This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft File: w_8EiaBkHM8dwes7Z08_YRFjuu4.mft (raw, json) Hash identifier: dJT7l0kcZ/ZdcZpfc4lysZ2qXWKcckfQZoUdnXFWiWA= Subject key identifier: 2D:B2:23:76:CD:00:8D:C9:38:0A:9F:48:7A:AD:74:DA:6B:04:C5:CB Authority key identifier: C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE Certificate issuer: /CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee Certificate serial: 019B1CBC7565E94326A27894080ABD4BB71C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft Manifest number: 16BD Signing time: Sun 14 Dec 2025 12:01:11 +0000 Manifest this update: Sun 14 Dec 2025 12:01:11 +0000 Manifest next update: Mon 15 Dec 2025 12:01:11 +0000 Files and hashes: 1: O3ljM5CB_2JtUI0Sdnkha5M5ERQ.roa (hash: NhJbXC81FRmcMSonVcZC+2A3GfW4bVjcRFKj0QoIURY=) 2: w_8EiaBkHM8dwes7Z08_YRFjuu4.crl (hash: tWOKvaVjZTDcjEtBHBQcv2VhgWlTNwVK4sgNbPgm1IU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bc:75:65:e9:43:26:a2:78:94:08:0a:bd:4b:b7:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee Validity Not Before: Dec 14 12:01:11 2025 GMT Not After : Dec 15 12:01:11 2025 GMT Subject: CN=2db22376cd008dc9380a9f487aad74da6b04c5cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f9:aa:3d:ec:e3:73:b6:83:14:5c:d4:7f:44: 31:02:22:04:e5:df:a0:d6:ff:e9:aa:81:4a:35:e1: 59:e1:16:b2:83:74:aa:73:09:51:d8:8c:a3:f0:0c: c3:3e:c7:e2:98:4d:c8:ce:3c:3e:e3:0f:10:89:dc: 59:54:9e:19:ae:61:ca:76:df:d5:c5:ac:4a:7f:cf: b7:cb:07:8e:71:13:a8:c7:f3:6d:23:c7:c0:c7:e6: 33:3c:f8:21:88:54:c9:38:48:64:81:48:d3:88:65: ff:bb:42:d6:f1:71:a0:4a:00:3f:be:68:b8:e9:a0: 01:45:1d:77:da:d9:33:67:55:24:f8:2b:5b:e8:2d: e7:ed:c8:8a:5c:f1:03:50:94:5c:aa:98:b2:1f:bd: fa:54:aa:05:10:b1:16:56:9e:0b:92:e1:ed:d9:17: de:43:c9:b6:eb:b4:98:76:e0:02:06:63:5b:94:67: b6:83:81:da:5f:7b:35:43:d1:db:a5:4e:08:36:1c: d8:fd:d9:91:0b:51:7b:ae:6a:b1:6b:0d:d2:73:ea: e2:14:da:30:ac:53:9a:46:8d:99:4d:a1:c7:5e:63: 40:f5:e3:48:25:f7:c1:76:65:2e:17:6f:00:71:c0: f8:ad:ee:e0:cd:4a:84:d4:5a:6f:0c:d8:1e:a0:b0: 7c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B2:23:76:CD:00:8D:C9:38:0A:9F:48:7A:AD:74:DA:6B:04:C5:CB X509v3 Authority Key Identifier: keyid:C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:3f:f2:60:40:9a:16:e6:9e:96:48:37:13:91:48:66:aa:bc: bb:b2:17:10:ae:c4:ba:b0:8e:8c:8b:f5:5b:17:d7:a1:6d:79: 