This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft File: w_8EiaBkHM8dwes7Z08_YRFjuu4.mft (raw, json) Hash identifier: PtoisTW2X3A6P9Z6IPwTOqteCGP7Oruc0K28DGaCHFs= Subject key identifier: 4A:CB:F9:01:81:44:A8:1F:E5:D2:FD:32:72:C9:84:6E:79:6B:64:BE Authority key identifier: C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE Certificate issuer: /CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee Certificate serial: 019B3D911AA4B45216FC6CA85D55C99688B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft Manifest number: 16CE Signing time: Sat 20 Dec 2025 21:01:18 +0000 Manifest this update: Sat 20 Dec 2025 21:01:18 +0000 Manifest next update: Sun 21 Dec 2025 21:01:18 +0000 Files and hashes: 1: O3ljM5CB_2JtUI0Sdnkha5M5ERQ.roa (hash: NhJbXC81FRmcMSonVcZC+2A3GfW4bVjcRFKj0QoIURY=) 2: w_8EiaBkHM8dwes7Z08_YRFjuu4.crl (hash: pvHhFAaXwi7ocYq/OmBB8zqdpRFTSELgZkVAbbQ2aWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:1a:a4:b4:52:16:fc:6c:a8:5d:55:c9:96:88:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee Validity Not Before: Dec 20 21:01:18 2025 GMT Not After : Dec 21 21:01:18 2025 GMT Subject: CN=4acbf9018144a81fe5d2fd3272c9846e796b64be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c6:40:fa:db:00:fc:86:84:30:61:c1:b2:48: 00:2b:9a:11:ec:b0:e7:a8:4d:e5:8e:b1:93:fe:3a: 08:7b:1c:c2:af:02:dc:8d:a3:2a:04:b5:21:f2:48: 72:5a:75:55:bc:1e:82:12:d3:77:4d:93:e9:ae:b5: 62:10:1b:f6:d6:99:b2:ee:19:a2:70:9b:2c:48:1c: d6:f3:55:1c:c9:e1:90:3a:8e:a5:17:8e:dc:50:5b: f1:f7:c8:5a:34:8c:1f:9d:35:76:96:9d:6f:c8:48: 7a:1e:75:fb:8e:8e:0e:ec:1c:0f:8e:3e:34:a6:c9: 4a:f5:4c:7f:74:09:96:75:e0:29:9f:ca:f6:17:1d: a5:1e:38:40:84:72:8a:58:29:5b:53:aa:d4:af:c2: cd:95:bd:cc:ee:ab:ca:12:91:08:41:49:41:25:2f: d7:fe:38:63:cf:09:cc:20:fc:f9:7a:13:f2:55:0b: fe:3a:59:e0:3e:0d:60:76:6a:e7:58:a5:79:db:ad: 3d:64:e2:18:f4:10:94:62:f0:b4:d9:dc:05:62:69: 22:7a:08:55:8e:46:3f:4e:21:b7:27:4b:e7:36:b2: 46:19:73:e2:55:19:96:c9:59:84:8f:06:54:f0:b2: 16:bd:c7:0a:f5:43:98:a6:b2:3d:27:dc:7b:46:14: cf:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CB:F9:01:81:44:A8:1F:E5:D2:FD:32:72:C9:84:6E:79:6B:64:BE X509v3 Authority Key Identifier: keyid:C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:0c:c0:4e:86:42:7c:46:44:5e:6d:60:1e:56:fb:66:2d:1f: d0:51:d6:a0:a0:df:0f:49:93:24:51:df:b4:7b:82:ea:33:95: a4:c2:6a:db:e2:bd:d1:b6:74:b3:90:38:52:75:53:ac:97:63: e5:f9:42:81:ad:60:ec:01:2f:97:4c:c3:10:0a:7c:a9:16:6e: 3d:d3:a6:f1:bb:04:3e:57:3c:b7:6f:c6:f8:ab:e6:c9:3f:8a: 89:7b:8c:14:b4:91:9a:5c:74:52:34:4e:b7:3b:80:67:50:3f: b8:79:88:01:31:b8:f0:af:7a:f4:34:05:d3:df:cf:88:be:d2: b3:dc:38:37:0f:0d:0f:c7:96:ce:fe:d5:a5:dc:6d:5f:cd:5d: 82:49:9c:9e:1c:86:05:4d:18:61:ee:45:cd:e1:a4:97:b7:c7: f7:6d:56:cd:6c:d4:69:53:b3:6d:d0:9b:46:b9:03:b7:f6:67: 8b:50:a6:2d:85:d2:03:95:8c:0d:ec:29:d2:79:61:36:60:9f: 55:2e:77:eb:f5:49:08:eb:d0:19:87:8d:5d:40:8a:42:e8:c4: 8e:32:12:c0:9f:97:16:72:03:ab:ef:c4:34:bc:be:46:d2:63: 19:0d:16:83:8f:6b:63:9a:19:0a:d8:50:6e:8e:65:57:d0:f5: cc:07:ca:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kRqktFIW/GyoXVXJloi4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZmYwNDg5YTA2NDFjY2YxZGMxZWIzYjY3NGYzZjYxMTE2 M2JhZWUwHhcNMjUxMjIwMjEwMTE4WhcNMjUxMjIxMjEwMTE4WjAzMTEwLwYDVQQD Eyg0YWNiZjkwMTgxNDRhODFmZTVkMmZkMzI3MmM5ODQ2ZTc5NmI2NGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8ZA+tsA/IaEMGHBskgAK5oR7LDn qE3ljrGT/joIexzCrwLcjaMqBLUh8khyWnVVvB6CEtN3TZPprrViEBv21pmy7hmi cJssSBzW81UcyeGQOo6lF47cUFvx98haNIwfnTV2lp1vyEh6HnX7jo4O7BwPjj40 pslK9Ux/dAmWdeApn8r2Fx2lHjhAhHKKWClbU6rUr8LNlb3M7qvKEpEIQUlBJS/X /jhjzwnMIPz5ehPyVQv+OlngPg1gdmrnWKV52609ZOIY9BCUYvC02dwFYmkieghV jkY/TiG3J0vnNrJGGXPiVRmWyVmEjwZU8LIWvccK9UOYprI9J9x7RhTPAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErL+QGBRKgf5dL9MnLJhG55a2S+MB8GA1UdIwQY MBaAFMP/BImgZBzPHcHrO2dPP2ERY7ruMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd184RWlhQmtITThkd2VzN1owOF9ZUkZqdXU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lMjc2N2MtZTQ0Ny00ZDc3LTg3ZjAt ODgzZTBlYmVkNmJmLzEvd184RWlhQmtITThkd2VzN1owOF9ZUkZqdXU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9lMjc2N2MtZTQ0Ny00ZDc3LTg3ZjAtODgzZTBlYmVkNmJm LzEvd184RWlhQmtITThkd2VzN1owOF9ZUkZqdXU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQzAToZC fEZEXm1gHlb7Zi0f0FHWoKDfD0mTJFHftHuC6jOVpMJq2+K90bZ0s5A4UnVTrJdj 5flCga1g7AEvl0zDEAp8qRZuPdOm8bsEPlc8t2/G+KvmyT+KiXuMFLSRmlx0UjRO tzuAZ1A/uHmIATG48K969DQF09/PiL7Ss9w4Nw8ND8eWzv7VpdxtX81dgkmcnhyG BU0YYe5FzeGkl7fH921WzWzUaVOzbdCbRrkDt/Zni1CmLYXSA5WMDewp0nlhNmCf VS536/VJCOvQGYeNXUCKQujEjjISwJ+XFnIDq+/ENLy+RtJjGQ0Wg49rY5oZCthQ bo5lV9D1zAfKZw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:57:06 2025 by rpki-client