This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft File: w-iL5cCvqz0dvhLceTEMRJnhJ60.mft (raw, json) Hash identifier: xAyWdg7J/PVv+XtsXzzHFMPG7AQBuOh3zi9R809OpWE= Subject key identifier: 1E:6A:AF:45:07:4E:53:BE:16:D6:5D:50:67:F6:26:FF:A5:59:20:27 Authority key identifier: C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD Certificate issuer: /CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad Certificate serial: 019B3FED32B0BC95FCD8EE989996F135C59E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft Manifest number: 030E Signing time: Sun 21 Dec 2025 08:01:08 +0000 Manifest this update: Sun 21 Dec 2025 08:01:08 +0000 Manifest next update: Mon 22 Dec 2025 08:01:08 +0000 Files and hashes: 1: 2x7OqnJPBLrGZL2rttYvcbQz8Tw.roa (hash: WNGnFlqIRITx+enQw6qGHRhLudWi7SmIAW5VCe5iYGY=) 2: w-iL5cCvqz0dvhLceTEMRJnhJ60.crl (hash: HHFVMQ2Lcs+3xtOkrL/kDhT0q9J4n1HUUAQDjnkBah4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:32:b0:bc:95:fc:d8:ee:98:99:96:f1:35:c5:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad Validity Not Before: Dec 21 08:01:08 2025 GMT Not After : Dec 22 08:01:08 2025 GMT Subject: CN=1e6aaf45074e53be16d65d5067f626ffa5592027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:57:59:dc:bd:2b:4a:e9:97:8e:cf:ae:d0:43: 97:92:42:5b:8e:d5:8b:84:ff:b6:b6:48:e1:0a:fe: ef:53:aa:e1:b3:03:1e:87:2d:6b:ed:b5:6e:9a:df: 0f:a0:4c:13:62:03:7d:f0:5e:f7:24:7a:5c:08:12: 1e:64:8b:e9:75:4d:3c:2a:c5:a7:15:50:f9:49:9f: 4d:e4:72:58:b6:55:60:09:30:d3:e2:56:2a:1b:9b: b0:06:12:f1:bc:6a:fe:01:25:93:f2:51:2b:a0:1a: d3:c0:f2:15:83:02:55:ca:40:75:81:db:36:6f:e6: 4c:63:bc:15:c2:84:1a:f7:e0:03:35:99:3f:d7:ff: f4:2c:8c:d0:6a:db:be:83:9e:05:6c:0b:50:c5:99: 90:8e:a6:8f:ba:86:c6:0d:40:95:0b:dc:73:2d:eb: c7:57:86:1c:d7:15:ac:23:c8:7b:83:cd:f6:7a:a2: 24:bb:d1:c1:75:ed:16:b3:34:7d:68:e1:9d:ba:f5: 8e:6b:ce:27:e0:23:53:d6:9d:19:7a:00:7d:19:28: 77:cf:16:ef:8b:1b:31:64:ac:b3:80:b6:92:bd:f4: 2e:6f:26:0c:39:f5:05:00:a9:ac:fa:d4:03:f9:bf: 71:70:9d:0e:46:58:6d:d5:75:96:8c:90:ae:b9:84: 27:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6A:AF:45:07:4E:53:BE:16:D6:5D:50:67:F6:26:FF:A5:59:20:27 X509v3 Authority Key Identifier: keyid:C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:fc:7d:ff:37:aa:01:ad:40:20:14:7f:f2:5a:df:20:51:16: 2e:c4:08:df:1e:01:06:94:21:a5:9d:14:3a:be:ba:d9:03:5f: 