This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft File: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft (raw, json) Hash identifier: Ww4pHu1erdRP8SQvIpOEBi+RQcFpOx+drV49FOp2Q08= Subject key identifier: 78:AF:FF:3A:E3:AC:39:03:83:AF:28:9E:20:49:42:9A:0D:13:05:6F Authority key identifier: D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C Certificate issuer: /CN=d70af942465ff265b896f0d1b762490f27dc322c Certificate serial: 019B43258D8CECF7CED97E3250B38E3C826C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft Manifest number: 1436 Signing time: Sun 21 Dec 2025 23:01:33 +0000 Manifest this update: Sun 21 Dec 2025 23:01:33 +0000 Manifest next update: Mon 22 Dec 2025 23:01:33 +0000 Files and hashes: 1: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl (hash: qoXNqoKPRuh1iTJOEOHGXJ8nnVo9hnO0j+yyKNUQ4uA=) 2: do1YRGxwXBzhu7NScxWRh1sCTkI.roa (hash: tvb6mnRRTkKS3vhIPuaGGEBZgzp8Y6OmqBEm+R+Kc5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:8d:8c:ec:f7:ce:d9:7e:32:50:b3:8e:3c:82:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70af942465ff265b896f0d1b762490f27dc322c Validity Not Before: Dec 21 23:01:33 2025 GMT Not After : Dec 22 23:01:33 2025 GMT Subject: CN=78afff3ae3ac390383af289e2049429a0d13056f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:71:08:b2:42:eb:4c:df:56:20:19:07:ad:00: 3c:06:40:e8:db:48:f0:c6:3d:cd:cf:c1:be:ca:ba: 82:6e:3e:af:ac:ea:d7:2a:d6:97:b2:cd:12:14:98: f4:2b:2b:cc:86:0b:1e:e9:29:46:36:8e:bd:a7:b3: 5b:cc:58:9f:4a:61:96:c7:d2:d9:bc:e9:c1:0a:c0: f4:f2:1f:94:5a:ed:9e:83:5e:97:32:e1:1c:57:5b: 39:f5:71:bc:7f:8e:c6:30:cd:9f:59:71:0b:7b:e9: 89:eb:34:df:5a:6d:e7:8e:a3:f4:86:06:4e:c5:c2: da:be:e3:9f:ed:cd:97:e2:b9:fe:a2:42:1c:51:8c: 27:9f:3e:8d:ce:72:0c:db:e2:2e:af:ba:e0:f6:09: f1:e8:26:e8:28:6b:6f:67:ec:a7:3b:22:53:19:c3: 9a:4f:95:3e:75:97:ec:fb:07:f8:f8:68:f9:38:97: 21:41:9a:60:b2:2c:89:3e:12:3f:1f:f9:d8:6b:88: 0d:c2:3d:dd:f4:a1:f3:96:68:16:9c:8d:b3:8c:a2: f7:bb:c8:9c:98:32:63:15:aa:aa:9c:fc:f7:e8:9d: a5:64:e9:94:81:d0:f3:99:2b:40:63:b9:b4:0f:25: 38:19:f6:84:f8:16:5f:b7:2d:d7:b4:d8:45:13:28: e6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AF:FF:3A:E3:AC:39:03:83:AF:28:9E:20:49:42:9A:0D:13:05:6F X509v3 Authority Key Identifier: keyid:D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:06:3f:21:f1:69:bc:5c:97:6d:38:98:11:cc:7f:f9:9b:0b: f5:54:4a:d2:9a:74:6f:4c:7a:15:38:6c:64:89:25:81:84:c5: 5f:b9:cd:e9:4d:bd:e4:89:ce:92:11:b6:0a:ec:ed:36:de:4d: 62:48:d4:74:d4:1d:69:45:6c:ba:fc:88:cc:c9:71:4a:58:1a: 63:a7:ee:6c:4f:66:37:91:9a:77:30:e7:a9:a0:24:7d:ba:4e: 31:31:0c:94:a4:d5:c4:99:c3:21:f8:ab:ef:d5:f6:83:21:44: 33:c4:e1:9b:d9:27:a2:d7:fb:1f:c6:e0:c1:7b:52:ed:57:80: d1:51:0f:a9:16:6f:b0:a3:35:51:fc:4b:22:89:44:cb:09:9c: 6b:f0:f7:06:df:31:67:89:86:53:34:db:45:d4:83:10:2b:a7: 85:d5:99:6b:01:c1:d3:1d:ef:ee:88:5d:2f:61:59:c3:9a:c9: 60:a4:3d:92:b5:65:53:97:37:ea:be:50:e7:49:2d:0f:7e:02: 90:93:08:86:e9:4d:94:69:04:fb:aa:f5:a7:ec:f4:02:73:26: 46:3a:64:b4:c8:c0:12:b7:24:e3:33:84:d1:f8:db:6d:10:2a: 2f:f2:c5:57:7a:b9:c7:71:6f:6a:07:a9:ad:33:ab:63:77:91: c1:f0:17:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJY2M7PfO2X4yULOOPIJsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MGFmOTQyNDY1ZmYyNjViODk2ZjBkMWI3NjI0OTBmMjdk YzMyMmMwHhcNMjUxMjIxMjMwMTMzWhcNMjUxMjIyMjMwMTMzWjAzMTEwLwYDVQQD Eyg3OGFmZmYzYWUzYWMzOTAzODNhZjI4OWUyMDQ5NDI5YTBkMTMwNTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnEIskLrTN9WIBkHrQA8BkDo20jw xj3Nz8G+yrqCbj6vrOrXKtaXss0SFJj0KyvMhgse6SlGNo69p7NbzFifSmGWx9LZ vOnBCsD08h+UWu2eg16XMuEcV1s59XG8f47GMM2fWXELe+mJ6zTfWm3njqP0hgZO xcLavuOf7c2X4rn+okIcUYwnnz6NznIM2+Iur7rg9gnx6CboKGtvZ+ynOyJTGcOa T5U+dZfs+wf4+Gj5OJchQZpgsiyJPhI/H/nYa4gNwj3d9KHzlmgWnI2zjKL3u8ic mDJjFaqqnPz36J2lZOmUgdDzmStAY7m0DyU4GfaE+BZfty3XtNhFEyjmBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHiv/zrjrDkDg68oniBJQpoNEwVvMB8GA1UdIwQY MBaAFNcK+UJGX/JluJbw0bdiSQ8n3DIsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdyNVFrWmY4bVc0bHZEUnQySkpEeWZjTWl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9lOTIwM2QtY2RjZi00ZjIzLWEzYmYt ZjQ0OWJhZDI5ODU1LzEvMXdyNVFrWmY4bVc0bHZEUnQySkpEeWZjTWl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9lOTIwM2QtY2RjZi00ZjIzLWEzYmYtZjQ0OWJhZDI5ODU1 LzEvMXdyNVFrWmY4bVc0bHZEUnQySkpEeWZjTWl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgY/IfFp vFyXbTiYEcx/+ZsL9VRK0pp0b0x6FThsZIklgYTFX7nN6U295InOkhG2CuztNt5N YkjUdNQdaUVsuvyIzMlxSlgaY6fubE9mN5GadzDnqaAkfbpOMTEMlKTVxJnDIfir 79X2gyFEM8Thm9knotf7H8bgwXtS7VeA0VEPqRZvsKM1UfxLIolEywmca/D3Bt8x Z4mGUzTbRdSDECunhdWZawHB0x3v7ohdL2FZw5rJYKQ9krVlU5c36r5Q50ktD34C kJMIhulNlGkE+6r1p+z0AnMmRjpktMjAErck4zOE0fjbbRAqL/LFV3q5x3Fvagep rTOrY3eRwfAX9A== -----END CERTIFICATE-----Generated at Mon Dec 22 07:04:25 2025 by rpki-client