This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft File: _w3fP-V3IgGv94wk6X-UTDgF_2s.mft (raw, json) Hash identifier: GdBhhFnGjSToUwGoiStAA/MUrI2q4ZWWVjlzrHQHhDs= Subject key identifier: 08:D4:37:42:CA:74:74:07:05:E1:53:89:67:4F:7B:C9:94:3E:39:0D Authority key identifier: FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B Certificate issuer: /CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b Certificate serial: 019B0E9312A6BD9258AFA6C85860638DE2F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft Manifest number: 05ED Signing time: Thu 11 Dec 2025 18:01:18 +0000 Manifest this update: Thu 11 Dec 2025 18:01:18 +0000 Manifest next update: Fri 12 Dec 2025 18:01:18 +0000 Files and hashes: 1: 9ia0_iaxbX6JryuxqnLg3hd0L3g.roa (hash: KiNlWxgmk2eySTFhfbvvmaccM60Lf3LwZy/tqN4KWhY=) 2: ASer5kiqDiVWOaPZMylwsoahAIw.roa (hash: u7jpBR9dXty+UTW4qdoR89luPMWxLAPFa0EB+Y83dzY=) 3: U6zuk58ajYVysKNz6qXWGH9vBbQ.roa (hash: 61zuuE5vE5Y4+HWAkm8iJSGF4xuX2/gytqBlot9g8YQ=) 4: _w3fP-V3IgGv94wk6X-UTDgF_2s.crl (hash: ZbmF1QexvONt0vK0snYv9yHHgdvktL5jrMyep/AqJDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:12:a6:bd:92:58:af:a6:c8:58:60:63:8d:e2:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b Validity Not Before: Dec 11 18:01:18 2025 GMT Not After : Dec 12 18:01:18 2025 GMT Subject: CN=08d43742ca74740705e15389674f7bc9943e390d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:89:69:7c:5b:e1:87:b1:b2:8f:52:bc:d5:f3: 5f:83:cf:7a:8e:08:14:be:a7:ba:d8:40:ea:bb:9b: 28:8a:54:2e:77:d8:61:7d:27:45:0c:4e:aa:1b:49: 95:a0:54:75:5b:9b:35:e7:bd:6e:3b:e1:3c:15:33: c2:02:a3:91:f9:6b:1c:50:1e:fb:50:54:1b:b2:84: af:65:54:88:76:03:18:ed:40:a5:c5:9c:c6:ba:b3: f8:15:0d:51:9b:a3:41:b5:97:a7:e5:a3:e6:e6:0b: b1:29:f8:14:a6:e8:71:e3:90:35:6c:a9:44:29:68: 53:10:e4:88:b5:a0:5f:45:c8:2e:ca:dd:57:7c:4b: 6e:25:3a:59:f0:53:d2:a1:7d:af:09:74:32:04:c2: 55:4c:87:ef:aa:55:2a:b6:d1:c7:0e:dc:50:72:f3: 85:13:9c:09:0c:e5:11:aa:cd:3b:43:ef:7c:78:75: 34:83:b9:e2:8a:26:bb:f6:9f:ab:11:22:ef:9e:65: 78:d8:50:17:f7:87:28:1d:ce:d5:6f:19:64:00:8c: e2:f9:d2:7d:d6:cb:60:4f:b5:7e:2e:38:78:32:61: b1:88:dc:7d:bb:87:12:01:c4:2f:60:d3:d3:b7:9a: 38:c6:55:06:15:ba:84:ed:31:54:74:07:ce:43:bb: 42:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D4:37:42:CA:74:74:07:05:E1:53:89:67:4F:7B:C9:94:3E:39:0D X509v3 Authority Key Identifier: keyid:FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ee:4a:21:89:3f:32:0b:8d:70:3e:18:21:1d:18:de:db:7a: e2:68:ad:7d:6c:2e:df:3a:25:d3:37:69:0a:bc:3e:6f:71:fc: 66:6f:84:87:d7:20:ed:e5:95:02:6e:5b:9b:74:16:02:d2:fd: 2a:45:4e:4f:b0:5c:1f:5b:43:d5:b4:04:53:2d:41:97:b2:fa: aa:16:57:1d:0b:29:47:cb:38:c0:11:96:a9:71:96:5a:44:0a: 63:21:c0:95:a7:00:0e:38:15:16:43:3a:4d:1e:78:d3:db:ac: b9:5f:be:c6:fd:1f:70:b3:93:a4:83:f9:0f:09:23:25:29:b9: ee:fd:bf:b1:2a:7f:65:ae:9f:a0:a7:bc:35:8b:e4:9d:10:c0: bd:24:30:24:3e:55:7b:af:48:c5:ad:f3:ea:ea:34:b3:23:e5: 44:79:5a:e8:7b:88:79:01:73:f0:ff:ef:76:3b:21:d8:01:0f: 5e:80:62:6d:b7:5e:9d:a2:e5:47:35:21:08:ff:4c:e1:84:79: c1:c3:8a:14:70:32:01:29:1b:9c:9e:66:86:f0:9b:50:bf:fc: 37:4c:97:f3:ab:25:2a:3f:d7:89:09:82:26:f7:6d:25:1d:db: 8f:f2:53:d0:db:e3:9e:22:d6:5e:98:30:02:fd:49:95:bb:ee: 5a:14:11:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkxKmvZJYr6bIWGBjjeL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMGRkZjNmZTU3NzIyMDFhZmY3OGMyNGU5N2Y5NDRjMzgw NWZmNmIwHhcNMjUxMjExMTgwMTE4WhcNMjUxMjEyMTgwMTE4WjAzMTEwLwYDVQQD EygwOGQ0Mzc0MmNhNzQ3NDA3MDVlMTUzODk2NzRmN2JjOTk0M2UzOTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4lpfFvhh7Gyj1K81fNfg896jggU vqe62EDqu5soilQud9hhfSdFDE6qG0mVoFR1W5s1571uO+E8FTPCAqOR+WscUB77 UFQbsoSvZVSIdgMY7UClxZzGurP4FQ1Rm6NBtZen5aPm5guxKfgUpuhx45A1bKlE KWhTEOSItaBfRcguyt1XfEtuJTpZ8FPSoX2vCXQyBMJVTIfvqlUqttHHDtxQcvOF E5wJDOURqs07Q+98eHU0g7niiia79p+rESLvnmV42FAX94coHc7VbxlkAIzi+dJ9 1stgT7V+Ljh4MmGxiNx9u4cSAcQvYNPTt5o4xlUGFbqE7TFUdAfOQ7tCqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjUN0LKdHQHBeFTiWdPe8mUPjkNMB8GA1UdIwQY MBaAFP8N3z/ldyIBr/eMJOl/lEw4Bf9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3czZlAtVjNJZ0d2OTR3azZYLVVURGdGXzJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jNDU1YmQtYjgyNS00OTAxLTgzODEt MDRkMTI0N2U1ZDBhLzEvX3czZlAtVjNJZ0d2OTR3azZYLVVURGdGXzJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9jNDU1YmQtYjgyNS00OTAxLTgzODEtMDRkMTI0N2U1ZDBh LzEvX3czZlAtVjNJZ0d2OTR3azZYLVVURGdGXzJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdu5KIYk/ MguNcD4YIR0Y3tt64mitfWwu3zol0zdpCrw+b3H8Zm+Eh9cg7eWVAm5bm3QWAtL9 KkVOT7BcH1tD1bQEUy1Bl7L6qhZXHQspR8s4wBGWqXGWWkQKYyHAlacADjgVFkM6 TR5409usuV++xv0fcLOTpIP5DwkjJSm57v2/sSp/Za6foKe8NYvknRDAvSQwJD5V e69Ixa3z6uo0syPlRHla6HuIeQFz8P/vdjsh2AEPXoBibbdenaLlRzUhCP9M4YR5 wcOKFHAyASkbnJ5mhvCbUL/8N0yX86slKj/XiQmCJvdtJR3bj/JT0NvjniLWXpgw Av1JlbvuWhQRJw== -----END CERTIFICATE-----Generated at Fri Dec 12 02:58:16 2025 by rpki-client