This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft File: 8VCW_jOQRJyTboVwYdSmll1AijE.mft (raw, json) Hash identifier: zQQd87G00DeAU0I0Zq3jZ7E1pun2/ic0HGzMS1JkpwU= Subject key identifier: AA:76:3E:E5:20:6F:1D:DE:86:B8:97:66:65:F3:67:BA:46:2A:E0:5B Authority key identifier: F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31 Certificate issuer: /CN=f15096fe3390449c936e857061d4a6965d408a31 Certificate serial: 019AF0BEE6130837784DBDB2BA6615FAE7D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft Manifest number: 0D66 Signing time: Fri 05 Dec 2025 23:00:33 +0000 Manifest this update: Fri 05 Dec 2025 23:00:33 +0000 Manifest next update: Sat 06 Dec 2025 23:00:33 +0000 Files and hashes: 1: 8VCW_jOQRJyTboVwYdSmll1AijE.crl (hash: k+5OKCLTXbEhdOGcYjovKJolJtDcp55beOB5ZvW7qHo=) 2: rMoZ83VQ7iYFtJcAmlmBDs25c0s.roa (hash: 5UVFXIRMFFdYenUl6z+JEcUUQ5VhSSfJAeVRB/Ej+fc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:e6:13:08:37:78:4d:bd:b2:ba:66:15:fa:e7:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f15096fe3390449c936e857061d4a6965d408a31 Validity Not Before: Dec 5 23:00:33 2025 GMT Not After : Dec 6 23:00:33 2025 GMT Subject: CN=aa763ee5206f1dde86b8976665f367ba462ae05b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8b:c8:ad:0f:53:ab:56:7b:84:eb:23:7c:eb: 79:38:3e:2d:d3:62:71:2c:75:61:0e:0f:90:fe:0f: a9:5c:86:51:13:2d:49:0d:d7:e5:00:ce:d0:f2:67: 34:f0:fb:3b:03:bc:ec:30:b4:3c:4e:40:c4:76:5e: d2:f6:62:ce:b8:ce:2e:8a:f8:9e:6f:ab:0b:9b:a3: 51:cc:d4:53:e5:0b:77:53:f9:d2:da:83:2b:73:b4: be:ed:be:53:b7:13:42:44:07:cc:29:53:c7:c8:b5: b4:ff:78:dd:a1:f2:75:e8:8f:42:09:f7:42:b1:93: 42:d5:35:e8:c4:a6:01:49:93:c7:c6:df:9f:6a:87: 6d:da:55:81:6b:39:ab:81:bc:17:ff:6b:c1:55:e3: 93:39:7b:ca:72:37:fa:e7:b4:00:d5:1a:fb:68:65: 75:97:b8:7c:67:1f:e7:08:06:44:03:60:5c:30:32: 55:44:46:24:e9:3c:b8:a2:06:40:9d:e2:40:d8:14: d1:5c:7a:d8:37:d7:35:bd:d5:c6:a6:bb:52:38:23: 05:2d:89:e0:c2:cf:d8:c6:9d:58:5f:6c:19:0d:f7: 7f:d6:19:82:a0:28:b7:42:c5:0a:59:56:ac:30:fd: ad:6c:44:f4:ab:78:91:08:87:08:59:3f:55:bb:60: be:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:76:3E:E5:20:6F:1D:DE:86:B8:97:66:65:F3:67:BA:46:2A:E0:5B X509v3 Authority Key Identifier: keyid:F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:07:da:af:86:b4:e0:2e:6c:3d:b3:a6:c4:3e:a0:99:19:17: 08:29:7f:a4:a0:49:3c:a0:8d:d3:e0:ba:55:4d:a3:a9:27:0b: 