This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft File: 8WaLESRDpJbpZlHVgrbMZBP7XHY.mft (raw, json) Hash identifier: 1FJ91YwQF2uTYkfw+slmY1GOqC4oq6rkCFjETxy6NDA= Subject key identifier: E8:01:51:E6:60:C9:0F:D6:1D:06:A7:42:BE:40:38:F3:85:6C:61:9E Authority key identifier: F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76 Certificate issuer: /CN=f1668b112443a496e96651d582b6cc6413fb5c76 Certificate serial: 019AF3C03D115859A25F1065E5340B7AF6F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft Manifest number: 0745 Signing time: Sat 06 Dec 2025 13:00:53 +0000 Manifest this update: Sat 06 Dec 2025 13:00:53 +0000 Manifest next update: Sun 07 Dec 2025 13:00:53 +0000 Files and hashes: 1: 8WaLESRDpJbpZlHVgrbMZBP7XHY.crl (hash: zKHnknKpnGKLuGk0BSuaG6g902WIj0b8QZDgjfVdnQQ=) 2: zTop8kv04M-CPRutWJMmw5M7s5M.roa (hash: h5ZlzzODOy4Yt5G5OttRKd2ppDnce+EkREvBpaIbOxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:3d:11:58:59:a2:5f:10:65:e5:34:0b:7a:f6:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1668b112443a496e96651d582b6cc6413fb5c76 Validity Not Before: Dec 6 13:00:53 2025 GMT Not After : Dec 7 13:00:53 2025 GMT Subject: CN=e80151e660c90fd61d06a742be4038f3856c619e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7c:3e:9d:0b:64:48:0f:e9:58:38:83:82:46: 43:57:49:0d:05:0a:12:cc:49:fc:28:25:7e:31:92: be:ac:21:a9:b4:37:e3:21:72:7f:d3:a9:8b:84:f7: b7:53:7e:be:3d:12:47:5b:9e:0f:50:2e:64:19:19: 2a:f1:2f:7f:41:ab:4a:58:92:80:59:81:76:67:fd: 17:e5:18:e6:8e:e2:d1:47:99:5d:7c:a1:78:1e:03: a7:f8:15:2e:a9:07:7f:b1:89:3c:f6:0a:e2:5a:36: 04:0b:2f:67:55:ef:56:5b:78:9d:91:ff:89:c7:d2: d5:5c:d9:7a:f8:2a:1b:94:57:31:c8:c1:7a:8f:08: ab:b9:e3:52:e7:69:82:eb:71:10:d3:64:38:dc:74: 94:52:50:c0:18:fd:0b:75:c0:52:47:e9:0f:34:99: b2:d0:66:cb:89:3b:79:3a:ee:df:93:85:24:47:ca: 7b:8a:54:48:53:ea:c8:e9:57:a0:cf:74:15:31:bc: ec:60:5c:95:96:c2:88:57:7e:67:0e:25:09:e4:11: ce:62:7b:10:fa:d4:80:91:25:97:46:18:0d:15:c2: e7:a8:53:a1:4f:28:e8:27:a8:3a:e1:35:84:9f:84: f6:27:33:37:22:7d:88:60:af:9a:57:0d:21:90:4a: 6f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:01:51:E6:60:C9:0F:D6:1D:06:A7:42:BE:40:38:F3:85:6C:61:9E X509v3 Authority Key Identifier: keyid:F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:74:10:bf:54:f6:29:15:a0:66:fd:5e:d2:a9:0f:c2:c9:1c: 0b:51:e3:ae:26:09:d4:22:79:18:95:8f:a3:2f:d6:be:14:52: bd:d7:dc:fe:10:1e:2a:87:75:3d:16:46:f2:fa:95:8c:b7:fb: d4:ab:4b:49:7a:2f:3e:cb:99:c8:08:b2:d3:4d:6d:39:8a:49: 45:5d:e1:33:32:82:32:2c:a4:5f:24:41:27:ab:e5:bf:b9:66: e5:96:b0:83:76:85:e7:f5:09:cf:d9:22:2f:53:58:b6:32:e2: 19:55:76:a3:05:98:8c:06:16:b7:18:44:51:64:01:90:a0:b9: b9:cd:e2:32:c7:69:34:af:1d:e5:39:37:12:89:48:3b:14:d6: 96:8a:9a:8d:60:d0:a7:7b:e4:d1:95:e1:5d:07:60:1b:59:6f: cd:81:6a:c9:f6:f2:6e:bc:68:cf:43:55:00:be:0e:15:28:16: b8:31:32:ba:53:ab:a7:b1:93:ae:ad:c0:0a:11:b6:c1:e0:ae: ab:64:50:31:57:58:71:3d:d7:3f:70:7d:67:8b:a7:9d:ea:a2: 9c:74:97:e3:eb:55:17:f0:6c:06:c8:de:86:c5:b7:b2:99:16: 3a:a0:ef:36:20:59:f9:ed:98:f6:bb:16:11:d3:82:ec:41:8b: 9d:84:a0:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwD0RWFmiXxBl5TQLevb2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNjY4YjExMjQ0M2E0OTZlOTY2NTFkNTgyYjZjYzY0MTNm YjVjNzYwHhcNMjUxMjA2MTMwMDUzWhcNMjUxMjA3MTMwMDUzWjAzMTEwLwYDVQQD EyhlODAxNTFlNjYwYzkwZmQ2MWQwNmE3NDJiZTQwMzhmMzg1NmM2MTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXw+nQtkSA/pWDiDgkZDV0kNBQoS zEn8KCV+MZK+rCGptDfjIXJ/06mLhPe3U36+PRJHW54PUC5kGRkq8S9/QatKWJKA WYF2Z/0X5RjmjuLRR5ldfKF4HgOn+BUuqQd/sYk89griWjYECy9nVe9WW3idkf+J x9LVXNl6+CoblFcxyMF6jwirueNS52mC63EQ02Q43HSUUlDAGP0LdcBSR+kPNJmy 0GbLiTt5Ou7fk4UkR8p7ilRIU+rI6Vegz3QVMbzsYFyVlsKIV35nDiUJ5BHOYnsQ +tSAkSWXRhgNFcLnqFOhTyjoJ6g64TWEn4T2JzM3In2IYK+aVw0hkEpvUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgBUeZgyQ/WHQanQr5AOPOFbGGeMB8GA1UdIwQY MBaAFPFmixEkQ6SW6WZR1YK2zGQT+1x2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFdhTEVTUkRwSmJwWmxIVmdyYk1aQlA3WEhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8yNWQyZDAtMjAyNi00ZDgxLTg1NDkt MWZiNjY4NWE4ZDk3LzEvOFdhTEVTUkRwSmJwWmxIVmdyYk1aQlA3WEhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8yNWQyZDAtMjAyNi00ZDgxLTg1NDktMWZiNjY4NWE4ZDk3 LzEvOFdhTEVTUkRwSmJwWmxIVmdyYk1aQlA3WEhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp3QQv1T2 KRWgZv1e0qkPwskcC1HjriYJ1CJ5GJWPoy/WvhRSvdfc/hAeKod1PRZG8vqVjLf7 1KtLSXovPsuZyAiy001tOYpJRV3hMzKCMiykXyRBJ6vlv7lm5Zawg3aF5/UJz9ki L1NYtjLiGVV2owWYjAYWtxhEUWQBkKC5uc3iMsdpNK8d5Tk3EolIOxTWloqajWDQ p3vk0ZXhXQdgG1lvzYFqyfbybrxoz0NVAL4OFSgWuDEyulOrp7GTrq3AChG2weCu q2RQMVdYcT3XP3B9Z4unneqinHSX4+tVF/BsBsjehsW3spkWOqDvNiBZ+e2Y9rsW EdOC7EGLnYSg+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:20:28 2025 by rpki-client