This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json) Hash identifier: guyUliAEhYZGFk+L1xE7Gx3wE3hQ+/wKQV1KmjNEfCM= Subject key identifier: EE:47:AE:8A:7F:FD:65:22:79:3D:B9:5D:E0:AB:EA:C1:00:FB:BA:CC Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 019B3DC7B24C0BEC13C9B94E0E38F42B5ECC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft Manifest number: 1792 Signing time: Sat 20 Dec 2025 22:00:56 +0000 Manifest this update: Sat 20 Dec 2025 22:00:56 +0000 Manifest next update: Sun 21 Dec 2025 22:00:56 +0000 Files and hashes: 1: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: jWV9sULYx+Pd88qkV2z4CGJzK/UcQUsF4srlwoqUH60=) 2: 3YD_MRnl9Z0M-5gb5pCh5nc9hwk.roa (hash: evl0gnXGBj3jpscK/Lmbf+kXEngR8HlbQU4a4Qn4JRY=) 3: 5wJESiDMAZmj-ilD4vzwMI5_ssg.roa (hash: +GY+k9R/JjbgE/bu3urmYp0AN8h15Gn0d4y/CuRmzBU=) 4: 7Cn94brCANl81RCeGqUf6f3wZjs.roa (hash: YTesKuaBb88vyg7FC7tve1XNAAciZyS+TUm60ayEkGs=) 5: I8EGaDfKri1_b8-vEs5GOpmEmC0.roa (hash: zmTLW5tEqjrFz2XoZUnEjei7zo6D5FmGOjsqSGxh6v4=) 6: aKFi1aME1l1V_WYgzTGI4swO8z4.roa (hash: J96GhwyVxGlf3VlcFOTAObMIbztxwxb0EC7z2fTuLyY=) 7: c35KLXIqnQLDzGQrWv8LHC2jXps.roa (hash: RoucjcIt4vL7sa6JcKcnG6f3UgWawurBha3WBbsL36o=) 8: ikkLHj8L2gbMUX3D4taYH4bLq_k.roa (hash: H50XZ4z2D599HF8sTbfTiJpRuYbZmd0jgsQgZY7w/J4=) 9: vASMvqMKdVuVur6UMRXjyqvAGfY.roa (hash: St4xX/JO+ugq63vpxfwsQqa1EocjW1D79lqVObSNu1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:b2:4c:0b:ec:13:c9:b9:4e:0e:38:f4:2b:5e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Dec 20 22:00:56 2025 GMT Not After : Dec 21 22:00:56 2025 GMT Subject: CN=ee47ae8a7ffd6522793db95de0abeac100fbbacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fb:65:61:49:5c:7e:80:0c:5a:9a:5f:e3:6c: de:f0:9c:e6:3e:55:64:d9:56:b9:c1:b8:ca:37:e5: bc:48:7e:44:1a:c7:64:93:d0:82:ac:16:d5:92:79: 22:92:64:f8:06:a6:bd:16:b4:5a:3c:b8:ba:a2:c5: f9:d5:ab:65:7e:c2:45:d6:1c:d0:c1:26:d0:12:10: 1c:42:58:ab:ac:6c:c5:9c:b5:5e:eb:36:7e:b6:84: d5:be:df:a0:aa:09:e9:b8:cf:1a:4b:bb:4a:71:00: 15:96:26:e5:5d:1f:80:a9:42:5c:8b:6d:9c:94:12: 8c:1e:12:8d:2c:95:e2:4e:2b:f0:b4:81:71:84:e3: 5a:e9:34:ef:56:e1:1a:08:e2:84:8d:00:05:44:43: 61:4d:98:e4:4e:f1:25:2e:07:57:9a:e1:c6:1e:1f: fa:90:b6:44:b9:c9:02:71:26:23:87:33:bd:e7:ac: d4:ec:dd:75:ce:ef:6c:4d:ab:8a:0a:7d:f3:86:58: 79:1d:4c:1c:d7:a8:1a:46:c5:bf:7d:eb:6e:88:63: e1:20:8e:30:97:56:29:76:98:89:e3:97:96:28:55: 7b:2f:17:7f:9d:93:cf:95:f2:ff:4e:87:74:02:e3: 66:d7:14:34:2c:9c:08:2f:88:e1:51:18:7e:c1:b5: fa:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:47:AE:8A:7F:FD:65:22:79:3D:B9:5D:E0:AB:EA:C1:00:FB:BA:CC X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:2f:3a:4b:f5:39:b6:69:96:d6:13:78:84:12:68:01:93:7d: 89:ee:ec:1e:b3:da:3a:e7:d1:a9:1c:ee:71:79:5b:8a:dd:61: 73:62:7e:25:07:92:03:14:ee:44:3f:02:17:08:70:ae:1c:52: a4:41:e8:8d:b4:4e:67:81:a7:6e:eb:75:bf:06:f5:de:83:73: 3c:cb:93:c7:49:90:cd:ad:ad:bc:06:93:9b:54:0b:d7:16:8c: 83:9e:ae:bc:f6:80:d1:db:00:f8:ff:a3:a6:16:e0:f6:3f:4d: 3d:64:52:bf:28:c9:b8:e9:78:6e:b1:a8:db:5e:a4:e4:2e:c9: 99:ff:8d:b8:aa:ab:18:1b:e6:31:a0:d2:11:5e:5b:e4:6d:59: 7b:45:a1:c4:7e:d3:dd:0d:89:38:ad:d0:9a:fd:e4:76:93:8c: 0c:4e:f1:fb:bf:ff:61:38:41:7c:91:d5:a3:99:c8:bd:97:00: 64:60:de:13:ed:69:10:0c:14:44:37:a1:96:a4:8f:ca:53:49: 1b:0b:f5:9a:84:41:b1:55:6f:4d:94:05:14:ad:a5:b5:78:40: 49:73:4c:0d:1b:60:75:93:14:63:10:f9:53:d3:24:3b:4e:85: f5:fd:48:83:60:34:0b:3e:fb:ed:d4:bc:54:2f:cb:05:79:7c: 63:a4:2c:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x7JMC+wTyblODjj0K17MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjUxMjIwMjIwMDU2WhcNMjUxMjIxMjIwMDU2WjAzMTEwLwYDVQQD EyhlZTQ3YWU4YTdmZmQ2NTIyNzkzZGI5NWRlMGFiZWFjMTAwZmJiYWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvtlYUlcfoAMWppf42ze8JzmPlVk 2Va5wbjKN+W8SH5EGsdkk9CCrBbVknkikmT4Bqa9FrRaPLi6osX51atlfsJF1hzQ wSbQEhAcQlirrGzFnLVe6zZ+toTVvt+gqgnpuM8aS7tKcQAVliblXR+AqUJci22c lBKMHhKNLJXiTivwtIFxhONa6TTvVuEaCOKEjQAFRENhTZjkTvElLgdXmuHGHh/6 kLZEuckCcSYjhzO956zU7N11zu9sTauKCn3zhlh5HUwc16gaRsW/fetuiGPhII4w l1YpdpiJ45eWKFV7Lxd/nZPPlfL/Tod0AuNm1xQ0LJwIL4jhURh+wbX64wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5Hrop//WUieT25XeCr6sEA+7rMMB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlC86S/U5 tmmW1hN4hBJoAZN9ie7sHrPaOufRqRzucXlbit1hc2J+JQeSAxTuRD8CFwhwrhxS pEHojbROZ4Gnbut1vwb13oNzPMuTx0mQza2tvAaTm1QL1xaMg56uvPaA0dsA+P+j phbg9j9NPWRSvyjJuOl4brGo216k5C7Jmf+NuKqrGBvmMaDSEV5b5G1Ze0WhxH7T 3Q2JOK3Qmv3kdpOMDE7x+7//YThBfJHVo5nIvZcAZGDeE+1pEAwURDehlqSPylNJ Gwv1moRBsVVvTZQFFK2ltXhASXNMDRtgdZMUYxD5U9MkO06F9f1Ig2A0Cz777dS8 VC/LBXl8Y6QsEA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:00:07 2025 by rpki-client