This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft File: w_8EiaBkHM8dwes7Z08_YRFjuu4.mft (raw, json) Hash identifier: YI75v3KfmqSctRhlncm1KBtbnfVM/0ahiXcx9+T/y6o= Subject key identifier: 81:77:4C:C5:D3:D1:97:26:D7:19:2C:09:BE:60:A7:E3:AD:B1:11:C9 Authority key identifier: C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE Certificate issuer: /CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee Certificate serial: 019AFBE7DB6E6ED90ACD5EC24B415EA2B75C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft Manifest number: 16AC Signing time: Mon 08 Dec 2025 03:01:07 +0000 Manifest this update: Mon 08 Dec 2025 03:01:07 +0000 Manifest next update: Tue 09 Dec 2025 03:01:07 +0000 Files and hashes: 1: O3ljM5CB_2JtUI0Sdnkha5M5ERQ.roa (hash: NhJbXC81FRmcMSonVcZC+2A3GfW4bVjcRFKj0QoIURY=) 2: w_8EiaBkHM8dwes7Z08_YRFjuu4.crl (hash: WSbN0Juxqd9Fu+uNrdXzQ3aJ/XvDOo6sFJS1pmZX4RU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:e7:db:6e:6e:d9:0a:cd:5e:c2:4b:41:5e:a2:b7:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee Validity Not Before: Dec 8 03:01:07 2025 GMT Not After : Dec 9 03:01:07 2025 GMT Subject: CN=81774cc5d3d19726d7192c09be60a7e3adb111c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5d:72:e7:34:2e:ce:84:d6:02:da:c3:50:89: 2a:0c:6b:15:de:45:c1:38:57:29:8d:dd:36:73:05: 72:7e:5d:1c:11:cb:a0:6d:bf:61:e0:91:3f:74:86: b4:a3:a9:7b:70:52:0c:1a:81:92:7c:3b:86:5c:f3: b0:d9:59:3a:28:a3:07:dc:6e:f3:21:1a:b9:53:47: b5:13:73:30:ed:42:56:09:40:88:96:92:4f:29:26: ad:85:e9:a8:0c:79:40:68:60:ac:6f:cd:78:60:c6: fd:81:35:34:3a:c1:74:7f:b2:9e:89:4f:ce:3b:db: 61:39:cb:67:28:17:9b:4f:8a:85:fa:c9:0e:4a:d8: ce:32:da:6d:e3:be:b6:74:fa:4b:ea:d2:ab:24:5a: 74:e6:60:5b:96:34:24:f1:d3:7f:9a:76:c5:b7:5b: f0:3c:e8:3a:23:d1:90:97:67:d1:79:b8:d5:d5:e3: de:75:95:ad:52:e9:b5:c7:8f:e7:af:0e:1a:bc:2f: 68:3b:ac:ce:61:f9:51:19:66:84:a1:20:9a:bc:90: f4:9c:a9:59:91:72:47:81:15:10:35:ff:5a:86:5f: 75:92:0c:ca:a2:4c:9b:a9:5e:e1:54:c1:4d:b7:9d: 4a:8f:28:c0:f9:cc:c2:ee:0c:c5:ec:9f:4b:fd:95: 8d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:77:4C:C5:D3:D1:97:26:D7:19:2C:09:BE:60:A7:E3:AD:B1:11:C9 X509v3 Authority Key Identifier: keyid:C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:8b:5c:a6:e6:76:d2:6d:30:89:80:6a:b3:65:59:04:10:14: f8:d0:8f:4b:76:cf:ea:96:00:7d:23:e3:38:27:85:6c:1e:f4: de:4a:db:7d:81:56:26:86:bd:ed:d2:35:78:d7:21:6f:e8:ca: 1c:35:b7:ef:f7:78:e6:23:f7:76:e6:dd:c6:cf:09:5c:a9:ef: 68:a7:0a:6a:dc:c1:7a:69:13:c7:2c:97:17:26:b7:2a:d5:d6: 6e:39:1b:11:6e:ff:83:ca:02:d0:ee:83:e7:82:b0:6c:46:de: 75:90:82:ed:4a:1c:68:51:26:16:74:33:28:5d:76:e8:79:78: 42:bc:30:c2:18:cf:d3:a7:4e:bc:61:c8:aa:e3:13:d0:60:3e: dd:26:82:de:dc:4e:da:46:32:eb:70:c6:67:e9:db:13:3b:f7: 18:57:1d:df:2f:9e:8a:a2:c9:ff:03:e9:1d:4f:08:94:8f:e5: 5f:cb:85:bc:00:45:68:77:69:d3:fe:8e:ff:f1:0c:23:63:af: 22:55:92:57:2f:49:c6:9b:ae:f6:f9:32:d8:bf:62:58:5c:05: eb:64:e8:a1:87:9b:83:19:94:cd:a6:d4:6b:25:58:9c:4f:35: a5:30:5c:8a:dc:ec:d9:82:e0:87:bd:41:38:0f:d0:cd:de:44: 87:60:4d:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr759tubtkKzV7CS0FeordcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZmYwNDg5YTA2NDFjY2YxZGMxZWIzYjY3NGYzZjYxMTE2 M2JhZWUwHhcNMjUxMjA4MDMwMTA3WhcNMjUxMjA5MDMwMTA3WjAzMTEwLwYDVQQD Eyg4MTc3NGNjNWQzZDE5NzI2ZDcxOTJjMDliZTYwYTdlM2FkYjExMWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA311y5zQuzoTWAtrDUIkqDGsV3kXB OFcpjd02cwVyfl0cEcugbb9h4JE/dIa0o6l7cFIMGoGSfDuGXPOw2Vk6KKMH3G7z IRq5U0e1E3Mw7UJWCUCIlpJPKSathemoDHlAaGCsb814YMb9gTU0OsF0f7KeiU/O O9thOctnKBebT4qF+skOStjOMtpt4762dPpL6tKrJFp05mBbljQk8dN/mnbFt1vw POg6I9GQl2fRebjV1ePedZWtUum1x4/nrw4avC9oO6zOYflRGWaEoSCavJD0nKlZ kXJHgRUQNf9ahl91kgzKokybqV7hVMFNt51KjyjA+czC7gzF7J9L/ZWNQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIF3TMXT0Zcm1xksCb5gp+OtsRHJMB8GA1UdIwQY MBaAFMP/BImgZBzPHcHrO2dPP2ERY7ruMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd184RWlhQmtITThkd2VzN1owOF9ZUkZqdXU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lMjc2N2MtZTQ0Ny00ZDc3LTg3ZjAt ODgzZTBlYmVkNmJmLzEvd184RWlhQmtITThkd2VzN1owOF9ZUkZqdXU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9lMjc2N2MtZTQ0Ny00ZDc3LTg3ZjAtODgzZTBlYmVkNmJm LzEvd184RWlhQmtITThkd2VzN1owOF9ZUkZqdXU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmotcpuZ2 0m0wiYBqs2VZBBAU+NCPS3bP6pYAfSPjOCeFbB703krbfYFWJoa97dI1eNchb+jK HDW37/d45iP3dubdxs8JXKnvaKcKatzBemkTxyyXFya3KtXWbjkbEW7/g8oC0O6D 54KwbEbedZCC7UocaFEmFnQzKF126Hl4QrwwwhjP06dOvGHIquMT0GA+3SaC3txO 2kYy63DGZ+nbEzv3GFcd3y+eiqLJ/wPpHU8IlI/lX8uFvABFaHdp0/6O//EMI2Ov IlWSVy9Jxpuu9vky2L9iWFwF62TooYebgxmUzabUayVYnE81pTBcitzs2YLgh71B OA/Qzd5Eh2BNvQ== -----END CERTIFICATE-----Generated at Mon Dec 8 07:18:33 2025 by rpki-client