This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft File: r00WwzVAe_DQpRzvm5wcUxAoD0g.mft (raw, json) Hash identifier: 29ehmYGz/wh5DOU/COE/dqnsU8Adh6bb9BUQw81MiE8= Subject key identifier: 3E:1E:D1:B6:0F:B3:6F:47:CA:B0:35:87:B3:96:9D:6A:7E:75:0A:29 Authority key identifier: AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48 Certificate issuer: /CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48 Certificate serial: 019B2C667BBF2FD7D0467094DA2E80CC1247 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 13:01:12 +0000 Manifest this update: Wed 17 Dec 2025 13:01:12 +0000 Manifest next update: Thu 18 Dec 2025 13:01:12 +0000 Files and hashes: 1: VI7MbqfUntVnN_kMd5I5Qw5bl-4.roa (hash: yObUZYg1Kq2iUCPpFKIeS8ZVs5ZMohWqBvzb45a6JFM=) 2: r00WwzVAe_DQpRzvm5wcUxAoD0g.crl (hash: ytLZPbd9/i9jNpR5WV+Q/FX0LljWXmVzndD3wx0AvIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:7b:bf:2f:d7:d0:46:70:94:da:2e:80:cc:12:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48 Validity Not Before: Dec 17 13:01:12 2025 GMT Not After : Dec 18 13:01:12 2025 GMT Subject: CN=3e1ed1b60fb36f47cab03587b3969d6a7e750a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:02:ff:51:27:70:fd:90:b5:09:ec:1c:2a:f9: 80:21:c3:69:5b:80:11:57:64:b0:82:4c:14:41:f3: db:32:a1:86:e6:6c:57:5e:fc:59:06:ee:22:04:78: 44:d1:9c:76:64:b4:67:08:9f:0c:23:a2:d7:db:6d: 39:9e:ca:70:b2:6f:7d:27:89:4a:48:d0:c0:1b:4f: 90:e0:ab:ea:44:b1:92:81:07:6c:d1:8c:23:aa:f2: 09:a1:35:6b:8d:fb:56:90:3d:13:26:48:9e:63:39: 9a:d0:d9:b5:c6:8f:71:6f:d8:84:e0:e2:ca:0c:84: e3:b3:00:a8:04:a5:38:dc:c3:74:69:3b:5a:30:fb: ee:c8:11:ce:e2:e5:3d:dd:c4:0a:21:36:95:2d:d4: 57:7f:b1:9b:ab:d7:ca:fd:4f:6d:b8:3e:1a:e1:dc: 14:58:6a:46:9c:f2:56:99:62:9c:92:36:b0:c6:a0: f5:e6:a0:a4:65:d6:ca:76:0a:5b:e7:bb:07:0c:21: 31:fc:9c:50:11:5f:c8:88:30:13:47:33:76:c7:b2: 5c:61:c2:db:33:6d:21:6d:61:20:f6:78:bd:c3:cb: b8:7b:01:11:7e:29:f9:e2:9f:e9:76:57:8c:1e:2d: d6:6c:19:68:91:08:c5:da:d7:fb:7f:53:fd:5b:39: be:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1E:D1:B6:0F:B3:6F:47:CA:B0:35:87:B3:96:9D:6A:7E:75:0A:29 X509v3 Authority Key Identifier: keyid:AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:9a:82:43:51:60:2c:d7:fa:79:a1:9c:f4:b9:32:68:1d:e3: ad:bb:d6:b7:b2:7c:df:33:d4:93:c5:f7:6d:39:3d:cf:d3:8a: 6e:51:23:35:fc:24:5f:1c:ee:c7:9d:2b:39:a3:9f:49:14:2d: 