6d:d1:48:c4:74:41:09:d2:be:44:8e:33:d5:2a:4a:b5:0c:d6: 71:e5:ed:91:10:4a:03:8c:8b:90:fb:9a:a4:fc:f1:b0:81:15: ee:59:76:58:a3:f8:71:b4:c8:e3:3e:47:d0:69:d3:ef:80:31: 49:15:ae:38:fd:a3:cc:e8:dc:68:36:1b:96:46:4b:a6:43:63: 21:2b:29:98:97:67:4f:4a:fa:a1:21:f0:ac:73:bb:73:84:2f: 16:6d:41:4e:ab:23:21:54:16:ce:5d:36:0f:82:8b:2d:16:95: f2:d4:05:ab:0b:e2:54:29:66:92:9f:7e:1e:7d:bc:6b:c5:ee: 34:f8:ca:c0:f6:8c:a4:b4:f5:d1:67:b3:17:00:88:0d:ff:0d: 13:a0:10:bb:33:8d:b3:8f:60:fd:92:02:31:f3:32:2a:6b:cb: 48:85:9a:c3:c3:7a:64:4a:7a:4d:4a:fa:94:e5:a4:50:c1:e1: 42:d2:22:5f:67:7e:b7:a9:ee:5c:ea:5a:3b:38:d0:68:b5:c8: 0b:41:cc:a2:1b:ee:32:82:c5:d7:8b:45:ca:32:49:ff:cc:75: 37:c6:f8:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7TKwvJX82O6YmZbxNcWeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZTg4YmU1YzBhZmFiM2QxZGJlMTJkYzc5MzEwYzQ0OTll MTI3YWQwHhcNMjUxMjIxMDgwMTA4WhcNMjUxMjIyMDgwMTA4WjAzMTEwLwYDVQQD EygxZTZhYWY0NTA3NGU1M2JlMTZkNjVkNTA2N2Y2MjZmZmE1NTkyMDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ldZ3L0rSumXjs+u0EOXkkJbjtWL hP+2tkjhCv7vU6rhswMehy1r7bVumt8PoEwTYgN98F73JHpcCBIeZIvpdU08KsWn FVD5SZ9N5HJYtlVgCTDT4lYqG5uwBhLxvGr+ASWT8lEroBrTwPIVgwJVykB1gds2 b+ZMY7wVwoQa9+ADNZk/1//0LIzQatu+g54FbAtQxZmQjqaPuobGDUCVC9xzLevH V4Yc1xWsI8h7g832eqIku9HBde0WszR9aOGduvWOa84n4CNT1p0ZegB9GSh3zxbv ixsxZKyzgLaSvfQubyYMOfUFAKms+tQD+b9xcJ0ORlht1XWWjJCuuYQnJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5qr0UHTlO+FtZdUGf2Jv+lWSAnMB8GA1UdIwQY MBaAFMPoi+XAr6s9Hb4S3HkxDESZ4SetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdy1pTDVjQ3ZxejBkdmhMY2VURU1SSm5oSjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYTQ0OTctMDk1Mi00NjE4LTkzNzIt ZjQyY2Q0NmQwNGVjLzEvdy1pTDVjQ3ZxejBkdmhMY2VURU1SSm5oSjYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYTQ0OTctMDk1Mi00NjE4LTkzNzItZjQyY2Q0NmQwNGVj LzEvdy1pTDVjQ3ZxejBkdmhMY2VURU1SSm5oSjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/x9/zeq Aa1AIBR/8lrfIFEWLsQI3x4BBpQhpZ0UOr662QNfbdFIxHRBCdK+RI4z1SpKtQzW ceXtkRBKA4yLkPuapPzxsIEV7ll2WKP4cbTI4z5H0GnT74AxSRWuOP2jzOjcaDYb lkZLpkNjISspmJdnT0r6oSHwrHO7c4QvFm1BTqsjIVQWzl02D4KLLRaV8tQFqwvi VClmkp9+Hn28a8XuNPjKwPaMpLT10WezFwCIDf8NE6AQuzONs49g/ZICMfMyKmvL SIWaw8N6ZEp6TUr6lOWkUMHhQtIiX2d+t6nuXOpaOzjQaLXIC0HMohvuMoLF14tF yjJJ/8x1N8b4xA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:45:33 2025 by rpki-client