45:cf:8b:40:24:bc:a5:fc:09:7a:db:58:40:ee:b3:28:d7:fc: f9:f9:ce:8f:f5:69:6d:4f:13:0f:4a:f7:fd:6c:40:f6:43:a2: ce:81:ce:f8:65:7e:00:9c:6c:fb:58:3d:aa:cc:f8:60:86:fc: 35:f8:a7:a8:84:3f:02:86:0c:0a:d5:56:92:d6:e8:3f:46:f8: 6b:af:40:29:d3:00:3b:bc:33:1b:42:1e:50:c5:19:b8:4d:1c: 3f:a1:15:43:e7:cd:fa:72:85:73:3b:11:c5:27:d5:94:4c:7d: a8:db:a9:90:fe:00:ac:ae:1f:4c:82:54:fd:5b:67:44:ef:d1: 12:e9:a9:76:47:76:dc:40:80:bc:5e:17:91:00:b8:47:ad:89: 29:00:ad:68:3e:52:02:f6:77:15:70:1e:93:07:67:53:b6:3b: 26:38:17:e7:84:99:a3:9c:f9:ae:ae:5c:25:2a:68:f9:68:61: 1e:fc:a3:15:1f:5a:9d:3c:42:ce:8c:11:ec:f2:00:97:4f:f5: b5:8f:a7:74:45:1a:8a:e8:4d:02:90:3d:38:7a:6b:9b:ef:3f: 49:18:66:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvuYTCDd4Tb2yumYV+ufWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNTA5NmZlMzM5MDQ0OWM5MzZlODU3MDYxZDRhNjk2NWQ0 MDhhMzEwHhcNMjUxMjA1MjMwMDMzWhcNMjUxMjA2MjMwMDMzWjAzMTEwLwYDVQQD EyhhYTc2M2VlNTIwNmYxZGRlODZiODk3NjY2NWYzNjdiYTQ2MmFlMDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIvIrQ9Tq1Z7hOsjfOt5OD4t02Jx LHVhDg+Q/g+pXIZREy1JDdflAM7Q8mc08Ps7A7zsMLQ8TkDEdl7S9mLOuM4uivie b6sLm6NRzNRT5Qt3U/nS2oMrc7S+7b5TtxNCRAfMKVPHyLW0/3jdofJ16I9CCfdC sZNC1TXoxKYBSZPHxt+faodt2lWBazmrgbwX/2vBVeOTOXvKcjf657QA1Rr7aGV1 l7h8Zx/nCAZEA2BcMDJVREYk6Ty4ogZAneJA2BTRXHrYN9c1vdXGprtSOCMFLYng ws/Yxp1YX2wZDfd/1hmCoCi3QsUKWVasMP2tbET0q3iRCIcIWT9Vu2C+hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKp2PuUgbx3ehriXZmXzZ7pGKuBbMB8GA1UdIwQY MBaAFPFQlv4zkESck26FcGHUppZdQIoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFZDV19qT1FSSnlUYm9Wd1lkU21sbDFBaWpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC81ZDZkNjktODg4MC00YTkyLTg3NTYt NTgxNWZkM2RhMjk3LzEvOFZDV19qT1FSSnlUYm9Wd1lkU21sbDFBaWpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC81ZDZkNjktODg4MC00YTkyLTg3NTYtNTgxNWZkM2RhMjk3 LzEvOFZDV19qT1FSSnlUYm9Wd1lkU21sbDFBaWpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQfar4a0 4C5sPbOmxD6gmRkXCCl/pKBJPKCN0+C6VU2jqScLRc+LQCS8pfwJettYQO6zKNf8 +fnOj/VpbU8TD0r3/WxA9kOizoHO+GV+AJxs+1g9qsz4YIb8NfinqIQ/AoYMCtVW ktboP0b4a69AKdMAO7wzG0IeUMUZuE0cP6EVQ+fN+nKFczsRxSfVlEx9qNupkP4A rK4fTIJU/VtnRO/REumpdkd23ECAvF4XkQC4R62JKQCtaD5SAvZ3FXAekwdnU7Y7 JjgX54SZo5z5rq5cJSpo+WhhHvyjFR9anTxCzowR7PIAl0/1tY+ndEUaiuhNApA9 OHprm+8/SRhmYw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:13:07 2025 by rpki-client