This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft File: 8WBdCa0sbEN7bC-Gg___viF0_mw.mft (raw, json) Hash identifier: Erfw7hKILd1jCZPyEQw16qJSOUs8mys75DwPfW54ViM= Subject key identifier: 42:65:64:26:5D:32:AD:57:B5:C5:46:66:69:9B:0D:44:16:64:1F:5B Authority key identifier: F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C Certificate issuer: /CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c Certificate serial: 019B1A9796C63DF45E593ADD6019A990AE84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft Manifest number: 10E1 Signing time: Sun 14 Dec 2025 02:01:40 +0000 Manifest this update: Sun 14 Dec 2025 02:01:40 +0000 Manifest next update: Mon 15 Dec 2025 02:01:40 +0000 Files and hashes: 1: 8WBdCa0sbEN7bC-Gg___viF0_mw.crl (hash: F/1vGzC6lTyqJ62FdESGcC+dw9BhPVnULxvXYf9Ee2U=) 2: j3qkWwGkWnrxhLgyGwrcFzXJWM4.roa (hash: tCyqkdV84n1oHfUiO9Wnf9/3f5vZVsXyCuIYwhEsEzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:97:96:c6:3d:f4:5e:59:3a:dd:60:19:a9:90:ae:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c Validity Not Before: Dec 14 02:01:40 2025 GMT Not After : Dec 15 02:01:40 2025 GMT Subject: CN=426564265d32ad57b5c54666699b0d4416641f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c4:0d:35:10:a8:47:ac:1e:4d:73:ac:24:37: b1:dc:6b:f7:8b:c8:60:d7:3f:d9:b5:23:c2:a2:f7: af:1f:14:83:06:50:d2:d0:83:40:cb:da:52:d5:16: 9d:98:50:ed:c8:88:c5:8f:61:bd:52:39:c7:bb:2c: 2e:84:dd:0f:21:bd:eb:67:bc:75:c8:f9:7d:95:62: 88:4f:0b:cc:ce:9b:b3:fc:88:de:e1:d0:34:4e:e3: e2:f4:f6:ce:ff:7f:e1:f7:7d:a6:9e:0d:0e:5f:e3: 58:d0:9e:66:9f:3d:72:ca:fe:b0:6a:60:f4:50:63: cc:56:0b:8e:32:6a:ce:c2:10:70:05:4d:69:d2:03: 59:7c:41:76:57:90:c6:30:c4:b7:8f:b5:fc:27:14: 48:9e:79:30:20:f1:51:81:3f:d5:13:fc:1a:b0:1b: 46:c6:ff:f1:79:82:ac:45:4c:41:4d:c8:de:39:6a: 5f:e2:52:b0:f0:e4:ed:47:14:74:b9:cf:5a:fe:38: 25:b9:f9:06:e1:ca:21:93:f7:d6:46:fe:48:69:5f: 4d:e2:2f:f2:e2:97:f9:24:62:6f:a0:0b:bf:c1:96: c7:be:24:43:73:9c:e3:d9:55:8e:05:6e:4e:28:6c: 9c:e1:84:48:5a:3f:1b:19:85:70:c5:01:09:1f:40: cd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:65:64:26:5D:32:AD:57:B5:C5:46:66:69:9B:0D:44:16:64:1F:5B X509v3 Authority Key Identifier: keyid:F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:40:74:6f:ed:9b:81:cb:b6:e1:fd:18:ef:fb:77:bf:e9:08: 5d:8b:53:18:75:25:db:fd:d6:f6:f8:2e:e0:2b:a1:d1:15:db: 