This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft File: w1VyK06KSCQKzfXzN4OKogaqAto.mft (raw, json) Hash identifier: XCt0CnEQEEP7DWXLvfeywjmVZPlYdXFvBnW+Eb9zHUo= Subject key identifier: 88:39:43:21:CD:14:43:B1:70:81:F0:17:7B:36:15:71:F3:D9:26:6A Authority key identifier: C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA Certificate issuer: /CN=c355722b4e8a48240acdf5f337838aa206aa02da Certificate serial: 019B3FED04E9763BFC12F9C119DA616D191E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 08:00:56 +0000 Manifest this update: Sun 21 Dec 2025 08:00:56 +0000 Manifest next update: Mon 22 Dec 2025 08:00:56 +0000 Files and hashes: 1: skK36GoSOdR0likALCjbuukKSIA.roa (hash: rM2HKFoUwc02gigzQD8leLnlbHQm3zNCncQ93i9jwp0=) 2: w1VyK06KSCQKzfXzN4OKogaqAto.crl (hash: e1GGuK4lf5FiFh8OMeBcR+W4bLZKhtEeMS33yS7JSDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.crl rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:04:e9:76:3b:fc:12:f9:c1:19:da:61:6d:19:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c355722b4e8a48240acdf5f337838aa206aa02da Validity Not Before: Dec 21 08:00:56 2025 GMT Not After : Dec 22 08:00:56 2025 GMT Subject: CN=88394321cd1443b17081f0177b361571f3d9266a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ab:9a:49:1c:c8:3f:48:8b:f3:a1:2c:f1:b8: 67:45:e3:bc:5a:bf:43:f1:6a:93:27:c0:df:6f:a1: b0:75:b6:28:d3:08:2b:e4:f0:c0:1a:27:4b:d3:8b: de:3b:71:ef:a3:de:60:80:4d:4e:88:25:0c:6a:00: 92:d3:18:78:3e:ad:69:3d:c0:b4:af:74:b1:81:8a: a2:0c:dc:4b:85:ad:9a:ea:f0:1b:e6:d1:52:5d:22: 6a:44:1a:3c:0d:d4:90:b5:da:c6:1f:ae:f7:fb:15: d6:dd:4c:3c:8a:51:81:82:c6:f5:ff:a6:6f:4b:9b: 5c:08:9f:64:37:47:53:8f:b1:5a:b3:4a:7f:05:d7: d0:b0:dd:aa:a6:1e:b5:c6:fd:a1:9a:e4:d8:53:9d: 80:7e:30:63:78:e0:ac:f2:05:74:ee:36:fd:92:61: ac:c5:de:80:be:03:99:51:52:a4:2a:70:ba:94:1a: cb:69:f3:22:6b:93:47:d3:8e:2f:18:50:ec:48:a3: af:68:ec:28:25:68:e0:df:1c:90:cf:bb:bd:5e:e6: 20:c3:16:47:d7:26:cc:49:44:ac:57:da:11:96:ae: b3:2d:fd:f4:d2:47:18:87:68:c2:fc:2d:77:6f:15: 9d:66:15:a5:3b:ed:ae:78:a5:da:f7:45:53:07:e9: ef:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:39:43:21:CD:14:43:B1:70:81:F0:17:7B:36:15:71:F3:D9:26:6A X509v3 Authority Key Identifier: keyid:C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:fd:0d:38:5e:ae:dd:f2:ec:d9:52:17:03:29:95:49:5c:61: 7e:9b:82:04:d9:a6:3f:6d:31:02:8f:1b:85:86:61:11:65:c2: 6c:5f:5c:95:e1:27:31:03:35:66:ae:5e:f3:c9:ab:62:ff:64: b5:21:b4:0f:f8:91:e7:84:4d:ab:b8:56:02:77:1d:21:1d:83: 81:91:d2:52:a7:e6:dd:af:f8:55:02:1e:20:74:1d:05:60:b7: 3e:c4:54:8e:49:1f:c8:3d:5e:30:37:0a:30:f4:48:87:64:8d: a8:26:e5:2a:09:1e:e9:a0:ec:c1:4a:3c:6d:1d:a2:4a:a8:33: e4:92:eb:cf:4b:da:da:e8:27:b0:e8:ed:bf:74:76:8f:f8:4d: 45:1c:1a:56:69:e4:9e:dc:8a:15:e3:25:8b:a5:0d:69:ef:8c: de:d6:06:d7:26:08:93:39:1e:92:d7:d8:e5:68:7a:0c:0e:8f: 5d:77:82:33:13:8d:7b:e1:bf:cb:0e:21:70:7c:b0:98:fc:ba: 82:4e:ea:b3:e4:5e:54:c5:88:ce:10:a5:90:13:af:ea:1e:08: 9a:c7:ee:c1:e8:db:09:d1:2f:2e:06:d2:88:88:7e:1c:1a:25: 6a:18:0e:4c:f1:e9:5a:e5:2c:3d:b2:e3:18:b0:39:e1:5b:9c: 38:3c:35:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7QTpdjv8EvnBGdphbRkeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNTU3MjJiNGU4YTQ4MjQwYWNkZjVmMzM3ODM4YWEyMDZh YTAyZGEwHhcNMjUxMjIxMDgwMDU2WhcNMjUxMjIyMDgwMDU2WjAzMTEwLwYDVQQD Eyg4ODM5NDMyMWNkMTQ0M2IxNzA4MWYwMTc3YjM2MTU3MWYzZDkyNjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzauaSRzIP0iL86Es8bhnReO8Wr9D 8WqTJ8Dfb6GwdbYo0wgr5PDAGidL04veO3Hvo95ggE1OiCUMagCS0xh4Pq1pPcC0 r3SxgYqiDNxLha2a6vAb5tFSXSJqRBo8DdSQtdrGH673+xXW3Uw8ilGBgsb1/6Zv S5tcCJ9kN0dTj7Fas0p/BdfQsN2qph61xv2hmuTYU52AfjBjeOCs8gV07jb9kmGs xd6AvgOZUVKkKnC6lBrLafMia5NH044vGFDsSKOvaOwoJWjg3xyQz7u9XuYgwxZH 1ybMSUSsV9oRlq6zLf300kcYh2jC/C13bxWdZhWlO+2ueKXa90VTB+nvsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIg5QyHNFEOxcIHwF3s2FXHz2SZqMB8GA1UdIwQY MBaAFMNVcitOikgkCs318zeDiqIGqgLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZTk5NTgtOWZmMi00MTIzLTliNWYt YTJlZjkwYzllOTEzLzEvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xZTk5NTgtOWZmMi00MTIzLTliNWYtYTJlZjkwYzllOTEz LzEvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANv0NOF6u 3fLs2VIXAymVSVxhfpuCBNmmP20xAo8bhYZhEWXCbF9cleEnMQM1Zq5e88mrYv9k tSG0D/iR54RNq7hWAncdIR2DgZHSUqfm3a/4VQIeIHQdBWC3PsRUjkkfyD1eMDcK MPRIh2SNqCblKgke6aDswUo8bR2iSqgz5JLrz0va2ugnsOjtv3R2j/hNRRwaVmnk ntyKFeMli6UNae+M3tYG1yYIkzkektfY5Wh6DA6PXXeCMxONe+G/yw4hcHywmPy6 gk7qs+ReVMWIzhClkBOv6h4ImsfuwejbCdEvLgbSiIh+HBolahgOTPHpWuUsPbLj GLA54VucODw1uw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:48:41 2025 by rpki-client