This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft File: 8gwo0Z4N-1NIJqojqlBq9oowW3o.mft (raw, json) Hash identifier: KdPAqBvUfk9uSDGaDkBU918aSbMmqysKEb4mr/qkapA= Subject key identifier: AD:DA:17:5E:D1:0F:BF:5F:A9:1E:69:B2:5E:30:86:97:CE:A8:A7:21 Authority key identifier: F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A Certificate issuer: /CN=f20c28d19e0dfb534826aa23aa506af68a305b7a Certificate serial: 019B2D0C45FA5BA5A256C4C34A9796C32CF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft Manifest number: 1712 Signing time: Wed 17 Dec 2025 16:02:17 +0000 Manifest this update: Wed 17 Dec 2025 16:02:17 +0000 Manifest next update: Thu 18 Dec 2025 16:02:17 +0000 Files and hashes: 1: 8gwo0Z4N-1NIJqojqlBq9oowW3o.crl (hash: MD8a78ZnxHfvNp6DGtgGJDN8a6EJIh8AmkOizs+KGRU=) 2: eCt_o7wQa4uTOlJ8RZzlmDoTQs4.roa (hash: PGIcRqsMSnRyuLEgYQdmyq8FNdFdg9Cwl+Xi/IOiL8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:45:fa:5b:a5:a2:56:c4:c3:4a:97:96:c3:2c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f20c28d19e0dfb534826aa23aa506af68a305b7a Validity Not Before: Dec 17 16:02:17 2025 GMT Not After : Dec 18 16:02:17 2025 GMT Subject: CN=adda175ed10fbf5fa91e69b25e308697cea8a721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:94:29:92:aa:3f:45:06:e6:ce:55:24:9e:a7: 31:4f:a6:ea:0e:b8:ff:d8:52:d1:c5:48:37:a9:b8: 9c:3b:b8:18:eb:8f:5f:19:b7:6e:02:9f:3c:25:0c: c4:2f:0f:36:d5:06:07:98:a5:8d:94:29:c2:18:6f: 90:28:02:9b:a9:61:83:e1:9e:1e:16:90:0f:d8:49: fb:3b:8e:ae:e6:04:f6:04:01:8c:b7:c8:b5:65:cf: ed:06:93:87:4e:e0:91:db:ed:59:e6:da:44:63:8e: eb:8a:53:38:f0:c3:2b:21:12:80:fc:c7:fd:5c:f7: 79:74:83:b2:77:ad:79:8d:d9:e7:5c:51:33:60:19: 15:6a:f7:c4:79:79:45:b5:d2:14:33:c2:2e:3e:24: e7:36:53:d7:4c:7f:9e:52:86:37:8e:fc:ad:7a:09: c8:d5:14:4c:a4:86:a5:63:62:80:34:51:4f:12:1d: a8:51:e9:09:d8:1f:0e:59:7c:91:23:06:4b:34:39: 8d:50:b2:85:dd:f5:0e:a5:40:ab:1d:06:42:76:64: 4f:d7:40:12:47:0b:36:c0:63:de:fb:b0:ba:2c:67: e2:4b:1b:a6:23:b0:64:c7:55:88:72:a5:48:dd:25: a3:f2:c4:85:34:d4:a4:6f:5d:ad:a6:77:0c:aa:b7: 15:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DA:17:5E:D1:0F:BF:5F:A9:1E:69:B2:5E:30:86:97:CE:A8:A7:21 X509v3 Authority Key Identifier: keyid:F2:0C:28:D1:9E:0D:FB:53:48:26:AA:23:AA:50:6A:F6:8A:30:5B:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gwo0Z4N-1NIJqojqlBq9oowW3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a07e18-2c6a-4930-be17-e5d7f2ddd4c2/1/8gwo0Z4N-1NIJqojqlBq9oowW3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:56:dd:f3:5d:54:8e:30:a7:69:42:d7:98:a5:44:43:b7:ea: