This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft File: pW4itGIL0EL3OiqWIfDJJH1RJIo.mft (raw, json) Hash identifier: wvNYOUXa5TA1TPTBQA8E8Px24Cd65tL3g5wer8ncjqk= Subject key identifier: D3:74:B3:6E:8A:38:92:24:D4:12:0E:1A:89:AF:1A:1E:C4:7C:FC:D9 Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A Certificate issuer: /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a Certificate serial: 019B4815952128AE13CB5C52EF660D00DF8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft Manifest number: 01B1 Signing time: Mon 22 Dec 2025 22:02:12 +0000 Manifest this update: Mon 22 Dec 2025 22:02:12 +0000 Manifest next update: Tue 23 Dec 2025 22:02:12 +0000 Files and hashes: 1: nzgTTwbAHjDz2-zsShiAXUCqJOU.roa (hash: GBnP7tc+zXd9JtLmcvpJOSz2ArIIJJ/9cimz8hGmRDA=) 2: pW4itGIL0EL3OiqWIfDJJH1RJIo.crl (hash: z20snkMLmJHCnDlvgqX3zqiXJs6z5iGfJb8oLJTf/Tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:95:21:28:ae:13:cb:5c:52:ef:66:0d:00:df:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a Validity Not Before: Dec 22 22:02:12 2025 GMT Not After : Dec 23 22:02:12 2025 GMT Subject: CN=d374b36e8a389224d4120e1a89af1a1ec47cfcd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:65:e4:97:1e:8c:1b:d9:a3:ea:a8:21:15:16: 9d:8c:fd:0b:80:3e:a0:f7:57:97:b5:2d:e8:99:6f: c3:25:e1:5e:88:b3:34:9b:f0:ee:e1:02:37:e3:63: ae:35:7c:91:b1:d3:da:db:91:7a:0c:75:26:76:8c: b0:16:be:f0:13:77:f4:ea:8b:5c:42:92:f2:2e:db: 3d:22:f5:9d:45:b0:fd:18:ec:d9:b9:e3:da:9f:40: 9a:b2:c5:7b:b5:12:02:8c:9b:23:ed:3e:88:a2:22: 38:f7:af:a5:02:60:5c:54:f8:5a:20:53:98:8e:95: 2c:4c:28:88:c1:94:39:47:f5:84:63:dd:84:a9:82: 0e:bc:f6:b5:53:08:80:26:33:5e:6c:a0:3e:68:c2: 2b:fd:63:0a:33:ba:6b:4d:54:96:1c:19:c1:5a:2a: 85:fa:00:a7:e3:ed:c4:e9:12:08:1a:98:9f:aa:af: a2:cf:44:5d:61:9b:c0:33:09:4d:fb:11:9c:95:65: 89:23:68:e3:02:24:d2:e1:33:c5:6f:63:9b:12:8c: f5:c8:0a:26:17:f1:46:43:de:33:e7:a0:93:91:58: 72:f4:26:f0:5d:82:5b:58:df:44:5b:0f:81:cc:b5: 3d:c7:25:ae:aa:ca:18:11:e2:24:15:d7:f3:aa:7b: 5c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:74:B3:6E:8A:38:92:24:D4:12:0E:1A:89:AF:1A:1E:C4:7C:FC:D9 X509v3 Authority Key Identifier: keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:f9:71:e4:62:a5:b9:54:f8:cd:ea:37:a5:6a:af:94:43:28: 94:c4:7f:68:48:45:21:70:60:da:2e:8b:32:e2:b0:54:30:8a: 