This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json) Hash identifier: V+JYdfvG8f6FDGlnZkYeJYpswMD41+6QdIFRpyVRA9Y= Subject key identifier: 75:C4:82:4C:00:7B:1F:89:26:4C:0B:17:43:78:79:23:FF:DB:1A:D9 Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 019B115CD5FE9A4ED2FB1BA6B416F528928E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft Manifest number: 177B Signing time: Fri 12 Dec 2025 07:00:55 +0000 Manifest this update: Fri 12 Dec 2025 07:00:55 +0000 Manifest next update: Sat 13 Dec 2025 07:00:55 +0000 Files and hashes: 1: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: aADUdRn4yEP8NfzLLUNXc+uzJchLumG4AyYOUj8CdPw=) 2: 3YD_MRnl9Z0M-5gb5pCh5nc9hwk.roa (hash: evl0gnXGBj3jpscK/Lmbf+kXEngR8HlbQU4a4Qn4JRY=) 3: 5wJESiDMAZmj-ilD4vzwMI5_ssg.roa (hash: +GY+k9R/JjbgE/bu3urmYp0AN8h15Gn0d4y/CuRmzBU=) 4: 7Cn94brCANl81RCeGqUf6f3wZjs.roa (hash: YTesKuaBb88vyg7FC7tve1XNAAciZyS+TUm60ayEkGs=) 5: I8EGaDfKri1_b8-vEs5GOpmEmC0.roa (hash: zmTLW5tEqjrFz2XoZUnEjei7zo6D5FmGOjsqSGxh6v4=) 6: aKFi1aME1l1V_WYgzTGI4swO8z4.roa (hash: J96GhwyVxGlf3VlcFOTAObMIbztxwxb0EC7z2fTuLyY=) 7: c35KLXIqnQLDzGQrWv8LHC2jXps.roa (hash: RoucjcIt4vL7sa6JcKcnG6f3UgWawurBha3WBbsL36o=) 8: ikkLHj8L2gbMUX3D4taYH4bLq_k.roa (hash: H50XZ4z2D599HF8sTbfTiJpRuYbZmd0jgsQgZY7w/J4=) 9: vASMvqMKdVuVur6UMRXjyqvAGfY.roa (hash: St4xX/JO+ugq63vpxfwsQqa1EocjW1D79lqVObSNu1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5c:d5:fe:9a:4e:d2:fb:1b:a6:b4:16:f5:28:92:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Dec 12 07:00:55 2025 GMT Not After : Dec 13 07:00:55 2025 GMT Subject: CN=75c4824c007b1f89264c0b1743787923ffdb1ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5f:ad:2e:e2:68:1b:9b:6b:5e:b7:cc:fe:ee: 79:3f:04:da:b3:af:18:47:ef:cc:a6:6f:d2:05:8c: 07:fe:59:a2:fd:69:89:69:0e:fe:ff:47:f0:c4:a9: 38:9c:7e:b8:38:d1:2a:74:3f:00:96:95:36:70:36: 74:88:d3:0d:fa:b9:bd:b5:5b:ab:dd:e7:63:1e:60: 23:89:e7:8a:0d:52:0e:85:3c:cb:1b:ce:5d:5f:05: f2:dd:0f:d1:14:63:92:e9:5c:35:6a:df:fb:09:13: 68:82:ef:bf:05:83:d3:94:80:fd:d0:5f:c7:27:ca: d6:95:c8:79:1e:bb:c6:dc:d2:13:7d:64:d6:ea:d7: d7:33:f9:6e:25:ca:91:5d:5c:a4:66:13:91:51:a5: 82:29:1b:dd:09:83:5b:dd:ce:52:3c:3b:db:12:cc: 36:c2:10:cd:da:0d:63:c1:4d:08:1c:3f:0a:f3:1c: cf:ca:eb:ec:ce:3a:dc:40:19:92:ba:25:98:2a:dd: 39:e5:62:ff:6f:fc:c3:39:17:11:df:98:2b:41:d6: