This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft File: 8gwo0Z4N-1NIJqojqlBq9oowW3o.mft (raw, json) Hash identifier: g6/XfxFCQcnSgMf3zM7aj6Do8154BmTdhro5w4isPD0= Subject key identifier: B6:2A:62:FE:46:0F:F0:17:E2:95:5C:E3:CC:9A:08:7E:8D:9E:52:10 Authority key identifier: F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A Certificate issuer: /CN=f20c28d19e0dfb534826aa23aa506af68a305b7a Certificate serial: 019AF50A6F5A3A27B8EDE80B0126ABEE41E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 19:01:32 +0000 Manifest this update: Sat 06 Dec 2025 19:01:32 +0000 Manifest next update: Sun 07 Dec 2025 19:01:32 +0000 Files and hashes: 1: 8gwo0Z4N-1NIJqojqlBq9oowW3o.crl (hash: iomRri6hujIZp+TmZv/6f3nhgW89+5jrmg10fkS7NAY=) 2: eCt_o7wQa4uTOlJ8RZzlmDoTQs4.roa (hash: PGIcRqsMSnRyuLEgYQdmyq8FNdFdg9Cwl+Xi/IOiL8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:6f:5a:3a:27:b8:ed:e8:0b:01:26:ab:ee:41:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f20c28d19e0dfb534826aa23aa506af68a305b7a Validity Not Before: Dec 6 19:01:32 2025 GMT Not After : Dec 7 19:01:32 2025 GMT Subject: CN=b62a62fe460ff017e2955ce3cc9a087e8d9e5210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a0:ec:26:b6:fb:80:7c:9d:52:81:10:b5:e3: d6:22:13:79:21:fa:5b:4f:0a:73:a9:f3:53:a1:cb: 84:c4:91:03:64:c3:e6:64:0d:b1:52:4e:98:18:8d: 72:1d:44:95:48:87:c8:fc:28:a9:86:19:f2:fc:f2: 24:c2:47:2e:ae:5c:57:49:8a:96:33:64:19:18:12: 98:b6:4e:80:09:1c:79:ca:1e:e1:1a:dd:b5:3a:d5: 76:67:be:30:a6:e8:06:6c:57:49:d8:9b:fe:49:d0: ff:9f:de:00:34:25:82:42:6d:b3:45:6d:39:bf:2e: 1c:d8:55:0b:22:10:41:ba:82:2d:8d:a6:d5:e5:d1: b2:a5:c5:51:89:47:3f:d9:2e:84:e1:c5:e6:bd:c7: 72:e4:e2:2f:cf:a4:56:6c:23:e4:79:0b:d3:49:0f: 5c:9c:56:8b:da:a4:a2:66:84:e0:d3:d9:e7:dd:89: 17:df:d6:d1:94:23:19:e1:4d:ea:0f:78:41:66:38: 47:2d:6e:67:30:ed:f5:7b:7b:a4:33:67:c3:9c:e5: 72:1e:89:85:58:0d:ba:1f:81:a1:bb:f2:dc:a2:86: 49:98:4f:23:12:a1:39:ff:bb:3d:64:01:9e:6b:e2: ab:5b:1a:52:1a:4a:78:48:50:8e:db:61:bc:ae:5d: a8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2A:62:FE:46:0F:F0:17:E2:95:5C:E3:CC:9A:08:7E:8D:9E:52:10 X509v3 Authority Key Identifier: keyid:F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:45:9a:cb:12:e4:70:2e:40:5d:8e:f1:70:8a:d5:25:17:71: ca:1e:31:86:a6:05:1a:b5:0e:b5:a0:a5:b9:e7:66:ee:76:9c: