This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft File: w7iL5VE_Guckk1Ivpml-_zNpKuA.mft (raw, json) Hash identifier: AOF8YjY5RKdma9MHen4y3p3jzwdlDngrt5SHzjczBpU= Subject key identifier: 8E:EC:6F:C2:FA:5F:6D:BC:76:0D:E0:02:23:20:74:11:FA:99:D2:56 Authority key identifier: C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0 Certificate issuer: /CN=c3b88be5513f1ae72493522fa6697eff33692ae0 Certificate serial: 019B40FF7593CB342009310CACB6AD5B2004 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft Manifest number: 0A2C Signing time: Sun 21 Dec 2025 13:00:42 +0000 Manifest this update: Sun 21 Dec 2025 13:00:42 +0000 Manifest next update: Mon 22 Dec 2025 13:00:42 +0000 Files and hashes: 1: NrQlovA-ENvWm52W_XszKtgFuEM.roa (hash: CEb3/pIl0j5Q+iEy5jGadkT0Uot6DJeWgORkKHAYYJw=) 2: w7iL5VE_Guckk1Ivpml-_zNpKuA.crl (hash: dGgbuYIc/8gNc2KE1K0ZC8HPtUgs/macxrwvjpNJYrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:75:93:cb:34:20:09:31:0c:ac:b6:ad:5b:20:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b88be5513f1ae72493522fa6697eff33692ae0 Validity Not Before: Dec 21 13:00:42 2025 GMT Not After : Dec 22 13:00:42 2025 GMT Subject: CN=8eec6fc2fa5f6dbc760de00223207411fa99d256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8b:ca:c7:c1:ed:78:71:dd:fa:1d:9a:7c:19: 24:bd:f3:56:f5:ba:b3:15:0f:e8:76:91:ba:bf:d0: e1:63:fd:09:80:6c:5c:88:6f:8a:7e:15:c3:a0:36: 0e:b3:0a:48:5c:b0:62:e7:07:27:81:96:8e:2b:67: c9:ca:26:b4:78:f1:85:3e:f0:d8:46:f5:9b:ae:ff: fa:4d:02:ba:80:03:ac:3a:ca:46:ef:f1:1b:71:cb: 0f:95:48:ee:2d:91:af:f0:e1:f6:52:69:cd:56:36: a7:28:03:d8:47:94:69:8d:c6:d8:0e:cb:4f:4b:57: cf:d5:35:f4:91:d6:99:00:a0:29:74:00:b2:ae:56: cd:fd:0f:24:ce:7d:84:36:5e:75:83:30:aa:3f:6a: c7:b4:59:70:dc:6d:15:8d:40:bd:0d:79:09:4a:a4: 3a:7c:e1:ab:2d:7f:61:2f:c3:83:20:88:5e:70:02: 89:9d:77:5a:b0:f3:d5:e8:5f:31:8c:32:79:ca:b4: af:74:1c:f6:ab:b9:e0:64:eb:35:45:ba:c5:bc:58: 8e:f0:d6:85:8d:af:c4:9c:c4:64:26:d4:ef:19:ae: 0a:9d:58:05:1d:93:53:ce:a5:35:ec:f1:bc:57:98: 4f:1f:af:70:1c:cf:63:3c:e6:a8:b5:2d:85:fe:ed: aa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EC:6F:C2:FA:5F:6D:BC:76:0D:E0:02:23:20:74:11:FA:99:D2:56 X509v3 Authority Key Identifier: keyid:C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:91:e3:aa:d6:34:da:e3:65:77:70:5e:0c:22:af:36:1e:68: 8b:1f:f7:75:8d:dd:1f:68:49:18:16:cd:f7:6f:c7:a6:35:10: