This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft File: 8WaLESRDpJbpZlHVgrbMZBP7XHY.mft (raw, json) Hash identifier: g3BjnufPj/fsbVXOJaBXlpkiRZEIYur84RxOruBjMnM= Subject key identifier: 36:54:9A:7C:39:02:1D:74:EE:E4:84:F1:F3:4E:63:3D:38:6D:17:86 Authority key identifier: F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76 Certificate issuer: /CN=f1668b112443a496e96651d582b6cc6413fb5c76 Certificate serial: 019B10B8129C4372B24FD8129D737AF124AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft Manifest number: 0754 Signing time: Fri 12 Dec 2025 04:00:57 +0000 Manifest this update: Fri 12 Dec 2025 04:00:57 +0000 Manifest next update: Sat 13 Dec 2025 04:00:57 +0000 Files and hashes: 1: 8WaLESRDpJbpZlHVgrbMZBP7XHY.crl (hash: OWvILcaEMmWsw7OCDDAEJBMVydP6zSKG1hpa82dUp0g=) 2: zTop8kv04M-CPRutWJMmw5M7s5M.roa (hash: h5ZlzzODOy4Yt5G5OttRKd2ppDnce+EkREvBpaIbOxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:12:9c:43:72:b2:4f:d8:12:9d:73:7a:f1:24:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1668b112443a496e96651d582b6cc6413fb5c76 Validity Not Before: Dec 12 04:00:57 2025 GMT Not After : Dec 13 04:00:57 2025 GMT Subject: CN=36549a7c39021d74eee484f1f34e633d386d1786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:de:5b:08:d6:70:96:a6:b0:05:0d:99:18:00: 5f:ca:47:68:de:56:83:f3:df:85:03:ef:4c:2d:54: 95:29:a9:9f:d1:fd:76:cd:8c:8f:69:8d:e0:7f:69: 5f:ce:2b:64:01:9e:2a:56:91:b8:b2:68:b4:c4:37: 47:33:c7:c1:3d:18:38:36:9a:22:1a:44:96:b0:da: 7e:59:fd:10:25:98:fc:f9:ef:a0:2f:ad:f2:d8:12: 73:12:69:ce:82:a0:7c:09:9d:98:9d:53:5f:97:20: 94:40:fe:df:5b:36:86:7d:b3:7a:6f:21:f7:bc:b9: 6e:b5:db:2b:b6:8e:e4:ef:1f:8e:ba:ab:a3:2f:78: 1b:e9:a6:27:7e:bf:25:81:3b:31:5e:e2:ee:01:f0: ab:12:dc:ac:34:38:12:eb:64:f6:1e:0b:60:11:15: 56:bc:5c:0c:a7:cb:9d:0b:9b:76:0e:78:71:fb:a4: 28:cc:10:d8:08:c9:aa:d3:27:4e:59:0b:8d:07:1a: 21:7f:a7:ca:5c:87:fa:a8:0a:a0:55:0b:84:19:64: 5a:8e:f8:9f:a7:0c:22:89:29:d6:aa:f5:27:eb:64: 9f:ec:de:93:ae:ea:82:9f:38:e7:7b:53:e4:84:27: 97:b8:bd:be:6c:9a:95:da:fc:1a:fb:10:3d:e5:f3: bb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:54:9A:7C:39:02:1D:74:EE:E4:84:F1:F3:4E:63:3D:38:6D:17:86 X509v3 Authority Key Identifier: keyid:F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:6d:46:6b:f2:45:16:e8:47:15:fe:e3:6e:ed:60:ec:7e:4e: a1:8f:64:fd:0b:3b:62:35:f5:28:67:a7:86:a5:d0:de:93:2d: 