This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft File: wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft (raw, json) Hash identifier: xPEc/HwCmZtnCr2Oe18Ar9wTEuHBs2x4GaEblZAYhqI= Subject key identifier: 20:E8:CC:E0:D8:F2:41:26:AF:D5:51:31:00:5C:EA:F2:DE:63:14:82 Authority key identifier: C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6 Certificate issuer: /CN=c13f17541732f57abff1294c71b533eb56746fd6 Certificate serial: 019B1013F3841DD53FA9DEAEC994EB88AEC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft Manifest number: 1773 Signing time: Fri 12 Dec 2025 01:01:41 +0000 Manifest this update: Fri 12 Dec 2025 01:01:41 +0000 Manifest next update: Sat 13 Dec 2025 01:01:41 +0000 Files and hashes: 1: DljJr8JzJiVrlFsa4a_Y6aDbzLA.roa (hash: h/O87BR6bvL7AJdknAhnONrNppB3GhoL2ZES3kI48+0=) 2: wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl (hash: sIn8C+5EMDr+CfX69+T0ymkwOOKgMHxx+ajkRC4wT1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:f3:84:1d:d5:3f:a9:de:ae:c9:94:eb:88:ae:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c13f17541732f57abff1294c71b533eb56746fd6 Validity Not Before: Dec 12 01:01:41 2025 GMT Not After : Dec 13 01:01:41 2025 GMT Subject: CN=20e8cce0d8f24126afd55131005ceaf2de631482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e0:dd:e2:1c:29:a4:bc:1d:78:3c:13:f8:fa: 7b:c8:fe:c7:40:e1:ca:64:e5:6f:e8:22:6c:42:de: 1a:ef:b1:9d:6e:e5:e0:5a:3d:ce:8b:dd:81:3f:c8: f0:d9:3d:f3:da:ff:c8:1d:24:b3:90:cc:71:11:a0: 07:6a:2c:ba:f6:c6:3d:17:74:38:2e:43:af:1b:b8: 53:9a:f6:1c:a1:e9:c1:5d:d0:65:27:36:01:e4:d6: 60:04:79:37:65:5a:70:fa:5c:14:81:e7:73:fa:2e: 99:e4:9a:35:22:0d:cf:6a:3e:1b:9a:74:32:9f:a1: 15:08:dc:ef:e6:f8:20:fc:06:06:0c:3a:8f:fd:04: 32:c2:84:1e:15:de:8c:19:71:d6:1c:6f:1e:21:fc: 8b:97:9d:ee:67:af:cf:6f:22:2f:bb:6a:c1:1a:ee: de:5e:8d:15:89:bd:90:38:de:db:ee:aa:44:9a:27: 78:2b:80:c5:d8:54:c5:cf:e8:7a:b7:b4:24:ee:b7: 03:39:a9:25:2e:d2:2e:ac:0e:86:ff:50:bd:2d:77: c1:00:21:c4:e6:26:01:4b:3c:92:80:3a:07:62:35: 16:56:bf:ea:ce:c0:3b:b7:5b:aa:10:fd:7f:d0:d0: 53:85:76:9b:80:65:db:40:eb:30:b1:b7:09:42:a3: ed:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E8:CC:E0:D8:F2:41:26:AF:D5:51:31:00:5C:EA:F2:DE:63:14:82 X509v3 Authority Key Identifier: keyid:C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:5b:61:57:14:78:c8:6e:0c:b2:1b:90:05:2b:3f:4f:43:de: 