dd:1d:d8:c0:3e:d5:29:2c:09:38:94:4d:a0:4a:8d:94:6e:24: b5:76:b8:17:de:9f:d3:39:d6:36:0c:7d:c3:f1:f8:40:9d:4e: 47:fe:a9:b7:b1:46:60:81:cf:3e:63:cf:f0:05:eb:d3:7d:82: 4b:d9:dc:42:49:8e:5d:e1:c6:9a:97:b2:a3:4e:fe:a2:b1:09: ab:0a:a3:1e:06:39:5f:c6:44:f7:72:3b:fe:fa:94:2c:44:6c: 3a:d3:0f:42:60:0e:53:2f:69:cd:ec:73:63:c2:e8:bc:4e:1e: fe:b0:a8:08:f5:ef:ba:05:00:2b:85:38:87:c9:a7:a9:b6:13: d9:5f:62:c5:de:9d:60:9f:ec:9e:23:c0:ba:7b:25:60:6e:7e: 76:76:ad:d8:39:ef:fb:22:15:a2:e4:d7:29:3e:60:61:95:47: 0b:7c:69:19:7c:f8:87:d4:5c:62:fd:9c:e5:ca:4d:bc:dc:62: 8a:a0:88:7d:14:3a:4d:73:ac:f0:b4:f8:d2:8f:6e:f1:40:e1: d5:2e:1f:af:79:dc:a4:b1:67:62:8c:a6:38:bd:d7:91:ea:83: 3d:50:4d:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/3WTyzQgCTEMrLatWyAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYjg4YmU1NTEzZjFhZTcyNDkzNTIyZmE2Njk3ZWZmMzM2 OTJhZTAwHhcNMjUxMjIxMTMwMDQyWhcNMjUxMjIyMTMwMDQyWjAzMTEwLwYDVQQD Eyg4ZWVjNmZjMmZhNWY2ZGJjNzYwZGUwMDIyMzIwNzQxMWZhOTlkMjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YvKx8HteHHd+h2afBkkvfNW9bqz FQ/odpG6v9DhY/0JgGxciG+KfhXDoDYOswpIXLBi5wcngZaOK2fJyia0ePGFPvDY RvWbrv/6TQK6gAOsOspG7/EbccsPlUjuLZGv8OH2UmnNVjanKAPYR5RpjcbYDstP S1fP1TX0kdaZAKApdACyrlbN/Q8kzn2ENl51gzCqP2rHtFlw3G0VjUC9DXkJSqQ6 fOGrLX9hL8ODIIhecAKJnXdasPPV6F8xjDJ5yrSvdBz2q7ngZOs1RbrFvFiO8NaF ja/EnMRkJtTvGa4KnVgFHZNTzqU17PG8V5hPH69wHM9jPOaotS2F/u2qhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7sb8L6X228dg3gAiMgdBH6mdJWMB8GA1UdIwQY MBaAFMO4i+VRPxrnJJNSL6Zpfv8zaSrgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzdpTDVWRV9HdWNrazFJdnBtbC1fek5wS3VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82ZTZkZjgtZTcyYS00MTU1LTllMDgt MGU0N2VkZTMwNWIzLzEvdzdpTDVWRV9HdWNrazFJdnBtbC1fek5wS3VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy82ZTZkZjgtZTcyYS00MTU1LTllMDgtMGU0N2VkZTMwNWIz LzEvdzdpTDVWRV9HdWNrazFJdnBtbC1fek5wS3VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpHjqtY0 2uNld3BeDCKvNh5oix/3dY3dH2hJGBbN92/HpjUQ3R3YwD7VKSwJOJRNoEqNlG4k tXa4F96f0znWNgx9w/H4QJ1OR/6pt7FGYIHPPmPP8AXr032CS9ncQkmOXeHGmpey o07+orEJqwqjHgY5X8ZE93I7/vqULERsOtMPQmAOUy9pzexzY8LovE4e/rCoCPXv ugUAK4U4h8mnqbYT2V9ixd6dYJ/sniPAunslYG5+dnat2Dnv+yIVouTXKT5gYZVH C3xpGXz4h9RcYv2c5cpNvNxiiqCIfRQ6TXOs8LT40o9u8UDh1S4fr3ncpLFnYoym OL3XkeqDPVBN6w== -----END CERTIFICATE-----Generated at Sun Dec 21 23:17:14 2025 by rpki-client