This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft File: w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft (raw, json) Hash identifier: nVUbLJXW27Ms4vbG32yEjlTkCNQeUgCrqLEVRLwznFw= Subject key identifier: 31:63:5A:DC:75:1A:1A:3A:74:2A:9B:E7:0E:B2:FC:98:B7:6F:18:60 Authority key identifier: C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7 Certificate issuer: /CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7 Certificate serial: 019B2BC238FD81A86D6ED4DB9FCEA33DEFAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft Manifest number: 0D5C Signing time: Wed 17 Dec 2025 10:01:47 +0000 Manifest this update: Wed 17 Dec 2025 10:01:47 +0000 Manifest next update: Thu 18 Dec 2025 10:01:47 +0000 Files and hashes: 1: fZsTaHsMiRTOQx_qTx-PLjSdXVE.roa (hash: 7tvMPnX4kI566+vmNqApn9A48bhDZNJ8LvI46Pf6Yd0=) 2: w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl (hash: cGJ6s9geEN+mgURJZk9PfPTpMZiaxosUjHg8ZdqRjZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:38:fd:81:a8:6d:6e:d4:db:9f:ce:a3:3d:ef:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7 Validity Not Before: Dec 17 10:01:47 2025 GMT Not After : Dec 18 10:01:47 2025 GMT Subject: CN=31635adc751a1a3a742a9be70eb2fc98b76f1860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:27:e0:b4:c3:95:01:71:19:78:82:44:46:46: d0:37:97:02:b4:dc:ea:2c:02:c4:60:5d:c4:81:2a: 6a:0b:28:0d:19:ed:b2:bf:63:5a:6f:8b:95:b0:c2: a0:e1:fe:f0:ad:d2:5e:ad:97:14:55:63:8d:02:14: 61:91:73:61:5c:01:35:98:b8:ed:a3:af:30:37:4e: a1:31:7d:ae:37:3d:dc:76:9e:15:af:0f:91:e8:5d: 72:d3:20:fb:67:df:54:d0:29:49:eb:56:7d:03:a9: 8f:d9:9b:39:db:ce:c5:12:ac:bc:26:11:57:85:bd: 3c:50:97:d8:90:a9:6c:1a:34:a4:f5:da:df:2a:65: 61:3b:79:3d:77:cc:83:f0:ee:c8:82:71:eb:85:46: e2:10:72:17:39:df:0b:4c:53:b1:66:f3:84:1b:f5: 7d:00:8c:3e:5a:3e:3e:b4:36:d0:88:f1:d5:39:9f: a0:d6:7c:12:dd:25:6c:75:de:7d:c8:ae:e8:47:dc: 6d:1a:fd:b1:31:77:25:c0:f0:4b:e8:cb:6b:66:01: d5:26:7e:a2:fb:4c:04:4f:86:44:7b:e4:7d:cf:4d: 0d:7f:ed:bf:56:9a:90:af:1d:c6:be:69:b1:cc:ab: a2:5c:02:31:e7:08:94:0c:89:f2:0d:f1:58:ff:12: 10:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:63:5A:DC:75:1A:1A:3A:74:2A:9B:E7:0E:B2:FC:98:B7:6F:18:60 X509v3 Authority Key Identifier: keyid:C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:de:6c:ea:c3:26:bb:96:f2:c3:47:85:fa:bb:c8:cd:f7:6a: ca:07:4e:e3:d2:16:f1:35:a7:6e:35:0d:99:1f:2d:61:4c:67: 