This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft File: M8Ww18CpzSS3PNy5LIdG6FpKW48.mft (raw, json) Hash identifier: rY5m+RvEdtsphguFglvaCJ6AQOjtGGH6XddqWYp0xZ4= Subject key identifier: 9A:BA:BD:5B:B9:B7:4E:46:77:26:14:1A:C6:D8:EC:52:DC:DF:85:0D Authority key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F Certificate issuer: /CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f Certificate serial: 019B2552D6279A1BC28EC12CC60442E476E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft Manifest number: 0BA1 Signing time: Tue 16 Dec 2025 04:02:24 +0000 Manifest this update: Tue 16 Dec 2025 04:02:24 +0000 Manifest next update: Wed 17 Dec 2025 04:02:24 +0000 Files and hashes: 1: G9IMCDRzOQuPbahdvenWDMel-ec.roa (hash: KIE/h3OnsvTFha1HUMyujy3OIfah+sKBRWCgbRO+mg8=) 2: M8Ww18CpzSS3PNy5LIdG6FpKW48.crl (hash: bT176NqWSeuQAT6WZKgO7PQ3L2EgFvj190zaQQvG/2w=) 3: kaCKh69UCH1e8YxXvfDRSIMinp4.roa (hash: 1RbgYWWGOgFXxNNpggiv1pAr13/5f1ITVmQGcqYLD8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:d6:27:9a:1b:c2:8e:c1:2c:c6:04:42:e4:76:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f Validity Not Before: Dec 16 04:02:24 2025 GMT Not After : Dec 17 04:02:24 2025 GMT Subject: CN=9ababd5bb9b74e467726141ac6d8ec52dcdf850d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b9:8a:8f:d2:6a:4f:c2:d1:87:47:3b:b1:c2: f6:2e:3d:8b:f2:96:74:5b:ba:68:85:d1:b7:73:3c: 3b:72:1d:13:4b:50:40:38:0f:17:b0:66:28:a7:4a: 79:69:92:1a:79:16:20:7e:a7:e4:a5:da:0b:9d:98: 03:16:1a:34:3d:a7:a7:6c:91:e5:76:23:5c:55:5b: d9:5d:49:c9:e1:66:a2:5b:b9:fd:e7:92:10:1d:ce: 29:f3:63:50:fa:9d:a1:99:0f:21:f5:21:1f:47:0c: 5c:54:99:50:b6:79:90:46:06:5c:a1:5d:ca:65:b3: 3a:55:8b:14:1f:54:fc:15:b8:17:2a:e6:74:3c:bc: d8:8a:23:ed:38:ae:5f:89:be:36:59:6c:14:54:28: d8:a6:1d:15:e5:c7:04:4a:79:ff:6d:17:bf:15:09: 31:d0:fd:8c:cd:a8:59:95:87:f6:21:c7:a7:a2:cd: 4b:2a:68:0d:54:c1:4d:9d:5a:35:29:71:cb:0c:20: 68:ec:c7:08:38:05:7e:00:5f:08:2d:67:71:22:86: a3:4b:c9:f7:b9:c7:eb:96:10:75:a6:1c:d7:3a:01: 22:27:39:0d:d5:41:f9:50:48:5e:26:9b:a8:64:02: 3c:70:36:0c:f3:93:f9:a8:fd:e3:dd:50:d5:7b:97: 6c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BA:BD:5B:B9:B7:4E:46:77:26:14:1A:C6:D8:EC:52:DC:DF:85:0D X509v3 Authority Key Identifier: keyid:33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:b3:15:d6:2f:f4:5d:a0:2d:8b:9f:1d:89:7f:9b:8e:d8:87: