This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft File: we7iyrhrXuQPwncMqMtcUMYrdVs.mft (raw, json) Hash identifier: 1aNg5aXxqgndEy30D5+7V0aIXiIjHK170F01J8UJoyQ= Subject key identifier: CD:8B:04:DB:3C:A4:61:DC:F1:6A:BB:6E:B9:A2:70:B3:BB:E9:71:0F Authority key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B Certificate issuer: /CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b Certificate serial: 019B1BE02A8C4AA8560EE356FECB2E604C6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft Manifest number: 13F1 Signing time: Sun 14 Dec 2025 08:00:34 +0000 Manifest this update: Sun 14 Dec 2025 08:00:34 +0000 Manifest next update: Mon 15 Dec 2025 08:00:34 +0000 Files and hashes: 1: C82fBmTW8-iwXu5pgvR1VTX1CPI.roa (hash: VxKUMucn3gu4aXap48afqVYi1a/XU7LxwPuTbOudfsE=) 2: we7iyrhrXuQPwncMqMtcUMYrdVs.crl (hash: 93Dkg/BEm9Z5USmUWqbq88eAg1cndPKX+TyR2SsekXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:e0:2a:8c:4a:a8:56:0e:e3:56:fe:cb:2e:60:4c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b Validity Not Before: Dec 14 08:00:34 2025 GMT Not After : Dec 15 08:00:34 2025 GMT Subject: CN=cd8b04db3ca461dcf16abb6eb9a270b3bbe9710f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:de:4f:36:19:82:86:53:c0:8c:a6:29:ea:4f: 62:83:6a:46:2b:03:0a:b8:e0:95:cb:81:7e:70:d8: 64:38:43:d1:0e:68:fb:e7:eb:44:0f:c1:94:9c:38: d2:73:0e:87:97:e5:0d:ae:cd:d8:c9:72:a1:bc:d6: e0:f5:7f:9a:80:b5:a3:fc:ef:5e:4a:c0:32:20:a5: 3e:cf:e6:11:09:97:8b:0a:87:a9:ba:cc:87:cb:c7: 96:52:64:57:e5:8a:22:44:3d:1f:8c:49:63:0c:21: fb:52:67:f0:a5:0b:e9:db:aa:63:76:c2:a8:d3:5e: 9e:86:2f:53:a1:01:e6:80:1b:8c:87:06:7d:d7:fc: a6:29:25:38:93:b3:ad:b5:fd:f8:bb:0b:53:2e:20: 76:73:fa:28:51:d7:3d:46:a8:30:77:e7:e8:82:ef: 23:09:58:11:32:72:0a:e2:8b:3a:75:19:e6:9c:cb: b0:b8:3a:60:75:d0:85:31:32:8a:ad:0f:b1:30:2d: d2:c1:f2:06:8a:3a:00:45:24:9c:31:1a:64:5c:11: 33:35:cc:91:cb:b8:93:e0:39:b0:94:2a:7d:af:4a: 70:e7:9b:75:22:ca:13:b8:c6:9e:39:85:2f:80:eb: 2c:9a:52:44:e0:35:2d:59:0c:e5:9c:95:4c:df:e4: 1a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8B:04:DB:3C:A4:61:DC:F1:6A:BB:6E:B9:A2:70:B3:BB:E9:71:0F X509v3 Authority Key Identifier: keyid:C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:7c:0d:85:bc:7b:ee:f8:85:62:c3:a8:cf:51:26:9a:5c:7d: be:16:a2:a9:50:4c:32:30:32:62:d0:15:7e:4a:b6:47:44:e0: 