This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft File: PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft (raw, json) Hash identifier: 4P89iNeh9d/yc8cEO3IbCVl+GAUo9t3J9FJPvnXPgWQ= Subject key identifier: C4:6D:E0:A8:00:DF:B5:B6:3D:1F:6D:24:CE:F4:F8:02:63:CA:2C:81 Authority key identifier: 3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF Certificate issuer: /CN=3f058e432bbf72369750a9951d5259430b5ca4bf Certificate serial: 019B657A1AB485C6AEE3569B84E8533CF79F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft Manifest number: 179D Signing time: Sun 28 Dec 2025 15:00:59 +0000 Manifest this update: Sun 28 Dec 2025 15:00:59 +0000 Manifest next update: Mon 29 Dec 2025 15:00:59 +0000 Files and hashes: 1: LHapQb8ix5yDr9XdIdq3SLfgGJQ.roa (hash: OTBcvGKIAwNH7dYThkaA46DYb8Du7nUhG7Wp8v0hqOA=) 2: PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl (hash: leSACvBa/53uMz4h4+jCE725ULsWe1k42iJe+CSEBVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:7a:1a:b4:85:c6:ae:e3:56:9b:84:e8:53:3c:f7:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f058e432bbf72369750a9951d5259430b5ca4bf Validity Not Before: Dec 28 15:00:59 2025 GMT Not After : Dec 29 15:00:59 2025 GMT Subject: CN=c46de0a800dfb5b63d1f6d24cef4f80263ca2c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:de:a6:21:4f:d7:49:ce:0c:03:33:85:90:1f: 10:3c:49:ac:1e:7b:5e:f5:d5:b1:aa:fc:f1:21:f3: c2:72:52:9f:0b:f7:84:3f:97:f3:9e:1b:62:38:b4: 8d:35:0d:fb:29:09:5a:00:cb:25:04:e3:a7:43:b4: 51:8d:f2:f2:04:14:69:df:a5:6b:23:5d:fd:32:3e: 8c:f4:3e:de:b8:0d:29:76:c8:8d:0a:df:d9:c5:c8: 5c:62:99:83:98:29:12:a6:13:e2:54:58:15:ad:be: 29:ea:a2:dc:ef:7e:06:b6:4e:c6:8d:06:74:03:02: 2c:e6:ac:4a:cb:1d:a1:a2:67:f3:9c:ca:77:c9:1b: 2d:1c:09:fd:c9:28:b2:21:56:50:f9:01:08:23:48: ab:c8:c5:8c:85:ee:e1:3a:07:89:09:9e:8f:6a:b1: 24:8a:a5:2c:d6:e3:f8:f9:7a:ae:51:b8:a0:e9:cb: 81:51:f9:90:47:8a:b8:4d:2e:93:44:2b:55:aa:8a: fc:c8:f6:4d:c5:bb:74:1a:13:f8:f3:07:fc:74:48: 8b:40:2a:78:94:d2:a1:6d:69:dc:bf:8e:25:fc:a5: 1a:e7:93:36:5b:c1:c8:52:a1:37:4d:b1:d1:75:9f: ae:d9:9b:c0:e6:72:70:95:20:a3:55:e6:66:ed:49: 3d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6D:E0:A8:00:DF:B5:B6:3D:1F:6D:24:CE:F4:F8:02:63:CA:2C:81 X509v3 Authority Key Identifier: keyid:3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:c2:61:75:4b:5e:7e:2c:f9:f6:7e:e3:be:6e:0f:d0:2e:fc: ae:1a:1b:d5:57:96:49:b5:cc:33:9f:12:13:5e:7f:a9:de:16: c7:63:d8:f7:02:d0:73:da:84:f7:75:39:31:27:32:68:97:63: c5:e8:e4:4d:18:c2:b7:9a:7a:cd:f5:40:38:74:58:d6:5a:0e: f5:53:8b:6f:83:02:81:cb:3f:21:e5:f9:07:26:a8:7c:be:52: 8f:68:52:cb:d8:76:7d:02:61:4e:e1:bf:ba:90:f9:61:87:af: 3e:9a:03:3c:d8:fc:94:f4:cc:d5:5d:0f:1a:0e:c0:1f:f5:e0: 10:70:80:72:3c:88:a0:eb:b8:e2:4a:ab:5d:86:d3:9c:01:b9: ac:80:76:97:3d:53:6a:a1:eb:0c:57:da:3f:fc:cd:de:76:54: 53:e3:d0:74:8f:3f:9f:c4:a6:2e:8e:af:5b:51:ea:f5:56:c7: 1a:bb:b7:93:63:07:e9:93:d5:cf:b6:89:d3:ed:90:0d:0e:f0: 82:70:8c:65:7a:c0:15:b0:9f:45:24:c5:7d:83:23:7a:28:b4: 90:76:16:24:b0:d3:04:5d:83:d3:1a:ff:48:0b:9f:9e:34:b0: 7e:06:7b:dc:6c:2c:28:97:16:44:24:9f:89:3a:c4:e7:75:06: b7:ae:26:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlehq0hcau41abhOhTPPefMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMDU4ZTQzMmJiZjcyMzY5NzUwYTk5NTFkNTI1OTQzMGI1 Y2E0YmYwHhcNMjUxMjI4MTUwMDU5WhcNMjUxMjI5MTUwMDU5WjAzMTEwLwYDVQQD EyhjNDZkZTBhODAwZGZiNWI2M2QxZjZkMjRjZWY0ZjgwMjYzY2EyYzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3d6mIU/XSc4MAzOFkB8QPEmsHnte 9dWxqvzxIfPCclKfC/eEP5fznhtiOLSNNQ37KQlaAMslBOOnQ7RRjfLyBBRp36Vr I139Mj6M9D7euA0pdsiNCt/ZxchcYpmDmCkSphPiVFgVrb4p6qLc734Gtk7GjQZ0 AwIs5qxKyx2homfznMp3yRstHAn9ySiyIVZQ+QEII0iryMWMhe7hOgeJCZ6ParEk iqUs1uP4+XquUbig6cuBUfmQR4q4TS6TRCtVqor8yPZNxbt0GhP48wf8dEiLQCp4 lNKhbWncv44l/KUa55M2W8HIUqE3TbHRdZ+u2ZvA5nJwlSCjVeZm7Uk9rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRt4KgA37W2PR9tJM70+AJjyiyBMB8GA1UdIwQY MBaAFD8FjkMrv3I2l1CplR1SWUMLXKS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kZTY4YzYtNjUwZi00ZGZhLWJkMTMt MDAwMDgyYzEyM2U3LzEvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kZTY4YzYtNjUwZi00ZGZhLWJkMTMtMDAwMDgyYzEyM2U3 LzEvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArsJhdUte fiz59n7jvm4P0C78rhob1VeWSbXMM58SE15/qd4Wx2PY9wLQc9qE93U5MScyaJdj xejkTRjCt5p6zfVAOHRY1loO9VOLb4MCgcs/IeX5ByaofL5Sj2hSy9h2fQJhTuG/ upD5YYevPpoDPNj8lPTM1V0PGg7AH/XgEHCAcjyIoOu44kqrXYbTnAG5rIB2lz1T aqHrDFfaP/zN3nZUU+PQdI8/n8SmLo6vW1Hq9VbHGru3k2MH6ZPVz7aJ0+2QDQ7w gnCMZXrAFbCfRSTFfYMjeii0kHYWJLDTBF2D0xr/SAufnjSwfgZ73GwsKJcWRCSf iTrE53UGt64mrA== -----END CERTIFICATE-----Generated at Sun Dec 28 18:52:50 2025 by rpki-client