d6:91:ab:3a:0d:7f:20:59:34:4a:d8:6d:a8:19:aa: 18:47:dd:a2:64:fb:c6:60:94:03:61:52:d8:ae:d6: 41:8e:86:80:93:b7:6a:11:dd:92:a5:26:f4:e6:8c: 40:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C4:82:4C:00:7B:1F:89:26:4C:0B:17:43:78:79:23:FF:DB:1A:D9 X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:32:ad:38:66:1d:a9:29:31:57:e3:3a:f5:e0:a5:34:38:f2: 54:ca:53:1b:77:9f:2e:73:b8:b9:48:3d:9b:a8:a0:72:0e:4d: 20:78:71:0e:b9:ab:c7:e4:db:f5:dc:c1:f2:8b:90:15:8d:26: 75:63:a8:b6:af:58:9c:c7:7c:2b:0d:6a:b7:fa:01:7f:19:c6: eb:6e:80:b4:57:9f:14:d5:a8:d1:58:81:8f:f7:27:a0:1e:aa: 9b:be:17:a1:b7:39:9a:04:05:6a:23:b1:5e:1c:86:9c:c7:f6: ab:27:8e:e8:bb:73:e0:8f:bb:0b:95:79:5b:df:41:76:c9:9b: 18:07:e7:55:09:16:ac:c8:b5:87:98:b2:c4:0a:f2:40:c6:c7: 28:1f:26:2e:e4:98:21:e4:b0:ef:91:33:d8:c8:57:3a:03:17: c1:a2:68:67:98:7c:62:cd:ca:3d:f0:37:2e:0d:f9:a0:a5:e9: e1:9e:d4:c4:c9:76:16:0a:e7:1b:08:1f:78:32:11:e6:f7:a6: d2:ea:72:18:6e:9c:2e:7d:8e:b3:62:21:db:95:a4:c6:aa:38: 80:0c:97:6d:20:d7:21:74:8a:9f:da:56:00:42:25:be:54:b6: b9:a4:b4:4d:39:f7:db:45:c6:3c:8e:ad:e9:3d:de:27:96:a1: f2:fd:26:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXNX+mk7S+xumtBb1KJKOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjUxMjEyMDcwMDU1WhcNMjUxMjEzMDcwMDU1WjAzMTEwLwYDVQQD Eyg3NWM0ODI0YzAwN2IxZjg5MjY0YzBiMTc0Mzc4NzkyM2ZmZGIxYWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1+tLuJoG5trXrfM/u55PwTas68Y R+/Mpm/SBYwH/lmi/WmJaQ7+/0fwxKk4nH64ONEqdD8AlpU2cDZ0iNMN+rm9tVur 3edjHmAjieeKDVIOhTzLG85dXwXy3Q/RFGOS6Vw1at/7CRNogu+/BYPTlID90F/H J8rWlch5HrvG3NITfWTW6tfXM/luJcqRXVykZhORUaWCKRvdCYNb3c5SPDvbEsw2 whDN2g1jwU0IHD8K8xzPyuvszjrcQBmSuiWYKt055WL/b/zDORcR35grQdbWkas6 DX8gWTRK2G2oGaoYR92iZPvGYJQDYVLYrtZBjoaAk7dqEd2SpSb05oxA6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXEgkwAex+JJkwLF0N4eSP/2xrZMB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTKtOGYd qSkxV+M69eClNDjyVMpTG3efLnO4uUg9m6igcg5NIHhxDrmrx+Tb9dzB8ouQFY0m dWOotq9YnMd8Kw1qt/oBfxnG626AtFefFNWo0ViBj/cnoB6qm74Xobc5mgQFaiOx XhyGnMf2qyeO6Ltz4I+7C5V5W99BdsmbGAfnVQkWrMi1h5iyxAryQMbHKB8mLuSY IeSw75Ez2MhXOgMXwaJoZ5h8Ys3KPfA3Lg35oKXp4Z7UxMl2FgrnGwgfeDIR5vem 0upyGG6cLn2Os2Ih25Wkxqo4gAyXbSDXIXSKn9pWAEIlvlS2uaS0TTn320XGPI6t 6T3eJ5ah8v0mNQ== -----END CERTIFICATE-----Generated at Fri Dec 12 10:47:01 2025 by rpki-client