This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft File: w-twdDgV_kRclYo8URfvJ1PTD34.mft (raw, json) Hash identifier: didpT0MYjc/HySdNKJoRldPE22QLAGec7lW/UO5ZV+s= Subject key identifier: 74:D2:33:22:38:A2:FA:04:46:72:4A:5D:6F:A5:54:91:B0:DE:AD:52 Authority key identifier: C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E Certificate issuer: /CN=c3eb70743815fe445c958a3c5117ef2753d30f7e Certificate serial: 019B6CFC4537ADA8D207F937472352C13A1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft Manifest number: 17A1 Signing time: Tue 30 Dec 2025 02:00:30 +0000 Manifest this update: Tue 30 Dec 2025 02:00:30 +0000 Manifest next update: Wed 31 Dec 2025 02:00:30 +0000 Files and hashes: 1: GzCIBu4tHiFH76_Ly9Ei_0SMBpg.roa (hash: ucUps3PWBgmn642QIizMtNVpME3QV9nJ//n0R1ijDxA=) 2: w-twdDgV_kRclYo8URfvJ1PTD34.crl (hash: 42e0Zatv2A8eyjpRX0y2xBCh84eTuDlwYE3YEZQJwRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 02:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:45:37:ad:a8:d2:07:f9:37:47:23:52:c1:3a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3eb70743815fe445c958a3c5117ef2753d30f7e Validity Not Before: Dec 30 02:00:30 2025 GMT Not After : Dec 31 02:00:30 2025 GMT Subject: CN=74d2332238a2fa0446724a5d6fa55491b0dead52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b0:8e:31:fd:dc:b7:a2:7e:d4:f1:4d:39:d4: 3f:41:18:b0:f4:30:cd:ad:e1:04:79:cb:a4:68:8c: 4f:85:dc:81:ed:30:3b:1b:4c:2f:11:a3:2a:52:c9: 31:bd:53:46:16:54:22:ed:38:99:b0:25:77:89:0f: 87:5a:8d:8a:0b:cf:bb:2b:fc:f7:88:2f:0e:20:f8: 11:b5:c6:66:d6:ef:ef:b3:64:fc:b7:13:27:cc:bc: 44:81:4a:64:32:a0:b5:88:14:bb:0a:0c:96:a8:85: 54:4d:dd:a7:df:fc:0e:5a:b2:3e:73:0e:2b:da:d0: c5:35:66:f5:ca:5a:9c:eb:34:f1:16:42:f9:5b:28: bb:64:ff:4c:58:27:1f:43:1b:b6:3f:a5:e3:8f:2f: d6:d9:7c:92:7c:94:14:db:30:77:cc:24:72:83:cf: 0c:4e:17:a5:ab:fd:f6:f3:91:cb:43:02:ac:be:4f: 5b:0e:f0:17:c7:7e:4e:7c:01:4c:7c:ac:55:65:31: 17:32:cb:4c:62:c8:a4:10:07:97:22:c4:b5:9e:17: 63:74:16:47:af:bc:dd:3f:01:4c:e3:68:5a:b6:9d: 82:6d:e8:a8:d7:d7:62:66:ce:f5:c0:51:db:d4:29: 6d:43:87:e2:33:8c:8f:80:5c:bc:0e:03:00:30:de: 6f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D2:33:22:38:A2:FA:04:46:72:4A:5D:6F:A5:54:91:B0:DE:AD:52 X509v3 Authority Key Identifier: keyid:C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:e0:aa:e5:92:23:e9:9a:d1:47:2d:a6:15:73:c0:01:8d:7d: 