This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft File: w8zhZV8_ceTv_qTec6GuyCKCnWE.mft (raw, json) Hash identifier: 3KETRFf3LCyCbyR7b6alRE3eM5pW//FKOU4EJEw+Mw0= Subject key identifier: 50:D2:36:C7:97:0E:8E:F7:03:C3:3A:71:F2:E1:2F:87:05:9F:C6:3B Authority key identifier: C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61 Certificate issuer: /CN=c3cce1655f3f71e4effea4de73a1aec822829d61 Certificate serial: 019B42B772AB0BB8718FB2BE2459A26E3FA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft Manifest number: 0333 Signing time: Sun 21 Dec 2025 21:01:17 +0000 Manifest this update: Sun 21 Dec 2025 21:01:17 +0000 Manifest next update: Mon 22 Dec 2025 21:01:17 +0000 Files and hashes: 1: qel6ufOI0K0P6RzF02UdBRZmZOs.roa (hash: 0w6Fd2wQlTNYoLFBh1jxH0G1R4nWQ+6pOgjLnjgYDIc=) 2: w8zhZV8_ceTv_qTec6GuyCKCnWE.crl (hash: y5Z/I7Q2FN5Yn5v1enHp/BjZIplLWuS29PWc4YAy7Zc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:72:ab:0b:b8:71:8f:b2:be:24:59:a2:6e:3f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3cce1655f3f71e4effea4de73a1aec822829d61 Validity Not Before: Dec 21 21:01:17 2025 GMT Not After : Dec 22 21:01:17 2025 GMT Subject: CN=50d236c7970e8ef703c33a71f2e12f87059fc63b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4f:1e:11:32:cf:a2:da:7a:10:0a:88:6c:22: e1:e0:1a:29:00:5f:03:39:53:80:35:14:1c:9f:8b: 07:77:69:66:07:2b:9d:7f:e5:f9:34:a0:aa:91:32: 43:b2:82:a9:ce:bc:fa:6a:82:e5:52:f6:2d:b8:3c: 8e:8d:89:b4:ea:14:d5:1f:ba:a0:a1:d2:21:e2:e5: c0:4e:2b:d4:20:94:7e:01:cf:ee:f6:11:7e:2c:9e: 4a:06:93:e5:27:f9:a6:2e:dd:50:1a:0d:3f:f9:c8: 32:01:84:8f:91:c3:36:8a:29:53:f4:57:46:d6:d7: 09:aa:bc:20:91:6d:bc:09:c3:9e:f9:9f:b4:a6:83: c9:a5:d9:3b:02:53:e5:88:80:88:9a:15:c0:93:81: e3:2e:06:cb:d7:c3:d2:26:44:a0:56:5c:c4:d7:d7: 68:11:e1:b8:76:25:c4:96:3c:03:da:cb:e6:fb:be: d6:26:5c:f4:0c:a5:77:42:09:35:19:76:f3:44:da: 82:b3:99:33:61:d2:ee:dd:29:4a:39:91:3f:4d:df: 9b:65:2b:d6:33:85:94:86:ee:d1:4a:a1:2c:a4:60: 1b:c1:cf:40:ab:41:96:ef:2d:4c:ef:05:f0:92:2c: d3:ec:ef:aa:98:e1:86:2a:9a:f6:ee:ff:a0:8d:f3: 2a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D2:36:C7:97:0E:8E:F7:03:C3:3A:71:F2:E1:2F:87:05:9F:C6:3B X509v3 Authority Key Identifier: keyid:C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:6d:99:2d:e3:b8:85:f8:68:bd:7e:7f:b3:a0:5d:f2:86:0e: 10:fa:84:a3:9d:2c:b4:d6:84:9a:35:c9:b5:f0:e7:9b:52:b2: 