This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft File: wS8tv90wnyYDJMqn4-2neT-FQac.mft (raw, json) Hash identifier: bS9rNcD2CcBkX3Nk6jlLhFotOeJLI8BShSnEu0PJIYo= Subject key identifier: FA:ED:28:5A:0C:6B:DA:2C:B6:EB:94:55:E5:AB:92:A6:0D:7E:4A:59 Authority key identifier: C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7 Certificate issuer: /CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7 Certificate serial: 019AF31B700F6899DAF498AE0A6654755C85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft Manifest number: 0DC8 Signing time: Sat 06 Dec 2025 10:00:52 +0000 Manifest this update: Sat 06 Dec 2025 10:00:52 +0000 Manifest next update: Sun 07 Dec 2025 10:00:52 +0000 Files and hashes: 1: wS8tv90wnyYDJMqn4-2neT-FQac.crl (hash: VczXxKcwbqBz5IG4MHKFNoi5qPj1CyeuhN3d6+O0AI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:70:0f:68:99:da:f4:98:ae:0a:66:54:75:5c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7 Validity Not Before: Dec 6 10:00:52 2025 GMT Not After : Dec 7 10:00:52 2025 GMT Subject: CN=faed285a0c6bda2cb6eb9455e5ab92a60d7e4a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f2:74:50:c8:e7:af:fc:04:e2:de:3e:47:b4: 47:b0:49:7b:a1:ac:f1:38:32:32:f7:4f:b0:47:bb: 34:ae:a8:ff:29:a8:6f:24:b9:1c:c5:39:40:eb:21: 2a:b8:e2:31:85:6e:c4:ef:96:68:6a:7d:60:6a:11: ac:d1:58:c7:c3:30:04:44:58:ec:ff:b4:19:13:51: 8c:f2:f8:0e:b0:05:e1:b0:fd:4f:d9:75:1f:62:ef: f8:23:cc:29:2b:e6:6e:11:13:ab:40:5c:dd:b9:01: 8f:59:fa:ca:7a:bc:a8:43:c1:86:cf:a0:a9:fc:ab: 79:a8:9f:f4:90:63:69:38:6a:d1:e9:0e:b7:ca:f5: 22:bf:de:d7:07:a9:fb:ea:08:6a:ec:b5:6e:d8:79: df:c6:55:c7:93:9f:a4:44:5e:b2:65:cb:59:8a:a6: 27:42:9c:2f:5d:07:6e:b2:55:0f:7f:77:36:46:a6: 25:c0:32:9a:f3:43:1f:7e:7e:a6:5b:77:a3:d0:70: 25:23:cb:c0:ad:a1:70:dd:90:a8:fc:d8:d7:40:e0: 8d:62:59:a4:3c:fa:59:97:43:00:04:c5:03:6e:17: ab:b6:e0:b5:9f:34:2b:ea:00:16:89:8d:5e:de:59: 91:7e:c5:d7:6d:77:74:a2:6e:54:67:44:36:b1:c1: 69:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:ED:28:5A:0C:6B:DA:2C:B6:EB:94:55:E5:AB:92:A6:0D:7E:4A:59 X509v3 Authority Key Identifier: keyid:C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:de:05:3c:68:5c:5e:71:bf:b0:94:15:34:d1:9d:0d:88:80: e3:16:c3:31:31:74:d5:77:ed:b4:c8:83:be:ff:fb:cc:64:34: 35:2b:ab:cf:e9:29:88:29:51:30:b9:86:95:b0:0a:73:ee:0b: cb:32:16:de:15:17:b0:f4:dc:af:17:d9:dc:61:21:0e:25:2e: 1c:fb:8b:f3:ef:d6:d7:5e:aa:b3:2c:40:64:09:d8:af:4c:d3: 9b:c5:27:5d:9b:99:47:20:44:24:87:e8:5d:14:09:0a:9d:69: 6e:6e:ee:e9:8b:06:c3:79:60:6a:b5:21:e5:57:ea:2a:d4:8e: 13:06:6d:7c:08:76:e3:92:bc:14:08:3d:c4:34:e6:ae:41:c5: 36:ee:e5:0c:c1:74:31:1b:f7:32:c8:16:63:a7:84:39:44:75: 88:37:86:b6:88:d8:cb:22:94:ef:e8:92:7c:55:da:30:ee:4d: d8:e1:42:51:65:5c:86:3f:88:b9:5f:63:12:b3:80:fe:1b:a2: f0:7f:e8:d1:8a:8e:11:8b:5e:3e:ab:6f:67:28:1d:7d:fa:ca: 56:67:a0:94:86:67:ce:84:e9:f0:72:58:18:29:1c:0a:69:ac: 5a:10:9b:34:a5:12:8e:26:da:5f:96:9c:0a:75:9f:1d:27:a0: 47:a1:49:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3APaJna9JiuCmZUdVyFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmYyZGJmZGQzMDlmMjYwMzI0Y2FhN2UzZWRhNzc5M2Y4 NTQxYTcwHhcNMjUxMjA2MTAwMDUyWhcNMjUxMjA3MTAwMDUyWjAzMTEwLwYDVQQD EyhmYWVkMjg1YTBjNmJkYTJjYjZlYjk0NTVlNWFiOTJhNjBkN2U0YTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vJ0UMjnr/wE4t4+R7RHsEl7oazx ODIy90+wR7s0rqj/KahvJLkcxTlA6yEquOIxhW7E75Zoan1gahGs0VjHwzAERFjs /7QZE1GM8vgOsAXhsP1P2XUfYu/4I8wpK+ZuEROrQFzduQGPWfrKeryoQ8GGz6Cp /Kt5qJ/0kGNpOGrR6Q63yvUiv97XB6n76ghq7LVu2HnfxlXHk5+kRF6yZctZiqYn QpwvXQduslUPf3c2RqYlwDKa80Mffn6mW3ej0HAlI8vAraFw3ZCo/NjXQOCNYlmk PPpZl0MABMUDbhertuC1nzQr6gAWiY1e3lmRfsXXbXd0om5UZ0Q2scFpWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrtKFoMa9ostuuUVeWrkqYNfkpZMB8GA1UdIwQY MBaAFMEvLb/dMJ8mAyTKp+Ptp3k/hUGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1M4dHY5MHdueVlESk1xbjQtMm5lVC1GUWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85ZmRiMGYtZTY3Yy00NzY5LTlhMGQt MGZiZWFlY2Q5M2E0LzEvd1M4dHY5MHdueVlESk1xbjQtMm5lVC1GUWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC85ZmRiMGYtZTY3Yy00NzY5LTlhMGQtMGZiZWFlY2Q5M2E0 LzEvd1M4dHY5MHdueVlESk1xbjQtMm5lVC1GUWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATN4FPGhc XnG/sJQVNNGdDYiA4xbDMTF01XfttMiDvv/7zGQ0NSurz+kpiClRMLmGlbAKc+4L yzIW3hUXsPTcrxfZ3GEhDiUuHPuL8+/W116qsyxAZAnYr0zTm8UnXZuZRyBEJIfo XRQJCp1pbm7u6YsGw3lgarUh5VfqKtSOEwZtfAh245K8FAg9xDTmrkHFNu7lDMF0 MRv3MsgWY6eEOUR1iDeGtojYyyKU7+iSfFXaMO5N2OFCUWVchj+IuV9jErOA/hui 8H/o0YqOEYtePqtvZygdffrKVmeglIZnzoTp8HJYGCkcCmmsWhCbNKUSjibaX5ac CnWfHSegR6FJbg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:43:09 2025 by rpki-client