6d:52:81:29:42:d3:78:12:e6:83:f0:f8:a2:f4:2e:00:c9:d7: bd:46:00:12:91:05:a4:a0:fb:ef:b0:e3:db:24:a6:58:db:6e: 6d:a5:d0:e2:cb:3d:d4:27:84:cd:a4:fa:bd:32:2f:9c:de:4c: 2d:fd:cf:3b:61:45:f9:5f:8d:2a:93:6a:9b:6b:7b:bd:06:96: 70:fc:10:f5:95:79:0f:dc:3e:0f:2f:77:e6:f6:08:ec:fb:0b: de:34:49:6a:3a:b5:af:7a:bc:fb:48:12:76:cd:e8:90:25:1e: 22:cb:a9:1f:b6:93:0c:70:f3:61:c5:34:58:9c:77:2a:d8:fb: 76:a7:00:13:22:34:ae:17:2f:a0:75:dc:e0:cc:6a:80:7c:04: 73:43:42:c0:cf:33:72:f3:b1:bc:b0:62:9b:f8:b9:70:e0:0c: 93:f6:ec:ba:a2:0b:39:8a:0d:78:01:37:8f:4d:26:0c:b0:0c: d1:07:6b:d7:b1:fb:05:0e:82:f1:7d:01:63:a8:90:ff:cb:94: 77:d2:32:46:84:a3:7a:55:4e:4b:0a:1b:75:09:81:20:8f:d7: a1:4e:c8:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsb4CqMSqhWDuNW/ssuYExuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZWVlMmNhYjg2YjVlZTQwZmMyNzcwY2E4Y2I1YzUwYzYy Yjc1NWIwHhcNMjUxMjE0MDgwMDM0WhcNMjUxMjE1MDgwMDM0WjAzMTEwLwYDVQQD EyhjZDhiMDRkYjNjYTQ2MWRjZjE2YWJiNmViOWEyNzBiM2JiZTk3MTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt5PNhmChlPAjKYp6k9ig2pGKwMK uOCVy4F+cNhkOEPRDmj75+tED8GUnDjScw6Hl+UNrs3YyXKhvNbg9X+agLWj/O9e SsAyIKU+z+YRCZeLCoepusyHy8eWUmRX5YoiRD0fjEljDCH7UmfwpQvp26pjdsKo 016ehi9ToQHmgBuMhwZ91/ymKSU4k7Ottf34uwtTLiB2c/ooUdc9Rqgwd+fogu8j CVgRMnIK4os6dRnmnMuwuDpgddCFMTKKrQ+xMC3SwfIGijoARSScMRpkXBEzNcyR y7iT4DmwlCp9r0pw55t1IsoTuMaeOYUvgOssmlJE4DUtWQzlnJVM3+QazQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2LBNs8pGHc8Wq7brmicLO76XEPMB8GA1UdIwQY MBaAFMHu4sq4a17kD8J3DKjLXFDGK3VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2U3aXlyaHJYdVFQd25jTXFNdGNVTVlyZFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82MWYzZDgtMWEyNC00NDZmLWEyYjIt MGQwNzY1MmU0Y2FiLzEvd2U3aXlyaHJYdVFQd25jTXFNdGNVTVlyZFZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny82MWYzZDgtMWEyNC00NDZmLWEyYjItMGQwNzY1MmU0Y2Fi LzEvd2U3aXlyaHJYdVFQd25jTXFNdGNVTVlyZFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXwNhbx7 7viFYsOoz1Emmlx9vhaiqVBMMjAyYtAVfkq2R0TgbVKBKULTeBLmg/D4ovQuAMnX vUYAEpEFpKD777Dj2ySmWNtubaXQ4ss91CeEzaT6vTIvnN5MLf3PO2FF+V+NKpNq m2t7vQaWcPwQ9ZV5D9w+Dy935vYI7PsL3jRJajq1r3q8+0gSds3okCUeIsupH7aT DHDzYcU0WJx3Ktj7dqcAEyI0rhcvoHXc4MxqgHwEc0NCwM8zcvOxvLBim/i5cOAM k/bsuqILOYoNeAE3j00mDLAM0Qdr17H7BQ6C8X0BY6iQ/8uUd9IyRoSjelVOSwob dQmBII/XoU7IGw== -----END CERTIFICATE-----Generated at Sun Dec 14 15:15:20 2025 by rpki-client