This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft File: w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft (raw, json) Hash identifier: HJqXrxP3vIXzMruYW1bjYlWEH1+1gP2SL7EmoqtuKNY= Subject key identifier: 9D:39:BA:EE:B5:61:47:5F:78:B9:32:F9:28:8F:92:85:67:9F:2A:C8 Authority key identifier: C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF Certificate issuer: /CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf Certificate serial: 019B3A90E572B091B96EF391B41A49DABD9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 07:02:12 +0000 Manifest this update: Sat 20 Dec 2025 07:02:12 +0000 Manifest next update: Sun 21 Dec 2025 07:02:12 +0000 Files and hashes: 1: 4mL1zKKLOxGn25fl7m9On5y2ZYA.roa (hash: 9EgYMO8cQ5z/aiE1aC8zT4GRbu01MVUJ2bPVFVsvu8U=) 2: jdL88fKfBRcDZQd2LJ3KQAGZWz0.roa (hash: Rtx6TLOA/PMGBKD0sU4jO9D8OJMlb2E7ArhYwQT50vQ=) 3: w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl (hash: nM71aMtjitRGcNHHBNzFXsVXiWK6LO9WegGfxHw9sQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:e5:72:b0:91:b9:6e:f3:91:b4:1a:49:da:bd:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf Validity Not Before: Dec 20 07:02:12 2025 GMT Not After : Dec 21 07:02:12 2025 GMT Subject: CN=9d39baeeb561475f78b932f9288f9285679f2ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:08:93:e9:2b:57:e4:39:ef:d4:1e:89:b3:cf: 1c:86:ff:3d:16:27:cd:87:b2:e3:3a:fc:6b:bc:cb: 52:52:39:bf:ed:de:6e:11:68:10:78:4b:8b:f2:bf: 7f:77:8e:aa:03:18:a9:0e:1a:65:2c:5c:d1:2d:2f: bb:b2:f6:43:7b:44:67:8c:08:cc:f7:95:ed:65:71: 2e:11:18:6f:03:76:fc:ee:cf:be:95:22:93:3e:3d: 47:68:9b:a4:02:22:eb:9e:aa:bd:7a:62:1e:b6:34: 21:08:d7:6f:1a:d1:fb:98:73:fe:97:3b:77:56:92: 5f:7e:06:54:32:63:56:b3:0b:ee:dc:8a:e4:ee:9a: 2a:76:63:78:5a:4c:03:3b:68:32:a9:fe:0f:42:88: f5:9b:ee:93:c8:5d:e2:5b:01:ce:3f:d1:1b:59:2f: 5a:83:56:09:b0:19:fa:3e:c8:48:f7:1b:24:98:1a: ee:20:1c:56:26:34:94:c9:43:53:4b:be:67:3a:04: d4:20:33:e7:71:72:05:29:a1:9d:a4:10:e4:6b:b8: 8d:2b:d4:8b:f2:bf:00:04:bf:df:38:be:55:ef:4f: 45:b3:3c:d8:4b:5a:55:0f:50:b0:72:1f:2a:bf:13: 04:9e:bb:79:82:a2:b6:8c:31:89:f7:24:43:0f:c6: 53:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:39:BA:EE:B5:61:47:5F:78:B9:32:F9:28:8F:92:85:67:9F:2A:C8 X509v3 Authority Key Identifier: keyid:C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:f3:89:fb:f2:c9:97:ff:0a:f0:26:60:77:5c:62:72:7d:f6: 