be:19:60:69:dd:61:7a:68:46:7f:bd:6c:74:85:00:33:65:ad: 12:a7:00:51:30:69:31:5b:f5:3e:f0:df:ed:06:bc:79:0a:cc: e6:ce:99:44:61:20:79:aa:d4:12:84:59:0e:27:e6:11:0f:7d: c3:fe:16:38:71:7f:15:3e:d8:3f:25:d7:b9:15:b4:2e:20:81: 30:25:fd:4a:9d:f8:e7:c3:02:eb:de:9b:1d:0c:9a:0c:00:de: 62:79:a0:61:bb:df:d8:8d:2f:e5:07:eb:99:26:43:e9:41:fe: 32:ee:6d:87:7d:9e:ee:31:a5:66:db:7d:76:66:bd:59:1b:67: 07:1f:29:8b:af:04:4d:f1:97:87:a2:29:1c:a1:1c:f9:d8:1b: 09:8f:13:81:4d:b0:03:d4:c6:fa:15:2f:1e:d9:68:39:7c:2d: dc:ca:01:14:17:f2:00:6c:36:f7:a9:ee:6b:e9:41:f9:f7:ec: 31:00:f1:d7:45:7b:ba:87:35:0d:54:5c:d9:97:fb:8a:e8:a0: 09:db:c1:db:38:a1:00:23:fb:7b:f3:ce:7a:62:21:d1:23:99: c9:ec:45:3d:52:63:b1:a6:35:b7:72:44:f5:05:00:c1:34:56: 90:93:53:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDEX6W6WiVsTDSpeWwyz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMGMyOGQxOWUwZGZiNTM0ODI2YWEyM2FhNTA2YWY2OGEz MDViN2EwHhcNMjUxMjE3MTYwMjE3WhcNMjUxMjE4MTYwMjE3WjAzMTEwLwYDVQQD EyhhZGRhMTc1ZWQxMGZiZjVmYTkxZTY5YjI1ZTMwODY5N2NlYThhNzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5Qpkqo/RQbmzlUknqcxT6bqDrj/ 2FLRxUg3qbicO7gY649fGbduAp88JQzELw821QYHmKWNlCnCGG+QKAKbqWGD4Z4e FpAP2En7O46u5gT2BAGMt8i1Zc/tBpOHTuCR2+1Z5tpEY47rilM48MMrIRKA/Mf9 XPd5dIOyd615jdnnXFEzYBkVavfEeXlFtdIUM8IuPiTnNlPXTH+eUoY3jvytegnI 1RRMpIalY2KANFFPEh2oUekJ2B8OWXyRIwZLNDmNULKF3fUOpUCrHQZCdmRP10AS Rws2wGPe+7C6LGfiSxumI7Bkx1WIcqVI3SWj8sSFNNSkb12tpncMqrcVQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3aF17RD79fqR5psl4whpfOqKchMB8GA1UdIwQY MBaAFPIMKNGeDftTSCaqI6pQavaKMFt6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGd3bzBaNE4tMU5JSnFvanFsQnE5b293VzNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMDdlMTgtMmM2YS00OTMwLWJlMTct ZTVkN2YyZGRkNGMyLzEvOGd3bzBaNE4tMU5JSnFvanFsQnE5b293VzNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hMDdlMTgtMmM2YS00OTMwLWJlMTctZTVkN2YyZGRkNGMy LzEvOGd3bzBaNE4tMU5JSnFvanFsQnE5b293VzNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA31bd811U jjCnaULXmKVEQ7fqvhlgad1hemhGf71sdIUAM2WtEqcAUTBpMVv1PvDf7Qa8eQrM 5s6ZRGEgearUEoRZDifmEQ99w/4WOHF/FT7YPyXXuRW0LiCBMCX9Sp3458MC696b HQyaDADeYnmgYbvf2I0v5QfrmSZD6UH+Mu5th32e7jGlZtt9dma9WRtnBx8pi68E TfGXh6IpHKEc+dgbCY8TgU2wA9TG+hUvHtloOXwt3MoBFBfyAGw296nua+lB+ffs MQDx10V7uoc1DVRc2Zf7iuigCdvB2zihACP7e/POemIh0SOZyexFPVJjsaY1t3JE 9QUAwTRWkJNTKw== -----END CERTIFICATE-----Generated at Wed Dec 17 22:12:51 2025 by rpki-client