This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft File: w6nl9TVmI-HCjy22k-BfxtYEzIE.mft (raw, json) Hash identifier: WCm+7tyK0UssEnPH8ibzwJK/pEZlokmMsS9HUEm3VIg= Subject key identifier: 8D:B6:E1:74:1D:7A:FB:BA:70:41:7B:BA:3C:A0:AA:4B:82:7F:1D:E1 Authority key identifier: C3:A9:E5:F5:35:66:23:E1:C2:8F:2D:B6:93:E0:5F:C6:D6:04:CC:81 Certificate issuer: /CN=c3a9e5f5356623e1c28f2db693e05fc6d604cc81 Certificate serial: 019B38A22F013827F3AF24A48DB8F284D973 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft Manifest number: 0213 Signing time: Fri 19 Dec 2025 22:01:51 +0000 Manifest this update: Fri 19 Dec 2025 22:01:51 +0000 Manifest next update: Sat 20 Dec 2025 22:01:51 +0000 Files and hashes: 1: w6nl9TVmI-HCjy22k-BfxtYEzIE.crl (hash: 3bGWtk8dmTAeR+NrRZrmEQjjIBE+js59y9MH1jaQQLo=) 2: yOFLOKqrASqCbG9H8LDQX86pKIw.roa (hash: XxA6ziYUOm/wMTbCGGt/j2IVpWOap4P3oBr16w5IzVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:2f:01:38:27:f3:af:24:a4:8d:b8:f2:84:d9:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a9e5f5356623e1c28f2db693e05fc6d604cc81 Validity Not Before: Dec 19 22:01:51 2025 GMT Not After : Dec 20 22:01:51 2025 GMT Subject: CN=8db6e1741d7afbba70417bba3ca0aa4b827f1de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bc:ab:c7:c8:59:27:bc:7f:6b:e0:1f:f9:da: e3:94:62:58:6c:6e:a5:8e:5a:e5:0e:86:96:d0:d7: 4a:21:67:7b:4d:86:56:69:e8:e9:65:65:cd:42:d3: b0:96:29:a1:e7:2a:f2:93:7e:2d:b3:33:f6:09:6e: f4:80:e1:ca:ab:f6:a4:4f:39:6c:79:e9:2c:f4:07: df:1b:41:df:42:2a:10:30:2f:fd:de:97:36:86:f0: 60:8b:a0:38:18:39:1a:a2:b2:81:0b:39:98:b5:6a: 81:36:48:93:1e:dd:09:16:0b:ec:40:aa:5a:48:4d: 11:0f:0c:74:fc:c6:00:e5:47:f5:01:92:fa:80:04: 9d:bd:61:f4:de:91:0c:ca:88:d5:e7:ae:be:ec:02: 58:51:c8:9c:64:34:08:1f:fd:0c:7c:e0:fa:d3:1f: 1c:9e:97:47:17:b1:85:e6:91:11:23:cc:b8:05:33: cc:10:31:03:43:ca:f3:8b:0e:b6:6b:9c:54:c3:7b: ce:fc:da:1f:cb:9c:64:4c:8d:db:6f:e5:72:59:0b: 47:3a:e8:cd:a5:e8:7e:65:1f:98:1a:63:bf:d9:ca: de:10:44:26:3a:8a:81:46:13:d1:c3:b2:de:97:0c: 16:d9:91:71:67:a9:55:fa:af:47:25:7c:b6:42:88: 29:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B6:E1:74:1D:7A:FB:BA:70:41:7B:BA:3C:A0:AA:4B:82:7F:1D:E1 X509v3 Authority Key Identifier: keyid:C3:A9:E5:F5:35:66:23:E1:C2:8F:2D:B6:93:E0:5F:C6:D6:04:CC:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:89:9e:12:7b:20:61:d6:64:b8:0d:cf:ad:fc:17:d7:4d:5a: ff:f8:ea:a9:19:ae:e3:a2:72:75:4d:56:d2:22:dc:bc:89:b7: f9:54:14:e6:6e:6d:c2:9c:ff:12:a1:37:c0:a0:33:91:ea:2f: 3f:40:65:e9:de:93:51:4b:bc:78:2d:4c:f7:53:6e:bb:c1:7b: fd:76:24:ac:b4:8c:ab:80:f9:eb:a7:40:c8:73:fd:8e:ec:88: 45:0a:5a:21:4b:89:92:98:6d:c4:b5:fa:19:5e:95:3b:99:f3: ea:64:e4:86:f9:df:3a:5f:e3:06:7e:6d:4d:6b:d6:c7:f0:49: 8b:b7:5f:5b:59:0e:62:73:12:b3:c5:2f:df:08:db:8d:07:95: 02:bb:c6:49:4b:a6:e2:bd:fa:e3:66:79:64:a2:71:91:f0:94: d1:8b:c0:30:39:90:70:3c:88:9d:39:93:92:a3:47:49:f3:01: 49:f6:69:ab:cb:e3:4c:d8:a3:96:2f:4b:13:ed:d6:6b:ca:44: 23:e1:de:80:b2:7c:18:c2:4b:85:cc:2d:c1:d4:4d:12:9e:a4: ff:4a:37:6b:5d:63:1a:c4:21:13:53:7e:90:dd:f4:db:97:74: 66:5b:a6:78:95:a7:ad:01:32:ba:d5:1e:9c:6b:cf:38:fd:5c: 0b:1b:a7:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oi8BOCfzrySkjbjyhNlzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYTllNWY1MzU2NjIzZTFjMjhmMmRiNjkzZTA1ZmM2ZDYw NGNjODEwHhcNMjUxMjE5MjIwMTUxWhcNMjUxMjIwMjIwMTUxWjAzMTEwLwYDVQQD Eyg4ZGI2ZTE3NDFkN2FmYmJhNzA0MTdiYmEzY2EwYWE0YjgyN2YxZGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubyrx8hZJ7x/a+Af+drjlGJYbG6l jlrlDoaW0NdKIWd7TYZWaejpZWXNQtOwlimh5yryk34tszP2CW70gOHKq/akTzls eeks9AffG0HfQioQMC/93pc2hvBgi6A4GDkaorKBCzmYtWqBNkiTHt0JFgvsQKpa SE0RDwx0/MYA5Uf1AZL6gASdvWH03pEMyojV566+7AJYUcicZDQIH/0MfOD60x8c npdHF7GF5pERI8y4BTPMEDEDQ8rziw62a5xUw3vO/Nofy5xkTI3bb+VyWQtHOujN peh+ZR+YGmO/2creEEQmOoqBRhPRw7LelwwW2ZFxZ6lV+q9HJXy2QogpYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI224XQdevu6cEF7ujygqkuCfx3hMB8GA1UdIwQY MBaAFMOp5fU1ZiPhwo8ttpPgX8bWBMyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzZubDlUVm1JLUhDankyMmstQmZ4dFlFeklFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9mNWI2M2ItZDBlMC00NjBjLTkzMDgt N2NlZjEwYWRlOGRmLzEvdzZubDlUVm1JLUhDankyMmstQmZ4dFlFeklFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9mNWI2M2ItZDBlMC00NjBjLTkzMDgtN2NlZjEwYWRlOGRm LzEvdzZubDlUVm1JLUhDankyMmstQmZ4dFlFeklFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGImeEnsg YdZkuA3PrfwX101a//jqqRmu46JydU1W0iLcvIm3+VQU5m5twpz/EqE3wKAzkeov P0Bl6d6TUUu8eC1M91Nuu8F7/XYkrLSMq4D566dAyHP9juyIRQpaIUuJkphtxLX6 GV6VO5nz6mTkhvnfOl/jBn5tTWvWx/BJi7dfW1kOYnMSs8Uv3wjbjQeVArvGSUum 4r3642Z5ZKJxkfCU0YvAMDmQcDyInTmTkqNHSfMBSfZpq8vjTNijli9LE+3Wa8pE I+HegLJ8GMJLhcwtwdRNEp6k/0o3a11jGsQhE1N+kN3025d0ZlumeJWnrQEyutUe nGvPOP1cCxunTw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:38:18 2025 by rpki-client