44:29:43:b0:7c:16:40:7f:43:8a:c7:77:15:9a:07:87:0a:a7: 49:34:fa:2d:b0:10:20:84:d8:68:be:f0:50:b6:fe:50:2d:3e: d4:af:f6:24:a7:27:ad:6c:3c:ee:2b:b7:a4:02:0c:e0:1d:88: 71:d2:c5:41:30:8a:1d:2f:e5:7c:de:4b:37:6e:e4:0c:63:58: 3a:b1:a7:46:b3:bf:ad:2c:68:5d:23:f6:ad:53:c2:4c:7d:a9: 68:36:fd:69:d2:7a:67:25:3f:2e:e5:f4:72:7f:77:1a:2d:94: 45:70:30:5d:23:4c:d4:97:0e:68:0a:91:29:1e:e3:40:5a:97: 28:f7:12:63:ff:1d:89:ed:50:c0:e3:9d:23:da:8c:5a:1f:76: c3:72:91:3b:ca:d1:91:ca:c1:36:ba:c2:29:ba:0f:e9:69:9c: 76:3c:36:8d:22:2f:91:bc:a3:79:fe:2a:9d:1b:43:a8:3e:80: f6:c6:22:6d:53:33:d1:69:b6:00:5e:6c:4b:7f:52:59:c7:09: f6:a6:a0:4e:a6:07:61:ee:2a:06:74:00:dc:69:78:5e:6f:14: be:1a:cc:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt3KrC7hxj7K+JFmibj+kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzY2NlMTY1NWYzZjcxZTRlZmZlYTRkZTczYTFhZWM4MjI4 MjlkNjEwHhcNMjUxMjIxMjEwMTE3WhcNMjUxMjIyMjEwMTE3WjAzMTEwLwYDVQQD Eyg1MGQyMzZjNzk3MGU4ZWY3MDNjMzNhNzFmMmUxMmY4NzA1OWZjNjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE8eETLPotp6EAqIbCLh4BopAF8D OVOANRQcn4sHd2lmByudf+X5NKCqkTJDsoKpzrz6aoLlUvYtuDyOjYm06hTVH7qg odIh4uXATivUIJR+Ac/u9hF+LJ5KBpPlJ/mmLt1QGg0/+cgyAYSPkcM2iilT9FdG 1tcJqrwgkW28CcOe+Z+0poPJpdk7AlPliICImhXAk4HjLgbL18PSJkSgVlzE19do EeG4diXEljwD2svm+77WJlz0DKV3Qgk1GXbzRNqCs5kzYdLu3SlKOZE/Td+bZSvW M4WUhu7RSqEspGAbwc9Aq0GW7y1M7wXwkizT7O+qmOGGKpr27v+gjfMq8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDSNseXDo73A8M6cfLhL4cFn8Y7MB8GA1UdIwQY MBaAFMPM4WVfP3Hk7/6k3nOhrsgigp1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzh6aFpWOF9jZVR2X3FUZWM2R3V5Q0tDbldFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9jNTgwZjYtZjBhNi00Yzg1LWI3ZDMt ZDEwYmViZWEzN2QwLzEvdzh6aFpWOF9jZVR2X3FUZWM2R3V5Q0tDbldFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9jNTgwZjYtZjBhNi00Yzg1LWI3ZDMtZDEwYmViZWEzN2Qw LzEvdzh6aFpWOF9jZVR2X3FUZWM2R3V5Q0tDbldFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlW2ZLeO4 hfhovX5/s6Bd8oYOEPqEo50stNaEmjXJtfDnm1KyRClDsHwWQH9Disd3FZoHhwqn STT6LbAQIITYaL7wULb+UC0+1K/2JKcnrWw87iu3pAIM4B2IcdLFQTCKHS/lfN5L N27kDGNYOrGnRrO/rSxoXSP2rVPCTH2paDb9adJ6ZyU/LuX0cn93Gi2URXAwXSNM 1JcOaAqRKR7jQFqXKPcSY/8die1QwOOdI9qMWh92w3KRO8rRkcrBNrrCKboP6Wmc djw2jSIvkbyjef4qnRtDqD6A9sYibVMz0Wm2AF5sS39SWccJ9qagTqYHYe4qBnQA 3Gl4Xm8UvhrMyQ== -----END CERTIFICATE-----Generated at Mon Dec 22 00:45:56 2025 by rpki-client