This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json) Hash identifier: GFoFo+nI1c5JdfuHv6A+WBRrOP145OPuarhor13g09I= Subject key identifier: F5:E0:08:E8:7B:A0:88:A6:BF:3D:1C:56:5E:62:42:21:E5:5B:77:3D Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 019B1916438007C6265F2DAF1FB5C1CCA192 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft Manifest number: 177F Signing time: Sat 13 Dec 2025 19:00:47 +0000 Manifest this update: Sat 13 Dec 2025 19:00:47 +0000 Manifest next update: Sun 14 Dec 2025 19:00:47 +0000 Files and hashes: 1: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: AGY0liPJcmvGHQsmqh/0wS88jPpctEqzH1dCkcuRmgU=) 2: 3YD_MRnl9Z0M-5gb5pCh5nc9hwk.roa (hash: evl0gnXGBj3jpscK/Lmbf+kXEngR8HlbQU4a4Qn4JRY=) 3: 5wJESiDMAZmj-ilD4vzwMI5_ssg.roa (hash: +GY+k9R/JjbgE/bu3urmYp0AN8h15Gn0d4y/CuRmzBU=) 4: 7Cn94brCANl81RCeGqUf6f3wZjs.roa (hash: YTesKuaBb88vyg7FC7tve1XNAAciZyS+TUm60ayEkGs=) 5: I8EGaDfKri1_b8-vEs5GOpmEmC0.roa (hash: zmTLW5tEqjrFz2XoZUnEjei7zo6D5FmGOjsqSGxh6v4=) 6: aKFi1aME1l1V_WYgzTGI4swO8z4.roa (hash: J96GhwyVxGlf3VlcFOTAObMIbztxwxb0EC7z2fTuLyY=) 7: c35KLXIqnQLDzGQrWv8LHC2jXps.roa (hash: RoucjcIt4vL7sa6JcKcnG6f3UgWawurBha3WBbsL36o=) 8: ikkLHj8L2gbMUX3D4taYH4bLq_k.roa (hash: H50XZ4z2D599HF8sTbfTiJpRuYbZmd0jgsQgZY7w/J4=) 9: vASMvqMKdVuVur6UMRXjyqvAGfY.roa (hash: St4xX/JO+ugq63vpxfwsQqa1EocjW1D79lqVObSNu1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:43:80:07:c6:26:5f:2d:af:1f:b5:c1:cc:a1:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Dec 13 19:00:47 2025 GMT Not After : Dec 14 19:00:47 2025 GMT Subject: CN=f5e008e87ba088a6bf3d1c565e624221e55b773d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c6:d5:34:1a:6c:1a:7a:df:bd:75:69:f6:fc: 08:d4:2d:d9:e6:77:fb:aa:c2:6f:7d:ed:d9:fc:29: 85:ff:60:cf:87:a7:7e:57:71:9b:be:d9:24:25:63: 43:27:2d:f7:bd:8d:18:eb:12:c6:e4:a5:9f:6f:bf: 43:0f:94:b8:12:a2:83:38:5e:7b:fb:b8:36:bf:27: 65:4f:48:9f:59:65:e3:28:ee:f7:33:85:f0:73:43: aa:8d:e8:14:b8:bb:ab:9d:9b:b0:96:dd:8e:28:f9: fe:aa:eb:10:e7:c2:95:06:66:93:bd:8c:b7:8a:c9: 1d:7d:d3:9d:3d:36:0e:27:ce:b4:3f:6f:0e:10:5f: 05:0e:6f:ab:e0:2d:c7:2d:23:79:c0:b9:94:44:b3: 37:82:d1:c4:bb:97:a7:05:8f:7c:21:0a:de:d5:11: 4c:b1:d3:aa:0e:61:f5:00:85:26:b1:10:bd:1c:8f: 99:d2:37:b7:a7:3b:79:3f:ee:53:40:77:20:27:6b: e8:f8:12:24:0c:c3:f5:5b:82:5b:19:d9:b2:44:50: 