This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft File: 8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft (raw, json) Hash identifier: V1PUY1hpJpr/j4C8/4VZQ3/5e9Q/H6jw97WHLZUaE3Q= Subject key identifier: EA:41:C3:F3:0C:F7:CE:1B:40:DB:3A:31:6F:A6:11:A4:00:1C:93:5B Authority key identifier: F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02 Certificate issuer: /CN=f16090c5f6233cbaeaf319dcfae692a956eea102 Certificate serial: 019AF389C6661EA476140E01EE3611B89C13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 12:01:23 +0000 Manifest this update: Sat 06 Dec 2025 12:01:23 +0000 Manifest next update: Sun 07 Dec 2025 12:01:23 +0000 Files and hashes: 1: 7Kmoa0mTT-hmQesiS2Vd310k5jw.roa (hash: USbTJdTp4AkhAgtWaDPdpVWCdumqCodGAPlzgsbWpqI=) 2: 8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl (hash: inI/VbELNmpk8Upa62QK+uGHalQ8Dy5aSaIZeYtxyak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:c6:66:1e:a4:76:14:0e:01:ee:36:11:b8:9c:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f16090c5f6233cbaeaf319dcfae692a956eea102 Validity Not Before: Dec 6 12:01:23 2025 GMT Not After : Dec 7 12:01:23 2025 GMT Subject: CN=ea41c3f30cf7ce1b40db3a316fa611a4001c935b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:31:09:0e:eb:19:7a:ad:21:d3:8f:12:ca:c0: 1a:c8:7a:c1:23:8e:da:e9:83:ab:49:b2:ad:ba:6b: 13:41:30:c5:3b:ff:31:36:8f:88:6e:69:f9:15:96: 83:42:40:f0:56:df:b6:0f:35:a2:66:2d:49:42:de: 46:e0:3e:5f:0c:3a:52:c5:ab:ac:1f:05:1e:a3:3d: 4d:8b:bc:ee:51:6b:c2:ae:03:5c:38:48:c3:03:cd: 0d:f1:e1:dd:9e:6f:36:62:35:8b:3e:bd:dc:a5:e4: 3e:d8:1b:c6:80:20:04:6a:f4:11:f0:d5:d2:1e:44: d2:b8:c6:70:fb:20:50:91:8f:2d:f6:86:bf:26:49: cc:b1:ad:85:f7:6b:a1:af:0b:bd:ae:54:5e:9d:09: b9:ef:d6:03:97:de:d5:48:79:f2:2f:f2:97:57:0a: 73:42:c0:7a:69:bf:5d:ac:4c:c2:fd:c8:98:ea:c3: b0:9b:3a:1d:b9:d0:0f:7d:8a:86:aa:a1:9d:90:d4: b5:6f:56:8f:09:18:00:b5:0e:07:74:9f:fd:91:3e: 90:7b:5f:d0:c0:0c:47:63:ff:e5:07:a6:96:e3:6f: b8:72:89:44:db:f1:16:25:d5:6e:f2:8e:70:7d:5b: b4:ec:cd:45:55:89:0a:92:ff:56:22:13:6b:56:f8: 47:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:41:C3:F3:0C:F7:CE:1B:40:DB:3A:31:6F:A6:11:A4:00:1C:93:5B X509v3 Authority Key Identifier: keyid:F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a4:ec:cf:41:10:63:63:d9:01:42:96:9e:64:25:42:dd:1c: 8d:da:09:d8:3a:b6:e5:43:6a:33:7a:31:da:ee:13:29:04:e5: 