This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft File: _w3fP-V3IgGv94wk6X-UTDgF_2s.mft (raw, json) Hash identifier: sfCfZ6AYYlLpAhVASLfIsr6EEDY5DtRZBSvRNtFOxa4= Subject key identifier: 34:94:ED:A2:F0:0A:05:7C:46:F0:62:F8:06:4F:61:60:D7:80:7B:45 Authority key identifier: FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B Certificate issuer: /CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b Certificate serial: 019B3CEB9BF6FAC3CA8466C63D4CDFD8EE96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft Manifest number: 0605 Signing time: Sat 20 Dec 2025 18:00:32 +0000 Manifest this update: Sat 20 Dec 2025 18:00:32 +0000 Manifest next update: Sun 21 Dec 2025 18:00:32 +0000 Files and hashes: 1: 9ia0_iaxbX6JryuxqnLg3hd0L3g.roa (hash: KiNlWxgmk2eySTFhfbvvmaccM60Lf3LwZy/tqN4KWhY=) 2: ASer5kiqDiVWOaPZMylwsoahAIw.roa (hash: u7jpBR9dXty+UTW4qdoR89luPMWxLAPFa0EB+Y83dzY=) 3: U6zuk58ajYVysKNz6qXWGH9vBbQ.roa (hash: 61zuuE5vE5Y4+HWAkm8iJSGF4xuX2/gytqBlot9g8YQ=) 4: _w3fP-V3IgGv94wk6X-UTDgF_2s.crl (hash: zSsQX+xN52blhpC7fZS175IjJcc+QiW0bsZOfBJEFtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:9b:f6:fa:c3:ca:84:66:c6:3d:4c:df:d8:ee:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b Validity Not Before: Dec 20 18:00:32 2025 GMT Not After : Dec 21 18:00:32 2025 GMT Subject: CN=3494eda2f00a057c46f062f8064f6160d7807b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fc:f6:2d:23:4f:bd:ad:44:d1:99:62:f2:1b: ae:5e:00:63:1c:81:9f:b7:01:dc:c5:04:9a:bf:0e: 48:df:2c:f3:90:7b:f9:10:df:8d:74:7a:fd:e4:57: 7a:07:b8:74:cc:42:e9:c0:f6:a6:a4:9c:4c:eb:e3: 2e:5d:05:bd:52:89:ca:bb:09:be:88:7b:3c:4c:aa: 04:d7:ec:a6:f7:15:ce:b0:44:b9:a9:09:cc:fe:a5: af:7a:8d:4a:b6:c6:0e:73:f2:a8:97:0e:c7:c8:a4: 9a:de:a2:4b:76:80:70:fe:f9:1e:5a:f8:bb:c8:1f: 9c:86:df:41:fe:db:75:64:d7:78:94:32:ee:6c:37: 8f:7c:9f:c5:8b:3e:fe:a5:5e:a6:14:5d:ba:36:9a: fd:1c:e6:81:45:82:34:44:5b:a7:1e:b2:53:d5:e1: 59:3c:82:ff:85:64:c4:ba:99:08:6b:f0:8d:64:a6: 74:a0:31:bd:97:b9:24:21:18:ff:ab:71:3f:b6:5d: 8f:58:e5:e1:84:24:e5:15:72:f3:bc:d0:f5:f4:4d: bc:66:b3:4d:1b:8e:0c:61:3e:66:b0:50:8a:6c:2d: 69:d3:9c:77:27:3e:18:09:2b:33:3b:53:32:c5:8e: 82:70:d4:44:3c:b4:37:45:7d:bd:11:6c:e9:85:ca: 72:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:94:ED:A2:F0:0A:05:7C:46:F0:62:F8:06:4F:61:60:D7:80:7B:45 X509v3 Authority Key Identifier: keyid:FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:3b:d6:88:c6:c4:79:a6:3e:af:07:22:08:d8:6c:ed:b4:41: a5:ab:e5:0b:f0:63:62:3c:62:29:b4:b9:54:e9:01:4e:b5:ef: 63:7e:30:af:e3:a4:55:2f:88:35:ef:99:8b:da:ad:c9:ae:f4: 15:de:18:0e:b0:5c:0d:c9:d1:92:7e:83:62:31:e3:ff:35:a2: 3a:bc:8a:17:21:03:3e:bc:de:9b:b8:6a:47:60:b2:fc:44:56: 77:42:66:0f:49:f8:f8:89:a6:03:7b:6b:76:02:b9:8f:11:83: 18:9a:c2:a9:ca:ba:73:61:49:ff:65:69:b3:f8:b0:20:8b:45: 1f:3f:4b:63:84:12:00:01:5f:43:86:a6:8b:b0:84:ab:9a:f3: 91:75:8d:d6:15:ff:69:84:fb:34:0c:4a:74:1e:c3:75:51:8b: a4:e5:ed:ab:c2:ab:68:61:ec:1c:de:51:40:bc:b0:3f:05:23: da:29:83:75:69:ef:5d:f0:e2:2a:11:4f:ad:0d:2a:9f:e4:52: d4:ce:e8:f2:34:f4:1a:db:f6:dd:ea:af:fc:d6:49:a3:c7:34: 39:44:37:4d:7f:72:04:98:7e:fd:1e:a2:d6:a6:70:0c:4b:a8: 13:b0:ac:97:34:e5:4a:65:ee:f4:46:db:fb:f2:4d:37:20:3a: 2a:b3:be:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs865v2+sPKhGbGPUzf2O6WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMGRkZjNmZTU3NzIyMDFhZmY3OGMyNGU5N2Y5NDRjMzgw NWZmNmIwHhcNMjUxMjIwMTgwMDMyWhcNMjUxMjIxMTgwMDMyWjAzMTEwLwYDVQQD EygzNDk0ZWRhMmYwMGEwNTdjNDZmMDYyZjgwNjRmNjE2MGQ3ODA3YjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPz2LSNPva1E0Zli8huuXgBjHIGf twHcxQSavw5I3yzzkHv5EN+NdHr95Fd6B7h0zELpwPampJxM6+MuXQW9UonKuwm+ iHs8TKoE1+ym9xXOsES5qQnM/qWveo1KtsYOc/Kolw7HyKSa3qJLdoBw/vkeWvi7 yB+cht9B/tt1ZNd4lDLubDePfJ/Fiz7+pV6mFF26Npr9HOaBRYI0RFunHrJT1eFZ PIL/hWTEupkIa/CNZKZ0oDG9l7kkIRj/q3E/tl2PWOXhhCTlFXLzvND19E28ZrNN G44MYT5msFCKbC1p05x3Jz4YCSszO1MyxY6CcNREPLQ3RX29EWzphcpyPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSU7aLwCgV8RvBi+AZPYWDXgHtFMB8GA1UdIwQY MBaAFP8N3z/ldyIBr/eMJOl/lEw4Bf9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3czZlAtVjNJZ0d2OTR3azZYLVVURGdGXzJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jNDU1YmQtYjgyNS00OTAxLTgzODEt MDRkMTI0N2U1ZDBhLzEvX3czZlAtVjNJZ0d2OTR3azZYLVVURGdGXzJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9jNDU1YmQtYjgyNS00OTAxLTgzODEtMDRkMTI0N2U1ZDBh LzEvX3czZlAtVjNJZ0d2OTR3azZYLVVURGdGXzJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzvWiMbE eaY+rwciCNhs7bRBpavlC/BjYjxiKbS5VOkBTrXvY34wr+OkVS+INe+Zi9qtya70 Fd4YDrBcDcnRkn6DYjHj/zWiOryKFyEDPrzem7hqR2Cy/ERWd0JmD0n4+ImmA3tr dgK5jxGDGJrCqcq6c2FJ/2Vps/iwIItFHz9LY4QSAAFfQ4ami7CEq5rzkXWN1hX/ aYT7NAxKdB7DdVGLpOXtq8KraGHsHN5RQLywPwUj2imDdWnvXfDiKhFPrQ0qn+RS 1M7o8jT0Gtv23eqv/NZJo8c0OUQ3TX9yBJh+/R6i1qZwDEuoE7CslzTlSmXu9Ebb +/JNNyA6KrO++A== -----END CERTIFICATE-----Generated at Sun Dec 21 01:29:38 2025 by rpki-client