This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft File: w8YbUevIQYDwprIy6H351hyQ-qs.mft (raw, json) Hash identifier: hemognA+aLlEacMt0efn0ILblGmKv6qxGmPirADX5I8= Subject key identifier: E3:F3:F7:C7:F5:3E:6B:2B:79:1E:11:E7:FA:78:A9:D9:EF:99:6B:46 Authority key identifier: C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB Certificate issuer: /CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab Certificate serial: 019B605404FC23A6876D65C1A5DAAB4635DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft Manifest number: 17A0 Signing time: Sat 27 Dec 2025 15:01:17 +0000 Manifest this update: Sat 27 Dec 2025 15:01:17 +0000 Manifest next update: Sun 28 Dec 2025 15:01:17 +0000 Files and hashes: 1: 1-ndEryzCguWCGvVWWmkd8W4KbQ.roa (hash: W7EqtKjOdrRjfIUBcKhssjKWmvswGN88L1U5twVHTxE=) 2: 5fWADeIk4d10ZbIqGhJnIwZyHH8.roa (hash: QzLL6CT6LeM4dPuY4ZTi6ISO36hu50lOly24fxPuWC4=) 3: w8YbUevIQYDwprIy6H351hyQ-qs.crl (hash: n//M66QJcvGznUNGkyXW9o/Ihtl08B73myXaZRiBBXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:54:04:fc:23:a6:87:6d:65:c1:a5:da:ab:46:35:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab Validity Not Before: Dec 27 15:01:17 2025 GMT Not After : Dec 28 15:01:17 2025 GMT Subject: CN=e3f3f7c7f53e6b2b791e11e7fa78a9d9ef996b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:0d:98:21:f5:4a:14:df:58:50:97:c1:d1: 15:3a:65:88:72:f7:6e:76:3a:36:db:99:45:3d:72: 14:bd:61:ea:19:7a:75:db:a3:74:29:30:b0:41:5a: f4:8e:d8:63:a9:83:74:17:b4:a8:05:17:02:f0:64: 18:f0:d8:63:a4:8d:61:80:17:5c:60:4a:d2:76:99: 82:33:a8:cb:b9:d1:e4:fb:c4:1d:24:b5:75:df:e2: b5:23:b4:27:da:9f:33:65:55:5d:40:1f:c1:67:dd: 1a:de:2e:9c:3d:2f:d7:95:b2:4f:2c:d2:a2:43:98: d3:a9:f0:73:59:37:e3:d3:40:c2:cb:dd:b4:3f:96: 8c:77:17:f5:4e:1d:3f:16:35:d7:58:ae:99:05:56: 0c:00:ea:29:40:3c:68:54:a9:e5:f1:65:76:09:6b: dd:4f:16:4f:af:a3:bf:1d:f5:28:43:17:74:3f:5f: 56:95:3b:02:8a:49:4e:d4:04:91:8a:2e:cb:f7:b8: 8d:1a:03:77:90:7b:51:d3:b1:6f:5b:96:36:92:32: ca:1c:33:a8:62:ef:d4:3a:d6:a8:01:3d:a0:51:68: af:63:23:e0:6f:28:ca:0a:94:0a:6c:ca:d5:25:e2: 18:e9:3e:51:f6:f0:9c:95:d4:a9:69:f5:47:98:dc: 76:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F3:F7:C7:F5:3E:6B:2B:79:1E:11:E7:FA:78:A9:D9:EF:99:6B:46 X509v3 Authority Key Identifier: keyid:C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:9c:ba:d7:0a:06:2d:22:b3:39:fc:17:dc:52:dd:3a:43:c7: c0:bd:02:7d:07:26:51:ed:b6:ef:7d:d6:46:20:71:5d:d0:10: c9:f6:99:15:ab:1e:cc:1f:26:68:5b:41:b5:b9:4d:c1:35:52: 22:72:37:46:e7:ee:d7:9d:7b:85:20:a4:6f:c9:b4:4f:fe:19: cc:46:8a:73:21:b6:3a:38:20:ea:9b:26:95:28:2c:31:bc:00: 9b:6e:ff:d7:6a:72:ae:1c:19:3b:69:54:c8:ed:d0:69:2c:c5: 13:e4:0d:cb:02:0e:8f:63:9b:9a:82:7b:81:f0:e8:70:d7:2e: aa:51:9b:f6:78:d7:ef:26:7a:80:0a:83:5d:cd:18:90:47:d9: 65:13:59:e7:39:00:9d:c7:16:7d:ff:fc:e4:e7:72:32:ab:0b: 45:6b:d3:76:55:e5:68:20:4d:50:e4:43:7e:47:e7:17:99:65: 5c:17:86:cc:b0:4d:f5:3d:3b:74:eb:43:d5:bc:51:00:71:23: 96:17:57:bc:45:9c:d2:71:e6:30:67:af:17:f5:a8:82:1e:bd: 1d:11:9f:61:19:e3:62:e9:a8:e2:ff:96:45:be:2e:b4:c4:9f: 16:3e:b1:b0:58:c2:e1:f2:47:40:16:d0:ba:90:03:9e:5b:f2: bc:f7:7a:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgVAT8I6aHbWXBpdqrRjXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzYxYjUxZWJjODQxODBmMGE2YjIzMmU4N2RmOWQ2MWM5 MGZhYWIwHhcNMjUxMjI3MTUwMTE3WhcNMjUxMjI4MTUwMTE3WjAzMTEwLwYDVQQD EyhlM2YzZjdjN2Y1M2U2YjJiNzkxZTExZTdmYTc4YTlkOWVmOTk2YjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswMNmCH1ShTfWFCXwdEVOmWIcvdu djo225lFPXIUvWHqGXp126N0KTCwQVr0jthjqYN0F7SoBRcC8GQY8NhjpI1hgBdc YErSdpmCM6jLudHk+8QdJLV13+K1I7Qn2p8zZVVdQB/BZ90a3i6cPS/XlbJPLNKi Q5jTqfBzWTfj00DCy920P5aMdxf1Th0/FjXXWK6ZBVYMAOopQDxoVKnl8WV2CWvd TxZPr6O/HfUoQxd0P19WlTsCiklO1ASRii7L97iNGgN3kHtR07FvW5Y2kjLKHDOo Yu/UOtaoAT2gUWivYyPgbyjKCpQKbMrVJeIY6T5R9vCcldSpafVHmNx2eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPz98f1PmsreR4R5/p4qdnvmWtGMB8GA1UdIwQY MBaAFMPGG1HryEGA8KayMuh9+dYckPqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhZYlVldklRWUR3cHJJeTZIMzUxaHlRLXFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83YWFkYWItOTU5YS00NjYzLWI5MzUt OGY5ODI3MzQ0NzkwLzEvdzhZYlVldklRWUR3cHJJeTZIMzUxaHlRLXFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS83YWFkYWItOTU5YS00NjYzLWI5MzUtOGY5ODI3MzQ0Nzkw LzEvdzhZYlVldklRWUR3cHJJeTZIMzUxaHlRLXFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZy61woG LSKzOfwX3FLdOkPHwL0CfQcmUe22733WRiBxXdAQyfaZFasezB8maFtBtblNwTVS InI3Rufu1517hSCkb8m0T/4ZzEaKcyG2Ojgg6psmlSgsMbwAm27/12pyrhwZO2lU yO3QaSzFE+QNywIOj2ObmoJ7gfDocNcuqlGb9njX7yZ6gAqDXc0YkEfZZRNZ5zkA nccWff/85OdyMqsLRWvTdlXlaCBNUORDfkfnF5llXBeGzLBN9T07dOtD1bxRAHEj lhdXvEWc0nHmMGevF/Wogh69HRGfYRnjYumo4v+WRb4utMSfFj6xsFjC4fJHQBbQ upADnlvyvPd62Q== -----END CERTIFICATE-----Generated at Sat Dec 27 19:26:19 2025 by rpki-client