This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft File: 8WmQKta3v0YB7qpecj7yPXD6dxQ.mft (raw, json) Hash identifier: JDTCn5/zTYjSVTihR6cXRyQ8z5VjLkxbUYyYPalsCp0= Subject key identifier: 53:4A:5C:01:C0:72:6D:06:F9:91:90:F3:E3:21:CE:7C:C6:0E:BC:C8 Authority key identifier: F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14 Certificate issuer: /CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714 Certificate serial: 019AF12CC2CF89430F61D2463344F0D593A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:00:33 +0000 Manifest this update: Sat 06 Dec 2025 01:00:33 +0000 Manifest next update: Sun 07 Dec 2025 01:00:33 +0000 Files and hashes: 1: 8WmQKta3v0YB7qpecj7yPXD6dxQ.crl (hash: R/6WgRjuLom8XircLM0R7g2Kj5aiDg/c3YO9zjPBjL4=) 2: f0RuL1swXlvp41CLCru-Mt1TNyc.roa (hash: rkjC9/AqAR3AXAOW7ubyDoWQhwKzvm+Iu5S5RZdguhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c2:cf:89:43:0f:61:d2:46:33:44:f0:d5:93:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714 Validity Not Before: Dec 6 01:00:33 2025 GMT Not After : Dec 7 01:00:33 2025 GMT Subject: CN=534a5c01c0726d06f99190f3e321ce7cc60ebcc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2e:34:64:99:76:0d:7b:ea:f4:92:8b:8a:0b: b7:25:b4:63:58:a0:0e:45:78:ca:9c:06:a4:89:1b: 86:a7:84:3e:af:ce:a6:95:93:2a:1f:b2:be:a3:f2: 16:8c:5e:73:7d:81:6e:c9:94:e8:59:ee:bd:3a:7d: 10:81:e8:55:89:a2:99:63:5b:e9:e0:4d:e4:98:43: 4a:fc:2e:95:4e:1a:81:79:45:a2:e2:60:19:18:49: 9d:7b:ce:87:71:e1:95:83:34:01:b8:e7:d8:11:96: 84:c3:86:57:ce:b5:4d:fc:69:42:46:55:cb:18:93: ac:2f:bd:ad:64:c4:75:30:c5:48:54:b1:a2:59:73: 67:6d:0d:f2:d8:48:5f:47:0e:07:fd:ed:04:34:fb: a0:ea:20:50:37:43:e2:56:25:1e:e4:4c:5f:f8:f1: 0e:d6:7a:ad:f4:a4:02:14:f0:17:43:8c:45:d6:30: 36:53:f8:92:09:d1:44:37:3b:78:40:f6:d7:8e:68: 68:05:23:e9:94:16:90:ba:1f:54:23:75:ea:00:f9: 4f:c0:c6:b3:d1:47:b2:ae:70:78:08:92:e5:94:5e: 25:09:69:97:80:ed:7a:a4:ad:59:b6:31:10:b9:35: ce:cf:75:eb:ad:7e:55:16:c0:39:c5:cf:a6:4f:88: 55:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4A:5C:01:C0:72:6D:06:F9:91:90:F3:E3:21:CE:7C:C6:0E:BC:C8 X509v3 Authority Key Identifier: keyid:F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:82:86:a2:16:4f:20:71:be:61:3e:6c:dc:42:ae:d8:f4:90: 0c:a8:29:df:31:f0:87:94:15:70:02:1f:5e:45:2e:3d:68:6c: 6a:49:9a:f6:f8:92:45:4f:c7:93:ea:31:bf:62:b8:5c:31:6a: ee:4e:1d:fa:82:cb:cd:0e:9f:f7:29:bb:8a:72:ec:b3:10:f4: ad:17:43:be:75:a8:b8:88:0b:27:bb:6a:42:48:03:cc:e1:71: ed:75:67:e9:a9:e2:a6:00:7e:0f:d2:b3:e2:8a:63:1d:f1:69: bb:b5:a1:fa:1f:b3:11:85:0d:c8:e2:92:72:6f:7a:cd:71:bd: 4a:24:71:99:6e:4c:32:12:c8:d8:7e:3c:d3:ca:f6:4d:17:a4: 9d:0e:6c:b4:75:a6:aa:27:3d:f9:64:af:27:87:cf:49:42:4b: 83:fb:bf:9f:9b:1a:af:8b:b8:7f:08:d9:82:15:d4:00:51:71: 3e:6a:40:ee:b6:ac:52:0c:4a:3b:74:dc:a6:24:24:52:61:bd: 9e:c0:5f:c2:57:90:4b:25:25:9f:9b:ad:21:61:01:54:b7:01: 1a:0a:b7:cd:af:87:f4:3c:a9:2e:5d:77:e2:a2:1d:2c:c4:dd: dc:7e:3b:9a:42:28:a1:be:c4:ec:56:62:46:b2:94:d0:91:23: 8d:8f:44:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMLPiUMPYdJGM0Tw1ZOjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNjk5MDJhZDZiN2JmNDYwMWVlYWE1ZTcyM2VmMjNkNzBm YTc3MTQwHhcNMjUxMjA2MDEwMDMzWhcNMjUxMjA3MDEwMDMzWjAzMTEwLwYDVQQD Eyg1MzRhNWMwMWMwNzI2ZDA2Zjk5MTkwZjNlMzIxY2U3Y2M2MGViY2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC40ZJl2DXvq9JKLigu3JbRjWKAO RXjKnAakiRuGp4Q+r86mlZMqH7K+o/IWjF5zfYFuyZToWe69On0QgehViaKZY1vp 4E3kmENK/C6VThqBeUWi4mAZGEmde86HceGVgzQBuOfYEZaEw4ZXzrVN/GlCRlXL GJOsL72tZMR1MMVIVLGiWXNnbQ3y2EhfRw4H/e0ENPug6iBQN0PiViUe5Exf+PEO 1nqt9KQCFPAXQ4xF1jA2U/iSCdFENzt4QPbXjmhoBSPplBaQuh9UI3XqAPlPwMaz 0UeyrnB4CJLllF4lCWmXgO16pK1ZtjEQuTXOz3XrrX5VFsA5xc+mT4hV+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNKXAHAcm0G+ZGQ8+MhznzGDrzIMB8GA1UdIwQY MBaAFPFpkCrWt79GAe6qXnI+8j1w+ncUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFdtUUt0YTN2MFlCN3FwZWNqN3lQWEQ2ZHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy80ZjI4MDAtYTU1NS00ZjgyLTg5MzYt ZjIwODM2NTA1MWNiLzEvOFdtUUt0YTN2MFlCN3FwZWNqN3lQWEQ2ZHhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy80ZjI4MDAtYTU1NS00ZjgyLTg5MzYtZjIwODM2NTA1MWNi LzEvOFdtUUt0YTN2MFlCN3FwZWNqN3lQWEQ2ZHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeoKGohZP IHG+YT5s3EKu2PSQDKgp3zHwh5QVcAIfXkUuPWhsakma9viSRU/Hk+oxv2K4XDFq 7k4d+oLLzQ6f9ym7inLssxD0rRdDvnWouIgLJ7tqQkgDzOFx7XVn6anipgB+D9Kz 4opjHfFpu7Wh+h+zEYUNyOKScm96zXG9SiRxmW5MMhLI2H4808r2TReknQ5stHWm qic9+WSvJ4fPSUJLg/u/n5sar4u4fwjZghXUAFFxPmpA7rasUgxKO3TcpiQkUmG9 nsBfwleQSyUln5utIWEBVLcBGgq3za+H9DypLl134qIdLMTd3H47mkIoob7E7FZi RrKU0JEjjY9EmA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:25 2025 by rpki-client