d4:25:44:40:13:8e:b9:6b:ef:ba:93:86:ce:ef:72:5b:7e:97: 50:8d:7b:08:fb:bc:70:6f:f4:5e:45:83:31:b1:6d:59:cb:61: 37:3a:bd:a3:d8:0a:96:77:8e:0c:8f:04:3e:37:88:57:91:08: 51:50:38:6b:0d:83:93:7c:f9:de:df:9b:e2:4a:5d:24:be:df: bf:09:38:26:29:cb:65:54:de:0d:f2:5f:9a:c4:a3:2d:3f:b0: 38:cb:ae:b3:b4:51:7e:35:f2:76:63:0c:cd:97:69:05:e3:66: 65:cd:37:34:16:e5:ab:8d:86:3f:f0:24:29:a8:80:24:21:db: a4:b0:91:44:f1:b2:95:62:38:04:80:cd:f6:4b:6b:69:b4:51: 3a:79:95:cc:94:e0:21:22:d3:5e:67:cc:ca:db:20:a9:1b:36: 62:c0:ae:1a:0d:ea:cb:c6:20:2a:e1:ce:62:d6:66:38:87:a6: 7f:80:eb:63:55:0d:c5:2e:6f:86:77:77:84:1a:0f:70:80:07: 63:87:02:79:15:75:76:49:95:f0:81:a7:f6:49:ce:e1:95:6e: 3e:50:51:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cm9aOie47egLASar7kHmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMGMyOGQxOWUwZGZiNTM0ODI2YWEyM2FhNTA2YWY2OGEz MDViN2EwHhcNMjUxMjA2MTkwMTMyWhcNMjUxMjA3MTkwMTMyWjAzMTEwLwYDVQQD EyhiNjJhNjJmZTQ2MGZmMDE3ZTI5NTVjZTNjYzlhMDg3ZThkOWU1MjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06DsJrb7gHydUoEQtePWIhN5Ifpb TwpzqfNTocuExJEDZMPmZA2xUk6YGI1yHUSVSIfI/Ciphhny/PIkwkcurlxXSYqW M2QZGBKYtk6ACRx5yh7hGt21OtV2Z74wpugGbFdJ2Jv+SdD/n94ANCWCQm2zRW05 vy4c2FULIhBBuoItjabV5dGypcVRiUc/2S6E4cXmvcdy5OIvz6RWbCPkeQvTSQ9c nFaL2qSiZoTg09nn3YkX39bRlCMZ4U3qD3hBZjhHLW5nMO31e3ukM2fDnOVyHomF WA26H4Ghu/LcooZJmE8jEqE5/7s9ZAGea+KrWxpSGkp4SFCO22G8rl2o3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYqYv5GD/AX4pVc48yaCH6NnlIQMB8GA1UdIwQY MBaAFPIMKNGeDftTSCaqI6pQavaKMFt6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGd3bzBaNE4tMU5JSnFvanFsQnE5b293VzNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMDdlMTgtMmM2YS00OTMwLWJlMTct ZTVkN2YyZGRkNGMyLzEvOGd3bzBaNE4tMU5JSnFvanFsQnE5b293VzNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hMDdlMTgtMmM2YS00OTMwLWJlMTctZTVkN2YyZGRkNGMy LzEvOGd3bzBaNE4tMU5JSnFvanFsQnE5b293VzNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkWayxLk cC5AXY7xcIrVJRdxyh4xhqYFGrUOtaCluedm7nac1CVEQBOOuWvvupOGzu9yW36X UI17CPu8cG/0XkWDMbFtWcthNzq9o9gKlneODI8EPjeIV5EIUVA4aw2Dk3z53t+b 4kpdJL7fvwk4JinLZVTeDfJfmsSjLT+wOMuus7RRfjXydmMMzZdpBeNmZc03NBbl q42GP/AkKaiAJCHbpLCRRPGylWI4BIDN9ktrabRROnmVzJTgISLTXmfMytsgqRs2 YsCuGg3qy8YgKuHOYtZmOIemf4DrY1UNxS5vhnd3hBoPcIAHY4cCeRV1dkmV8IGn 9knO4ZVuPlBR7w== -----END CERTIFICATE-----Generated at Sat Dec 6 22:55:57 2025 by rpki-client