This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft File: MW2V2INsHxFqce4h3sD_Zx4eBw0.mft (raw, json) Hash identifier: 90iY3Ki8NoIAPj67QJntV1rJI4YHUCWV+kHbsJzVof0= Subject key identifier: 69:94:EE:37:68:A2:6F:0D:D3:B7:80:C9:E9:40:0A:94:C3:34:4A:42 Authority key identifier: 31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D Certificate issuer: /CN=316d95d8836c1f116a71ee21dec0ff671e1e070d Certificate serial: 019B668C762E8B91F848C11B0E33DC7320DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft Manifest number: 0E7E Signing time: Sun 28 Dec 2025 20:00:39 +0000 Manifest this update: Sun 28 Dec 2025 20:00:39 +0000 Manifest next update: Mon 29 Dec 2025 20:00:39 +0000 Files and hashes: 1: MW2V2INsHxFqce4h3sD_Zx4eBw0.crl (hash: INKxxwgkVg1o6oiaKJY+3E9TX864tiSgsP462JZuLcM=) 2: NaSNw-5nplSi1oWgCIXAtq-282g.roa (hash: PHVRipc0hRgzJt/VWrGp9MNvQSbNc+wyfThzb/6H1hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:8c:76:2e:8b:91:f8:48:c1:1b:0e:33:dc:73:20:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=316d95d8836c1f116a71ee21dec0ff671e1e070d Validity Not Before: Dec 28 20:00:39 2025 GMT Not After : Dec 29 20:00:39 2025 GMT Subject: CN=6994ee3768a26f0dd3b780c9e9400a94c3344a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:02:9b:aa:56:63:ee:cd:c5:87:ee:1b:89:da: 03:ef:8a:bd:f7:3b:9f:8f:da:6f:bf:04:b5:24:a6: 87:fe:63:fc:06:06:8e:a5:85:9e:a4:10:14:30:bb: c9:71:ef:39:d0:e9:3f:18:ca:fb:d3:3a:f0:cf:bd: ed:c0:dc:b2:8d:d6:57:7e:dd:0d:83:e1:13:d9:f9: ca:88:9b:a8:8a:d6:aa:23:3e:b7:39:25:e2:f3:c6: 95:2a:eb:34:b4:e2:9c:33:79:80:ef:c3:5e:a7:15: 1b:a8:10:fa:74:24:a7:be:b6:62:f7:b0:12:34:e3: f8:a4:a2:c3:c0:35:b7:1a:9d:8d:a4:a1:0b:d2:b9: 45:ce:fb:79:35:9b:90:36:6a:84:b5:6f:7a:03:52: 2e:2a:3e:81:77:c7:92:6f:52:96:47:fc:12:06:d7: da:22:93:da:4c:6c:f7:60:d7:c6:73:83:0b:2f:93: 44:c1:b2:21:f5:c3:f8:b8:53:bc:0a:e2:73:a2:da: 28:57:62:c3:8b:b0:36:6c:0d:7d:ce:48:de:a8:a5: e2:21:81:8a:e3:a8:ab:b0:9f:76:af:18:2b:2f:ed: 93:25:ed:d3:38:6e:d3:57:44:e9:94:3e:84:f6:a7: 8e:d4:0a:9b:50:b0:10:ef:da:bf:db:fa:75:2f:59: cb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:94:EE:37:68:A2:6F:0D:D3:B7:80:C9:E9:40:0A:94:C3:34:4A:42 X509v3 Authority Key Identifier: keyid:31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:b8:41:69:85:82:75:4e:d3:34:c7:6d:3b:e6:cd:9f:5b:92: 05:0a:11:6c:f8:7c:f7:3b:d2:52:aa:f0:3b:56:a4:65:5e:57: 