This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft File: Ip-w-z0njhsoCnd94gDvvQi6rDA.mft (raw, json) Hash identifier: I0xTR+XHfc2sQNvniR71CBWwzEAX72aGIR40f0zAkGI= Subject key identifier: 48:6B:51:C2:79:95:DE:57:7A:96:CA:BE:8A:C8:F5:AF:7E:3A:95:90 Authority key identifier: 22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30 Certificate issuer: /CN=229fb0fb3d278e1b280a777de200efbd08baac30 Certificate serial: 019B4627B74FC12E957EE9B2DC234E9C9258 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft Manifest number: 0A04 Signing time: Mon 22 Dec 2025 13:02:46 +0000 Manifest this update: Mon 22 Dec 2025 13:02:46 +0000 Manifest next update: Tue 23 Dec 2025 13:02:46 +0000 Files and hashes: 1: EdKpa32IZ9Dnd3k-vmeHaMU23Tw.roa (hash: WGOFdfPIgmzQx9aGUgM6u6XYxnkTJOLa0M2Z4HLrsFA=) 2: Ip-w-z0njhsoCnd94gDvvQi6rDA.crl (hash: sjVP5ujvtCPypnFsvCWV2qIoeOzFOTh6HjxPDDBaDE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:b7:4f:c1:2e:95:7e:e9:b2:dc:23:4e:9c:92:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229fb0fb3d278e1b280a777de200efbd08baac30 Validity Not Before: Dec 22 13:02:46 2025 GMT Not After : Dec 23 13:02:46 2025 GMT Subject: CN=486b51c27995de577a96cabe8ac8f5af7e3a9590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9d:5c:f5:23:0c:e7:cd:63:ef:f9:99:ea:ae: 30:f2:5a:5c:cf:17:bd:77:36:2d:0e:d2:f8:ce:86: dd:eb:45:6d:ef:f6:d7:94:b2:7e:44:f3:4b:2c:23: 97:0c:e5:66:08:59:f9:1c:29:aa:39:68:08:91:08: 68:3f:a6:85:4b:69:b3:92:3f:fa:82:9d:21:3a:c9: b6:29:3b:38:b1:88:55:91:1d:36:ae:e0:a3:bf:0a: 6f:d8:a4:83:43:a2:bb:e0:1a:99:6a:bb:3d:f3:39: 3b:c7:89:72:e4:73:f4:3b:e5:04:9a:d2:0e:a9:5d: 7e:fe:5d:88:31:ea:9f:13:86:fb:ab:ba:f9:70:6b: db:98:15:6a:27:af:74:c9:aa:10:5f:e4:5e:4e:03: 0b:66:ea:33:54:01:b2:43:6d:3a:90:75:a3:31:9c: cd:91:ca:a5:23:b3:a3:ef:53:f2:79:6c:1f:a3:5c: 65:27:1d:ef:a1:d8:9a:a9:42:04:33:5c:31:2e:d3: 9f:65:e5:b4:1f:db:e0:86:19:9e:b6:f9:46:59:42: 00:2c:cb:db:d9:d7:95:09:20:a7:cc:d2:a6:6d:0f: 5a:fd:79:05:0e:77:c7:9d:37:2f:90:80:2a:5a:5a: 32:05:dd:f5:f5:fa:13:96:79:53:f7:c4:20:27:38: 6e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6B:51:C2:79:95:DE:57:7A:96:CA:BE:8A:C8:F5:AF:7E:3A:95:90 X509v3 Authority Key Identifier: keyid:22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:23:09:ce:86:9d:c0:0d:2f:cb:7c:7b:3e:0b:a7:54:b6:0c: c4:4b:32:2e:84:88:eb:a1:d2:84:04:a4:22:1e:7a:78:88:fc: c0:90:2f:08:ea:aa:50:78:26:5f:bb:8d:98:ee:54:55:a8:ed: 03:42:47:5d:79:2e:73:36:43:2e:90:7f:ab:e5:08:02:8f:f0: f4:cc:63:5a:96:60:c5:ba:f0:96:a2:bd:2b:0d:34:21:c4:3f: 2e:24:08:c3:16:c1:af:a8:66:1a:b0:d0:19:1c:74:e4:d4:72: 6c:a3:39:6c:5d:9c:4f:cf:12:bb:bd:c9:79:cd:a4:c9:e9:40: b7:4a:53:6d:20:96:f8:a2:6d:6f:84:d3:2a:bc:84:15:6b:a2: 97:60:dd:e6:a7:6b:81:39:ce:cb:19:be:03:94:3b:f0:a0:0a: 6c:70:c3:00:61:e0:a4:68:24:ec:5d:a7:5c:86:4b:3f:07:b8: 2c:51:e5:5b:34:01:dd:05:8d:dc:3d:96:e1:90:56:a5:ff:f6: e7:3f:ab:4a:23:81:a7:7b:65:e4:da:46:7b:83:1e:2b:5a:c8: ee:c0:21:19:9a:0e:bb:56:a5:f3:a4:9a:e2:c4:c1:c0:e4:bf: eb:6d:d9:21:a8:4d:e4:a1:ee:92:ea:f3:6f:b3:49:73:0e:aa: 45:43:6e:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJ7dPwS6Vfumy3CNOnJJYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyOWZiMGZiM2QyNzhlMWIyODBhNzc3ZGUyMDBlZmJkMDhi YWFjMzAwHhcNMjUxMjIyMTMwMjQ2WhcNMjUxMjIzMTMwMjQ2WjAzMTEwLwYDVQQD Eyg0ODZiNTFjMjc5OTVkZTU3N2E5NmNhYmU4YWM4ZjVhZjdlM2E5NTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq51c9SMM581j7/mZ6q4w8lpczxe9 dzYtDtL4zobd60Vt7/bXlLJ+RPNLLCOXDOVmCFn5HCmqOWgIkQhoP6aFS2mzkj/6 gp0hOsm2KTs4sYhVkR02ruCjvwpv2KSDQ6K74BqZars98zk7x4ly5HP0O+UEmtIO qV1+/l2IMeqfE4b7q7r5cGvbmBVqJ690yaoQX+ReTgMLZuozVAGyQ206kHWjMZzN kcqlI7Oj71PyeWwfo1xlJx3vodiaqUIEM1wxLtOfZeW0H9vghhmetvlGWUIALMvb 2deVCSCnzNKmbQ9a/XkFDnfHnTcvkIAqWloyBd319foTlnlT98QgJzhupQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhrUcJ5ld5XepbKvorI9a9+OpWQMB8GA1UdIwQY MBaAFCKfsPs9J44bKAp3feIA770IuqwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXAtdy16MG5qaHNvQ25kOTRnRHZ2UWk2ckRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82YzU0YTktOWZlNS00ODkzLTlkYTct N2I5ODY2MzNhYzVlLzEvSXAtdy16MG5qaHNvQ25kOTRnRHZ2UWk2ckRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS82YzU0YTktOWZlNS00ODkzLTlkYTctN2I5ODY2MzNhYzVl LzEvSXAtdy16MG5qaHNvQ25kOTRnRHZ2UWk2ckRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyMJzoad wA0vy3x7PgunVLYMxEsyLoSI66HShASkIh56eIj8wJAvCOqqUHgmX7uNmO5UVajt A0JHXXkuczZDLpB/q+UIAo/w9MxjWpZgxbrwlqK9Kw00IcQ/LiQIwxbBr6hmGrDQ GRx05NRybKM5bF2cT88Su73Jec2kyelAt0pTbSCW+KJtb4TTKryEFWuil2Dd5qdr gTnOyxm+A5Q78KAKbHDDAGHgpGgk7F2nXIZLPwe4LFHlWzQB3QWN3D2W4ZBWpf/2 5z+rSiOBp3tl5NpGe4MeK1rI7sAhGZoOu1al86Sa4sTBwOS/623ZIahN5KHukurz b7NJcw6qRUNuTw== -----END CERTIFICATE-----Generated at Mon Dec 22 22:52:31 2025 by rpki-client