This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft File: 8WsoQW3b85-ySwmWaGrPrOdsmNU.mft (raw, json) Hash identifier: 69LQydRGa7vv44zDdWyBqZYEn5SpUJucsIHXb1B7mqo= Subject key identifier: ED:45:09:9F:30:C8:42:CD:30:E6:BA:D4:6E:53:DA:CA:3A:E1:C8:E6 Authority key identifier: F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5 Certificate issuer: /CN=f16b28416ddbf39fb24b0996686acface76c98d5 Certificate serial: 019AF1D1E49EFADA23ADA636A0708729E238 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 04:00:55 +0000 Manifest this update: Sat 06 Dec 2025 04:00:55 +0000 Manifest next update: Sun 07 Dec 2025 04:00:55 +0000 Files and hashes: 1: 6uJHb0n-o1Jmt4WfrkKYtugW_tA.roa (hash: oripnuB9VSq+/2+WmWeFeymLsX3aSd+Xhezj6MQbB30=) 2: 8WsoQW3b85-ySwmWaGrPrOdsmNU.crl (hash: YbnWNAq2xJd8mEJVEa32iSZjUZjkotWesuJtM2SdVU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e4:9e:fa:da:23:ad:a6:36:a0:70:87:29:e2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f16b28416ddbf39fb24b0996686acface76c98d5 Validity Not Before: Dec 6 04:00:55 2025 GMT Not After : Dec 7 04:00:55 2025 GMT Subject: CN=ed45099f30c842cd30e6bad46e53daca3ae1c8e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e2:05:03:d4:b3:a7:cf:11:e5:93:f1:91:7a: 03:7f:15:54:ee:72:00:a2:28:62:3b:9b:3b:94:5c: 23:7e:89:69:e6:aa:ed:eb:f5:b1:82:ff:f7:0b:aa: ee:7f:e7:bf:b9:ce:1a:bd:0b:50:81:ef:6c:e0:d1: e0:2b:24:4c:d7:54:52:83:1d:52:b1:f0:b8:8f:f4: 91:4e:b0:44:c5:b1:6d:02:ed:2e:7f:c6:9a:69:21: 7a:ff:e5:3a:68:4d:d1:71:07:0d:3c:0a:18:9b:fe: 3f:63:b0:be:75:cf:d3:3f:af:91:2b:02:83:fa:00: e9:9f:2f:17:a7:a9:53:75:c8:94:95:01:ed:69:03: 47:d5:a9:37:37:64:bd:a7:3d:1c:7d:de:b0:a7:3a: 1a:65:26:06:8e:a1:de:f8:c2:35:9f:35:af:21:b3: d2:e2:4b:69:e9:b0:62:8c:c5:e0:de:18:dc:93:3e: 2b:76:4f:f8:d6:db:dc:62:af:44:38:aa:63:b8:01: e1:dc:58:3b:19:9d:a8:a4:c3:d3:5b:ba:e3:58:00: 10:05:7f:28:77:0a:41:0b:aa:2d:6c:a4:c1:94:71: 0f:c7:f7:48:1d:16:b7:69:20:ad:cc:38:95:c7:5d: fd:7f:6a:de:2e:a9:5e:16:84:64:92:f7:83:08:7d: 8e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:45:09:9F:30:C8:42:CD:30:E6:BA:D4:6E:53:DA:CA:3A:E1:C8:E6 X509v3 Authority Key Identifier: keyid:F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a1:96:e6:9a:97:1e:24:69:fb:3f:ca:7c:d6:5f:62:ed:d6: 93:ff:c3:93:3b:ff:6c:c0:fb:c9:51:db:dc:25:1d:0e:20:c1: 