63:d8:4e:c5:2f:96:18:e6:5d:91:cd:b4:05:4a:89:e7:f3:bf: f7:d0:42:6a:6d:55:d9:b6:d5:52:55:7c:66:95:36:bd:4e:8b: 6e:5c:ed:a1:61:2b:4d:ff:03:6f:07:0f:46:7a:9a:39:90:61: f1:5c:e8:22:15:6b:0d:65:42:6c:07:92:2b:51:45:02:dc:e4: d2:d2:3c:3d:1e:17:2f:ad:5a:69:f2:30:8c:ea:aa:88:c8:ea: 26:97:c1:6f:b5:ba:30:2b:27:4d:e3:af:1c:26:dd:32:81:77: 29:fb:6c:5f:d4:6d:00:a1:68:9c:16:d1:59:30:96:2a:63:97: f0:58:59:85:66:e7:a9:e7:b9:28:3f:aa:b1:7a:82:59:a6:04: 83:45:a0:a4:71:27:1c:87:98:34:55:ce:c9:3f:c4:34:82:4a: 53:35:0e:c8:67:00:e0:b8:86:e7:49:f8:9c:c2:d9:50:dc:64: a1:87:65:4d:1d:e2:a4:ab:42:e8:37:f1:f3:e0:90:29:9c:02: 65:04:fd:55:b0:cc:38:23:a6:4a:f9:d1:07:3f:da:b8:b5:51: f1:d9:50:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscvHVl6UMmoniUCAq9S7ccMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZmYwNDg5YTA2NDFjY2YxZGMxZWIzYjY3NGYzZjYxMTE2 M2JhZWUwHhcNMjUxMjE0MTIwMTExWhcNMjUxMjE1MTIwMTExWjAzMTEwLwYDVQQD EygyZGIyMjM3NmNkMDA4ZGM5MzgwYTlmNDg3YWFkNzRkYTZiMDRjNWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPmqPezjc7aDFFzUf0QxAiIE5d+g 1v/pqoFKNeFZ4Rayg3SqcwlR2Iyj8AzDPsfimE3Izjw+4w8QidxZVJ4ZrmHKdt/V xaxKf8+3yweOcROox/NtI8fAx+YzPPghiFTJOEhkgUjTiGX/u0LW8XGgSgA/vmi4 6aABRR132tkzZ1Uk+Ctb6C3n7ciKXPEDUJRcqpiyH736VKoFELEWVp4LkuHt2Rfe Q8m267SYduACBmNblGe2g4HaX3s1Q9HbpU4INhzY/dmRC1F7rmqxaw3Sc+riFNow rFOaRo2ZTaHHXmNA9eNIJffBdmUuF28AccD4re7gzUqE1FpvDNgeoLB8IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2yI3bNAI3JOAqfSHqtdNprBMXLMB8GA1UdIwQY MBaAFMP/BImgZBzPHcHrO2dPP2ERY7ruMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd184RWlhQmtITThkd2VzN1owOF9ZUkZqdXU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lMjc2N2MtZTQ0Ny00ZDc3LTg3ZjAt ODgzZTBlYmVkNmJmLzEvd184RWlhQmtITThkd2VzN1owOF9ZUkZqdXU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9lMjc2N2MtZTQ0Ny00ZDc3LTg3ZjAtODgzZTBlYmVkNmJm LzEvd184RWlhQmtITThkd2VzN1owOF9ZUkZqdXU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACD/yYECa Fuaelkg3E5FIZqq8u7IXEK7EurCOjIv1WxfXoW15Y9hOxS+WGOZdkc20BUqJ5/O/ 99BCam1V2bbVUlV8ZpU2vU6LblztoWErTf8DbwcPRnqaOZBh8VzoIhVrDWVCbAeS K1FFAtzk0tI8PR4XL61aafIwjOqqiMjqJpfBb7W6MCsnTeOvHCbdMoF3KftsX9Rt AKFonBbRWTCWKmOX8FhZhWbnqee5KD+qsXqCWaYEg0WgpHEnHIeYNFXOyT/ENIJK UzUOyGcA4LiG50n4nMLZUNxkoYdlTR3ipKtC6Dfx8+CQKZwCZQT9VbDMOCOmSvnR Bz/auLVR8dlQkQ== -----END CERTIFICATE-----Generated at Sun Dec 14 17:26:20 2025 by rpki-client