3e:82:48:e5:18:23:9e:d4:ab:ee:1f:ac:d8:7a:35:21:fd:2e: dc:a2:55:42:3e:fe:09:5e:8d:71:3a:95:2d:32:3b:fe:85:cf: fc:d7:c3:7b:8e:9c:6c:95:91:35:8d:e0:e4:61:9d:32:aa:eb: 59:6e:c6:c6:f7:f5:fd:1a:df:e2:0a:49:be:ba:92:c5:64:f7: d1:31:2a:33:15:ad:8c:a3:bb:51:3a:1c:04:12:47:16:11:b9: 1d:c4:36:fe:ac:5c:5a:76:6b:fe:b0:6a:c3:83:3b:b2:4f:f8: 09:98:93:66:c8:38:0d:a7:1a:2c:af:9f:5e:bd:c4:2a:0c:b0: 85:f8:b4:c7:28:98:c3:2f:6d:f7:6b:e4:44:24:e7:52:97:eb: e6:1b:17:68:66:cf:5b:a9:17:f4:c5:3e:e7:49:71:dd:39:0e: 24:93:00:56:c4:6a:b6:45:3c:4c:e3:6d:ae:c0:12:8a:c8:41: e1:37:42:bc:c7:93:3e:cc:10:bd:2a:a0:63:1c:05:e2:d5:6c: 04:a9:5c:78:5f:92:c1:f6:e0:70:23:3d:ec:d8:4a:6b:91:07: c5:10:fe:96:23:90:33:10:94:6b:21:29:0a:45:8d:2d:8e:7b: ba:e8:a2:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kOVysJG5bvORtBpJ2r2eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYjQzNTFlMGE0OTVjMjZlZmRjNmU0MTVmMGJiMTg5ZmJi ZDZlZGYwHhcNMjUxMjIwMDcwMjEyWhcNMjUxMjIxMDcwMjEyWjAzMTEwLwYDVQQD Eyg5ZDM5YmFlZWI1NjE0NzVmNzhiOTMyZjkyODhmOTI4NTY3OWYyYWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgiT6StX5Dnv1B6Js88chv89FifN h7LjOvxrvMtSUjm/7d5uEWgQeEuL8r9/d46qAxipDhplLFzRLS+7svZDe0RnjAjM 95XtZXEuERhvA3b87s++lSKTPj1HaJukAiLrnqq9emIetjQhCNdvGtH7mHP+lzt3 VpJffgZUMmNWswvu3Irk7poqdmN4WkwDO2gyqf4PQoj1m+6TyF3iWwHOP9EbWS9a g1YJsBn6PshI9xskmBruIBxWJjSUyUNTS75nOgTUIDPncXIFKaGdpBDka7iNK9SL 8r8ABL/fOL5V709FszzYS1pVD1Cwch8qvxMEnrt5gqK2jDGJ9yRDD8ZTIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ05uu61YUdfeLky+SiPkoVnnyrIMB8GA1UdIwQY MBaAFMO0NR4KSVwm79xuQV8LsYn7vW7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzdRMUhncEpYQ2J2M0c1Qlh3dXhpZnU5YnQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zN2UzNjMtODRkMS00NzBlLTk2YTIt MGVmMWNhYzc0MThkLzEvdzdRMUhncEpYQ2J2M0c1Qlh3dXhpZnU5YnQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zN2UzNjMtODRkMS00NzBlLTk2YTItMGVmMWNhYzc0MThk LzEvdzdRMUhncEpYQ2J2M0c1Qlh3dXhpZnU5YnQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfOJ+/LJ l/8K8CZgd1xicn32PoJI5RgjntSr7h+s2Ho1If0u3KJVQj7+CV6NcTqVLTI7/oXP /NfDe46cbJWRNY3g5GGdMqrrWW7Gxvf1/Rrf4gpJvrqSxWT30TEqMxWtjKO7UToc BBJHFhG5HcQ2/qxcWnZr/rBqw4M7sk/4CZiTZsg4DacaLK+fXr3EKgywhfi0xyiY wy9t92vkRCTnUpfr5hsXaGbPW6kX9MU+50lx3TkOJJMAVsRqtkU8TONtrsASishB 4TdCvMeTPswQvSqgYxwF4tVsBKlceF+SwfbgcCM97NhKa5EHxRD+liOQMxCUayEp CkWNLY57uuiirA== -----END CERTIFICATE-----Generated at Sat Dec 20 14:12:25 2025 by rpki-client