This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft File: 8W6j8DMLITLQ33UvUfDgv-89G64.mft (raw, json) Hash identifier: 0Y4f7JsY4P2y1gvqPxHpweeJKwpzzfhJvmRHfHqoyA0= Subject key identifier: B6:6D:E8:78:A3:3C:A6:BD:14:B3:A7:AF:36:90:EF:82:3D:85:05:FE Authority key identifier: F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE Certificate issuer: /CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae Certificate serial: 019AF1D19C2E4155956FCA714D7009934553 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:00:37 +0000 Manifest this update: Sat 06 Dec 2025 04:00:37 +0000 Manifest next update: Sun 07 Dec 2025 04:00:37 +0000 Files and hashes: 1: 8W6j8DMLITLQ33UvUfDgv-89G64.crl (hash: LCMrpQUGWCsNDHYOmXANrFqXZi0CJlBz+1Q+kmaEybA=) 2: Im2JQRLROW71vKm8r2oO6Xo1LEY.roa (hash: MahGrn/8hOcGcxLx7I6GfG5YqTkwO2eBFakKNoAC1GA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:9c:2e:41:55:95:6f:ca:71:4d:70:09:93:45:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae Validity Not Before: Dec 6 04:00:37 2025 GMT Not After : Dec 7 04:00:37 2025 GMT Subject: CN=b66de878a33ca6bd14b3a7af3690ef823d8505fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:07:89:d1:55:80:f5:ab:c4:de:42:6f:65:93: 1c:6a:8e:72:7b:a7:11:89:5f:74:87:56:1e:13:3b: e2:6d:50:ab:72:b7:6c:50:13:e6:01:3d:f6:ff:ce: 5d:d3:b1:6c:16:cf:3a:9f:4d:ea:11:4d:c4:6a:b5: e0:3d:6d:ce:51:39:33:3c:d3:41:6c:5b:74:e2:63: 3d:7d:cb:52:b5:7c:cd:17:51:17:eb:9b:f0:d7:56: e0:0d:78:66:5f:2a:cd:51:e9:19:8c:54:c2:98:4c: da:2c:57:e3:22:3b:a8:42:41:ae:d5:ba:29:81:a3: d9:72:d6:1a:82:3e:ab:31:e2:18:69:06:e1:05:f5: 2c:16:1e:51:0b:63:55:41:f5:47:4f:cc:f4:53:23: bd:64:44:51:54:1b:9c:5c:6b:ee:1c:ee:0b:59:a2: 3c:35:54:bb:d2:57:23:98:ff:28:c1:e7:46:11:82: b3:32:01:21:7a:8b:d4:c0:25:3f:4e:cb:c7:c1:e3: 53:31:91:f2:0a:4b:de:9b:a8:ea:7e:1f:9a:b1:a3: 4f:4d:32:f3:c8:ba:9d:26:3e:a1:59:64:15:9b:46: 04:1f:26:e6:a0:f6:10:91:e2:2b:82:6e:70:4d:18: b3:9c:d4:85:14:6c:34:e3:85:24:91:ca:cf:46:20: 9a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6D:E8:78:A3:3C:A6:BD:14:B3:A7:AF:36:90:EF:82:3D:85:05:FE X509v3 Authority Key Identifier: keyid:F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:3b:20:cc:07:7d:8f:a5:9f:a9:e7:58:c4:c0:9c:b5:86:ac: bd:d5:9c:6b:12:df:ee:3c:ee:24:2c:b0:0b:31:73:35:44:ab: 8c:70:de:97:e9:b2:71:55:90:b8:9d:14:a6:00:2d:6f:08:bd: d4:59:9d:4d:54:45:f2:c8:e8:b1:e1:a1:9e:49:e6:4b:06:e3: c9:de:af:21:f1:3e:42:b8:ed:b7:3b:1f:b1:e0:5d:36:a6:77: ba:c0:42:37:7f:10:c3:0b:cf:59:87:5c:f5:cd:78:1a:45:e5: 76:de:ef:d3:8f:2f:8c:de:24:97:ad:af:1e:5d:51:f5:60:1a: fc:83:3f:24:19:5e:2f:cf:16:b8:a9:b9:a7:d1:5b:2f:6c:6c: 54:86:81:7f:eb:ba:3d:f2:ef:da:a9:da:5a:cd:2f:b5:4d:3c: 6b:f5:99:19:cc:9b:1c:58:53:3f:57:f2:bb:c3:ba:8f:62:5e: aa:92:b0:71:16:e9:0a:d5:fe:23:0b:38:fb:96:76:3f:6b:3d: f4:fd:19:b8:73:31:1f:fc:f0:6c:c7:83:5d:6b:1c:97:e3:7f: 08:e3:86:dc:57:3b:ad:92:52:5a:4f:cd:f9:59:eb:bf:f0:b3: 1d:9b:9f:56:fd:2e:16:83:4c:d1:b0:b6:65:9f:43:40:b1:75: ea:0e:ab:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZwuQVWVb8pxTXAJk0VTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNmVhM2YwMzMwYjIxMzJkMGRmNzUyZjUxZjBlMGJmZWYz ZDFiYWUwHhcNMjUxMjA2MDQwMDM3WhcNMjUxMjA3MDQwMDM3WjAzMTEwLwYDVQQD EyhiNjZkZTg3OGEzM2NhNmJkMTRiM2E3YWYzNjkwZWY4MjNkODUwNWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgeJ0VWA9avE3kJvZZMcao5ye6cR iV90h1YeEzvibVCrcrdsUBPmAT32/85d07FsFs86n03qEU3EarXgPW3OUTkzPNNB bFt04mM9fctStXzNF1EX65vw11bgDXhmXyrNUekZjFTCmEzaLFfjIjuoQkGu1bop gaPZctYagj6rMeIYaQbhBfUsFh5RC2NVQfVHT8z0UyO9ZERRVBucXGvuHO4LWaI8 NVS70lcjmP8owedGEYKzMgEheovUwCU/TsvHweNTMZHyCkvem6jqfh+asaNPTTLz yLqdJj6hWWQVm0YEHybmoPYQkeIrgm5wTRiznNSFFGw044UkkcrPRiCa0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZt6HijPKa9FLOnrzaQ74I9hQX+MB8GA1UdIwQY MBaAFPFuo/AzCyEy0N91L1Hw4L/vPRuuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFc2ajhETUxJVExRMzNVdlVmRGd2LTg5RzY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lODY2N2EtYjdmZC00ZWE4LWJhZTkt NjAwN2JiYWQ4NmQ2LzEvOFc2ajhETUxJVExRMzNVdlVmRGd2LTg5RzY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9lODY2N2EtYjdmZC00ZWE4LWJhZTktNjAwN2JiYWQ4NmQ2 LzEvOFc2ajhETUxJVExRMzNVdlVmRGd2LTg5RzY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzsgzAd9 j6WfqedYxMCctYasvdWcaxLf7jzuJCywCzFzNUSrjHDel+mycVWQuJ0UpgAtbwi9 1FmdTVRF8sjoseGhnknmSwbjyd6vIfE+QrjttzsfseBdNqZ3usBCN38QwwvPWYdc 9c14GkXldt7v048vjN4kl62vHl1R9WAa/IM/JBleL88WuKm5p9FbL2xsVIaBf+u6 PfLv2qnaWs0vtU08a/WZGcybHFhTP1fyu8O6j2JeqpKwcRbpCtX+Iws4+5Z2P2s9 9P0ZuHMxH/zwbMeDXWscl+N/COOG3Fc7rZJSWk/N+Vnrv/CzHZufVv0uFoNM0bC2 ZZ9DQLF16g6rVg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:57:10 2025 by rpki-client