This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft File: w4Me3AugfH40q6cBw1c9jnKvGP4.mft (raw, json) Hash identifier: WjALJaUwNM176bynSIvmVo+QRPQBIiWer0/sCD4eOLk= Subject key identifier: B3:4E:DB:0A:9B:E3:B3:6B:B5:86:61:08:36:F3:6C:14:05:8E:58:1F Authority key identifier: C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE Certificate issuer: /CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe Certificate serial: 019B34C4AFAAC9474E14CC1C233EE26D9B66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 04:01:03 +0000 Manifest this update: Fri 19 Dec 2025 04:01:03 +0000 Manifest next update: Sat 20 Dec 2025 04:01:03 +0000 Files and hashes: 1: R3ax-Z4NwERn9kiI-gjg5Xya12A.roa (hash: ffTm+IwpNw27nllrwwqn+t+2k278/G5pqNf7iK/QlhI=) 2: w4Me3AugfH40q6cBw1c9jnKvGP4.crl (hash: jzTzVIOSlSlrjdIRH+VL6118zUOVi/dkStlLAkGZMgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:af:aa:c9:47:4e:14:cc:1c:23:3e:e2:6d:9b:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe Validity Not Before: Dec 19 04:01:03 2025 GMT Not After : Dec 20 04:01:03 2025 GMT Subject: CN=b34edb0a9be3b36bb586610836f36c14058e581f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8b:b8:97:28:4e:9c:18:f8:3a:c4:e5:cc:53: 29:b0:f6:c7:64:d8:f7:45:24:d8:f6:d0:58:33:77: d6:5b:a1:52:68:13:84:eb:ad:9b:cc:bc:e8:49:79: 6a:0b:81:5c:46:ce:bf:58:79:92:00:8b:d0:b4:86: 05:a4:a1:d7:36:1f:f7:9b:01:56:80:eb:98:e6:0e: 48:c9:fa:2a:75:a3:cb:63:8f:8c:3f:ac:fc:c2:f6: 01:63:6e:7d:e7:36:82:1d:d4:9d:ac:95:eb:3a:07: ae:d3:fa:5a:c0:d2:99:b9:69:6c:e4:c8:07:41:7e: 89:4a:61:74:db:66:83:4f:c4:33:82:ca:2c:bf:92: 31:70:a5:ce:ca:85:5e:d7:d8:b4:e8:76:bb:7d:2d: ae:17:0f:b4:99:1c:0d:a2:93:1a:ed:2c:33:42:91: e8:48:e0:25:0d:2d:3d:0e:c6:4f:74:7c:05:20:c0: f5:1e:08:2f:b3:2a:8a:5b:8d:ea:76:a0:33:e6:19: 6b:a6:89:48:3e:66:71:8f:c0:2d:0f:94:b9:f3:2e: 28:ef:f8:b3:e2:75:89:20:0d:10:1b:f4:67:f1:c4: ba:23:b9:a7:08:6e:8a:35:bd:29:86:2e:6d:d9:85: c2:0e:4e:09:dd:2c:e4:99:4e:6f:fa:e4:83:0b:f2: 1d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4E:DB:0A:9B:E3:B3:6B:B5:86:61:08:36:F3:6C:14:05:8E:58:1F X509v3 Authority Key Identifier: keyid:C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c1:62:51:70:cd:6d:79:dd:f7:c1:aa:c0:6b:e4:52:94:41: 6d:d6:bc:e3:ac:5a:30:9d:6c:56:08:12:01:cb:8a:95:36:96: 9f:2d:de:96:3f:37:a5:8d:7e:25:16:0a:d5:88:c0:6c:55:d6: 