0c:b3:e6:f8:bf:c4:41:b6:a4:8d:71:1b:c5:46:30:e9:0d:d1: 45:e8:55:e6:b6:2f:96:d2:03:fc:df:56:7c:a4:1f:57:04:88: 9b:d7:eb:f9:cd:03:12:08:f9:da:c2:52:83:6f:53:3b:18:a7: 23:4a:ae:8a:be:7c:03:d8:85:54:ab:2d:a4:d2:3e:dc:8a:73: 7e:5f:b0:c0:7c:77:e7:a3:09:28:3d:9c:4a:cb:3f:8a:6a:94: 23:67:a5:31:19:69:00:09:50:10:a7:2f:0d:23:1d:07:cf:57: fe:6a:30:f3:07:f8:5f:ab:e1:b6:87:36:72:21:5a:2f:36:0a: 7f:8b:18:78:13:28:34:08:c3:55:b5:36:8c:83:4e:31:96:5d: e9:36:3f:44:1b:30:af:25:77:ad:e4:97:7d:c7:ce:32:60:1d: 67:bc:2a:39:36:f9:7f:68:11:d5:0d:fb:99:5c:f5:4e:1e:a3: 79:89:6a:81:66:9e:e9:19:9b:47:ae:58:7b:53:ef:c4:14:1e: 74:1e:31:99:c2:2a:95:6b:87:4d:98:9d:bd:63:b6:00:03:e1: c4:31:9b:36:27:6e:97:fe:ae:14:2d:27:20:7f:84:f9:94:07: 7f:21:0d:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE/OEHdU/qd6uyZTriK7IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxM2YxNzU0MTczMmY1N2FiZmYxMjk0YzcxYjUzM2ViNTY3 NDZmZDYwHhcNMjUxMjEyMDEwMTQxWhcNMjUxMjEzMDEwMTQxWjAzMTEwLwYDVQQD EygyMGU4Y2NlMGQ4ZjI0MTI2YWZkNTUxMzEwMDVjZWFmMmRlNjMxNDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+Dd4hwppLwdeDwT+Pp7yP7HQOHK ZOVv6CJsQt4a77GdbuXgWj3Oi92BP8jw2T3z2v/IHSSzkMxxEaAHaiy69sY9F3Q4 LkOvG7hTmvYcoenBXdBlJzYB5NZgBHk3ZVpw+lwUgedz+i6Z5Jo1Ig3Paj4bmnQy n6EVCNzv5vgg/AYGDDqP/QQywoQeFd6MGXHWHG8eIfyLl53uZ6/PbyIvu2rBGu7e Xo0Vib2QON7b7qpEmid4K4DF2FTFz+h6t7Qk7rcDOaklLtIurA6G/1C9LXfBACHE 5iYBSzySgDoHYjUWVr/qzsA7t1uqEP1/0NBThXabgGXbQOswsbcJQqPtBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDozODY8kEmr9VRMQBc6vLeYxSCMB8GA1UdIwQY MBaAFME/F1QXMvV6v/EpTHG1M+tWdG/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1Q4WFZCY3k5WHFfOFNsTWNiVXo2MVowYjlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS84OGE1NWQtNTE2My00MzNlLWI0Nzgt ZDhhMWMzMjk1ZTg5LzEvd1Q4WFZCY3k5WHFfOFNsTWNiVXo2MVowYjlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS84OGE1NWQtNTE2My00MzNlLWI0NzgtZDhhMWMzMjk1ZTg5 LzEvd1Q4WFZCY3k5WHFfOFNsTWNiVXo2MVowYjlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFthVxR4 yG4MshuQBSs/T0PeDLPm+L/EQbakjXEbxUYw6Q3RRehV5rYvltID/N9WfKQfVwSI m9fr+c0DEgj52sJSg29TOxinI0quir58A9iFVKstpNI+3Ipzfl+wwHx356MJKD2c Sss/imqUI2elMRlpAAlQEKcvDSMdB89X/mow8wf4X6vhtoc2ciFaLzYKf4sYeBMo NAjDVbU2jINOMZZd6TY/RBswryV3reSXfcfOMmAdZ7wqOTb5f2gR1Q37mVz1Th6j eYlqgWae6RmbR65Ye1PvxBQedB4xmcIqlWuHTZidvWO2AAPhxDGbNidul/6uFC0n IH+E+ZQHfyENOg== -----END CERTIFICATE-----Generated at Fri Dec 12 02:51:45 2025 by rpki-client