This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft File: w1re68KNfif9nrnvsjVR2uILHQ8.mft (raw, json) Hash identifier: CNyVvXjprRdwAhVyDA/xCoTQc3alErxZFykbsI4OfAo= Subject key identifier: 8F:F4:C7:22:76:47:87:95:9A:60:11:7C:00:C1:97:AE:6D:A2:3F:31 Authority key identifier: C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F Certificate issuer: /CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f Certificate serial: 019B12DDC6A9ABA5967B6C834BC344F75778 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft Manifest number: 1073 Signing time: Fri 12 Dec 2025 14:01:22 +0000 Manifest this update: Fri 12 Dec 2025 14:01:22 +0000 Manifest next update: Sat 13 Dec 2025 14:01:22 +0000 Files and hashes: 1: 2u_bcZkkSvx-ZcsdCRFCGyh5HjM.roa (hash: 7lJhGCJBImviva4lcJI32wc+2zEbO+nn7NwKLsiaeHg=) 2: w1re68KNfif9nrnvsjVR2uILHQ8.crl (hash: 1RJ+vbPjpUMxYkAYa1ZoYb3sn2pmVs0vmfNhZ/H0z10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 14:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:dd:c6:a9:ab:a5:96:7b:6c:83:4b:c3:44:f7:57:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f Validity Not Before: Dec 12 14:01:22 2025 GMT Not After : Dec 13 14:01:22 2025 GMT Subject: CN=8ff4c722764787959a60117c00c197ae6da23f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:02:39:f1:ad:37:c8:c2:b5:d6:5b:f0:e8: ee:49:e9:94:85:04:78:13:21:59:1e:82:35:8d:cb: 12:27:d7:fb:44:3f:21:94:5e:49:a4:b0:e2:d1:a3: a9:1b:03:cf:a7:5a:15:cc:3d:1d:da:07:ed:f9:97: 6e:96:17:33:87:62:bd:47:37:0b:9d:a1:ce:cb:6a: 48:2d:62:d1:93:3c:25:bc:71:35:47:e5:99:55:ec: a4:34:8c:ed:0f:d2:f1:26:e4:8f:74:a9:23:a8:e4: 65:34:49:39:56:29:85:11:22:48:75:4f:88:71:0c: 70:08:88:2b:18:18:c2:c9:f8:37:79:98:b2:31:5e: 88:dd:e7:09:d3:6a:c6:6d:5d:eb:d2:72:ae:74:7e: fc:ac:41:95:da:c9:ca:6a:8f:c9:4f:d2:c3:24:fd: c2:c9:26:34:93:84:b6:fd:db:5f:d8:bc:75:c9:5b: ee:15:53:e8:29:94:de:78:9c:13:e9:47:85:80:42: 9b:2e:91:eb:aa:c2:e7:3f:6b:86:d2:f1:b4:0f:66: 00:4e:d4:ec:c8:f3:29:f8:ef:0b:82:99:3d:7b:68: b8:ea:30:6f:f3:cb:6b:64:20:f3:b0:a0:f1:77:73: cf:06:78:b1:2a:ec:4b:d0:f7:71:c8:e7:24:67:08: 02:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F4:C7:22:76:47:87:95:9A:60:11:7C:00:C1:97:AE:6D:A2:3F:31 X509v3 Authority Key Identifier: keyid:C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:7a:57:35:b8:76:00:20:eb:53:63:fd:47:13:62:16:1a:70: f9:94:17:db:0a:29:58:5a:c4:9b:61:b0:85:90:4a:59:3f:74: 