80:3c:41:db:34:a0:e6:35:21:45:b4:d2:57:b2:3a:5a:52:e1: 19:24:34:29:2b:db:85:9f:a4:79:95:8d:21:d4:e8:be:8d:96: e2:cc:92:29:f5:4a:9e:ae:aa:be:42:e8:c2:05:32:97:da:5d: 47:b3:c1:bf:23:1f:86:bd:b1:d8:03:26:e0:39:95:d5:3d:b6: 77:4f:0b:da:2d:76:aa:05:f2:1e:e1:ec:da:f3:60:3d:dd:7c: 9f:3f:9f:e5:11:65:4d:e3:ad:25:3f:3d:0d:8a:20:41:8d:f0: 59:5e:64:30:11:1c:59:5e:e4:c5:e4:e1:c0:c7:e8:10:1d:95: 1e:6f:2a:36:14:32:c5:e6:bb:c9:98:9a:53:10:72:3e:31:60: 73:6c:49:1a:47:7b:fc:47:aa:5b:8a:54:83:e6:bb:d1:7e:d7: 65:f5:f7:cd:53:1e:d5:11:7d:e2:68:e5:1d:21:a5:19:2a:b9: d5:37:ef:6a:84:87:54:30:33:35:77:24:9a:2a:b9:c7:a1:dd: 42:5e:22:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xK+qyUdOFMwcIz7ibZtmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzODMxZWRjMGJhMDdjN2UzNGFiYTcwMWMzNTczZDhlNzJh ZjE4ZmUwHhcNMjUxMjE5MDQwMTAzWhcNMjUxMjIwMDQwMTAzWjAzMTEwLwYDVQQD EyhiMzRlZGIwYTliZTNiMzZiYjU4NjYxMDgzNmYzNmMxNDA1OGU1ODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4u4lyhOnBj4OsTlzFMpsPbHZNj3 RSTY9tBYM3fWW6FSaBOE662bzLzoSXlqC4FcRs6/WHmSAIvQtIYFpKHXNh/3mwFW gOuY5g5IyfoqdaPLY4+MP6z8wvYBY2595zaCHdSdrJXrOgeu0/pawNKZuWls5MgH QX6JSmF022aDT8Qzgsosv5IxcKXOyoVe19i06Ha7fS2uFw+0mRwNopMa7SwzQpHo SOAlDS09DsZPdHwFIMD1HggvsyqKW43qdqAz5hlrpolIPmZxj8AtD5S58y4o7/iz 4nWJIA0QG/Rn8cS6I7mnCG6KNb0phi5t2YXCDk4J3SzkmU5v+uSDC/IdvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNO2wqb47NrtYZhCDbzbBQFjlgfMB8GA1UdIwQY MBaAFMODHtwLoHx+NKunAcNXPY5yrxj+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzRNZTNBdWdmSDQwcTZjQncxYzlqbkt2R1A0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83ZjEyNzUtMTJmYy00Mzk3LTllM2It ZWRmNmNhZDEyNDlkLzEvdzRNZTNBdWdmSDQwcTZjQncxYzlqbkt2R1A0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83ZjEyNzUtMTJmYy00Mzk3LTllM2ItZWRmNmNhZDEyNDlk LzEvdzRNZTNBdWdmSDQwcTZjQncxYzlqbkt2R1A0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8FiUXDN bXnd98GqwGvkUpRBbda846xaMJ1sVggSAcuKlTaWny3elj83pY1+JRYK1YjAbFXW gDxB2zSg5jUhRbTSV7I6WlLhGSQ0KSvbhZ+keZWNIdTovo2W4sySKfVKnq6qvkLo wgUyl9pdR7PBvyMfhr2x2AMm4DmV1T22d08L2i12qgXyHuHs2vNgPd18nz+f5RFl TeOtJT89DYogQY3wWV5kMBEcWV7kxeThwMfoEB2VHm8qNhQyxea7yZiaUxByPjFg c2xJGkd7/EeqW4pUg+a70X7XZfX3zVMe1RF94mjlHSGlGSq51TfvaoSHVDAzNXck miq5x6HdQl4iuQ== -----END CERTIFICATE-----Generated at Fri Dec 19 14:32:39 2025 by rpki-client