7f:dc:73:2f:bc:cc:03:71:25:b6:49:f1:9d:2c:02:92:0a:64: 96:a4:3c:fa:bf:16:6d:a8:b4:9c:8b:a8:f2:06:4d:8d:23:18: b0:87:76:23:56:3f:7a:d0:ca:69:0f:00:71:f7:09:ca:21:88: 2c:a8:ae:09:dc:30:f8:52:e3:06:44:f6:f1:37:8d:8c:61:81: ec:20:90:1f:a6:7f:89:f5:8a:98:f9:8b:d3:05:31:73:c6:3c: 4e:2b:b7:0a:cd:2e:6b:0c:75:d6:b1:45:cb:28:4c:41:01:8f: 58:d9:b1:48:a5:2f:1f:9b:7a:bb:ff:3f:c6:35:c7:84:f1:2e: 63:dc:7a:65:c1:af:ab:df:59:df:6f:6c:fa:44:db:ff:03:8b: 0d:ed:95:5c:d9:aa:16:4c:66:82:ed:0c:f3:7a:fe:83:20:22: 8e:c6:b7:50:e0:dd:ac:12:19:49:de:de:bc:ac:92:4d:f2:fd: 13:23:34:f0:f8:f6:7c:f7:c6:df:cd:fb:0f:0b:7f:ff:58:3a: 36:4d:43:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZnu/L9fQRnCU2i6AzBJHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNGQxNmMzMzU0MDdiZjBkMGE1MWNlZjliOWMxYzUzMTAy ODBmNDgwHhcNMjUxMjE3MTMwMTEyWhcNMjUxMjE4MTMwMTEyWjAzMTEwLwYDVQQD EygzZTFlZDFiNjBmYjM2ZjQ3Y2FiMDM1ODdiMzk2OWQ2YTdlNzUwYTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQL/USdw/ZC1CewcKvmAIcNpW4AR V2SwgkwUQfPbMqGG5mxXXvxZBu4iBHhE0Zx2ZLRnCJ8MI6LX2205nspwsm99J4lK SNDAG0+Q4KvqRLGSgQds0YwjqvIJoTVrjftWkD0TJkieYzma0Nm1xo9xb9iE4OLK DITjswCoBKU43MN0aTtaMPvuyBHO4uU93cQKITaVLdRXf7Gbq9fK/U9tuD4a4dwU WGpGnPJWmWKckjawxqD15qCkZdbKdgpb57sHDCEx/JxQEV/IiDATRzN2x7JcYcLb M20hbWEg9ni9w8u4ewERfin54p/pdleMHi3WbBlokQjF2tf7f1P9Wzm+TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4e0bYPs29HyrA1h7OWnWp+dQopMB8GA1UdIwQY MBaAFK9NFsM1QHvw0KUc75ucHFMQKA9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjAwV3d6VkFlX0RRcFJ6dm01d2NVeEFvRDBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kYmMwZTYtMjU1NS00YmYzLTlhYjEt OTkxNTk5MGJjYjU5LzEvcjAwV3d6VkFlX0RRcFJ6dm01d2NVeEFvRDBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kYmMwZTYtMjU1NS00YmYzLTlhYjEtOTkxNTk5MGJjYjU5 LzEvcjAwV3d6VkFlX0RRcFJ6dm01d2NVeEFvRDBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApqCQ1Fg LNf6eaGc9LkyaB3jrbvWt7J83zPUk8X3bTk9z9OKblEjNfwkXxzux50rOaOfSRQt f9xzL7zMA3EltknxnSwCkgpklqQ8+r8Wbai0nIuo8gZNjSMYsId2I1Y/etDKaQ8A cfcJyiGILKiuCdww+FLjBkT28TeNjGGB7CCQH6Z/ifWKmPmL0wUxc8Y8Tiu3Cs0u awx11rFFyyhMQQGPWNmxSKUvH5t6u/8/xjXHhPEuY9x6ZcGvq99Z329s+kTb/wOL De2VXNmqFkxmgu0M83r+gyAijsa3UODdrBIZSd7evKySTfL9EyM08Pj2fPfG3837 Dwt//1g6Nk1D9Q== -----END CERTIFICATE-----Generated at Wed Dec 17 18:09:40 2025 by rpki-client