6d:57:0b:67:0c:ae:ff:cf:5f:9d:3d:e6:0e:71:0c:b5:55:51: fb:ba:a5:68:d1:0f:66:7b:40:79:3f:43:70:a4:21:c4:ff:e2: 88:a4:c5:8b:65:2d:cb:8a:a2:20:d2:a7:ce:4a:46:be:73:c0: 81:de:7e:34:22:e7:b6:5c:ee:12:35:f6:f9:32:a7:84:12:7b: d9:03:a7:9e:69:4d:9d:ff:c8:2a:7d:bb:43:54:3c:1b:0d:aa: c4:97:04:cf:69:ef:10:01:27:43:d8:38:3e:0e:b4:5d:76:bd: 83:df:87:01:df:6e:4e:1b:b6:65:46:3a:9b:d5:02:1c:4b:3f: 58:eb:14:16:04:65:7d:bf:0f:7e:38:f3:e4:32:8e:82:d2:7c: 8a:11:8c:4b:eb:f9:76:82:b2:98:12:71:31:3d:be:82:c6:69: eb:c6:2a:d0:56:13:ac:0d:50:17:43:4e:fb:4a:95:1d:be:ac: f5:f8:9b:30:11:55:17:20:b8:d4:d3:02:3a:bb:c5:38:26:55: ec:ac:6f:5f:c4:4f:8f:0f:a7:6e:19:ed:aa:74:2a:f6:a3:c0: 86:4a:73:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsS3capq6WWe2yDS8NE91d4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWFkZWViYzI4ZDdlMjdmZDllYjllZmIyMzU1MWRhZTIw YjFkMGYwHhcNMjUxMjEyMTQwMTIyWhcNMjUxMjEzMTQwMTIyWjAzMTEwLwYDVQQD Eyg4ZmY0YzcyMjc2NDc4Nzk1OWE2MDExN2MwMGMxOTdhZTZkYTIzZjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSoCOfGtN8jCtdZb8OjuSemUhQR4 EyFZHoI1jcsSJ9f7RD8hlF5JpLDi0aOpGwPPp1oVzD0d2gft+Zdulhczh2K9RzcL naHOy2pILWLRkzwlvHE1R+WZVeykNIztD9LxJuSPdKkjqORlNEk5VimFESJIdU+I cQxwCIgrGBjCyfg3eZiyMV6I3ecJ02rGbV3r0nKudH78rEGV2snKao/JT9LDJP3C ySY0k4S2/dtf2Lx1yVvuFVPoKZTeeJwT6UeFgEKbLpHrqsLnP2uG0vG0D2YATtTs yPMp+O8Lgpk9e2i46jBv88trZCDzsKDxd3PPBnixKuxL0PdxyOckZwgCVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/0xyJ2R4eVmmARfADBl65toj8xMB8GA1UdIwQY MBaAFMNa3uvCjX4n/Z6577I1UdriCx0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzFyZTY4S05maWY5bnJudnNqVlIydUlMSFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84MzlkMWMtNGRiMy00NWNjLWIwNGYt YjU1ZDdkN2YyYzQ4LzEvdzFyZTY4S05maWY5bnJudnNqVlIydUlMSFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy84MzlkMWMtNGRiMy00NWNjLWIwNGYtYjU1ZDdkN2YyYzQ4 LzEvdzFyZTY4S05maWY5bnJudnNqVlIydUlMSFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3pXNbh2 ACDrU2P9RxNiFhpw+ZQX2wopWFrEm2GwhZBKWT90bVcLZwyu/89fnT3mDnEMtVVR +7qlaNEPZntAeT9DcKQhxP/iiKTFi2Uty4qiINKnzkpGvnPAgd5+NCLntlzuEjX2 +TKnhBJ72QOnnmlNnf/IKn27Q1Q8Gw2qxJcEz2nvEAEnQ9g4Pg60XXa9g9+HAd9u Thu2ZUY6m9UCHEs/WOsUFgRlfb8Pfjjz5DKOgtJ8ihGMS+v5doKymBJxMT2+gsZp 68Yq0FYTrA1QF0NO+0qVHb6s9fibMBFVFyC41NMCOrvFOCZV7KxvX8RPjw+nbhnt qnQq9qPAhkpzVA== -----END CERTIFICATE-----Generated at Fri Dec 12 21:15:42 2025 by rpki-client