22:9b:fb:7d:0f:50:18:99:91:ad:d0:2f:7e:e2:82: c8:fd:d7:62:59:a3:99:b7:92:b4:0c:e0:3f:bd:bd: 74:47:47:bc:75:fe:7c:ca:23:75:92:5d:6f:24:c5: f7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E0:08:E8:7B:A0:88:A6:BF:3D:1C:56:5E:62:42:21:E5:5B:77:3D X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a2:21:01:b9:a1:26:f7:6e:88:92:c4:b9:23:d1:37:1d:30: eb:6a:7a:05:4e:8f:4a:25:55:bb:cd:a6:46:e9:c0:42:bc:0d: cf:ea:72:a3:01:e7:b8:6b:b0:fc:a0:73:d9:81:c2:38:b8:5f: 74:0f:28:68:33:c0:81:45:4f:2a:3c:f2:85:5e:04:17:c9:17: 1d:3c:7a:a1:19:05:19:b9:3f:55:1f:30:90:f1:eb:1b:e8:d1: 21:38:b1:46:72:13:ba:b3:e9:a4:41:a9:ad:1f:c9:a6:ca:0d: dd:eb:75:07:18:a8:14:16:05:3d:c4:f6:76:28:f4:83:e1:b9: 11:66:46:c1:8e:f6:85:0a:b2:01:fd:93:b8:5e:22:55:34:31: 79:e4:a4:cd:e3:c2:a0:29:74:41:c6:07:df:64:cf:74:12:9b: 91:89:8b:64:c5:40:82:8f:3e:6b:90:8d:53:d0:e7:2d:66:fa: 18:fc:a4:25:e2:70:08:25:1c:9f:23:42:c4:e6:6e:b9:42:9e: d3:55:a6:be:5c:4e:6b:fe:c1:3d:c5:53:45:fa:c2:fe:78:af: 84:10:fc:fa:6b:d8:e8:e1:50:af:46:bf:7e:5b:83:16:f9:00: 3a:bf:4d:85:da:6c:28:0d:b4:a7:a9:fc:d6:2a:a2:fc:89:8d: 87:39:f9:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFkOAB8YmXy2vH7XBzKGSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjUxMjEzMTkwMDQ3WhcNMjUxMjE0MTkwMDQ3WjAzMTEwLwYDVQQD EyhmNWUwMDhlODdiYTA4OGE2YmYzZDFjNTY1ZTYyNDIyMWU1NWI3NzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcbVNBpsGnrfvXVp9vwI1C3Z5nf7 qsJvfe3Z/CmF/2DPh6d+V3GbvtkkJWNDJy33vY0Y6xLG5KWfb79DD5S4EqKDOF57 +7g2vydlT0ifWWXjKO73M4Xwc0OqjegUuLurnZuwlt2OKPn+qusQ58KVBmaTvYy3 iskdfdOdPTYOJ860P28OEF8FDm+r4C3HLSN5wLmURLM3gtHEu5enBY98IQre1RFM sdOqDmH1AIUmsRC9HI+Z0je3pzt5P+5TQHcgJ2vo+BIkDMP1W4JbGdmyRFAim/t9 D1AYmZGt0C9+4oLI/ddiWaOZt5K0DOA/vb10R0e8df58yiN1kl1vJMX3rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXgCOh7oIimvz0cVl5iQiHlW3c9MB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKIhAbmh JvduiJLEuSPRNx0w62p6BU6PSiVVu82mRunAQrwNz+pyowHnuGuw/KBz2YHCOLhf dA8oaDPAgUVPKjzyhV4EF8kXHTx6oRkFGbk/VR8wkPHrG+jRITixRnITurPppEGp rR/JpsoN3et1BxioFBYFPcT2dij0g+G5EWZGwY72hQqyAf2TuF4iVTQxeeSkzePC oCl0QcYH32TPdBKbkYmLZMVAgo8+a5CNU9DnLWb6GPykJeJwCCUcnyNCxOZuuUKe 01WmvlxOa/7BPcVTRfrC/nivhBD8+mvY6OFQr0a/fluDFvkAOr9NhdpsKA20p6n8 1iqi/ImNhzn5Ng== -----END CERTIFICATE-----Generated at Sun Dec 14 00:01:48 2025 by rpki-client