59:32:45:19:8f:58:6b:df:49:d8:1a:b0:87:d2:5d:5d:e8:d7: 70:97:05:49:9f:5b:30:0f:fc:5d:71:a6:cc:24:37:0c:8f:92: 74:b7:25:bb:55:08:61:ab:8f:58:93:36:85:1d:91:73:8d:c7: 90:ac:01:94:c3:c2:41:7f:a1:12:e8:d7:04:35:8f:54:db:c1: 7c:f2:15:c7:b3:cb:6c:ed:4b:61:f7:79:3e:e8:80:8a:5e:cf: 30:7b:bb:72:b7:39:49:34:de:6d:d7:8e:6a:d5:1a:ed:41:17: 02:e6:d5:1f:64:cb:01:c9:0d:14:2e:90:e8:d2:83:e5:94:cc: dd:e6:a7:bc:48:2d:83:c8:39:f3:c8:65:67:94:05:2c:c9:04: 7b:25:a0:b2:25:ad:a0:3b:b9:c8:46:67:f7:0d:1e:0c:d9:18: 42:9c:e2:cf:29:0d:3a:d1:9b:a4:82:92:46:50:b0:13:62:99: 66:ad:fc:77:14:3d:18:c6:06:08:bc:53:90:a0:b7:2f:c2:1a: 5c:57:ff:10:3e:6d:0b:cc:e0:cc:6d:57:6a:1f:b0:03:ba:b2: 74:03:67:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuBKcQ3KyT9gSnXN68SSqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNjY4YjExMjQ0M2E0OTZlOTY2NTFkNTgyYjZjYzY0MTNm YjVjNzYwHhcNMjUxMjEyMDQwMDU3WhcNMjUxMjEzMDQwMDU3WjAzMTEwLwYDVQQD EygzNjU0OWE3YzM5MDIxZDc0ZWVlNDg0ZjFmMzRlNjMzZDM4NmQxNzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN5bCNZwlqawBQ2ZGABfykdo3laD 89+FA+9MLVSVKamf0f12zYyPaY3gf2lfzitkAZ4qVpG4smi0xDdHM8fBPRg4Npoi GkSWsNp+Wf0QJZj8+e+gL63y2BJzEmnOgqB8CZ2YnVNflyCUQP7fWzaGfbN6byH3 vLlutdsrto7k7x+OuqujL3gb6aYnfr8lgTsxXuLuAfCrEtysNDgS62T2HgtgERVW vFwMp8udC5t2Dnhx+6QozBDYCMmq0ydOWQuNBxohf6fKXIf6qAqgVQuEGWRajvif pwwiiSnWqvUn62Sf7N6TruqCnzjne1PkhCeXuL2+bJqV2vwa+xA95fO7nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZUmnw5Ah107uSE8fNOYz04bReGMB8GA1UdIwQY MBaAFPFmixEkQ6SW6WZR1YK2zGQT+1x2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFdhTEVTUkRwSmJwWmxIVmdyYk1aQlA3WEhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8yNWQyZDAtMjAyNi00ZDgxLTg1NDkt MWZiNjY4NWE4ZDk3LzEvOFdhTEVTUkRwSmJwWmxIVmdyYk1aQlA3WEhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8yNWQyZDAtMjAyNi00ZDgxLTg1NDktMWZiNjY4NWE4ZDk3 LzEvOFdhTEVTUkRwSmJwWmxIVmdyYk1aQlA3WEhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQG1Ga/JF FuhHFf7jbu1g7H5OoY9k/Qs7YjX1KGenhqXQ3pMtWTJFGY9Ya99J2Bqwh9JdXejX cJcFSZ9bMA/8XXGmzCQ3DI+SdLclu1UIYauPWJM2hR2Rc43HkKwBlMPCQX+hEujX BDWPVNvBfPIVx7PLbO1LYfd5PuiAil7PMHu7crc5STTebdeOatUa7UEXAubVH2TL AckNFC6Q6NKD5ZTM3eanvEgtg8g588hlZ5QFLMkEeyWgsiWtoDu5yEZn9w0eDNkY QpzizykNOtGbpIKSRlCwE2KZZq38dxQ9GMYGCLxTkKC3L8IaXFf/ED5tC8zgzG1X ah+wA7qydANn+g== -----END CERTIFICATE-----Generated at Fri Dec 12 09:49:36 2025 by rpki-client