This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft File: w_8EiaBkHM8dwes7Z08_YRFjuu4.mft (raw, json) Hash identifier: w9xnR6T7mhaQnAjsBTsJOPQcYnN8fcSA16E3Ft9F6mo= Subject key identifier: F5:2D:3F:A0:11:D5:24:F0:A5:9B:6E:CB:47:77:16:F0:D8:AD:4A:23 Authority key identifier: C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE Certificate issuer: /CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee Certificate serial: 019B33E88C4619A06C0A0D01E0FDFE38F948 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft Manifest number: 16C9 Signing time: Fri 19 Dec 2025 00:00:36 +0000 Manifest this update: Fri 19 Dec 2025 00:00:36 +0000 Manifest next update: Sat 20 Dec 2025 00:00:36 +0000 Files and hashes: 1: O3ljM5CB_2JtUI0Sdnkha5M5ERQ.roa (hash: NhJbXC81FRmcMSonVcZC+2A3GfW4bVjcRFKj0QoIURY=) 2: w_8EiaBkHM8dwes7Z08_YRFjuu4.crl (hash: 9JVEOn7j5nYqprf46Gk9iUApuAjAhLRl5UH06Deo/O8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:8c:46:19:a0:6c:0a:0d:01:e0:fd:fe:38:f9:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee Validity Not Before: Dec 19 00:00:36 2025 GMT Not After : Dec 20 00:00:36 2025 GMT Subject: CN=f52d3fa011d524f0a59b6ecb477716f0d8ad4a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f4:5d:49:de:bf:39:7d:9a:b2:75:35:1d:be: e9:ae:8c:9d:41:50:18:97:8c:78:4c:c0:93:bb:fb: 51:49:75:47:f9:c3:24:f7:29:e8:1c:fe:d6:70:2a: e0:fc:c2:0e:21:e1:8b:05:8d:7a:b0:ac:ca:94:f9: 31:11:64:79:f9:26:9e:8e:43:fb:85:cf:f2:c8:22: 73:ea:7e:e1:94:70:6f:31:ed:5e:8f:46:df:68:f6: b8:9e:ae:e7:41:a5:7b:49:23:27:10:58:56:36:95: b2:40:c8:7f:69:52:c1:57:4a:fa:68:3f:71:35:e3: ed:9d:29:d4:8a:b3:bb:a4:10:c1:aa:c6:b9:47:74: 15:67:3a:2a:98:d3:bf:ce:b9:28:0e:73:be:ac:e8: 80:63:97:b7:06:17:92:60:76:64:83:b1:dc:84:2d: b6:c2:07:27:ee:77:75:7d:37:0a:7a:d5:97:0e:48: e4:40:b5:d1:15:fa:2d:42:1b:47:fd:97:0b:94:30: 94:1b:ba:d3:6c:80:c1:00:81:ee:3a:14:d6:95:eb: 5b:6b:66:bb:3d:2e:d7:ce:80:17:cb:9f:2e:9b:40: ce:2f:42:f7:a0:71:e3:dd:18:5c:c1:b9:94:5b:6b: ad:cd:88:44:a7:0b:21:ff:a7:29:ce:92:0a:3a:49: dd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2D:3F:A0:11:D5:24:F0:A5:9B:6E:CB:47:77:16:F0:D8:AD:4A:23 X509v3 Authority Key Identifier: keyid:C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:a8:3e:72:d7:5c:11:2f:2b:36:2d:e7:8f:63:ad:e4:2a:2d: 43:24:72:70:85:ce:7f:4c:ad:e0:15:d5:dd:10:03:0a:9b:90: 