad:da:34:59:b9:60: f4:96:ae:92:60:bc:28:dd:eb:f1:37:d2:e0:f6:dc: 9d:67:47:ea:3c:75:c2:23:3e:ba:e9:d0:56:89:02: 43:f0:9c:a7:2b:21:86:5c:e5:41:1d:f4:09:c5:5f: 4b:f8:ec:bd:ed:00:f2:b8:b8:a6:d0:11:45:06:29: 2b:cb:3d:cf:5a:93:d4:35:2e:15:a9:56:80:cd:28: 2d:65:b1:4d:54:cf:b2:23:fc:1e:08:39:d9:36:ff: c6:ee:8a:5b:e4:23:66:95:e2:de:30:1c:c3:30:b8: 6a:45:14:7f:78:94:85:a2:1a:6b:d6:29:29:ee:f7: 57:c5:13:d0:47:2f:f5:fc:42:23:c0:0f:30:2d:2c: c5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D2:AE:CD:F6:E7:5B:A1:8C:D4:95:F9:6C:BF:1A:9E:A6:28:3E:20 X509v3 Authority Key Identifier: keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:16:37:11:ee:f8:6f:8f:82:94:65:69:cc:05:98:3d:72:fa: 9e:7a:6c:a7:4f:ed:a1:be:4c:50:53:40:be:01:fe:af:23:48: e0:ac:3d:e6:cc:0e:c6:93:0b:13:41:26:9a:05:57:6e:20:01: b9:eb:6b:86:c8:60:c9:ad:dc:76:fc:0d:d0:ae:59:8f:22:ed: 73:ee:5e:e8:e0:ef:86:8f:d1:c7:91:b1:ac:f0:1c:1b:56:45: aa:0a:96:48:40:7c:7d:a9:11:8d:e4:ff:ce:30:13:fe:fb:84: b7:98:5e:71:6f:ab:7f:35:ac:42:57:5b:af:52:74:c7:49:9e: 5e:9b:bf:3a:f9:d7:b0:85:29:a3:fd:7e:01:a2:81:ca:33:3a: 53:f3:67:f6:19:5d:59:65:38:a3:45:ab:e4:a3:47:d3:8e:6a: a6:9f:29:40:ae:22:07:d9:81:13:63:1a:9b:62:b3:75:69:88: 5d:78:06:da:15:f5:e5:77:f5:81:e4:92:d1:ea:44:27:fe:c2: 99:84:35:ba:08:66:88:32:cd:a4:b0:ea:74:47:18:41:19:5c: aa:f8:15:1d:63:a7:ac:01:16:35:e2:cc:56:af:80:b3:c8:ca: 3c:db:4e:a5:86:3b:f7:40:3c:a8:2c:bc:dd:e5:06:a6:54:bf: fb:09:25:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fphnW7T+GGoxOBT/vSmHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNjIyNWE1MDA0NTRlNjJmMWQyNTI1M2JhN2EyZDhjMWUy NTQ0MjkwHhcNMjUxMjIwMTYwMTI4WhcNMjUxMjIxMTYwMTI4WjAzMTEwLwYDVQQD Eyg5MWQyYWVjZGY2ZTc1YmExOGNkNDk1Zjk2Y2JmMWE5ZWE2MjgzZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOXr3fb9TPAd/2G3mbPIHcuezPpS cAV5UxJRJG+F1bVOO9rHMEmmYQCwiFjSvAxCQ7fWDDV0es9FrHBdicO0jta/EqCh Jh6ZbVpy5l0RuFmPFMtu05/N622EyiW1tnBw4zRz09rL4qfbj9/UGEDNCG6t2jRZ uWD0lq6SYLwo3evxN9Lg9tydZ0fqPHXCIz666dBWiQJD8JynKyGGXOVBHfQJxV9L +Oy97QDyuLim0BFFBikryz3PWpPUNS4VqVaAzSgtZbFNVM+yI/weCDnZNv/G7opb 5CNmleLeMBzDMLhqRRR/eJSFohpr1ikp7vdXxRPQRy/1/EIjwA8wLSzFSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHSrs3251uhjNSV+Wy/Gp6mKD4gMB8GA1UdIwQY MBaAFPFiJaUARU5i8dJSU7p6LYweJUQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmIt NTZmYWRjOTJlNDAwLzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmItNTZmYWRjOTJlNDAw LzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxY3Ee74 b4+ClGVpzAWYPXL6nnpsp0/tob5MUFNAvgH+ryNI4Kw95swOxpMLE0EmmgVXbiAB uetrhshgya3cdvwN0K5ZjyLtc+5e6ODvho/Rx5GxrPAcG1ZFqgqWSEB8fakRjeT/ zjAT/vuEt5hecW+rfzWsQldbr1J0x0meXpu/OvnXsIUpo/1+AaKByjM6U/Nn9hld WWU4o0Wr5KNH045qpp8pQK4iB9mBE2Mam2KzdWmIXXgG2hX15Xf1geSS0epEJ/7C mYQ1ughmiDLNpLDqdEcYQRlcqvgVHWOnrAEWNeLMVq+As8jKPNtOpYY790A8qCy8 3eUGplS/+wkl0A== -----END CERTIFICATE-----Generated at Sat Dec 20 22:14:56 2025 by rpki-client