This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft File: 8W6j8DMLITLQ33UvUfDgv-89G64.mft (raw, json) Hash identifier: iW6V2GoYlwgfe1TWbNh+TOrJPBi0oj/DeL79z/DpWrs= Subject key identifier: 1D:8A:15:C5:70:B3:27:F1:A2:D6:41:36:D5:A5:B6:68:8A:69:0F:1A Authority key identifier: F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE Certificate issuer: /CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae Certificate serial: 019B5A1AC6836C5C00D5FA0DE5C377B49775 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 10:01:02 +0000 Manifest this update: Fri 26 Dec 2025 10:01:02 +0000 Manifest next update: Sat 27 Dec 2025 10:01:02 +0000 Files and hashes: 1: 8W6j8DMLITLQ33UvUfDgv-89G64.crl (hash: zt4oaBA+i/VOUNWzSBrQctmYShYu8H8biVuIMmXdS3Q=) 2: Im2JQRLROW71vKm8r2oO6Xo1LEY.roa (hash: MahGrn/8hOcGcxLx7I6GfG5YqTkwO2eBFakKNoAC1GA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:c6:83:6c:5c:00:d5:fa:0d:e5:c3:77:b4:97:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae Validity Not Before: Dec 26 10:01:02 2025 GMT Not After : Dec 27 10:01:02 2025 GMT Subject: CN=1d8a15c570b327f1a2d64136d5a5b6688a690f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f6:ef:fe:9e:a1:6f:e9:c3:44:65:06:ec:c8: 98:92:98:99:96:2e:b9:79:98:10:76:5f:f5:c3:d2: c0:38:f7:b1:2c:e5:93:36:0e:49:13:86:3b:5a:14: d2:3c:86:f3:75:ba:2a:53:8c:1f:32:45:2c:75:de: 91:9a:a4:b1:92:0c:c3:78:cd:e9:b7:7d:60:14:ef: b9:eb:25:c6:d9:96:3f:85:00:32:53:3f:8e:5e:79: 6e:66:99:c4:15:bb:56:ee:65:94:99:b9:db:40:9b: 1e:7e:ea:92:15:55:d6:c7:a9:ed:f5:4d:fb:b4:fd: ee:9f:72:1e:5e:76:72:20:ac:5b:90:6b:f5:97:42: bb:ce:ca:f4:26:29:83:cb:e5:f6:5b:13:d9:d1:74: e8:02:36:06:c9:87:fc:73:08:e5:db:01:4f:a6:cb: a4:ac:90:59:d9:a2:5c:cd:01:1f:9f:96:45:b8:d8: 4c:69:38:27:8d:9f:f1:e8:58:36:44:97:bb:c7:34: 29:12:69:e4:26:19:3f:38:76:f8:56:ff:01:eb:25: 00:2b:a6:18:a9:b4:b7:d7:23:02:3c:77:d7:a7:af: 64:a9:4c:86:cb:b7:e9:96:94:19:ed:20:36:c3:69: 4c:96:de:eb:a2:04:99:32:46:f2:b1:16:2a:d0:5c: 8b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8A:15:C5:70:B3:27:F1:A2:D6:41:36:D5:A5:B6:68:8A:69:0F:1A X509v3 Authority Key Identifier: keyid:F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ba:67:b6:d5:d3:4d:79:6c:40:36:2a:88:26:c7:08:3f:4a: 18:b0:39:24:0d:91:18:d8:55:99:7f:b1:22:e1:ba:82:ee:2c: 0e:dd:c1:7f:88:0e:7b:37:dc:9a:a6:82:31:ff:45:34:4a:87: 