3c:52:32:79:33:9e:4f:8c:2e:da:18:d7:ab:7e:35:7a:52:cf: 16:df:34:4f:46:2a:50:23:33:24:58:71:c5:81:3e:ae:5d:fb: 0a:a1:0d:ad:ad:86:50:91:87:ff:5f:82:62:fb:5a:69:f7:fa: 43:bd:b1:d0:88:8a:71:0e:76:cc:bf:41:a8:5b:5d:29:f7:65: a6:f6:66:0a:87:f7:f0:ba:2e:51:9d:70:bf:0a:ae:04:4c:e0: 8e:66:f0:9c:51:cf:88:f5:bd:11:e0:8d:21:bf:ef:51:92:e3: 1f:2d:df:ad:5d:1b:44:ee:4d:63:d5:16:b1:ed:d0:dd:3f:71: 25:d3:f3:da:dd:8e:a0:ad:d0:09:3a:84:13:23:c9:f6:e1:ad: 72:86:81:e1:89:9e:53:0e:2c:a5:60:8e:7d:17:3f:85:a3:10: 94:32:28:3a:08:e7:3a:dd:42:bf:e3:7f:fa:d3:3d:ea:f9:97: 21:a9:cf:c4:bb:ab:1d:db:db:dd:5a:e4:28:bb:1c:7b:d4:db: 90:25:c5:e6:25:f4:88:e3:e5:a6:01:1d:33:37:11:b4:59:53: fa:6b:f2:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6IxGGaBsCg0B4P3+OPlIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZmYwNDg5YTA2NDFjY2YxZGMxZWIzYjY3NGYzZjYxMTE2 M2JhZWUwHhcNMjUxMjE5MDAwMDM2WhcNMjUxMjIwMDAwMDM2WjAzMTEwLwYDVQQD EyhmNTJkM2ZhMDExZDUyNGYwYTU5YjZlY2I0Nzc3MTZmMGQ4YWQ0YTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvRdSd6/OX2asnU1Hb7proydQVAY l4x4TMCTu/tRSXVH+cMk9ynoHP7WcCrg/MIOIeGLBY16sKzKlPkxEWR5+SaejkP7 hc/yyCJz6n7hlHBvMe1ej0bfaPa4nq7nQaV7SSMnEFhWNpWyQMh/aVLBV0r6aD9x NePtnSnUirO7pBDBqsa5R3QVZzoqmNO/zrkoDnO+rOiAY5e3BheSYHZkg7HchC22 wgcn7nd1fTcKetWXDkjkQLXRFfotQhtH/ZcLlDCUG7rTbIDBAIHuOhTWletba2a7 PS7XzoAXy58um0DOL0L3oHHj3RhcwbmUW2utzYhEpwsh/6cpzpIKOkndLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUtP6AR1STwpZtuy0d3FvDYrUojMB8GA1UdIwQY MBaAFMP/BImgZBzPHcHrO2dPP2ERY7ruMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd184RWlhQmtITThkd2VzN1owOF9ZUkZqdXU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lMjc2N2MtZTQ0Ny00ZDc3LTg3ZjAt ODgzZTBlYmVkNmJmLzEvd184RWlhQmtITThkd2VzN1owOF9ZUkZqdXU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9lMjc2N2MtZTQ0Ny00ZDc3LTg3ZjAtODgzZTBlYmVkNmJm LzEvd184RWlhQmtITThkd2VzN1owOF9ZUkZqdXU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYag+ctdc ES8rNi3nj2Ot5CotQyRycIXOf0yt4BXV3RADCpuQPFIyeTOeT4wu2hjXq341elLP Ft80T0YqUCMzJFhxxYE+rl37CqENra2GUJGH/1+CYvtaaff6Q72x0IiKcQ52zL9B qFtdKfdlpvZmCof38LouUZ1wvwquBEzgjmbwnFHPiPW9EeCNIb/vUZLjHy3frV0b RO5NY9UWse3Q3T9xJdPz2t2OoK3QCTqEEyPJ9uGtcoaB4YmeUw4spWCOfRc/haMQ lDIoOgjnOt1Cv+N/+tM96vmXIanPxLurHdvb3VrkKLsce9TbkCXF5iX0iOPlpgEd MzcRtFlT+mvy0A== -----END CERTIFICATE-----Generated at Fri Dec 19 06:46:22 2025 by rpki-client