This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft File: w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft (raw, json) Hash identifier: JtJ7wZ3cdws+ol2aUfVhjwL3Qkmzqe53GK22XwSmjxs= Subject key identifier: 36:FD:9C:9C:1B:57:55:68:47:BC:6D:D2:41:7A:10:6E:E5:C6:1C:A4 Authority key identifier: C3:FA:DF:44:E1:01:E1:65:C8:7B:B4:D0:EF:CC:F9:4B:D6:7E:2A:35 Certificate issuer: /CN=c3fadf44e101e165c87bb4d0efccf94bd67e2a35 Certificate serial: 019B4B4C2EEA73E29D6B961A31A91794FD7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft Manifest number: 0CFB Signing time: Tue 23 Dec 2025 13:00:42 +0000 Manifest this update: Tue 23 Dec 2025 13:00:42 +0000 Manifest next update: Wed 24 Dec 2025 13:00:42 +0000 Files and hashes: 1: ZZxnLfkQZZe868Ymmh1h6vi9FK4.roa (hash: FUPgIKTRbD3IVqEoytl9TWolLWbbwFaaKQfjRWOMZxY=) 2: w_rfROEB4WXIe7TQ78z5S9Z-KjU.crl (hash: gCQ2E5UdrQvSC7Tmb1AdQps0V6fi8ODBoyQgByXLAMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4c:2e:ea:73:e2:9d:6b:96:1a:31:a9:17:94:fd:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3fadf44e101e165c87bb4d0efccf94bd67e2a35 Validity Not Before: Dec 23 13:00:42 2025 GMT Not After : Dec 24 13:00:42 2025 GMT Subject: CN=36fd9c9c1b57556847bc6dd2417a106ee5c61ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:03:64:59:d9:db:44:a4:aa:21:9d:8d:74:6a: b1:89:12:4d:d4:00:72:35:c8:d7:ad:f7:aa:57:99: b5:8d:26:8f:0d:c6:80:d3:e6:80:02:93:29:47:17: 89:91:1d:27:9b:60:e2:8e:cb:ba:cc:2e:8b:70:0d: ee:58:09:8c:fc:29:b3:35:50:a0:36:dc:ae:48:f4: 6b:8f:8c:20:83:be:a2:36:6b:b8:d8:9a:2e:7b:b1: 9a:3b:b5:a3:31:65:44:7a:9b:6c:0e:87:c8:d4:f7: f3:db:53:33:f2:c5:ab:40:f4:d6:a5:81:78:55:d9: a5:1c:e2:3e:3f:1f:f8:8c:6d:0e:0a:12:75:07:45: 1c:22:16:96:f8:42:ce:0d:98:ed:a1:2f:d1:fb:b3: 2b:c7:0c:7e:4a:52:3a:a7:0d:c1:8b:aa:6b:89:d0: 41:b9:4b:75:08:be:4e:bc:d7:f6:68:82:38:8d:46: f1:0b:17:07:0b:35:26:de:db:f8:67:20:cb:20:0a: 28:1d:0d:04:45:66:56:5b:37:47:39:09:de:ce:24: 0d:83:fa:78:dc:9c:fc:eb:99:02:12:f6:f2:01:69: a2:36:e8:7b:16:e2:5b:e3:c0:5e:a0:97:60:87:ee: 4f:31:cf:92:7c:1e:17:f7:e0:46:0b:47:ff:60:da: ef:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FD:9C:9C:1B:57:55:68:47:BC:6D:D2:41:7A:10:6E:E5:C6:1C:A4 X509v3 Authority Key Identifier: keyid:C3:FA:DF:44:E1:01:E1:65:C8:7B:B4:D0:EF:CC:F9:4B:D6:7E:2A:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:44:f4:5b:17:e6:3b:2c:57:c1:73:a9:c9:df:84:dc:90:d6: 