This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft File: wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft (raw, json) Hash identifier: p0TgoQIkgdbkWTKEZN/SeF1U6b5h04NJFvWXMGWRUiU= Subject key identifier: D0:11:9E:BA:2C:7C:9B:FE:A4:CE:9E:27:DB:65:ED:2C:4D:E0:1E:D4 Authority key identifier: C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6 Certificate issuer: /CN=c13f17541732f57abff1294c71b533eb56746fd6 Certificate serial: 019AF31C3C8C4F9289797ACEAE94624D5362 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 10:01:45 +0000 Manifest this update: Sat 06 Dec 2025 10:01:45 +0000 Manifest next update: Sun 07 Dec 2025 10:01:45 +0000 Files and hashes: 1: DljJr8JzJiVrlFsa4a_Y6aDbzLA.roa (hash: h/O87BR6bvL7AJdknAhnONrNppB3GhoL2ZES3kI48+0=) 2: wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl (hash: ebkdAAM07/bPsgc/+S8RhKp/Xgc82Vb5GeWrkMFWNvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:3c:8c:4f:92:89:79:7a:ce:ae:94:62:4d:53:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c13f17541732f57abff1294c71b533eb56746fd6 Validity Not Before: Dec 6 10:01:45 2025 GMT Not After : Dec 7 10:01:45 2025 GMT Subject: CN=d0119eba2c7c9bfea4ce9e27db65ed2c4de01ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7d:61:f9:62:18:34:86:5b:16:71:73:df:17: 65:07:1d:a3:f4:1b:73:01:97:5c:88:c3:58:48:8d: a0:5a:44:90:c2:e3:4c:07:7c:9c:bb:af:ce:65:83: a5:3a:95:de:2a:29:9c:12:61:50:7b:63:35:38:f5: a6:2c:44:74:34:a5:c6:ba:51:24:35:25:4d:e8:97: 79:5f:f9:e5:3a:c2:7d:e7:09:96:ec:e2:af:64:79: cc:c0:47:71:52:a0:6a:54:41:f5:eb:99:d3:34:48: 66:fb:bb:d0:ae:20:7d:af:d3:19:60:58:36:4b:64: ba:79:e5:99:7c:c0:38:85:64:a5:dc:60:c7:ee:47: cd:26:1f:ef:0b:cf:58:fb:f6:ce:4b:a7:e7:56:4f: c7:3a:df:df:b3:2e:de:4d:d1:4c:b3:3d:e0:87:91: fc:32:28:eb:37:4f:6c:57:5a:9d:8e:87:8f:f4:c9: a9:32:47:32:3c:68:54:87:a8:27:b9:6c:f6:34:5d: 6f:63:f5:f6:37:36:46:6c:bf:da:4c:94:54:99:e4: 74:de:01:90:cd:72:c5:3a:02:61:01:b3:a2:38:2a: 1c:73:ff:ef:7d:af:e0:08:be:5c:5b:8d:b2:ec:13: 31:0e:89:18:f9:db:a1:1b:4d:b9:98:97:2a:61:66: 33:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:11:9E:BA:2C:7C:9B:FE:A4:CE:9E:27:DB:65:ED:2C:4D:E0:1E:D4 X509v3 Authority Key Identifier: keyid:C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f8:88:da:3d:28:e1:a5:26:53:27:8b:16:16:c9:cf:cd:94: 67:40:68:c8:55:35:fd:5c:fc:6a:6a:8b:fd:91:6b:8b:99:57: f0:85:6d:61:72:5e:f8:ab:f8:eb:09:5c:05:67:fc:ec:b4:26: 13:34:84:0d:40:bd:bc:91:d5:58:82:a9:01:a3:67:08:c1:25: 2f:0e:42:3d:39:00:f0:27:1f:95:2e:6b:ec:d7:6c:21:6f:62: 95:f1:52:cd:45:16:7b:2b:2f:44:99:d8:4a:d3:ec:0a:38:ad: 70:df:36:05:a0:0e:cc:54:a2:5b:ea:8f:c8:05:b3:2c:9c:ee: ec:65:41:a6:55:5e:87:5e:92:e5:49:42:90:cf:4b:c3:9d:ac: 66:9a:33:ec:21:b3:d9:34:e1:e2:08:7b:c2:d0:8e:e1:f3:41: ee:57:3f:08:3e:05:45:45:81:3a:dc:1a:cd:01:81:b3:a9:ed: 3d:7c:82:a1:62:b1:68:64:ca:d8:a9:7a:02:ee:34:ae:df:72: 9e:15:74:4b:91:d7:64:db:a1:ec:b1:97:b1:bb:6e:a2:a1:44: 0f:27:29:70:21:27:0b:ca:6b:92:b2:e8:4c:bd:e7:c7:fb:d4: 78:98:b2:d5:22:32:f9:7b:ca:83:09:66:f2:ed:4a:99:ec:f2: 2a:97:9e:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHDyMT5KJeXrOrpRiTVNiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxM2YxNzU0MTczMmY1N2FiZmYxMjk0YzcxYjUzM2ViNTY3 NDZmZDYwHhcNMjUxMjA2MTAwMTQ1WhcNMjUxMjA3MTAwMTQ1WjAzMTEwLwYDVQQD EyhkMDExOWViYTJjN2M5YmZlYTRjZTllMjdkYjY1ZWQyYzRkZTAxZWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX1h+WIYNIZbFnFz3xdlBx2j9Btz AZdciMNYSI2gWkSQwuNMB3ycu6/OZYOlOpXeKimcEmFQe2M1OPWmLER0NKXGulEk NSVN6Jd5X/nlOsJ95wmW7OKvZHnMwEdxUqBqVEH165nTNEhm+7vQriB9r9MZYFg2 S2S6eeWZfMA4hWSl3GDH7kfNJh/vC89Y+/bOS6fnVk/HOt/fsy7eTdFMsz3gh5H8 MijrN09sV1qdjoeP9MmpMkcyPGhUh6gnuWz2NF1vY/X2NzZGbL/aTJRUmeR03gGQ zXLFOgJhAbOiOCocc//vfa/gCL5cW42y7BMxDokY+duhG025mJcqYWYzkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNARnrosfJv+pM6eJ9tl7SxN4B7UMB8GA1UdIwQY MBaAFME/F1QXMvV6v/EpTHG1M+tWdG/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1Q4WFZCY3k5WHFfOFNsTWNiVXo2MVowYjlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS84OGE1NWQtNTE2My00MzNlLWI0Nzgt ZDhhMWMzMjk1ZTg5LzEvd1Q4WFZCY3k5WHFfOFNsTWNiVXo2MVowYjlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS84OGE1NWQtNTE2My00MzNlLWI0NzgtZDhhMWMzMjk1ZTg5 LzEvd1Q4WFZCY3k5WHFfOFNsTWNiVXo2MVowYjlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/iI2j0o 4aUmUyeLFhbJz82UZ0BoyFU1/Vz8amqL/ZFri5lX8IVtYXJe+Kv46wlcBWf87LQm EzSEDUC9vJHVWIKpAaNnCMElLw5CPTkA8CcflS5r7NdsIW9ilfFSzUUWeysvRJnY StPsCjitcN82BaAOzFSiW+qPyAWzLJzu7GVBplVeh16S5UlCkM9Lw52sZpoz7CGz 2TTh4gh7wtCO4fNB7lc/CD4FRUWBOtwazQGBs6ntPXyCoWKxaGTK2Kl6Au40rt9y nhV0S5HXZNuh7LGXsbtuoqFEDycpcCEnC8prkrLoTL3nx/vUeJiy1SIy+XvKgwlm 8u1KmezyKpeeLA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:51:06 2025 by rpki-client