This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft File: RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft (raw, json) Hash identifier: MHZO5aAJjj/nY/ADR7gLIySyj2eqWh9fhpJQbkxE2vw= Subject key identifier: 15:06:91:7E:EE:9D:DC:C3:3B:98:A4:2B:BD:A1:20:5C:3D:E5:0E:C5 Authority key identifier: 44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62 Certificate issuer: /CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62 Certificate serial: 019AF12DF153BA1E0E2EA87DA56E6F13905F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:01:51 +0000 Manifest this update: Sat 06 Dec 2025 01:01:51 +0000 Manifest next update: Sun 07 Dec 2025 01:01:51 +0000 Files and hashes: 1: RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl (hash: dKk9+6Iy26ZTlL+Xaj6PaSW20PwqCyDW2sbtCNUQCBQ=) 2: eIPu-oRSt6i1dIgnDCklFRUAlSQ.roa (hash: Sgde8KLLocp16u9bpO8WIWMRQrBpRylsfdhGYkOvJ1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f1:53:ba:1e:0e:2e:a8:7d:a5:6e:6f:13:90:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62 Validity Not Before: Dec 6 01:01:51 2025 GMT Not After : Dec 7 01:01:51 2025 GMT Subject: CN=1506917eee9ddcc33b98a42bbda1205c3de50ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:f0:c9:38:a9:3c:0d:01:8e:5c:62:66:a8:0e: 44:81:0a:46:6e:0d:7a:81:2d:ff:82:30:96:f9:d0: 19:41:2b:92:6a:b1:85:8d:f7:d0:0b:64:e2:dd:9d: 4f:0f:45:98:49:d7:db:2b:53:cf:1b:76:53:c0:3f: 81:83:af:49:c9:57:f5:bc:2c:fa:ce:5e:02:68:2f: c2:ae:f9:f9:6f:53:ed:b4:a8:b0:9d:5b:63:aa:d5: 1a:3e:11:ab:a2:53:4c:4f:93:1e:3a:8c:b7:4f:f5: 1f:75:39:2f:81:71:24:b0:95:e6:7b:20:83:46:2f: c1:26:c7:72:ca:f6:39:1b:f9:3c:c7:34:25:f0:b9: 70:28:78:df:30:18:a8:e9:03:98:f0:8f:fe:0c:77: 54:4e:a9:5b:5d:5a:ab:49:fe:5f:d1:45:69:86:b9: 66:d8:fd:d8:f1:47:3a:a7:5b:96:a5:48:d0:33:30: c4:eb:f5:df:8c:01:ed:23:49:39:85:02:4f:56:6e: 6d:33:68:ad:02:77:20:e5:11:02:82:90:cd:ea:6d: 33:51:ef:46:87:3c:ac:84:70:74:58:42:58:3e:76: 0e:e7:7e:44:bd:c5:2a:29:72:83:d5:a7:57:35:90: 46:b5:55:89:21:f5:58:75:a9:43:a6:e2:af:ae:98: 2c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:06:91:7E:EE:9D:DC:C3:3B:98:A4:2B:BD:A1:20:5C:3D:E5:0E:C5 X509v3 Authority Key Identifier: keyid:44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:14:61:86:56:cb:18:3d:56:be:83:12:a8:91:69:67:21:d7: bc:d2:58:aa:0a:a3:c1:e6:d2:49:9b:fe:8a:df:e1:c5:44:4c: 27:33:ce:5b:35:41:ad:13:93:b4:c3:a4:3c:b1:53:d3:b3:69: 50:ec:b4:58:d7:a0:02:b7:79:0a:ec:6b:cb:97:f0:c3:26:17: 08:f3:fc:ef:b6:2d:69:12:f8:fe:a9:cd:48:35:42:0f:a9:82: d5:48:c8:c3:4e:02:e1:3d:af:e5:c3:01:fd:8c:01:c1:99:f4: 74:10:e5:16:00:2c:15:8d:a4:60:88:a4:10:ac:65:53:d3:d0: 43:53:38:3f:e7:42:61:95:f1:af:a4:fc:ef:2a:b6:44:52:63: 9d:c2:18:b3:3b:7b:af:6b:97:69:da:34:7a:e4:81:c5:c4:6f: 57:87:6a:bf:0f:b1:20:69:83:2c:72:63:18:af:db:69:45:f8: f4:d3:ef:4f:34:e7:8e:4c:3d:9c:0c:bf:d3:52:ee:c7:b6:91: 1b:6d:1e:00:ba:35:e3:22:79:ff:00:89:37:f9:67:a9:05:e3: c2:e8:7e:b3:0a:bf:26:e8:7d:c5:e1:6d:d8:9c:89:4a:95:8b: 3c:81:89:6e:38:23:27:2d:9c:4c:85:75:90:10:a1:41:7c:6c: 79:78:e0:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfFTuh4OLqh9pW5vE5BfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0Y2YzZmE3MDc0ZTczMDRiMWYzMmUxNjY0YWQ1ZjcxNTdk NjVkNjIwHhcNMjUxMjA2MDEwMTUxWhcNMjUxMjA3MDEwMTUxWjAzMTEwLwYDVQQD EygxNTA2OTE3ZWVlOWRkY2MzM2I5OGE0MmJiZGExMjA1YzNkZTUwZWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9fDJOKk8DQGOXGJmqA5EgQpGbg16 gS3/gjCW+dAZQSuSarGFjffQC2Ti3Z1PD0WYSdfbK1PPG3ZTwD+Bg69JyVf1vCz6 zl4CaC/Crvn5b1PttKiwnVtjqtUaPhGrolNMT5MeOoy3T/UfdTkvgXEksJXmeyCD Ri/BJsdyyvY5G/k8xzQl8LlwKHjfMBio6QOY8I/+DHdUTqlbXVqrSf5f0UVphrlm 2P3Y8Uc6p1uWpUjQMzDE6/XfjAHtI0k5hQJPVm5tM2itAncg5RECgpDN6m0zUe9G hzyshHB0WEJYPnYO535EvcUqKXKD1adXNZBGtVWJIfVYdalDpuKvrpgsxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUGkX7undzDO5ikK72hIFw95Q7FMB8GA1UdIwQY MBaAFETPP6cHTnMEsfMuFmStX3FX1l1iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk04X3B3ZE9jd1N4OHk0V1pLMWZjVmZXWFdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84OTMxNDktZGQyNS00NTk2LWJhZDgt MWRlOTMzZDlmODQzLzEvUk04X3B3ZE9jd1N4OHk0V1pLMWZjVmZXWFdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS84OTMxNDktZGQyNS00NTk2LWJhZDgtMWRlOTMzZDlmODQz LzEvUk04X3B3ZE9jd1N4OHk0V1pLMWZjVmZXWFdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhRhhlbL GD1WvoMSqJFpZyHXvNJYqgqjwebSSZv+it/hxURMJzPOWzVBrROTtMOkPLFT07Np UOy0WNegArd5Cuxry5fwwyYXCPP877YtaRL4/qnNSDVCD6mC1UjIw04C4T2v5cMB /YwBwZn0dBDlFgAsFY2kYIikEKxlU9PQQ1M4P+dCYZXxr6T87yq2RFJjncIYszt7 r2uXado0euSBxcRvV4dqvw+xIGmDLHJjGK/baUX49NPvTzTnjkw9nAy/01Lux7aR G20eALo14yJ5/wCJN/lnqQXjwuh+swq/Juh9xeFt2JyJSpWLPIGJbjgjJy2cTIV1 kBChQXxseXjg6w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:45 2025 by rpki-client