ff:a6:f8:22:d6:93:5d:de:09:ca:58:ca:45:a9:00:b6:64:f0: 53:62:66:b9:29:e6:04:f7:eb:f2:80:f0:4c:dc:c2:62:c3:a4: 98:f3:00:aa:e3:a2:5f:ec:e1:1b:4f:99:e4:1f:44:0b:29:ac: e6:b2:55:32:6b:47:ba:b3:a4:2a:c3:c0:ed:5b:13:9e:0d:b2: 89:ea:09:d7:19:83:bd:9f:27:ac:be:80:04:d9:80:18:7d:80: 32:98:d3:19:50:84:a5:80:36:52:ac:16:6d:03:46:04:43:b7: 60:e2:03:88:b8:d3:2e:fe:43:bb:19:d0:08:cd:11:2f:a1:22: 0f:94:99:f9:4d:66:00:aa:a2:32:db:d8:20:69:78:9d:96:b1: 38:bf:ae:ad:0e:8b:66:7f:59:9e:c3:aa:e2:1b:ba:ef:2f:7d: f1:45:03:9b:16:07:4e:30:e3:70:8d:5a:1d:4b:a9:c5:d0:f2: ea:9d:3c:bd:e7:2f:a3:2e:cf:67:11:fd:fd:38:8e:70:10:27: 09:fb:78:a7:89:94:ae:d5:4c:66:e4:90:38:3f:1c:b6:cd:33: bd:49:73:54:b4:8c:35:ee:3a:a3:37:0f:dd:dd:c9:f6:ff:24: 13:8a:fb:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUtYnmhvCjsEsxgRC5HbgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzViMGQ3YzBhOWNkMjRiNzNjZGNiOTJjODc0NmU4NWE0 YTViOGYwHhcNMjUxMjE2MDQwMjI0WhcNMjUxMjE3MDQwMjI0WjAzMTEwLwYDVQQD Eyg5YWJhYmQ1YmI5Yjc0ZTQ2NzcyNjE0MWFjNmQ4ZWM1MmRjZGY4NTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbmKj9JqT8LRh0c7scL2Lj2L8pZ0 W7pohdG3czw7ch0TS1BAOA8XsGYop0p5aZIaeRYgfqfkpdoLnZgDFho0PaenbJHl diNcVVvZXUnJ4WaiW7n955IQHc4p82NQ+p2hmQ8h9SEfRwxcVJlQtnmQRgZcoV3K ZbM6VYsUH1T8FbgXKuZ0PLzYiiPtOK5fib42WWwUVCjYph0V5ccESnn/bRe/FQkx 0P2MzahZlYf2Icenos1LKmgNVMFNnVo1KXHLDCBo7McIOAV+AF8ILWdxIoajS8n3 ucfrlhB1phzXOgEiJzkN1UH5UEheJpuoZAI8cDYM85P5qP3j3VDVe5dsqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJq6vVu5t05GdyYUGsbY7FLc34UNMB8GA1UdIwQY MBaAFDPFsNfAqc0ktzzcuSyHRuhaSluPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8yNTgxZjQtODQxMC00YTQzLTkxODYt MGZhYjIyNjllYThlLzEvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8yNTgxZjQtODQxMC00YTQzLTkxODYtMGZhYjIyNjllYThl LzEvTThXdzE4Q3B6U1MzUE55NUxJZEc2RnBLVzQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0rMV1i/0 XaAti58diX+bjtiH/6b4ItaTXd4JyljKRakAtmTwU2JmuSnmBPfr8oDwTNzCYsOk mPMAquOiX+zhG0+Z5B9ECyms5rJVMmtHurOkKsPA7VsTng2yieoJ1xmDvZ8nrL6A BNmAGH2AMpjTGVCEpYA2UqwWbQNGBEO3YOIDiLjTLv5DuxnQCM0RL6EiD5SZ+U1m AKqiMtvYIGl4nZaxOL+urQ6LZn9ZnsOq4hu67y998UUDmxYHTjDjcI1aHUupxdDy 6p08vecvoy7PZxH9/TiOcBAnCft4p4mUrtVMZuSQOD8cts0zvUlzVLSMNe46ozcP 3d3J9v8kE4r7Jg== -----END CERTIFICATE-----Generated at Tue Dec 16 08:15:27 2025 by rpki-client