This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json) Hash identifier: Hh+cFJquswZXoZxJQMdPW2pzPess9vmoINSYQW8wRNo= Subject key identifier: 68:21:58:97:DF:47:BB:DE:B7:DF:F5:A6:B7:B3:F1:37:66:05:A6:B6 Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29 Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429 Certificate serial: 019AF50AB881FAE3DB562EFC02B6E621FC36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft Manifest number: 08E2 Signing time: Sat 06 Dec 2025 19:01:51 +0000 Manifest this update: Sat 06 Dec 2025 19:01:51 +0000 Manifest next update: Sun 07 Dec 2025 19:01:51 +0000 Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: CnrfiDBXXZt46w61q3rQ3StkZi73DhRCpf0Ar0GFD4M=) 2: KzntsBKC6xHsM4irrwPpJqTMjrE.roa (hash: rsuAHxEKxQodmj4NlR88Fkx1NvrEvEln4AFpUG54lbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:b8:81:fa:e3:db:56:2e:fc:02:b6:e6:21:fc:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429 Validity Not Before: Dec 6 19:01:51 2025 GMT Not After : Dec 7 19:01:51 2025 GMT Subject: CN=68215897df47bbdeb7dff5a6b7b3f1376605a6b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b2:ed:0e:2e:20:5d:2a:8c:a3:a3:fb:ad:b5: 50:75:61:b4:ca:4c:3a:51:70:b7:7e:d4:99:59:07: e5:71:02:b4:17:42:8d:50:37:d1:9d:ab:56:d0:f8: 1a:c8:92:75:f3:ac:3c:8c:aa:c3:02:7b:a3:20:68: 70:b3:a0:29:0d:94:35:4d:15:de:77:e4:42:11:c8: 42:94:84:9f:a5:fd:73:c2:98:6d:74:85:80:dd:78: b9:8e:c9:8f:a0:65:8c:88:1f:95:48:36:9a:5c:23: 76:69:47:89:6d:29:5b:36:7d:26:39:1e:20:f0:07: da:e4:fe:38:ac:d5:4a:78:fd:17:03:8f:53:56:50: 45:d5:4f:64:67:b5:5f:aa:11:48:b3:02:0a:d0:5f: 0e:1f:af:25:60:eb:57:36:db:06:d5:7e:e8:04:7d: 8b:f3:20:30:87:24:6a:07:4f:58:2c:7e:c7:43:a4: 31:3c:98:07:04:a9:14:4b:42:49:cf:24:e7:b6:15: 0c:7c:f2:88:ad:66:64:f7:e4:6d:f6:85:44:c6:8a: 5e:32:bf:5b:0c:8d:73:ee:f4:d9:11:1c:1d:0d:21: 08:41:96:e6:de:fe:2f:81:45:af:46:a3:3e:1a:d3: fd:84:6a:3d:12:f7:21:4b:d8:4a:18:16:30:ec:ea: a6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:21:58:97:DF:47:BB:DE:B7:DF:F5:A6:B7:B3:F1:37:66:05:A6:B6 X509v3 Authority Key Identifier: keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:04:fb:84:a0:72:59:05:84:07:56:7e:27:13:b0:e7:2c:27: 95:cd:18:b8:31:34:43:4b:62:05:98:7e:cd:1e:1c:83:b3:8e: 5a:15:7d:e5:e0:d3:1b:ae:13:6a:b6:38:5b:a9:8f:21:f7:ef: 7d:af:0f:30:68:f1:19:0e:06:32:d6:ae:00:b9:cb:07:81:65: 7d:32:2e:74:f4:d3:73:ee:df:40:d5:30:de:a0:7a:3b:b2:94: dd:3a:6e:31:eb:25:f4:60:6c:8c:7f:54:e8:4d:84:8d:f9:08: cb:ce:bf:85:67:d3:66:d1:7e:3e:2c:d4:bf:d3:01:2e:3d:38: 9f:0a:c1:4b:36:de:7d:a0:21:22:51:d6:02:06:0c:88:f2:c9: 53:73:1f:90:43:d4:5b:76:94:a6:cf:e1:eb:f7:67:53:aa:c8: c4:23:8e:39:81:ab:f4:4a:26:17:e1:38:b1:50:a8:d6:a0:3b: c4:90:72:26:ee:79:35:a4:e2:03:d5:f2:11:5c:3c:8e:a6:d3: 1d:54:c3:11:d2:fc:bb:5d:b7:90:9a:60:bc:e1:91:fe:dd:0d: 2a:f9:42:7e:33:00:2c:08:68:79:d8:d9:94:4c:79:48:7f:86: 02:52:ee:b7:e3:28:dc:f5:fc:12:00:f6:e1:80:e5:3b:c6:cd: 23:09:f0:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CriB+uPbVi78ArbmIfw2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNjIyNWE1MDA0NTRlNjJmMWQyNTI1M2JhN2EyZDhjMWUy NTQ0MjkwHhcNMjUxMjA2MTkwMTUxWhcNMjUxMjA3MTkwMTUxWjAzMTEwLwYDVQQD Eyg2ODIxNTg5N2RmNDdiYmRlYjdkZmY1YTZiN2IzZjEzNzY2MDVhNmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbLtDi4gXSqMo6P7rbVQdWG0ykw6 UXC3ftSZWQflcQK0F0KNUDfRnatW0PgayJJ186w8jKrDAnujIGhws6ApDZQ1TRXe d+RCEchClISfpf1zwphtdIWA3Xi5jsmPoGWMiB+VSDaaXCN2aUeJbSlbNn0mOR4g 8Afa5P44rNVKeP0XA49TVlBF1U9kZ7VfqhFIswIK0F8OH68lYOtXNtsG1X7oBH2L 8yAwhyRqB09YLH7HQ6QxPJgHBKkUS0JJzyTnthUMfPKIrWZk9+Rt9oVExopeMr9b DI1z7vTZERwdDSEIQZbm3v4vgUWvRqM+GtP9hGo9EvchS9hKGBYw7OqmGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGghWJffR7vet9/1prez8TdmBaa2MB8GA1UdIwQY MBaAFPFiJaUARU5i8dJSU7p6LYweJUQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmIt NTZmYWRjOTJlNDAwLzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmItNTZmYWRjOTJlNDAw LzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgT7hKBy WQWEB1Z+JxOw5ywnlc0YuDE0Q0tiBZh+zR4cg7OOWhV95eDTG64TarY4W6mPIffv fa8PMGjxGQ4GMtauALnLB4FlfTIudPTTc+7fQNUw3qB6O7KU3TpuMesl9GBsjH9U 6E2EjfkIy86/hWfTZtF+PizUv9MBLj04nwrBSzbefaAhIlHWAgYMiPLJU3MfkEPU W3aUps/h6/dnU6rIxCOOOYGr9EomF+E4sVCo1qA7xJByJu55NaTiA9XyEVw8jqbT HVTDEdL8u123kJpgvOGR/t0NKvlCfjMALAhoedjZlEx5SH+GAlLut+Mo3PX8EgD2 4YDlO8bNIwnw6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 23:55:21 2025 by rpki-client