This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft File: w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft (raw, json) Hash identifier: Z4bw6eorqlDBLD59ZmQyanpoqTHRUVxsuSJJ5zQWqgA= Subject key identifier: A6:BA:90:C8:70:99:40:9A:BB:76:AD:43:40:57:F4:CC:A7:8F:72:1B Authority key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD Certificate issuer: /CN=c3e86569b1690c9dff745cbb43805b8582b005ad Certificate serial: 019B2E549533EE3805F1A8F3E7925532F7B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 22:00:53 +0000 Manifest this update: Wed 17 Dec 2025 22:00:53 +0000 Manifest next update: Thu 18 Dec 2025 22:00:53 +0000 Files and hashes: 1: GfVJNtBqDjYi0Gf5Q216kr4bXN4.roa (hash: y9FyRvs17LSTei1C0cR4cXi2RJhRkUIb5SAPSm2CSi4=) 2: w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl (hash: zskx7zzExt7djtohfQdp/kLw886cvozWN0gbclegDxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:95:33:ee:38:05:f1:a8:f3:e7:92:55:32:f7:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3e86569b1690c9dff745cbb43805b8582b005ad Validity Not Before: Dec 17 22:00:53 2025 GMT Not After : Dec 18 22:00:53 2025 GMT Subject: CN=a6ba90c87099409abb76ad434057f4cca78f721b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:58:19:20:c1:c6:01:35:e0:74:74:a6:a2:2c: e9:e8:d6:68:52:a9:15:4a:aa:be:96:51:33:86:2f: 09:eb:82:3b:50:c4:94:b8:cc:44:e4:49:5b:a9:a2: 75:77:ef:93:b6:8d:7c:05:a8:72:50:e5:2d:08:4e: 9f:2d:75:1d:f1:21:3d:55:b6:38:2e:fa:e4:62:f3: eb:c4:3a:d3:98:20:00:97:56:61:52:ec:74:cc:4b: e7:1a:26:3a:45:33:e1:1c:94:32:9e:d4:a8:94:d9: f6:60:5d:17:86:50:5c:ce:11:06:1a:e3:2c:45:2f: 90:e5:6f:7d:6d:63:b8:5d:8e:5a:99:2b:03:f9:ac: 78:1f:a2:2e:6c:0c:ec:31:a2:62:09:73:39:31:a7: 84:70:ab:25:99:e6:e2:20:20:64:3a:c0:a8:7d:32: ec:10:f2:4e:66:1f:68:2a:f1:a3:88:67:70:99:14: 0c:b5:78:06:3a:ea:cb:5f:fd:7f:8e:a1:94:3c:ae: e9:d6:37:6f:54:13:d4:3d:56:09:76:e5:52:f7:b3: dc:16:fb:5f:b4:2e:f5:8f:e0:2e:27:03:55:91:bc: d8:8b:fe:3f:e9:ed:9a:83:ef:f7:52:9d:8d:df:15: f4:69:38:bf:86:75:52:9f:d6:0c:32:4c:f2:e9:18: 90:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BA:90:C8:70:99:40:9A:BB:76:AD:43:40:57:F4:CC:A7:8F:72:1B X509v3 Authority Key Identifier: keyid:C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f6:b7:ba:33:d4:4b:48:27:33:cb:a7:5b:4d:b2:f9:df:3c: a9:08:12:bc:7d:61:89:6a:be:bf:e4:35:60:f5:c9:19:9d:52: cf:d2:c1:7c:94:28:19:d4:58:cf:16:4b:86:86:1e:67:4f:c5: 18:fc:f8:64:e7:ec:76:fa:3d:c7:da:15:d7:66:40:28:0e:7c: ab:f4:a5:86:a4:e1:3d:35:9a:6e:36:b7:6d:5b:6f:f1:9e:51: d6:b6:19:d2:08:8d:fe:7f:44:2c:86:3d:6a:8c:17:ca:d9:91: 0f:cf:37:15:d6:53:a4:98:77:20:fd:04:1e:14:46:18:e8:9e: f5:85:cf:ba:bb:b2:f2:c0:98:5b:fc:cc:2d:79:c3:56:d2:3a: 71:e2:dc:34:5c:fe:c5:4a:cb:14:d1:6a:e6:e2:f1:99:57:20: 70:19:22:54:1a:c0:d8:8c:25:51:13:0b:10:13:10:94:ac:b0: de:d5:2f:eb:31:1a:98:35:57:2d:ac:ea:6e:fa:03:18:53:04: 93:96:0f:25:c1:44:5f:3c:53:23:28:6f:02:d7:9b:93:9e:56: ab:3a:97:05:77:18:21:32:1a:6a:50:a3:dc:71:29:7c:ed:06: 20:f7:65:ea:dc:9e:83:42:c3:64:79:6c:45:bc:e9:78:de:14: 87:16:e4:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVJUz7jgF8ajz55JVMvezMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZTg2NTY5YjE2OTBjOWRmZjc0NWNiYjQzODA1Yjg1ODJi MDA1YWQwHhcNMjUxMjE3MjIwMDUzWhcNMjUxMjE4MjIwMDUzWjAzMTEwLwYDVQQD EyhhNmJhOTBjODcwOTk0MDlhYmI3NmFkNDM0MDU3ZjRjY2E3OGY3MjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVgZIMHGATXgdHSmoizp6NZoUqkV Sqq+llEzhi8J64I7UMSUuMxE5ElbqaJ1d++Tto18BahyUOUtCE6fLXUd8SE9VbY4 LvrkYvPrxDrTmCAAl1ZhUux0zEvnGiY6RTPhHJQyntSolNn2YF0XhlBczhEGGuMs RS+Q5W99bWO4XY5amSsD+ax4H6IubAzsMaJiCXM5MaeEcKslmebiICBkOsCofTLs EPJOZh9oKvGjiGdwmRQMtXgGOurLX/1/jqGUPK7p1jdvVBPUPVYJduVS97PcFvtf tC71j+AuJwNVkbzYi/4/6e2ag+/3Up2N3xX0aTi/hnVSn9YMMkzy6RiQcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKa6kMhwmUCau3atQ0BX9Mynj3IbMB8GA1UdIwQY MBaAFMPoZWmxaQyd/3Rcu0OAW4WCsAWtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jOTc2ZmMtZDdkMy00Y2JhLWIwMmUt ZGJiYjM1YzllMzc4LzEvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jOTc2ZmMtZDdkMy00Y2JhLWIwMmUtZGJiYjM1YzllMzc4 LzEvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/a3ujPU S0gnM8unW02y+d88qQgSvH1hiWq+v+Q1YPXJGZ1Sz9LBfJQoGdRYzxZLhoYeZ0/F GPz4ZOfsdvo9x9oV12ZAKA58q/SlhqThPTWabja3bVtv8Z5R1rYZ0giN/n9ELIY9 aowXytmRD883FdZTpJh3IP0EHhRGGOie9YXPuruy8sCYW/zMLXnDVtI6ceLcNFz+ xUrLFNFq5uLxmVcgcBkiVBrA2IwlURMLEBMQlKyw3tUv6zEamDVXLazqbvoDGFME k5YPJcFEXzxTIyhvAtebk55WqzqXBXcYITIaalCj3HEpfO0GIPdl6tyeg0LDZHls RbzpeN4Uhxbkzw== -----END CERTIFICATE-----Generated at Thu Dec 18 06:57:41 2025 by rpki-client