9f:44:d1:3b:1b:ac:49:d9:73:55:fb:21:22:dd:78:14:53:44: 1a:fa:89:b6:f9:31:44:6c:78:f7:25:79:34:3a:96:72:86:9a: 46:70:7d:98:63:f5:a1:17:ec:87:ef:c4:4f:42:1a:b7:a4:a1: a1:43:bf:69:fc:69:4b:82:27:bf:44:20:69:03:36:76:ad:a0: dc:b6:fb:6d:15:0e:7e:01:5e:2f:f1:7c:e6:e8:47:6f:cd:f4: 61:62:c2:c5:09:19:d5:b5:34:28:49:13:77:84:9a:ec:bb:70: ce:72:ca:4b:b9:f2:e3:6c:ac:31:f6:9d:44:a0:27:1e:c3:9f: d4:78:00:87:de:b8:7a:a8:e3:85:0a:e2:00:58:8b:78:02:1e: 6d:9a:b1:af:4a:65:bb:d3:0c:32:6d:49:39:1e:11:1a:80:81: b1:d6:e5:7d:ee:49:93:55:40:6e:34:a5:38:8a:b4:18:75:3c: b4:9e:fa:9a:bb:79:4e:96:72:10:8a:d9:5b:cb:97:34:04:72: 13:fa:88:09:67:70:b7:95:f8:b6:9c:17:f0:87:8d:d6:61:76: fb:b2:6f:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsal5bGPfReWTrdYBmpkK6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNjA1ZDA5YWQyYzZjNDM3YjZjMmY4NjgzZmZmZmJlMjE3 NGZlNmMwHhcNMjUxMjE0MDIwMTQwWhcNMjUxMjE1MDIwMTQwWjAzMTEwLwYDVQQD Eyg0MjY1NjQyNjVkMzJhZDU3YjVjNTQ2NjY2OTliMGQ0NDE2NjQxZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosQNNRCoR6weTXOsJDex3Gv3i8hg 1z/ZtSPCovevHxSDBlDS0INAy9pS1RadmFDtyIjFj2G9UjnHuywuhN0PIb3rZ7x1 yPl9lWKITwvMzpuz/Ije4dA0TuPi9PbO/3/h932mng0OX+NY0J5mnz1yyv6wamD0 UGPMVguOMmrOwhBwBU1p0gNZfEF2V5DGMMS3j7X8JxRInnkwIPFRgT/VE/wasBtG xv/xeYKsRUxBTcjeOWpf4lKw8OTtRxR0uc9a/jglufkG4cohk/fWRv5IaV9N4i/y 4pf5JGJvoAu/wZbHviRDc5zj2VWOBW5OKGyc4YRIWj8bGYVwxQEJH0DN8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJlZCZdMq1XtcVGZmmbDUQWZB9bMB8GA1UdIwQY MBaAFPFgXQmtLGxDe2wvhoP//74hdP5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFdCZENhMHNiRU43YkMtR2dfX192aUYwX213LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zNmIwNDAtZjU3Yi00YWUyLWFiNDIt MjI4NzMzMjQ1Y2QxLzEvOFdCZENhMHNiRU43YkMtR2dfX192aUYwX213Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8zNmIwNDAtZjU3Yi00YWUyLWFiNDItMjI4NzMzMjQ1Y2Qx LzEvOFdCZENhMHNiRU43YkMtR2dfX192aUYwX213LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkB0b+2b gcu24f0Y7/t3v+kIXYtTGHUl2/3W9vgu4Cuh0RXbn0TROxusSdlzVfshIt14FFNE GvqJtvkxRGx49yV5NDqWcoaaRnB9mGP1oRfsh+/ET0Iat6ShoUO/afxpS4Inv0Qg aQM2dq2g3Lb7bRUOfgFeL/F85uhHb830YWLCxQkZ1bU0KEkTd4Sa7LtwznLKS7ny 42ysMfadRKAnHsOf1HgAh964eqjjhQriAFiLeAIebZqxr0plu9MMMm1JOR4RGoCB sdblfe5Jk1VAbjSlOIq0GHU8tJ76mrt5TpZyEIrZW8uXNARyE/qICWdwt5X4tpwX 8IeN1mF2+7JvYg== -----END CERTIFICATE-----Generated at Sun Dec 14 07:43:39 2025 by rpki-client