7b:fd:0c:17:8f:3e:c1:d0:0a:96:bb:5d:31:ef:3e:ce:d3:86: d0:e6:65:25:07:1f:86:f4:08:81:0f:69:6c:f3:1b:c1:7e:70: bb:f4:15:f6:b9:35:52:8e:42:5f:be:91:44:80:c9:a1:62:90: 98:44:27:27:59:92:ed:c4:c8:35:31:6e:10:77:b6:03:74:b1: 3c:48:4f:08:20:34:e1:3c:dd:cc:f6:98:ce:c8:f7:36:d1:ab: 0c:79:d6:2f:11:e0:90:35:76:c8:0e:04:a7:63:f2:13:c4:ab: 29:50:53:e8:57:18:1b:79:ea:92:1f:c8:74:b6:98:50:67:50: e0:90:88:c3:73:53:31:0c:b3:6c:ec:f3:e2:8f:2d:2a:5b:6f: 9c:5d:11:46:80:bc:c9:6e:54:87:6c:ae:68:02:9d:7e:48:6d: c4:bc:8f:59:74:0b:bb:24:41:69:78:00:6a:e9:60:23:d3:d4: 07:86:f1:52:b1:48:53:12:5c:e8:2f:21:0e:63:22:18:9d:7b: 8b:30:28:71:12:ba:a0:21:5d:ed:21:f7:c7:16:df:ff:40:b4: 69:53:46:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwjj9gahtbtTbn86jPe+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYjM5NjJhZWU0ZThhZTRjNmNjZDg5NzllNTM5ODAyZWEw ZTRjZTcwHhcNMjUxMjE3MTAwMTQ3WhcNMjUxMjE4MTAwMTQ3WjAzMTEwLwYDVQQD EygzMTYzNWFkYzc1MWExYTNhNzQyYTliZTcwZWIyZmM5OGI3NmYxODYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApifgtMOVAXEZeIJERkbQN5cCtNzq LALEYF3EgSpqCygNGe2yv2Nab4uVsMKg4f7wrdJerZcUVWONAhRhkXNhXAE1mLjt o68wN06hMX2uNz3cdp4Vrw+R6F1y0yD7Z99U0ClJ61Z9A6mP2Zs5287FEqy8JhFX hb08UJfYkKlsGjSk9drfKmVhO3k9d8yD8O7IgnHrhUbiEHIXOd8LTFOxZvOEG/V9 AIw+Wj4+tDbQiPHVOZ+g1nwS3SVsdd59yK7oR9xtGv2xMXclwPBL6MtrZgHVJn6i +0wET4ZEe+R9z00Nf+2/VpqQrx3GvmmxzKuiXAIx5wiUDInyDfFY/xIQWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFjWtx1Gho6dCqb5w6y/Ji3bxhgMB8GA1UdIwQY MBaAFMOzliruTorkxszYl55TmALqDkznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzdPV0t1NU9pdVRHek5pWG5sT1lBdW9PVE9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yNjQ1YTctNTMyYy00ZmExLWJjZGQt ZWE1ZGFkOGI0NzY1LzEvdzdPV0t1NU9pdVRHek5pWG5sT1lBdW9PVE9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8yNjQ1YTctNTMyYy00ZmExLWJjZGQtZWE1ZGFkOGI0NzY1 LzEvdzdPV0t1NU9pdVRHek5pWG5sT1lBdW9PVE9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARd5s6sMm u5byw0eF+rvIzfdqygdO49IW8TWnbjUNmR8tYUxne/0MF48+wdAKlrtdMe8+ztOG 0OZlJQcfhvQIgQ9pbPMbwX5wu/QV9rk1Uo5CX76RRIDJoWKQmEQnJ1mS7cTINTFu EHe2A3SxPEhPCCA04TzdzPaYzsj3NtGrDHnWLxHgkDV2yA4Ep2PyE8SrKVBT6FcY G3nqkh/IdLaYUGdQ4JCIw3NTMQyzbOzz4o8tKltvnF0RRoC8yW5Uh2yuaAKdfkht xLyPWXQLuyRBaXgAaulgI9PUB4bxUrFIUxJc6C8hDmMiGJ17izAocRK6oCFd7SH3 xxbf/0C0aVNGcg== -----END CERTIFICATE-----Generated at Wed Dec 17 15:14:33 2025 by rpki-client