This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft File: PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft (raw, json) Hash identifier: xbThYkNLV3Keo7Qglp0zHYBnOjLmtN+SQ5D5zlcJewo= Subject key identifier: 10:0A:C3:91:55:8C:8B:B7:6A:22:80:8C:D5:5F:B5:D7:51:92:7D:EA Authority key identifier: 3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46 Certificate issuer: /CN=3d6c2958145f45fad5daeeb38b75b52c09661046 Certificate serial: 019B5305EFD4F94217B20A87F8C06863C0BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft Manifest number: 06FD Signing time: Thu 25 Dec 2025 01:00:56 +0000 Manifest this update: Thu 25 Dec 2025 01:00:56 +0000 Manifest next update: Fri 26 Dec 2025 01:00:56 +0000 Files and hashes: 1: PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl (hash: NAmhLPGk4fbepxotH0l2RTUnYLpqIS7WMFp+7gtQeMs=) 2: gdLyflAsCyF8taKXwI9Ohy9cbTg.roa (hash: watnTPY7ltSg0Ey7o57Cxg1ndShvduTve51cc1ZXeew=) 3: t5B6L3SDpnNQxpYAOqxx1KDKYiM.roa (hash: 2vbjQ+gKJBatZbu743TFnHPjWQew0j+rLlGQUa/1PSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:05:ef:d4:f9:42:17:b2:0a:87:f8:c0:68:63:c0:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d6c2958145f45fad5daeeb38b75b52c09661046 Validity Not Before: Dec 25 01:00:56 2025 GMT Not After : Dec 26 01:00:56 2025 GMT Subject: CN=100ac391558c8bb76a22808cd55fb5d751927dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e8:bf:87:59:aa:ab:64:71:58:72:c8:3d:ac: 29:0f:96:5e:fd:47:69:f6:2f:24:be:02:62:da:a9: c4:ed:b8:59:82:ce:e4:24:7f:1a:8d:9e:c9:b8:37: c7:b9:27:31:bb:64:2f:28:31:33:eb:12:99:66:7c: d4:f7:16:7e:22:88:1b:9a:9b:6a:f0:08:d6:54:41: 34:51:34:56:6c:40:d0:85:0d:93:1d:2b:e9:e3:e7: 95:6c:9e:b1:68:80:ce:3b:ef:65:8b:17:ca:3e:47: f8:ab:34:27:99:c7:24:f6:da:55:1b:b9:8b:8d:2f: 72:4b:4e:72:80:f5:4a:a2:a3:35:0b:45:db:de:69: e3:bd:0d:0d:ec:e9:64:56:18:1b:9c:0b:41:f4:db: 52:0d:d3:52:ea:45:84:b9:99:e7:c9:ad:a0:51:a1: d9:16:cc:14:3f:32:51:f0:63:80:2f:ef:e2:75:9e: 79:f0:ac:5a:3f:e0:f7:f7:cf:f5:e3:af:24:58:7b: 37:13:b2:70:d0:92:42:f0:ae:1f:e9:1b:27:67:fc: 8e:d3:87:06:72:4d:cb:95:0c:d0:b4:fd:7a:30:12: 72:8c:ee:e4:17:4a:22:32:10:07:35:72:38:ea:8f: fa:96:aa:9b:7a:41:96:65:91:51:19:6a:ed:5f:cc: ba:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0A:C3:91:55:8C:8B:B7:6A:22:80:8C:D5:5F:B5:D7:51:92:7D:EA X509v3 Authority Key Identifier: keyid:3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:6f:bd:04:a3:22:5f:04:b9:6c:f9:7f:a3:3e:88:d8:1a:62: 