36:f0:e7:bd:8a:cf:34:d6:ff:22:d0:6f:ee:52:e4:7e:ca:cd: ed:92:8a:6c:af:9a:86:b8:9c:5e:2c:94:6a:46:b0:24:cf:5c: f5:9c:3a:b2:66:fb:59:a9:88:ec:2f:99:09:1b:68:f5:37:ad: 3c:cd:0b:9e:6a:54:98:6e:9c:c1:cd:9d:8d:88:04:30:09:a9: f7:64:39:82:d6:63:53:2c:b0:f0:66:8c:33:7a:eb:95:7f:fd: 5e:ce:83:69:26:14:f5:51:f4:06:6c:6f:cc:12:d2:a3:99:31: f6:8c:c7:f1:8b:67:40:ba:94:fd:d1:17:9c:03:93:fd:f0:df: 7b:0d:8d:e7:04:bd:e2:a8:49:82:ba:9b:2e:1d:0f:ee:78:91: 6b:37:ff:19:9f:f1:ec:48:66:7b:2b:91:e8:cb:89:ee:5f:14: c9:84:4a:f5:89:be:3d:10:64:2d:7f:74:33:b7:7c:4b:f8:42: be:bd:cb:20:c3:65:28:7b:02:dd:78:ad:b4:a5:20:2f:40:d7: 34:e2:8b:0c:2f:3a:b5:52:da:e0:37:a9:2f:89:82:74:ab:42: d5:53:03:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzicZmHqR2FA4B7jYRuJwTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNjA5MGM1ZjYyMzNjYmFlYWYzMTlkY2ZhZTY5MmE5NTZl ZWExMDIwHhcNMjUxMjA2MTIwMTIzWhcNMjUxMjA3MTIwMTIzWjAzMTEwLwYDVQQD EyhlYTQxYzNmMzBjZjdjZTFiNDBkYjNhMzE2ZmE2MTFhNDAwMWM5MzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DEJDusZeq0h048SysAayHrBI47a 6YOrSbKtumsTQTDFO/8xNo+Ibmn5FZaDQkDwVt+2DzWiZi1JQt5G4D5fDDpSxaus HwUeoz1Ni7zuUWvCrgNcOEjDA80N8eHdnm82YjWLPr3cpeQ+2BvGgCAEavQR8NXS HkTSuMZw+yBQkY8t9oa/JknMsa2F92uhrwu9rlRenQm579YDl97VSHnyL/KXVwpz QsB6ab9drEzC/ciY6sOwmzodudAPfYqGqqGdkNS1b1aPCRgAtQ4HdJ/9kT6Qe1/Q wAxHY//lB6aW42+4colE2/EWJdVu8o5wfVu07M1FVYkKkv9WIhNrVvhHUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpBw/MM984bQNs6MW+mEaQAHJNbMB8GA1UdIwQY MBaAFPFgkMX2Izy66vMZ3PrmkqlW7qECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFdDUXhmWWpQTHJxOHhuYy11YVNxVmJ1b1FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jYmFjMDgtYzExZS00ODA2LWEyZmQt N2M4OGM0ZTA0ZjkxLzEvOFdDUXhmWWpQTHJxOHhuYy11YVNxVmJ1b1FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jYmFjMDgtYzExZS00ODA2LWEyZmQtN2M4OGM0ZTA0Zjkx LzEvOFdDUXhmWWpQTHJxOHhuYy11YVNxVmJ1b1FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6Tsz0EQ Y2PZAUKWnmQlQt0cjdoJ2Dq25UNqM3ox2u4TKQTlNvDnvYrPNNb/ItBv7lLkfsrN 7ZKKbK+ahricXiyUakawJM9c9Zw6smb7WamI7C+ZCRto9TetPM0LnmpUmG6cwc2d jYgEMAmp92Q5gtZjUyyw8GaMM3rrlX/9Xs6DaSYU9VH0BmxvzBLSo5kx9ozH8Ytn QLqU/dEXnAOT/fDfew2N5wS94qhJgrqbLh0P7niRazf/GZ/x7EhmeyuR6MuJ7l8U yYRK9Ym+PRBkLX90M7d8S/hCvr3LIMNlKHsC3XittKUgL0DXNOKLDC86tVLa4Dep L4mCdKtC1VMDsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:26:47 2025 by rpki-client