37:81:34:1b:09:9c:64:5f:17:6f:b3:89:0c:5b:04:2d:d6:a9: a7:2f:d4:08:8c:6c:8a:94:6b:cd:a6:f0:37:56:12:0b:80:d9: 22:ac:e6:da:60:73:18:73:5f:75:b7:6d:f3:68:2f:e1:7c:fd: 06:04:86:a2:82:10:84:62:ad:c3:7c:52:4b:38:f7:18:f8:05: 06:a3:f7:b9:55:c5:fc:9e:0b:cd:ed:6f:af:c0:f0:ad:1f:5b: 53:c2:7d:85:be:07:10:55:04:44:14:c8:9f:03:96:a2:18:0b: 56:8f:5c:88:ae:b0:d6:e1:34:65:c6:35:7b:87:b8:fa:48:1f: 4c:98:d9:71:01:47:92:1a:dc:0b:04:4c:fe:cb:47:8d:3c:c1: be:6f:65:a3:46:6d:77:ed:3e:f1:a5:93:45:9d:a1:40:a7:8d: 9b:9c:9f:f8:d1:f5:1b:e6:90:b1:b7:1f:47:c7:c7:92:3c:6a: 45:4e:d4:50:93:d5:20:db:61:65:a1:ee:61:d2:8c:0a:bb:1c: 36:09:71:e6:cb:4d:0f:2a:5c:7a:50:af:71:30:2b:ae:19:01: bb:1b:15:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmjHYui5H4SMEbDjPccyDeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNmQ5NWQ4ODM2YzFmMTE2YTcxZWUyMWRlYzBmZjY3MWUx ZTA3MGQwHhcNMjUxMjI4MjAwMDM5WhcNMjUxMjI5MjAwMDM5WjAzMTEwLwYDVQQD Eyg2OTk0ZWUzNzY4YTI2ZjBkZDNiNzgwYzllOTQwMGE5NGMzMzQ0YTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwKbqlZj7s3Fh+4bidoD74q99zuf j9pvvwS1JKaH/mP8BgaOpYWepBAUMLvJce850Ok/GMr70zrwz73twNyyjdZXft0N g+ET2fnKiJuoitaqIz63OSXi88aVKus0tOKcM3mA78NepxUbqBD6dCSnvrZi97AS NOP4pKLDwDW3Gp2NpKEL0rlFzvt5NZuQNmqEtW96A1IuKj6Bd8eSb1KWR/wSBtfa IpPaTGz3YNfGc4MLL5NEwbIh9cP4uFO8CuJzotooV2LDi7A2bA19zkjeqKXiIYGK 46irsJ92rxgrL+2TJe3TOG7TV0TplD6E9qeO1AqbULAQ79q/2/p1L1nLVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmU7jdoom8N07eAyelACpTDNEpCMB8GA1UdIwQY MBaAFDFtldiDbB8RanHuId7A/2ceHgcNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVcyVjJJTnNIeEZxY2U0aDNzRF9aeDRlQncwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82ZDdkNjUtZjIxNS00MmY4LTlhNWEt MTIzNzIwYmZlNzQ2LzEvTVcyVjJJTnNIeEZxY2U0aDNzRF9aeDRlQncwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC82ZDdkNjUtZjIxNS00MmY4LTlhNWEtMTIzNzIwYmZlNzQ2 LzEvTVcyVjJJTnNIeEZxY2U0aDNzRF9aeDRlQncwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebhBaYWC dU7TNMdtO+bNn1uSBQoRbPh89zvSUqrwO1akZV5XN4E0GwmcZF8Xb7OJDFsELdap py/UCIxsipRrzabwN1YSC4DZIqzm2mBzGHNfdbdt82gv4Xz9BgSGooIQhGKtw3xS Szj3GPgFBqP3uVXF/J4Lze1vr8DwrR9bU8J9hb4HEFUERBTInwOWohgLVo9ciK6w 1uE0ZcY1e4e4+kgfTJjZcQFHkhrcCwRM/stHjTzBvm9lo0Ztd+0+8aWTRZ2hQKeN m5yf+NH1G+aQsbcfR8fHkjxqRU7UUJPVINthZaHuYdKMCrscNglx5stNDypcelCv cTArrhkBuxsVWA== -----END CERTIFICATE-----Generated at Sun Dec 28 21:57:10 2025 by rpki-client