This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft File: 8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json) Hash identifier: Sh9LM4HnxK+27TxL9dfaxHP9ZW4nx9TxZaPsk32bRi4= Subject key identifier: 14:90:5E:85:0E:D0:66:19:BA:ED:CA:6C:3A:28:82:10:1C:CB:0E:31 Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29 Certificate issuer: /CN=f16225a500454e62f1d25253ba7a2d8c1e254429 Certificate serial: 019B5975E74B59FDE57FB8D548A658F9E153 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft Manifest number: 0916 Signing time: Fri 26 Dec 2025 07:00:57 +0000 Manifest this update: Fri 26 Dec 2025 07:00:57 +0000 Manifest next update: Sat 27 Dec 2025 07:00:57 +0000 Files and hashes: 1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: pkzk2htrC7Yw4x2YgPynjxFH9qlpl+9G/BQ5d+e/v34=) 2: KzntsBKC6xHsM4irrwPpJqTMjrE.roa (hash: rsuAHxEKxQodmj4NlR88Fkx1NvrEvEln4AFpUG54lbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:e7:4b:59:fd:e5:7f:b8:d5:48:a6:58:f9:e1:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429 Validity Not Before: Dec 26 07:00:57 2025 GMT Not After : Dec 27 07:00:57 2025 GMT Subject: CN=14905e850ed06619baedca6c3a2882101ccb0e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:83:3b:eb:2e:1c:e2:19:1c:2f:b7:ef:82:99: 01:33:8b:77:ec:3f:70:6d:d6:34:7c:25:90:89:6a: fc:3d:d5:8f:9f:6a:a7:26:46:fb:78:be:37:e4:f5: bb:82:4d:e3:a8:fb:65:fb:37:df:cb:e8:ae:f2:73: bf:00:f8:5d:da:1e:ba:5b:d1:92:e4:f8:0a:f4:dd: 2e:7c:54:55:a1:19:c6:e6:a3:5c:6e:42:88:cc:6e: ce:ec:dc:6d:aa:a7:3a:8d:2b:00:26:63:0e:59:10: 4a:c4:5b:0b:a7:92:db:7e:92:36:be:49:e3:a6:93: d6:7f:17:5a:94:a0:64:82:d4:69:ac:8b:b0:d6:c4: 96:c2:9a:57:fe:5d:e5:6f:80:e5:1b:62:ab:78:ab: 11:98:c0:2e:23:0f:8f:b3:f0:6b:9a:27:1b:33:ab: ab:19:f7:55:2c:c9:d9:e9:da:09:7d:d0:37:2a:14: df:ac:38:de:67:e1:8c:ad:96:83:a0:1d:3f:b4:7f: 78:83:31:2e:ee:8b:56:5d:2f:20:48:16:4c:e7:b0: 83:cb:56:a8:aa:62:8e:29:01:e9:c8:76:be:71:07: 96:a5:8a:14:9a:5e:3a:b7:63:6c:32:a8:2d:b4:1f: c4:68:52:98:e1:51:b9:2b:ce:98:ae:d9:22:14:7f: 67:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:90:5E:85:0E:D0:66:19:BA:ED:CA:6C:3A:28:82:10:1C:CB:0E:31 X509v3 Authority Key Identifier: keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:85:4c:f4:0b:fe:d8:11:dc:92:d7:13:86:7c:d3:02:d4:6a: 86:69:23:ae:78:fb:c5:21:21:16:be:20:ee:16:4a:ec:61:cd: 65:57:55:50:58:0a:1c:44:cb:7e:e8:4a:3e:87:fc:e7:b9:25: e6:04:f0:11:be:e1:f6:0f:4d:fd:b5:af:be:68:84:7e:b8:de: 9b:96:a5:a6:1b:5d:ac:f7:71:72:c6:22:83:7f:30:d9:7b:df: 89:79:38:50:58:7d:71:e7:a1:98:5a:f6:a0:45:0c:2e:e3:24: 09:6f:ab:4f:6d:5d:9b:41:98:ba:c6:5a:86:3c:2b:14:b9:ab: 74:c1:8b:21:6b:0d:8c:fa:ad:5a:6a:d1:6d:39:0f:ca:c3:b3: 01:e8:a6:48:65:da:f5:5c:40:6d:5f:2e:e2:16:77:50:71:a8: 8f:cd:a6:01:08:72:e0:aa:58:f5:8f:a7:34:6c:78:b4:ef:1f: c3:0d:34:84:8d:f5:87:2e:a9:b6:2b:3d:ca:35:7c:d6:5e:e2: fb:7c:a6:6d:98:29:9f:3f:ca:a1:92:03:64:41:a8:80:b2:18: fe:da:c4:81:c3:c0:0f:19:4f:88:f0:f3:ec:09:24:69:5a:e8: 49:b0:0e:d1:3d:af:de:79:92:98:b4:22:a1:e2:93:f5:e3:76: 4a:67:81:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdedLWf3lf7jVSKZY+eFTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNjIyNWE1MDA0NTRlNjJmMWQyNTI1M2JhN2EyZDhjMWUy NTQ0MjkwHhcNMjUxMjI2MDcwMDU3WhcNMjUxMjI3MDcwMDU3WjAzMTEwLwYDVQQD EygxNDkwNWU4NTBlZDA2NjE5YmFlZGNhNmMzYTI4ODIxMDFjY2IwZTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIM76y4c4hkcL7fvgpkBM4t37D9w bdY0fCWQiWr8PdWPn2qnJkb7eL435PW7gk3jqPtl+zffy+iu8nO/APhd2h66W9GS 5PgK9N0ufFRVoRnG5qNcbkKIzG7O7Nxtqqc6jSsAJmMOWRBKxFsLp5LbfpI2vknj ppPWfxdalKBkgtRprIuw1sSWwppX/l3lb4DlG2KreKsRmMAuIw+Ps/BrmicbM6ur GfdVLMnZ6doJfdA3KhTfrDjeZ+GMrZaDoB0/tH94gzEu7otWXS8gSBZM57CDy1ao qmKOKQHpyHa+cQeWpYoUml46t2NsMqgttB/EaFKY4VG5K86YrtkiFH9nXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSQXoUO0GYZuu3KbDooghAcyw4xMB8GA1UdIwQY MBaAFPFiJaUARU5i8dJSU7p6LYweJUQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmIt NTZmYWRjOTJlNDAwLzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zODQ2NDUtNjE4YS00NWIyLTlkMmItNTZmYWRjOTJlNDAw LzEvOFdJbHBRQkZUbUx4MGxKVHVub3RqQjRsUkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIVM9Av+ 2BHcktcThnzTAtRqhmkjrnj7xSEhFr4g7hZK7GHNZVdVUFgKHETLfuhKPof857kl 5gTwEb7h9g9N/bWvvmiEfrjem5alphtdrPdxcsYig38w2XvfiXk4UFh9ceehmFr2 oEUMLuMkCW+rT21dm0GYusZahjwrFLmrdMGLIWsNjPqtWmrRbTkPysOzAeimSGXa 9VxAbV8u4hZ3UHGoj82mAQhy4KpY9Y+nNGx4tO8fww00hI31hy6ptis9yjV81l7i +3ymbZgpnz/KoZIDZEGogLIY/trEgcPADxlPiPDz7AkkaVroSbAO0T2v3nmSmLQi oeKT9eN2SmeBuA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:28 2025 by rpki-client