This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft File: 8WmQKta3v0YB7qpecj7yPXD6dxQ.mft (raw, json) Hash identifier: WnICoN6PUAU2ftnFJoJ1cK0ZChzZjXzH0zmZ9/3d9wM= Subject key identifier: 1D:0E:8C:77:FB:4D:AE:05:BE:AD:40:E7:28:97:3A:3F:C1:15:94:83 Authority key identifier: F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14 Certificate issuer: /CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714 Certificate serial: 019B34C5FC7C31DD0B67FE128C60264C681C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft Manifest number: 1782 Signing time: Fri 19 Dec 2025 04:02:28 +0000 Manifest this update: Fri 19 Dec 2025 04:02:28 +0000 Manifest next update: Sat 20 Dec 2025 04:02:28 +0000 Files and hashes: 1: 8WmQKta3v0YB7qpecj7yPXD6dxQ.crl (hash: rB3POFL32//33bUhZJje2sq309K19fKKq4KE7aUoJQw=) 2: f0RuL1swXlvp41CLCru-Mt1TNyc.roa (hash: rkjC9/AqAR3AXAOW7ubyDoWQhwKzvm+Iu5S5RZdguhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:fc:7c:31:dd:0b:67:fe:12:8c:60:26:4c:68:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714 Validity Not Before: Dec 19 04:02:28 2025 GMT Not After : Dec 20 04:02:28 2025 GMT Subject: CN=1d0e8c77fb4dae05bead40e728973a3fc1159483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:43:9d:97:62:ce:37:35:9e:ea:a0:61:4e:ea: 02:2f:56:5e:3e:3d:96:7a:49:8e:d3:21:fd:45:72: c3:af:6a:83:3e:86:c1:71:fd:62:92:67:38:0d:01: 69:a4:c2:62:22:6b:1f:77:a3:91:0c:c6:ae:76:75: 81:f4:52:c5:d8:ce:79:f8:ec:a3:a4:8e:7d:95:8f: b8:f0:8a:7a:26:7c:cc:b7:f2:77:10:28:02:07:55: b4:38:4c:03:73:2f:30:a4:88:e6:12:19:9a:c5:0e: e7:e3:f4:85:72:27:b7:f2:2c:f2:76:25:80:b1:a9: f0:31:65:bc:90:de:fc:b4:ca:4e:88:11:85:da:ef: 9d:86:22:be:58:2b:1b:1c:42:20:91:83:4e:97:27: 26:5b:04:4b:64:a9:6d:f4:7c:39:5d:82:d8:9d:cf: 9f:a9:1a:3a:16:9c:c3:de:41:e6:5e:5c:95:16:0d: 8c:c8:03:88:9c:77:b6:4d:47:f4:ef:26:2d:8f:2b: f1:63:b5:81:d6:13:65:f8:00:e1:f7:e0:ae:eb:0a: 11:5c:cd:e4:23:5d:41:4d:f0:29:84:12:e3:bc:6f: 40:a5:16:7d:58:5a:d2:37:48:80:98:0b:82:8b:3e: 61:1f:3e:7b:71:02:cb:0a:cd:e7:36:6b:b6:e3:6b: f3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0E:8C:77:FB:4D:AE:05:BE:AD:40:E7:28:97:3A:3F:C1:15:94:83 X509v3 Authority Key Identifier: keyid:F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:5a:76:2b:71:b6:23:4f:fc:b5:2c:05:e4:06:b6:7f:5a:cd: c5:f2:9b:aa:e4:81:a4:31:7f:f6:ac:ff:c1:22:06:40:6d:b3: 