32:d2:48:a0:62:27:22:27:fb:e3:8f:ae:a0:d1:45:7f:a9:4e: 8e:66:45:e3:77:87:c6:34:3e:0b:df:ba:e7:02:1e:34:d3:b1: 7a:fa:ba:bd:58:fe:a0:d1:59:d2:8b:3f:8c:fe:01:22:ac:d3: 38:61:7f:07:36:0e:3e:47:3c:48:74:d4:d7:33:dd:0d:7c:37: 68:90:9d:e8:8f:49:fb:fd:96:d7:88:6f:50:03:05:eb:b0:64: d3:27:d6:30:95:54:f0:1c:fe:8d:a6:97:17:3f:12:5e:79:f7: 2f:3c:5b:f2:23:d8:22:72:fe:85:1f:4a:51:46:d5:9e:16:0a: 81:14:5d:be:53:a3:38:10:12:6d:6e:7b:01:0e:04:67:13:31: ed:63:d1:f8:cf:56:3a:54:0a:26:30:94:09:73:65:3e:54:c0: f8:5d:c4:e2:9c:27:ad:61:0e:a4:ae:29:40:f5:5e:cc:a1:2f: 97:43:94:55:47:9f:b8:70:df:3e:19:e1:e5:de:0e:e2:ca:37: bd:6d:f2:eb:6e:49:b2:7f:4c:75:5e:86:5e:eb:e2:c6:2b:f4: c3:bb:29:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eSe+tojraY2oHCHKeI4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNmIyODQxNmRkYmYzOWZiMjRiMDk5NjY4NmFjZmFjZTc2 Yzk4ZDUwHhcNMjUxMjA2MDQwMDU1WhcNMjUxMjA3MDQwMDU1WjAzMTEwLwYDVQQD EyhlZDQ1MDk5ZjMwYzg0MmNkMzBlNmJhZDQ2ZTUzZGFjYTNhZTFjOGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eIFA9Szp88R5ZPxkXoDfxVU7nIA oihiO5s7lFwjfolp5qrt6/Wxgv/3C6ruf+e/uc4avQtQge9s4NHgKyRM11RSgx1S sfC4j/SRTrBExbFtAu0uf8aaaSF6/+U6aE3RcQcNPAoYm/4/Y7C+dc/TP6+RKwKD +gDpny8Xp6lTdciUlQHtaQNH1ak3N2S9pz0cfd6wpzoaZSYGjqHe+MI1nzWvIbPS 4ktp6bBijMXg3hjckz4rdk/41tvcYq9EOKpjuAHh3Fg7GZ2opMPTW7rjWAAQBX8o dwpBC6otbKTBlHEPx/dIHRa3aSCtzDiVx139f2reLqleFoRkkveDCH2ODQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1FCZ8wyELNMOa61G5T2so64cjmMB8GA1UdIwQY MBaAFPFrKEFt2/OfsksJlmhqz6znbJjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFdzb1FXM2I4NS15U3dtV2FHclByT2RzbU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iMTY1Y2EtMmYzMy00ZThlLWE4OTYt Y2RhYTU4MTUxOGYzLzEvOFdzb1FXM2I4NS15U3dtV2FHclByT2RzbU5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9iMTY1Y2EtMmYzMy00ZThlLWE4OTYtY2RhYTU4MTUxOGYz LzEvOFdzb1FXM2I4NS15U3dtV2FHclByT2RzbU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKGW5pqX HiRp+z/KfNZfYu3Wk//Dkzv/bMD7yVHb3CUdDiDBMtJIoGInIif744+uoNFFf6lO jmZF43eHxjQ+C9+65wIeNNOxevq6vVj+oNFZ0os/jP4BIqzTOGF/BzYOPkc8SHTU 1zPdDXw3aJCd6I9J+/2W14hvUAMF67Bk0yfWMJVU8Bz+jaaXFz8SXnn3Lzxb8iPY InL+hR9KUUbVnhYKgRRdvlOjOBASbW57AQ4EZxMx7WPR+M9WOlQKJjCUCXNlPlTA +F3E4pwnrWEOpK4pQPVezKEvl0OUVUefuHDfPhnh5d4O4so3vW3y625Jsn9MdV6G Xuvixiv0w7sp8w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:52 2025 by rpki-client