This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft File: 8WBdCa0sbEN7bC-Gg___viF0_mw.mft (raw, json) Hash identifier: glh3U6yUt8SI5abtgAqNoj7I5MMUabIZ7fEr/doGi/U= Subject key identifier: C1:9F:50:B5:8B:8B:FE:5F:01:E9:1F:42:54:EC:1C:A8:36:14:28:4D Authority key identifier: F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C Certificate issuer: /CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c Certificate serial: 019AF208CF37643973A1EEBDF760953482B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft Manifest number: 10CC Signing time: Sat 06 Dec 2025 05:00:54 +0000 Manifest this update: Sat 06 Dec 2025 05:00:54 +0000 Manifest next update: Sun 07 Dec 2025 05:00:54 +0000 Files and hashes: 1: 8WBdCa0sbEN7bC-Gg___viF0_mw.crl (hash: p6bOa/MTcUE443bLHhwyHPDukRhb7qlsDzoRR40ofRA=) 2: j3qkWwGkWnrxhLgyGwrcFzXJWM4.roa (hash: tCyqkdV84n1oHfUiO9Wnf9/3f5vZVsXyCuIYwhEsEzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:cf:37:64:39:73:a1:ee:bd:f7:60:95:34:82:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c Validity Not Before: Dec 6 05:00:54 2025 GMT Not After : Dec 7 05:00:54 2025 GMT Subject: CN=c19f50b58b8bfe5f01e91f4254ec1ca83614284d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a2:d9:55:cd:25:3f:0c:79:9d:ca:c2:95:e6: 4e:35:6d:d2:08:92:5f:1d:00:dc:2d:3d:18:7e:7f: 92:b8:16:e4:f9:53:72:df:ce:d9:66:94:a9:21:88: 9d:15:93:c5:9f:c1:e3:fd:16:74:ac:34:47:bc:9a: 18:ae:ce:b4:7d:f9:78:8e:61:b7:27:80:ce:35:99: fb:83:82:e4:d4:31:41:8c:94:3e:26:98:f4:7a:b7: e4:12:8a:ec:57:de:aa:f5:8e:ca:c3:db:2c:0d:e9: 38:bd:af:d2:65:6e:b2:6d:10:9c:f7:7a:91:85:b6: c1:20:0c:64:67:5d:16:bd:96:ad:71:2d:17:11:5d: 61:39:13:63:cc:dc:08:89:fd:26:a4:29:89:25:29: 1a:c5:5c:52:4c:f9:ff:76:c0:e2:1b:f9:55:d3:68: 84:f0:31:46:76:11:a5:d5:44:c2:5e:07:fa:5d:32: 80:f2:e3:b5:95:cc:2b:f7:22:41:21:ff:10:0a:b3: f7:ea:8f:5f:6b:f8:22:cd:5b:08:fd:50:ed:6a:d9: 13:7c:cb:b8:43:e5:fc:b8:47:55:fa:70:92:54:2b: df:49:41:b5:1e:df:3a:42:b5:a8:3f:b1:d0:57:6c: 74:9e:b6:5d:2b:8f:25:ac:28:dc:00:f4:10:6a:2c: 0f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9F:50:B5:8B:8B:FE:5F:01:E9:1F:42:54:EC:1C:A8:36:14:28:4D X509v3 Authority Key Identifier: keyid:F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:20:b5:89:53:82:29:51:05:cf:a3:61:96:db:ce:78:64:2a: 9a:da:1e:69:bd:06:0d:bb:52:1a:21:b9:4e:83:97:36:f4:f3: e2:23:f5:4a:ae:46:88:5a:79:7e:f6:a8:ed:76:b9:1d:c9:b7: 46:72:6d:7c:18:b1:2a:df:34:9a:90:f9:f4:51:7a:8d:a8:77: 24:65:9f:b1:b9:8b:63:c3:20:db:b9:ff:2b:ef:7b:35:de:07: 8c:2a:14:45:f7:86:6b:db:75:6c:c9:f7:3f:1d:1d:12:69:a5: 02:81:d0:45:06:bb:b7:47:b3:e1:14:d0:4d:24:f5:95:87:df: 97:94:55:5a:af:38:51:48:a9:cf:79:5c:88:73:87:ae:10:78: 5e:85:11:1b:c5:2b:c7:2c:f1:2b:28:b2:05:9e:df:d8:45:01: 6e:47:cf:cf:7a:6f:e6:f3:e2:48:12:5d:0d:2c:01:3d:ca:fe: ee:e5:08:2f:f1:a5:37:dd:da:9e:1a:21:5b:6f:e3:3a:84:84: a8:c2:33:52:7e:27:2c:b8:29:68:ad:57:b1:89:ea:67:af:ae: ce:5a:69:ad:cc:e5:c2:19:ab:0e:45:46:43:b2:6e:ef:63:03: 89:65:42:51:a8:29:e7:a0:5d:98:d4:04:40:e8:bc:4c:27:5c: 25:a2:76:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCM83ZDlzoe6992CVNIK4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNjA1ZDA5YWQyYzZjNDM3YjZjMmY4NjgzZmZmZmJlMjE3 NGZlNmMwHhcNMjUxMjA2MDUwMDU0WhcNMjUxMjA3MDUwMDU0WjAzMTEwLwYDVQQD EyhjMTlmNTBiNThiOGJmZTVmMDFlOTFmNDI1NGVjMWNhODM2MTQyODRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6LZVc0lPwx5ncrCleZONW3SCJJf HQDcLT0Yfn+SuBbk+VNy387ZZpSpIYidFZPFn8Hj/RZ0rDRHvJoYrs60ffl4jmG3 J4DONZn7g4Lk1DFBjJQ+Jpj0erfkEorsV96q9Y7Kw9ssDek4va/SZW6ybRCc93qR hbbBIAxkZ10WvZatcS0XEV1hORNjzNwIif0mpCmJJSkaxVxSTPn/dsDiG/lV02iE 8DFGdhGl1UTCXgf6XTKA8uO1lcwr9yJBIf8QCrP36o9fa/gizVsI/VDtatkTfMu4 Q+X8uEdV+nCSVCvfSUG1Ht86QrWoP7HQV2x0nrZdK48lrCjcAPQQaiwPSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGfULWLi/5fAekfQlTsHKg2FChNMB8GA1UdIwQY MBaAFPFgXQmtLGxDe2wvhoP//74hdP5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFdCZENhMHNiRU43YkMtR2dfX192aUYwX213LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zNmIwNDAtZjU3Yi00YWUyLWFiNDIt MjI4NzMzMjQ1Y2QxLzEvOFdCZENhMHNiRU43YkMtR2dfX192aUYwX213Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8zNmIwNDAtZjU3Yi00YWUyLWFiNDItMjI4NzMzMjQ1Y2Qx LzEvOFdCZENhMHNiRU43YkMtR2dfX192aUYwX213LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCC1iVOC KVEFz6NhltvOeGQqmtoeab0GDbtSGiG5ToOXNvTz4iP1Sq5GiFp5fvao7Xa5Hcm3 RnJtfBixKt80mpD59FF6jah3JGWfsbmLY8Mg27n/K+97Nd4HjCoURfeGa9t1bMn3 Px0dEmmlAoHQRQa7t0ez4RTQTST1lYffl5RVWq84UUipz3lciHOHrhB4XoURG8Ur xyzxKyiyBZ7f2EUBbkfPz3pv5vPiSBJdDSwBPcr+7uUIL/GlN93anhohW2/jOoSE qMIzUn4nLLgpaK1XsYnqZ6+uzlpprczlwhmrDkVGQ7Ju72MDiWVCUagp56BdmNQE QOi8TCdcJaJ2vw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:43:09 2025 by rpki-client