This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft File: M8Ww18CpzSS3PNy5LIdG6FpKW48.mft (raw, json) Hash identifier: gZn1yiRrtBFnN1eXCXa0ENg81XLaR+Z3a8KpoTIVlCk= Subject key identifier: 4A:54:9A:F4:35:42:2F:C9:51:FF:59:93:08:56:13:FC:10:1C:1B:08 Authority key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F Certificate issuer: /CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f Certificate serial: 019AF31CCAA8DE5B420DFBF11F87A1A2F03A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft Manifest number: 0B87 Signing time: Sat 06 Dec 2025 10:02:21 +0000 Manifest this update: Sat 06 Dec 2025 10:02:21 +0000 Manifest next update: Sun 07 Dec 2025 10:02:21 +0000 Files and hashes: 1: G9IMCDRzOQuPbahdvenWDMel-ec.roa (hash: KIE/h3OnsvTFha1HUMyujy3OIfah+sKBRWCgbRO+mg8=) 2: M8Ww18CpzSS3PNy5LIdG6FpKW48.crl (hash: +7X5GgKpIZYG9ahMPDJtgQXLKrg7cMvFobtnDyzfdgk=) 3: kaCKh69UCH1e8YxXvfDRSIMinp4.roa (hash: 1RbgYWWGOgFXxNNpggiv1pAr13/5f1ITVmQGcqYLD8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:ca:a8:de:5b:42:0d:fb:f1:1f:87:a1:a2:f0:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f Validity Not Before: Dec 6 10:02:21 2025 GMT Not After : Dec 7 10:02:21 2025 GMT Subject: CN=4a549af435422fc951ff5993085613fc101c1b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:90:cb:8d:dc:d3:61:91:54:04:8d:9b:2f:a7: 98:3b:bd:6f:28:40:a4:66:22:c3:bc:fc:f7:dc:34: bd:39:30:12:13:c9:22:dc:50:df:d8:b2:05:d3:d1: b8:0c:02:c3:57:c2:04:0c:c9:24:82:11:eb:ec:9c: b6:3e:45:c0:bd:98:f1:23:52:9b:e7:1e:4a:ee:ea: fb:35:14:b6:45:f2:15:6f:94:74:6d:e9:09:33:d6: fd:36:ea:a3:d5:25:d2:ca:03:76:d2:67:ec:bc:8d: 00:71:7c:3c:e2:4e:61:da:4b:07:fc:53:ee:73:c0: 21:96:85:38:07:f5:09:67:55:94:33:73:8f:46:d4: bb:81:c7:bd:33:1c:55:61:c5:69:7a:ae:d7:c0:cc: 3b:8b:c7:28:27:7b:4c:a8:e9:23:25:a2:00:99:e9: e7:03:f0:9b:ea:53:46:8a:4a:3a:6c:5a:0a:1c:ee: d7:1c:e4:09:83:fe:dd:ae:2c:75:31:4d:e0:94:a0: ff:4e:44:05:4c:dd:cb:8f:fe:12:d4:7e:aa:1b:b3: 9b:79:8c:51:18:f9:15:1e:43:26:14:ee:14:03:ed: 22:a7:c6:97:72:3c:71:3c:12:50:d9:a2:15:20:56: bd:21:8f:0a:3e:c1:32:f0:cd:68:da:c9:cb:dd:63: 7f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:54:9A:F4:35:42:2F:C9:51:FF:59:93:08:56:13:FC:10:1C:1B:08 X509v3 Authority Key Identifier: keyid:33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:79:33:11:fb:e5:0c:46:75:96:8c:f3:98:02:91:00:36:a6: f3:fe:de:55:f3:ed:8e:48:12:d5:c1:96:7f:f6:99:86:34:bc: a8:1b:f1:5e:38:5c:37:83:ee:81:7c:1d:74:92:34:ce:26:20: 21:76:7a:a2:5c:ab:ad:1d:e0:fa:61:45:e2:1d:ab:a9:14:69: 35:16:ba:74:0b:f3:54:ed:36:ec:30:b2:9f:5c:90:4a:0c:8d: 14:b8:e3:72:d1:5f:6a:03:df:5d:35:05:ec:1d:c4:3a:24:0f: f5:a4:ef:c3:3c:4c:92:f9:ed:ca:c4:45:9e:e7:9e:0d:2d:e8: 6e:5f:ed:ea:7c:54:1f:e4:9a:2c:d7:70:07:74:06:73:0e:e1: dc:6b:64:63:07:a3:6a:d6:c1:dc:e8:f1:c9:1b:40:0f:d7:7e: b8:e7:db:72:94:b3:70:80:33:0a:1f:49:de:b4:55:6e:97:ee: 5d:6e:ac:36:62:f5:5f:98:23:cb:ea:92:88:90:24:0d:56:b6: 57:08:7d:b5:3a:bd:20:7d:f4:9e:40:8c:fa:91:f5:1d:f3:00: 59:a9:dc:5b:e1:3a:fa:f1:96:86:bd:95:3d:fb:93:07:4a:2d: 60:35:cc:a4:e9:7f:08:1c:74:13:cd:89:43:76:88:44:bc:71: f6:2b:d4:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHMqo3ltCDfvxH4ehovA6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzViMGQ3YzBhOWNkMjRiNzNjZGNiOTJjODc0NmU4NWE0 YTViOGYwHhcNMjUxMjA2MTAwMjIxWhcNMjUxMjA3MTAwMjIxWjAzMTEwLwYDVQQD Eyg0YTU0OWFmNDM1NDIyZmM5NTFmZjU5OTMwODU2MTNmYzEwMWMxYjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5DLjdzTYZFUBI2bL6eYO71vKECk ZiLDvPz33DS9OTASE8ki3FDf2LIF09G4DALDV8IEDMkkghHr7Jy2PkXAvZjxI1Kb 5x5K7ur7NRS2RfIVb5R0bekJM9b9Nuqj1SXSygN20mfsvI0AcXw84k5h2ksH/FPu c8AhloU4B/UJZ1WUM3OPRtS7gce9MxxVYcVpeq7XwMw7i8coJ3tMqOkjJaIAmenn A/Cb6lNGiko6bFoKHO7XHOQJg/7drix1MU3glKD/TkQFTN3Lj/4S1H6qG7ObeYxR GPkVHkMmFO4UA+0ip8aXcjxxPBJQ2aIVIFa9IY8KPsEy8M1o2snL3WN/nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpUmvQ1Qi/JUf9ZkwhWE/wQHBsIMB8GA1UdIwQY MBaAFDPFsNfAqc0ktzzcuSyHRuhaSluPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNTgxZjQtODQxMC00YTQzLTkxODYt MGZhYjIyNjllYThlLzEvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8yNTgxZjQtODQxMC00YTQzLTkxODYtMGZhYjIyNjllYThl LzEvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb3kzEfvl DEZ1lozzmAKRADam8/7eVfPtjkgS1cGWf/aZhjS8qBvxXjhcN4PugXwddJI0ziYg IXZ6olyrrR3g+mFF4h2rqRRpNRa6dAvzVO027DCyn1yQSgyNFLjjctFfagPfXTUF 7B3EOiQP9aTvwzxMkvntysRFnueeDS3obl/t6nxUH+SaLNdwB3QGcw7h3GtkYwej atbB3OjxyRtAD9d+uOfbcpSzcIAzCh9J3rRVbpfuXW6sNmL1X5gjy+qSiJAkDVa2 Vwh9tTq9IH30nkCM+pH1HfMAWancW+E6+vGWhr2VPfuTB0otYDXMpOl/CBx0E82J Q3aIRLxx9ivUcw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:36 2025 by rpki-client