80:03:c5:02:13:78:f3:09:19:e0:d1:2e:53:b8:f1:e7:f1:3c: ad:7f:65:cf:57:b0:2a:71:13:5a:95:ff:63:79:da:41:09:11: 61:05:f4:f4:00:26:93:48:01:ae:02:57:a2:bc:88:5b:e5:51: 70:0b:e7:6c:fc:36:bb:25:cc:0b:d6:bb:b1:24:49:54:2e:0a: 5d:70:fe:08:6f:29:e9:04:96:14:d5:c1:66:b9:bd:73:f4:b3: 4e:79:f8:cc:5f:0c:77:9f:e9:84:5a:53:fc:9d:fa:d3:e4:b0: 6f:d8:18:8f:0e:17:3e:f7:2a:2c:4b:ab:01:1c:70:26:83:fc: e0:bc:e7:d8:0b:5c:47:c1:59:77:de:93:1f:36:51:72:05:a4: 3e:43:2c:97:14:95:2d:29:2d:d4:f9:54:c9:0c:35:0c:5d:c8: 28:a1:bd:8b:ef:4e:0c:71:c6:e4:12:f0:70:10:c4:cc:9d:ec: 39:8c:0f:0f:48:1a:3d:0e:86:15:78:02:fb:87:fb:35:e3:30: 73:64:6f:73:48:23:c4:55:d3:ec:55:36:18:02:09:94:cd:f1: ca:49:c0:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xfx8Md0LZ/4SjGAmTGgcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNjk5MDJhZDZiN2JmNDYwMWVlYWE1ZTcyM2VmMjNkNzBm YTc3MTQwHhcNMjUxMjE5MDQwMjI4WhcNMjUxMjIwMDQwMjI4WjAzMTEwLwYDVQQD EygxZDBlOGM3N2ZiNGRhZTA1YmVhZDQwZTcyODk3M2EzZmMxMTU5NDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEOdl2LONzWe6qBhTuoCL1ZePj2W ekmO0yH9RXLDr2qDPobBcf1ikmc4DQFppMJiImsfd6ORDMaudnWB9FLF2M55+Oyj pI59lY+48Ip6JnzMt/J3ECgCB1W0OEwDcy8wpIjmEhmaxQ7n4/SFcie38izydiWA sanwMWW8kN78tMpOiBGF2u+dhiK+WCsbHEIgkYNOlycmWwRLZKlt9Hw5XYLYnc+f qRo6FpzD3kHmXlyVFg2MyAOInHe2TUf07yYtjyvxY7WB1hNl+ADh9+Cu6woRXM3k I11BTfAphBLjvG9ApRZ9WFrSN0iAmAuCiz5hHz57cQLLCs3nNmu242vzFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0OjHf7Ta4Fvq1A5yiXOj/BFZSDMB8GA1UdIwQY MBaAFPFpkCrWt79GAe6qXnI+8j1w+ncUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFdtUUt0YTN2MFlCN3FwZWNqN3lQWEQ2ZHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy80ZjI4MDAtYTU1NS00ZjgyLTg5MzYt ZjIwODM2NTA1MWNiLzEvOFdtUUt0YTN2MFlCN3FwZWNqN3lQWEQ2ZHhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy80ZjI4MDAtYTU1NS00ZjgyLTg5MzYtZjIwODM2NTA1MWNi LzEvOFdtUUt0YTN2MFlCN3FwZWNqN3lQWEQ2ZHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1p2K3G2 I0/8tSwF5Aa2f1rNxfKbquSBpDF/9qz/wSIGQG2zgAPFAhN48wkZ4NEuU7jx5/E8 rX9lz1ewKnETWpX/Y3naQQkRYQX09AAmk0gBrgJXoryIW+VRcAvnbPw2uyXMC9a7 sSRJVC4KXXD+CG8p6QSWFNXBZrm9c/SzTnn4zF8Md5/phFpT/J360+Swb9gYjw4X PvcqLEurARxwJoP84Lzn2AtcR8FZd96THzZRcgWkPkMslxSVLSkt1PlUyQw1DF3I KKG9i+9ODHHG5BLwcBDEzJ3sOYwPD0gaPQ6GFXgC+4f7NeMwc2Rvc0gjxFXT7FU2 GAIJlM3xyknAAw== -----END CERTIFICATE-----Generated at Fri Dec 19 05:41:23 2025 by rpki-client