01:63:6a:fe:e6:bb:e7:6c:6b:be:13:d9:fb:2f:9f:4b:03:db: 4a:08:ea:5e:e1:fb:2e:d3:e3:c7:5a:98:8c:9c:4a:87:5e:b2: 74:3a:a2:e8:7d:ca:0b:83:fe:da:40:77:fb:02:ac:d9:92:0c: fe:6a:ff:bb:98:42:17:da:97:ce:a2:76:a3:3d:08:37:c2:25: 88:f6:47:ec:13:5a:da:1a:d0:ba:c6:4a:da:cf:b1:23:a2:21: 64:e9:e5:d3:fc:16:60:26:45:1d:0b:f0:9a:b6:79:29:39:77: f3:8f:67:14:1b:49:85:31:91:54:f0:93:67:ad:1e:67:95:1a: 07:50:25:b4:73:2b:b1:8f:bb:62:74:f5:55:ba:a0:94:90:10: 8e:ba:00:6c:23:7b:92:fc:bc:22:8c:ef:56:b7:07:d6:63:68: dc:ac:fe:96:93:0e:82:4a:22:5d:30:01:a7:f8:11:48:88:74: 1d:50:9f:be:38:62:6f:a8:be:4d:38:6d:29:81:a0:e8:c9:ee: 00:4f:c9:11:c9:cd:14:fc:80:47:67:ef:91:b5:13:6e:85:bf: 20:7b:17:ee:7a:46:8f:96:fe:ad:99:21:17:af:1d:cd:6c:8f: c8:02:46:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTC7qc+Kda5YaMakXlP18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZmFkZjQ0ZTEwMWUxNjVjODdiYjRkMGVmY2NmOTRiZDY3 ZTJhMzUwHhcNMjUxMjIzMTMwMDQyWhcNMjUxMjI0MTMwMDQyWjAzMTEwLwYDVQQD EygzNmZkOWM5YzFiNTc1NTY4NDdiYzZkZDI0MTdhMTA2ZWU1YzYxY2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgNkWdnbRKSqIZ2NdGqxiRJN1ABy NcjXrfeqV5m1jSaPDcaA0+aAApMpRxeJkR0nm2Dijsu6zC6LcA3uWAmM/CmzNVCg NtyuSPRrj4wgg76iNmu42Joue7GaO7WjMWVEeptsDofI1Pfz21Mz8sWrQPTWpYF4 VdmlHOI+Px/4jG0OChJ1B0UcIhaW+ELODZjtoS/R+7Mrxwx+SlI6pw3Bi6pridBB uUt1CL5OvNf2aII4jUbxCxcHCzUm3tv4ZyDLIAooHQ0ERWZWWzdHOQneziQNg/p4 3Jz865kCEvbyAWmiNuh7FuJb48BeoJdgh+5PMc+SfB4X9+BGC0f/YNrvjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDb9nJwbV1VoR7xt0kF6EG7lxhykMB8GA1UdIwQY MBaAFMP630ThAeFlyHu00O/M+UvWfio1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd19yZlJPRUI0V1hJZTdUUTc4ejVTOVotS2pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jNzRkYzUtZjNiYy00YmZiLTg5Zjct ZDk3YmQzMzAzMjhjLzEvd19yZlJPRUI0V1hJZTdUUTc4ejVTOVotS2pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jNzRkYzUtZjNiYy00YmZiLTg5ZjctZDk3YmQzMzAzMjhj LzEvd19yZlJPRUI0V1hJZTdUUTc4ejVTOVotS2pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0T0Wxfm OyxXwXOpyd+E3JDWAWNq/ua752xrvhPZ+y+fSwPbSgjqXuH7LtPjx1qYjJxKh16y dDqi6H3KC4P+2kB3+wKs2ZIM/mr/u5hCF9qXzqJ2oz0IN8IliPZH7BNa2hrQusZK 2s+xI6IhZOnl0/wWYCZFHQvwmrZ5KTl3849nFBtJhTGRVPCTZ60eZ5UaB1AltHMr sY+7YnT1VbqglJAQjroAbCN7kvy8IozvVrcH1mNo3Kz+lpMOgkoiXTABp/gRSIh0 HVCfvjhib6i+TThtKYGg6MnuAE/JEcnNFPyAR2fvkbUTboW/IHsX7npGj5b+rZkh F68dzWyPyAJGLQ== -----END CERTIFICATE-----Generated at Tue Dec 23 16:53:31 2025 by rpki-client