03:e9:4c:e5:c7:5c:e4:76:57:59:37:89:a8:fa:8f:d1:82:11: bd:26:c6:2e:93:fe:a0:22:fc:6a:1f:8d:9d:dc:d6:ff:04:70: 8d:aa:53:04:84:e2:76:9c:ad:d0:33:bc:b5:04:58:88:9e:b7: f8:7c:9e:fc:bc:8e:8a:73:46:73:f5:14:a6:22:9c:74:40:cc: ac:af:5e:c6:aa:88:3c:e0:5e:b7:98:b0:8a:6e:a9:1d:86:ef: e9:cf:d5:67:4c:85:86:9e:32:63:44:22:04:9d:22:0c:c8:aa: 06:11:c3:22:54:9b:b2:a4:18:5a:3e:0a:9a:38:48:8b:56:31: 78:f5:20:79:89:4e:99:39:e1:48:b2:a1:75:1e:12:5f:56:7d: 70:99:7a:1e:dc:32:4b:80:03:76:63:24:a6:51:34:e1:a0:2c: 8c:17:0d:01:4a:a5:f3:ad:a2:d0:f9:5c:8a:69:2e:fd:cc:87: 34:63:3d:11:5c:14:81:6e:b3:15:6b:97:f1:2f:c7:39:4a:ab: d5:0b:b5:e5:2a:5f:17:a5:77:03:f5:61:19:ec:00:0f:63:5c: 63:72:d9:41:e6:f0:f2:9c:24:23:86:5d:68:ee:37:ed:15:1e: a2:2e:6c:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/EU3rajSB/k3RyNSwToeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZWI3MDc0MzgxNWZlNDQ1Yzk1OGEzYzUxMTdlZjI3NTNk MzBmN2UwHhcNMjUxMjMwMDIwMDMwWhcNMjUxMjMxMDIwMDMwWjAzMTEwLwYDVQQD Eyg3NGQyMzMyMjM4YTJmYTA0NDY3MjRhNWQ2ZmE1NTQ5MWIwZGVhZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprCOMf3ct6J+1PFNOdQ/QRiw9DDN reEEecukaIxPhdyB7TA7G0wvEaMqUskxvVNGFlQi7TiZsCV3iQ+HWo2KC8+7K/z3 iC8OIPgRtcZm1u/vs2T8txMnzLxEgUpkMqC1iBS7CgyWqIVUTd2n3/wOWrI+cw4r 2tDFNWb1ylqc6zTxFkL5Wyi7ZP9MWCcfQxu2P6Xjjy/W2XySfJQU2zB3zCRyg88M Thelq/3285HLQwKsvk9bDvAXx35OfAFMfKxVZTEXMstMYsikEAeXIsS1nhdjdBZH r7zdPwFM42hatp2Cbeio19diZs71wFHb1CltQ4fiM4yPgFy8DgMAMN5vMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTSMyI4ovoERnJKXW+lVJGw3q1SMB8GA1UdIwQY MBaAFMPrcHQ4Ff5EXJWKPFEX7ydT0w9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdy10d2REZ1Zfa1JjbFlvOFVSZnZKMVBURDM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xMzc1NGMtOGJlNy00NjBlLTg1MDct MTM1NzVlZjcyOWYzLzEvdy10d2REZ1Zfa1JjbFlvOFVSZnZKMVBURDM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8xMzc1NGMtOGJlNy00NjBlLTg1MDctMTM1NzVlZjcyOWYz LzEvdy10d2REZ1Zfa1JjbFlvOFVSZnZKMVBURDM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOCq5ZIj 6ZrRRy2mFXPAAY19A+lM5cdc5HZXWTeJqPqP0YIRvSbGLpP+oCL8ah+NndzW/wRw japTBITidpyt0DO8tQRYiJ63+Hye/LyOinNGc/UUpiKcdEDMrK9exqqIPOBet5iw im6pHYbv6c/VZ0yFhp4yY0QiBJ0iDMiqBhHDIlSbsqQYWj4KmjhIi1YxePUgeYlO mTnhSLKhdR4SX1Z9cJl6HtwyS4ADdmMkplE04aAsjBcNAUql862i0Plcimku/cyH NGM9EVwUgW6zFWuX8S/HOUqr1Qu15SpfF6V3A/VhGewAD2NcY3LZQebw8pwkI4Zd aO437RUeoi5siQ== -----END CERTIFICATE-----Generated at Tue Dec 30 10:54:12 2025 by rpki-client