75:12:24:f5:19:77:10:f7:cb:5a:0d:3c:4a:eb:95:6d:01:33: 2e:5d:9b:63:40:bc:8e:66:c0:19:d8:65:05:e9:a6:74:82:5e: 79:38:49:1f:d2:16:31:11:3e:bc:28:ae:c3:d8:98:aa:be:58: 5a:a9:4a:4d:25:e6:6d:3b:23:c9:32:9e:1d:e5:fb:2e:8b:b0: 1f:be:9b:5a:88:4d:db:48:97:38:f4:4f:46:21:ed:b1:49:94: 3d:93:11:a7:dd:19:fd:07:87:c1:a8:21:e6:3e:ad:10:c6:48: 25:20:7d:e1:02:6a:be:d0:b0:d2:df:5b:90:85:98:a6:0c:70: 81:5f:24:f1:ba:0e:aa:88:76:4e:54:d2:58:27:f1:1a:2f:e6: 21:bc:ee:5b:e9:2d:1d:22:da:61:ec:5d:b9:5c:ac:79:9c:88: 7f:46:a1:6e:c6:56:eb:6c:22:a6:4f:52:b2:29:78:2f:6f:9a: bb:96:6d:93:7b:f2:c5:25:fd:c3:4f:8e:2c:69:53:a8:9e:32: dd:a0:d0:7d:6d:4f:f8:73:d5:97:90:78:e0:93:22:52:58:d4: 5c:16:bc:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFZUhKK4Ty1xS72YNAN+NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NmUyMmI0NjIwYmQwNDJmNzNhMmE5NjIxZjBjOTI0N2Q1 MTI0OGEwHhcNMjUxMjIyMjIwMjEyWhcNMjUxMjIzMjIwMjEyWjAzMTEwLwYDVQQD EyhkMzc0YjM2ZThhMzg5MjI0ZDQxMjBlMWE4OWFmMWExZWM0N2NmY2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWXklx6MG9mj6qghFRadjP0LgD6g 91eXtS3omW/DJeFeiLM0m/Du4QI342OuNXyRsdPa25F6DHUmdoywFr7wE3f06otc QpLyLts9IvWdRbD9GOzZuePan0CassV7tRICjJsj7T6IoiI496+lAmBcVPhaIFOY jpUsTCiIwZQ5R/WEY92EqYIOvPa1UwiAJjNebKA+aMIr/WMKM7prTVSWHBnBWiqF +gCn4+3E6RIIGpifqq+iz0RdYZvAMwlN+xGclWWJI2jjAiTS4TPFb2ObEoz1yAom F/FGQ94z56CTkVhy9CbwXYJbWN9EWw+BzLU9xyWuqsoYEeIkFdfzqntc6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNN0s26KOJIk1BIOGomvGh7EfPzZMB8GA1UdIwQY MBaAFKVuIrRiC9BC9zoqliHwySR9USSKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFc0aXRHSUwwRUwzT2lxV0lmREpKSDFSSklvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iNzgxOGQtMzI5OC00MDY5LTgyOTAt YzZlMWNmZDYwNjYxLzEvcFc0aXRHSUwwRUwzT2lxV0lmREpKSDFSSklvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9iNzgxOGQtMzI5OC00MDY5LTgyOTAtYzZlMWNmZDYwNjYx LzEvcFc0aXRHSUwwRUwzT2lxV0lmREpKSDFSSklvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/lx5GKl uVT4zeo3pWqvlEMolMR/aEhFIXBg2i6LMuKwVDCKdRIk9Rl3EPfLWg08SuuVbQEz Ll2bY0C8jmbAGdhlBemmdIJeeThJH9IWMRE+vCiuw9iYqr5YWqlKTSXmbTsjyTKe HeX7LouwH76bWohN20iXOPRPRiHtsUmUPZMRp90Z/QeHwagh5j6tEMZIJSB94QJq vtCw0t9bkIWYpgxwgV8k8boOqoh2TlTSWCfxGi/mIbzuW+ktHSLaYexduVyseZyI f0ahbsZW62wipk9Ssil4L2+au5Ztk3vyxSX9w0+OLGlTqJ4y3aDQfW1P+HPVl5B4 4JMiUljUXBa8xQ== -----END CERTIFICATE-----Generated at Tue Dec 23 07:50:19 2025 by rpki-client