50:f4:04:46:2d:81:02:c8:81:a2:bc:a7:09:e3:9b:6a:e2:39: 68:dc:3a:74:7a:09:76:fb:e1:29:a3:1b:43:31:15:95:86:e4: b2:06:42:12:92:d1:d5:31:01:d1:13:f1:1c:dd:d3:db:15:2b: 81:5f:92:1b:f7:32:88:c8:7b:d4:60:1e:5b:df:41:8b:ea:c3: f8:cd:33:ed:64:e7:ea:6d:3c:af:e0:5a:db:fe:87:fe:e3:1d: 0d:10:41:0d:13:1a:08:af:5c:df:41:bf:2f:7b:0f:a5:f0:25: 06:00:40:a6:f3:ea:64:11:dd:f4:8b:e0:29:3b:81:8a:17:8b: 00:07:66:8f:37:b0:f8:f4:b1:7b:b3:db:3a:25:2a:22:7e:01: e4:e7:94:27:08:2b:4b:8f:40:df:30:7d:e5:89:6e:2e:cd:de: 0f:32:f1:4b:a0:f1:d2:77:8c:52:8c:f9:5d:30:95:2a:1d:31: 34:29:7f:39:c3:22:eb:2f:be:11:ca:e3:a4:30:3e:36:66:9b: ca:f3:57:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGsaDbFwA1foN5cN3tJd1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNmVhM2YwMzMwYjIxMzJkMGRmNzUyZjUxZjBlMGJmZWYz ZDFiYWUwHhcNMjUxMjI2MTAwMTAyWhcNMjUxMjI3MTAwMTAyWjAzMTEwLwYDVQQD EygxZDhhMTVjNTcwYjMyN2YxYTJkNjQxMzZkNWE1YjY2ODhhNjkwZjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfbv/p6hb+nDRGUG7MiYkpiZli65 eZgQdl/1w9LAOPexLOWTNg5JE4Y7WhTSPIbzdboqU4wfMkUsdd6RmqSxkgzDeM3p t31gFO+56yXG2ZY/hQAyUz+OXnluZpnEFbtW7mWUmbnbQJsefuqSFVXWx6nt9U37 tP3un3IeXnZyIKxbkGv1l0K7zsr0JimDy+X2WxPZ0XToAjYGyYf8cwjl2wFPpsuk rJBZ2aJczQEfn5ZFuNhMaTgnjZ/x6Fg2RJe7xzQpEmnkJhk/OHb4Vv8B6yUAK6YY qbS31yMCPHfXp69kqUyGy7fplpQZ7SA2w2lMlt7rogSZMkbysRYq0FyLeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2KFcVwsyfxotZBNtWltmiKaQ8aMB8GA1UdIwQY MBaAFPFuo/AzCyEy0N91L1Hw4L/vPRuuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFc2ajhETUxJVExRMzNVdlVmRGd2LTg5RzY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lODY2N2EtYjdmZC00ZWE4LWJhZTkt NjAwN2JiYWQ4NmQ2LzEvOFc2ajhETUxJVExRMzNVdlVmRGd2LTg5RzY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9lODY2N2EtYjdmZC00ZWE4LWJhZTktNjAwN2JiYWQ4NmQ2 LzEvOFc2ajhETUxJVExRMzNVdlVmRGd2LTg5RzY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbpnttXT TXlsQDYqiCbHCD9KGLA5JA2RGNhVmX+xIuG6gu4sDt3Bf4gOezfcmqaCMf9FNEqH UPQERi2BAsiBorynCeObauI5aNw6dHoJdvvhKaMbQzEVlYbksgZCEpLR1TEB0RPx HN3T2xUrgV+SG/cyiMh71GAeW99Bi+rD+M0z7WTn6m08r+Ba2/6H/uMdDRBBDRMa CK9c30G/L3sPpfAlBgBApvPqZBHd9IvgKTuBiheLAAdmjzew+PSxe7PbOiUqIn4B 5OeUJwgrS49A3zB95YluLs3eDzLxS6Dx0neMUoz5XTCVKh0xNCl/OcMi6y++Ecrj pDA+NmabyvNXCQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:42 2025 by rpki-client