This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft File: PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft (raw, json) Hash identifier: NHOKrQOCiVQU25aglzEQwONQxODEFDqaOiZfs0wdu0k= Subject key identifier: 89:35:B1:03:0A:87:4A:CE:76:59:C0:77:DA:BD:7A:FD:24:62:5D:7F Authority key identifier: 3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68 Certificate issuer: /CN=3d639fa4eddc162df3659e721d247ff338962f68 Certificate serial: 019B378EC784E5EC8C9A00928C956B684444 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft Manifest number: 5B Signing time: Fri 19 Dec 2025 17:01:02 +0000 Manifest this update: Fri 19 Dec 2025 17:01:02 +0000 Manifest next update: Sat 20 Dec 2025 17:01:02 +0000 Files and hashes: 1: PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl (hash: kbkRC0bQW7Zle4iqLhAS6HqCfHqzGL+XQLQQWKdt+TE=) 2: mUsc8rGd4_JM4XnD9bClRCU4zxo.roa (hash: 3sss9GFoAf2253c6EyBbZyTorugY9kFPDM+aiR2bERI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:c7:84:e5:ec:8c:9a:00:92:8c:95:6b:68:44:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d639fa4eddc162df3659e721d247ff338962f68 Validity Not Before: Dec 19 17:01:02 2025 GMT Not After : Dec 20 17:01:02 2025 GMT Subject: CN=8935b1030a874ace7659c077dabd7afd24625d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2d:09:0b:60:7f:1e:57:d3:9e:21:c4:af:97: 82:81:b6:a2:c6:24:10:c9:e9:d4:e2:4f:70:b1:84: 82:78:82:92:9b:57:b2:c7:61:cc:1a:55:1a:d6:a1: 3b:e7:97:0b:62:57:0c:82:94:d9:39:92:7e:ed:c3: be:91:96:71:9c:25:06:a0:07:1b:58:e0:fb:d8:ee: 17:ef:17:19:81:dd:f9:a6:c8:62:df:3f:2e:31:9c: 2b:09:72:01:b7:09:89:cd:9d:ea:1c:be:f0:b7:7a: 7f:a2:e8:1b:c0:fb:f2:84:31:12:68:6b:23:dc:54: 8f:80:e7:43:99:26:1b:64:7d:db:a9:02:78:41:c3: b9:8e:7a:22:f8:09:d9:3d:f8:4d:cb:33:a6:21:11: 45:9f:2f:f9:69:6d:91:68:e8:c2:08:0d:dc:05:e1: 40:54:b7:06:46:20:e9:dd:a1:cb:ae:64:f8:2d:5c: 5b:16:71:b5:c7:ba:42:3a:4a:ba:22:3c:72:2f:f8: 1e:a1:a8:41:0f:4b:1b:ab:c7:e9:22:23:e2:37:90: e4:e4:f4:d9:96:30:eb:bc:5a:2a:ef:80:21:e5:b6: 16:ac:05:51:0e:e9:ed:a3:4a:87:8a:36:9f:54:53: b5:a2:db:22:ca:77:55:69:8e:c3:1b:5a:be:ce:3f: 61:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:35:B1:03:0A:87:4A:CE:76:59:C0:77:DA:BD:7A:FD:24:62:5D:7F X509v3 Authority Key Identifier: keyid:3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:0b:de:cf:a0:c3:3b:59:19:02:a3:7b:45:dd:c3:7a:0d:90: dd:44:6f:4c:74:a6:f2:e7:d9:36:55:a9:01:7f:d7:28:44:d5: 23:97:5b:5b:be:ea:68:46:20:10:13:fd:2b:73:65:c5:3a:bb: 87:bd:44:fe:28:45:d1:ed:b0:92:f4:64:f7:b6:71:b2:90:81: 48:82:34:c3:00:9a:66:63:e2:d8:98:ff:34:60:55:7e:a4:90: a3:8d:9d:b1:0d:3a:a0:71:4e:b7:c5:8e:55:ce:d4:e1:de:bb: 34:49:7f:46:47:c6:cd:16:b7:1c:57:56:cd:e1:d8:7f:48:0b: 05:1f:89:8c:75:69:48:ec:e1:55:77:d7:de:ad:18:e2:39:1f: 0e:f7:00:e1:35:16:7a:47:9d:f7:cc:4a:a7:d0:4a:99:8d:fe: 93:34:e9:70:d1:d6:d6:1b:3c:9d:2e:a4:0e:21:20:8f:68:77: d5:f2:4b:0f:14:a4:8e:b8:7b:0c:1f:70:c9:a2:09:13:a9:ca: fa:51:7c:93:5f:5c:e2:bc:43:f4:ee:12:d7:95:0b:41:a7:70: 36:9d:d0:cc:b9:0c:af:ae:28:1a:ef:b8:24:fc:6d:45:17:14: 52:53:a6:05:8e:6b:21:b4:93:fe:cd:8d:b8:b9:2f:8d:19:be: a4:b2:69:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jseE5eyMmgCSjJVraEREMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNjM5ZmE0ZWRkYzE2MmRmMzY1OWU3MjFkMjQ3ZmYzMzg5 NjJmNjgwHhcNMjUxMjE5MTcwMTAyWhcNMjUxMjIwMTcwMTAyWjAzMTEwLwYDVQQD Eyg4OTM1YjEwMzBhODc0YWNlNzY1OWMwNzdkYWJkN2FmZDI0NjI1ZDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC0JC2B/HlfTniHEr5eCgbaixiQQ yenU4k9wsYSCeIKSm1eyx2HMGlUa1qE755cLYlcMgpTZOZJ+7cO+kZZxnCUGoAcb WOD72O4X7xcZgd35pshi3z8uMZwrCXIBtwmJzZ3qHL7wt3p/ougbwPvyhDESaGsj 3FSPgOdDmSYbZH3bqQJ4QcO5jnoi+AnZPfhNyzOmIRFFny/5aW2RaOjCCA3cBeFA VLcGRiDp3aHLrmT4LVxbFnG1x7pCOkq6IjxyL/geoahBD0sbq8fpIiPiN5Dk5PTZ ljDrvFoq74Ah5bYWrAVRDunto0qHijafVFO1otsiyndVaY7DG1q+zj9hiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIk1sQMKh0rOdlnAd9q9ev0kYl1/MB8GA1UdIwQY MBaAFD1jn6Tt3BYt82Wech0kf/M4li9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFdPZnBPM2NGaTN6Wlo1eUhTUl84emlXTDJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jNzc5ODMtYmUzYS00OGUzLWI1ZDAt YWQyODRkMjgyNGE0LzEvUFdPZnBPM2NGaTN6Wlo1eUhTUl84emlXTDJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9jNzc5ODMtYmUzYS00OGUzLWI1ZDAtYWQyODRkMjgyNGE0 LzEvUFdPZnBPM2NGaTN6Wlo1eUhTUl84emlXTDJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQvez6DD O1kZAqN7Rd3Deg2Q3URvTHSm8ufZNlWpAX/XKETVI5dbW77qaEYgEBP9K3NlxTq7 h71E/ihF0e2wkvRk97ZxspCBSII0wwCaZmPi2Jj/NGBVfqSQo42dsQ06oHFOt8WO Vc7U4d67NEl/RkfGzRa3HFdWzeHYf0gLBR+JjHVpSOzhVXfX3q0Y4jkfDvcA4TUW eked98xKp9BKmY3+kzTpcNHW1hs8nS6kDiEgj2h31fJLDxSkjrh7DB9wyaIJE6nK +lF8k19c4rxD9O4S15ULQadwNp3QzLkMr64oGu+4JPxtRRcUUlOmBY5rIbST/s2N uLkvjRm+pLJp6Q== -----END CERTIFICATE-----Generated at Fri Dec 19 18:59:12 2025 by rpki-client