This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft File: s8k12EMWos9WpllXttebevgRpwc.mft (raw, json) Hash identifier: 3m2VhYdED81s8wKJ6+jIzWIqw+hw4KOheRpCUfQnsR4= Subject key identifier: 72:E3:90:F1:B7:60:A5:A3:CD:88:7F:D5:E5:E6:0F:CE:E2:EA:4D:2A Authority key identifier: B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07 Certificate issuer: /CN=b3c935d84316a2cf56a65957b6d79b7af811a707 Certificate serial: 019B32D7F2A08521F6CE2993E21C37E183A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft Manifest number: 0A75 Signing time: Thu 18 Dec 2025 19:02:51 +0000 Manifest this update: Thu 18 Dec 2025 19:02:51 +0000 Manifest next update: Fri 19 Dec 2025 19:02:51 +0000 Files and hashes: 1: s8k12EMWos9WpllXttebevgRpwc.crl (hash: n3IktzyMZvsD7BujC1p0en2t4KVgtb4qrt2OAa6L3Rk=) 2: udh3xGDNJXhOcF-5H4cWJu3ktiY.roa (hash: ocPGT+ldVCPhS+IwJUZcLKrDX+p6H2fIq+UgAUlkPrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:f2:a0:85:21:f6:ce:29:93:e2:1c:37:e1:83:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c935d84316a2cf56a65957b6d79b7af811a707 Validity Not Before: Dec 18 19:02:51 2025 GMT Not After : Dec 19 19:02:51 2025 GMT Subject: CN=72e390f1b760a5a3cd887fd5e5e60fcee2ea4d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a9:93:a1:13:13:ed:b1:0b:65:3d:c6:43:f1: e1:c1:30:22:db:e5:7e:e0:02:1b:c6:ed:ba:e1:47: 26:de:3c:4d:5e:bb:75:b1:ed:6a:ad:1a:5b:3f:e4: 85:71:ff:ba:ce:83:5e:be:10:ea:b0:00:81:b3:59: be:54:18:36:4e:f6:50:19:69:53:96:1c:1c:40:d7: 67:19:43:64:34:bb:e5:d0:44:13:db:90:1f:55:59: 2e:6b:93:a1:57:4c:11:1a:ac:22:97:88:65:92:2f: 37:c4:c0:47:8c:dd:8e:1a:ee:46:21:cd:36:d0:d9: 74:cf:91:43:7b:36:ac:a6:7a:9b:82:13:75:98:3f: 0c:e7:49:9e:f2:e7:af:2c:97:25:03:14:3c:07:15: b4:00:25:2e:33:31:9a:70:a6:af:e6:02:6d:3b:72: d6:34:15:ee:86:2f:4d:e0:a7:8a:8a:54:4c:69:40: 35:ed:c0:24:6c:bb:92:18:cc:99:39:a6:06:bf:dd: 62:5f:48:c5:ab:ff:5b:36:b3:1a:bc:bf:78:19:a7: a7:d4:7c:67:31:a1:69:f9:77:7d:b7:8c:0c:33:03: 27:e6:92:25:32:62:b3:06:62:86:42:95:24:e8:d4: 66:68:86:15:f9:57:0a:44:e2:fc:7b:73:ed:dc:f0: 77:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E3:90:F1:B7:60:A5:A3:CD:88:7F:D5:E5:E6:0F:CE:E2:EA:4D:2A X509v3 Authority Key Identifier: keyid:B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:d3:66:62:f3:63:8f:ee:45:bf:ca:84:ff:71:7b:9e:84:a2: c4:e3:8e:fb:48:05:f2:aa:a7:20:e1:14:c0:ca:1a:72:77:bf: f4:74:df:4c:76:bd:f4:9a:5c:32:cc:26:c7:f6:a9:e4:a1:bf: 0b:db:2b:1c:6d:7e:df:2e:16:f3:85:90:79:82:ca:63:49:bc: d3:64:ec:99:91:ad:01:f5:80:cb:35:46:36:2b:74:21:4d:8e: 2b:df:53:10:4e:52:1c:ca:dd:8d:d8:67:e8:9c:40:e9:3d:14: 9e:6f:da:16:f3:cd:9e:59:1c:df:d4:77:1d:0c:32:3d:8c:94: c8:e3:b5:3e:59:2b:0b:79:be:d8:2d:86:c0:81:b7:08:ea:69: 0c:cf:32:d1:31:e4:11:74:40:b3:44:5d:65:3c:63:63:fe:ff: 28:2d:4e:7e:68:fd:05:db:d4:b6:47:9b:0e:84:c2:83:9d:06: 9e:24:01:ad:eb:77:de:dc:b9:4c:74:76:f5:42:92:a2:8a:c6: 3a:04:95:02:31:da:39:f4:9b:29:5e:2b:a5:6c:08:9a:a8:13: 9d:7f:f8:13:69:46:26:9f:09:00:6b:5e:f4:5c:86:48:46:db: b1:2f:64:8a:98:44:be:73:1d:44:3b:4a:76:52:bf:fd:0e:29: be:af:49:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1/KghSH2zimT4hw34YOoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzkzNWQ4NDMxNmEyY2Y1NmE2NTk1N2I2ZDc5YjdhZjgx MWE3MDcwHhcNMjUxMjE4MTkwMjUxWhcNMjUxMjE5MTkwMjUxWjAzMTEwLwYDVQQD Eyg3MmUzOTBmMWI3NjBhNWEzY2Q4ODdmZDVlNWU2MGZjZWUyZWE0ZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKmToRMT7bELZT3GQ/HhwTAi2+V+ 4AIbxu264Ucm3jxNXrt1se1qrRpbP+SFcf+6zoNevhDqsACBs1m+VBg2TvZQGWlT lhwcQNdnGUNkNLvl0EQT25AfVVkua5OhV0wRGqwil4hlki83xMBHjN2OGu5GIc02 0Nl0z5FDezaspnqbghN1mD8M50me8uevLJclAxQ8BxW0ACUuMzGacKav5gJtO3LW NBXuhi9N4KeKilRMaUA17cAkbLuSGMyZOaYGv91iX0jFq/9bNrMavL94Gaen1Hxn MaFp+Xd9t4wMMwMn5pIlMmKzBmKGQpUk6NRmaIYV+VcKROL8e3Pt3PB3fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLjkPG3YKWjzYh/1eXmD87i6k0qMB8GA1UdIwQY MBaAFLPJNdhDFqLPVqZZV7bXm3r4EacHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhrMTJFTVdvczlXcGxsWHR0ZWJldmdScHdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81NTc5NjItMDUxYS00NmM1LThhOTMt MWNjMWE1MzhjM2NlLzEvczhrMTJFTVdvczlXcGxsWHR0ZWJldmdScHdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81NTc5NjItMDUxYS00NmM1LThhOTMtMWNjMWE1MzhjM2Nl LzEvczhrMTJFTVdvczlXcGxsWHR0ZWJldmdScHdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtNmYvNj j+5Fv8qE/3F7noSixOOO+0gF8qqnIOEUwMoacne/9HTfTHa99JpcMswmx/ap5KG/ C9srHG1+3y4W84WQeYLKY0m802TsmZGtAfWAyzVGNit0IU2OK99TEE5SHMrdjdhn 6JxA6T0Unm/aFvPNnlkc39R3HQwyPYyUyOO1PlkrC3m+2C2GwIG3COppDM8y0THk EXRAs0RdZTxjY/7/KC1Ofmj9BdvUtkebDoTCg50GniQBret33ty5THR29UKSoorG OgSVAjHaOfSbKV4rpWwImqgTnX/4E2lGJp8JAGte9FyGSEbbsS9kiphEvnMdRDtK dlK//Q4pvq9JnA== -----END CERTIFICATE-----Generated at Fri Dec 19 02:32:41 2025 by rpki-client