21:50:0a:e2:b0:88:c3:1e:2e:da:d0:25:b2:25:e4:b0:4d:6d: 73:0c:7a:54:90:0f:73:05:56:78:98:4a:2a:e4:a4:08:83:86: 65:44:ee:6b:97:67:e6:6c:d0:d1:b0:37:e6:d5:5a:b0:2d:a5: ef:f0:20:d9:dc:02:c3:68:14:76:8f:c4:a4:c9:b7:b8:1e:8c: 4c:62:51:b2:08:3f:db:83:b0:e9:05:12:de:10:8d:e2:38:a6: 53:94:9b:bb:32:75:47:b9:44:6f:57:e1:b6:ac:7d:e4:5c:33: 0c:d1:fd:27:b2:df:43:64:ab:c2:d9:10:1d:0b:ba:ea:a0:26: cc:1a:83:5f:82:7a:11:36:36:d6:5d:28:e3:83:37:97:df:39: 4e:aa:9f:24:15:df:38:0a:a5:43:d5:c6:6c:de:81:95:80:95: a5:cd:a1:36:1f:1a:9d:8a:0f:d7:72:2e:91:85:e4:de:b8:d0: 66:4e:e8:d6:71:11:c8:45:ed:73:d9:26:7b:85:82:6b:e4:4b: 71:0a:9f:c9:05:2d:10:d9:6d:5d:93:7d:cf:10:f8:bc:da:46: bf:f4:e5:30:a7:e9:1a:d0:d4:1f:a5:8b:9f:13:89:a3:f2:dc: 08:a8:9d:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBe/U+UIXsgqH+MBoY8C9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNmMyOTU4MTQ1ZjQ1ZmFkNWRhZWViMzhiNzViNTJjMDk2 NjEwNDYwHhcNMjUxMjI1MDEwMDU2WhcNMjUxMjI2MDEwMDU2WjAzMTEwLwYDVQQD EygxMDBhYzM5MTU1OGM4YmI3NmEyMjgwOGNkNTVmYjVkNzUxOTI3ZGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOi/h1mqq2RxWHLIPawpD5Ze/Udp 9i8kvgJi2qnE7bhZgs7kJH8ajZ7JuDfHuScxu2QvKDEz6xKZZnzU9xZ+Iogbmptq 8AjWVEE0UTRWbEDQhQ2THSvp4+eVbJ6xaIDOO+9lixfKPkf4qzQnmcck9tpVG7mL jS9yS05ygPVKoqM1C0Xb3mnjvQ0N7OlkVhgbnAtB9NtSDdNS6kWEuZnnya2gUaHZ FswUPzJR8GOAL+/idZ558KxaP+D398/1468kWHs3E7Jw0JJC8K4f6RsnZ/yO04cG ck3LlQzQtP16MBJyjO7kF0oiMhAHNXI46o/6lqqbekGWZZFRGWrtX8y6AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAKw5FVjIu3aiKAjNVftddRkn3qMB8GA1UdIwQY MBaAFD1sKVgUX0X61drus4t1tSwJZhBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFd3cFdCUmZSZnJWMnU2emkzVzFMQWxtRUVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yYTU1NzQtN2IxMi00ZGEyLWEwNjQt NWUxYjA3ODg5MjNiLzEvUFd3cFdCUmZSZnJWMnU2emkzVzFMQWxtRUVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8yYTU1NzQtN2IxMi00ZGEyLWEwNjQtNWUxYjA3ODg5MjNi LzEvUFd3cFdCUmZSZnJWMnU2emkzVzFMQWxtRUVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQG+9BKMi XwS5bPl/oz6I2BpiIVAK4rCIwx4u2tAlsiXksE1tcwx6VJAPcwVWeJhKKuSkCIOG ZUTua5dn5mzQ0bA35tVasC2l7/Ag2dwCw2gUdo/EpMm3uB6MTGJRsgg/24Ow6QUS 3hCN4jimU5SbuzJ1R7lEb1fhtqx95FwzDNH9J7LfQ2SrwtkQHQu66qAmzBqDX4J6 ETY21l0o44M3l985TqqfJBXfOAqlQ9XGbN6BlYCVpc2hNh8anYoP13IukYXk3rjQ Zk7o1nERyEXtc9kme4WCa+RLcQqfyQUtENltXZN9zxD4vNpGv/TlMKfpGtDUH6WL nxOJo/LcCKidfw== -----END CERTIFICATE-----Generated at Thu Dec 25 10:12:58 2025 by rpki-client