This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft File: PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft (raw, json) Hash identifier: a4x7mRI1GZYUudLu/ajzz7KMgsvbQWGf59742InLLJM= Subject key identifier: 83:DC:E6:35:A6:12:EE:8C:60:7A:61:DC:A3:E9:63:A3:26:42:21:4E Authority key identifier: 3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF Certificate issuer: /CN=3f058e432bbf72369750a9951d5259430b5ca4bf Certificate serial: 019B5229EAA5E91B7682E072B3E218FE9C8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 21:00:37 +0000 Manifest this update: Wed 24 Dec 2025 21:00:37 +0000 Manifest next update: Thu 25 Dec 2025 21:00:37 +0000 Files and hashes: 1: LHapQb8ix5yDr9XdIdq3SLfgGJQ.roa (hash: OTBcvGKIAwNH7dYThkaA46DYb8Du7nUhG7Wp8v0hqOA=) 2: PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl (hash: FqA+PN+hokXTIWBTt5z8LjeyQckjtaiBNqlXUzJ4MlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:29:ea:a5:e9:1b:76:82:e0:72:b3:e2:18:fe:9c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f058e432bbf72369750a9951d5259430b5ca4bf Validity Not Before: Dec 24 21:00:37 2025 GMT Not After : Dec 25 21:00:37 2025 GMT Subject: CN=83dce635a612ee8c607a61dca3e963a32642214e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8a:a1:92:6c:29:85:c2:dc:9a:6c:1d:e8:6e: 82:c6:03:5f:8c:65:56:d1:11:87:76:1f:b1:12:64: 7a:7b:8a:84:7d:46:d5:91:68:c7:63:14:9f:10:4d: 4e:2c:55:d8:52:0c:0e:fc:4c:33:b8:95:40:e8:67: 2d:46:90:71:a4:fe:30:2a:91:a4:f7:95:b7:d8:61: d0:a3:80:de:ba:ed:41:59:48:26:4c:81:f1:f9:d0: 72:b7:d2:f3:c2:83:7c:46:8f:62:a3:4e:26:dd:3b: 46:6b:60:b8:de:47:48:71:a3:03:02:b1:45:06:91: b0:29:50:9c:8c:06:fb:ea:ab:05:5c:b4:93:0f:f1: e9:a3:9a:04:2e:71:fc:0c:1a:1a:72:08:f5:f8:65: ba:8e:4d:3d:3d:66:d4:e2:a7:1e:2b:8b:5b:29:db: c9:ca:f3:3e:eb:c5:52:ed:97:f9:84:47:92:09:88: ff:be:db:b4:59:df:1a:ea:6b:21:c5:c5:01:52:63: 0d:0c:2d:2e:19:6f:63:30:da:f8:7e:b6:62:9f:a4: e2:ad:e0:bc:a6:af:4d:95:74:46:38:58:71:15:12: ff:30:b1:41:85:bd:1f:27:8e:c2:13:4e:d8:10:64: 5a:c2:90:03:05:77:51:bc:fb:c3:d8:fd:b1:97:da: 2e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DC:E6:35:A6:12:EE:8C:60:7A:61:DC:A3:E9:63:A3:26:42:21:4E X509v3 Authority Key Identifier: keyid:3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:13:54:b2:6b:cd:39:f6:68:7e:99:31:ec:dc:56:c9:28:86: 60:a0:08:39:c1:2f:95:84:f0:75:30:bb:e8:36:51:95:5b:05: be:a3:e6:4f:8d:21:6a:b1:f9:43:15:f6:49:84:45:8b:4e:46: 46:f0:38:3b:3c:52:14:ba:2b:4b:0c:95:35:e8:3f:cc:8b:b5: 51:1d:b8:32:09:b5:44:43:56:6c:d9:25:c5:b8:e7:be:67:9b: e9:7b:a5:5e:e0:2d:19:8b:78:8e:04:cc:3a:44:34:98:99:d3: fb:b9:49:4b:2f:a5:c3:f3:bf:f4:f1:29:d9:f8:e0:dc:f7:76: c1:ca:5a:69:19:ef:28:24:2e:bc:81:cf:e0:9d:e5:a7:09:3b: e2:e8:ca:67:2c:b0:db:93:01:6a:ef:7d:26:5b:bb:e3:06:e9: 9b:ad:48:b1:04:80:34:7a:cb:44:0d:8d:74:a3:a8:91:c0:54: 01:06:14:5a:60:2e:ef:29:41:fd:b0:c3:75:4b:1b:c2:d7:50: 67:a1:dd:4b:e7:08:b9:d4:6e:b7:ce:09:f2:3a:b9:52:f2:0c: 68:77:4d:37:f7:c2:49:48:10:bc:10:56:f0:80:ed:c5:59:b2: 97:80:0e:5e:76:9b:39:f1:93:59:a3:a6:73:ac:42:9f:03:1f: 35:e5:a6:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKeql6Rt2guBys+IY/pyPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMDU4ZTQzMmJiZjcyMzY5NzUwYTk5NTFkNTI1OTQzMGI1 Y2E0YmYwHhcNMjUxMjI0MjEwMDM3WhcNMjUxMjI1MjEwMDM3WjAzMTEwLwYDVQQD Eyg4M2RjZTYzNWE2MTJlZThjNjA3YTYxZGNhM2U5NjNhMzI2NDIyMTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoqhkmwphcLcmmwd6G6CxgNfjGVW 0RGHdh+xEmR6e4qEfUbVkWjHYxSfEE1OLFXYUgwO/EwzuJVA6GctRpBxpP4wKpGk 95W32GHQo4Deuu1BWUgmTIHx+dByt9LzwoN8Ro9io04m3TtGa2C43kdIcaMDArFF BpGwKVCcjAb76qsFXLSTD/Hpo5oELnH8DBoacgj1+GW6jk09PWbU4qceK4tbKdvJ yvM+68VS7Zf5hEeSCYj/vtu0Wd8a6mshxcUBUmMNDC0uGW9jMNr4frZin6TireC8 pq9NlXRGOFhxFRL/MLFBhb0fJ47CE07YEGRawpADBXdRvPvD2P2xl9ou5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPc5jWmEu6MYHph3KPpY6MmQiFOMB8GA1UdIwQY MBaAFD8FjkMrv3I2l1CplR1SWUMLXKS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kZTY4YzYtNjUwZi00ZGZhLWJkMTMt MDAwMDgyYzEyM2U3LzEvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kZTY4YzYtNjUwZi00ZGZhLWJkMTMtMDAwMDgyYzEyM2U3 LzEvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhNUsmvN OfZofpkx7NxWySiGYKAIOcEvlYTwdTC76DZRlVsFvqPmT40harH5QxX2SYRFi05G RvA4OzxSFLorSwyVNeg/zIu1UR24Mgm1RENWbNklxbjnvmeb6XulXuAtGYt4jgTM OkQ0mJnT+7lJSy+lw/O/9PEp2fjg3Pd2wcpaaRnvKCQuvIHP4J3lpwk74ujKZyyw 25MBau99Jlu74wbpm61IsQSANHrLRA2NdKOokcBUAQYUWmAu7ylB/bDDdUsbwtdQ Z6HdS+cIudRut84J8jq5UvIMaHdNN/fCSUgQvBBW8IDtxVmyl4AOXnabOfGTWaOm c6xCnwMfNeWmeA== -----END CERTIFICATE-----Generated at Thu Dec 25 03:27:45 2025 by rpki-client