This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft File: w1VyK06KSCQKzfXzN4OKogaqAto.mft (raw, json) Hash identifier: b+tc7uXWbp1yIAu7A9Pq2q0r2A2eA8iIXKyfr3+eQrs= Subject key identifier: 9B:38:A4:FC:D7:62:EB:88:08:62:C5:CD:7D:76:D8:31:27:97:62:80 Authority key identifier: C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA Certificate issuer: /CN=c355722b4e8a48240acdf5f337838aa206aa02da Certificate serial: 019B5AF69A0E26674E0349BEC43140A8069A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 14:01:09 +0000 Manifest this update: Fri 26 Dec 2025 14:01:09 +0000 Manifest next update: Sat 27 Dec 2025 14:01:09 +0000 Files and hashes: 1: skK36GoSOdR0likALCjbuukKSIA.roa (hash: rM2HKFoUwc02gigzQD8leLnlbHQm3zNCncQ93i9jwp0=) 2: w1VyK06KSCQKzfXzN4OKogaqAto.crl (hash: 3dPAj61GjqvR/sd1+ymti5qjc6NWVosjqvRXJ/EcuQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.crl rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:9a:0e:26:67:4e:03:49:be:c4:31:40:a8:06:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c355722b4e8a48240acdf5f337838aa206aa02da Validity Not Before: Dec 26 14:01:09 2025 GMT Not After : Dec 27 14:01:09 2025 GMT Subject: CN=9b38a4fcd762eb880862c5cd7d76d83127976280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ab:3e:6d:3f:64:ae:98:1a:ed:d9:5d:7f:4e: 1e:65:5c:d9:ec:04:69:b0:45:b6:dc:a3:f6:fd:b5: e1:07:fc:3c:1c:2a:0a:3b:31:8e:e2:12:e9:82:26: 02:5d:1c:91:1b:0f:b2:dd:61:19:57:9d:e0:f7:36: c5:66:52:ca:92:80:65:39:bd:a1:eb:16:6d:3b:f9: 37:7a:b3:68:9a:f9:83:da:59:62:f9:2d:bb:18:5c: 56:ec:7d:d2:a8:44:09:99:82:4e:49:bf:cc:74:0e: b8:29:0f:bd:84:d4:e9:97:ea:6e:1f:49:21:10:cf: 78:d0:33:5b:e9:37:db:6f:57:bd:08:4d:6a:29:14: 7c:06:61:3f:76:dc:99:4b:de:c4:f5:82:b7:e1:9e: 88:87:37:6d:e3:da:bf:5b:a5:88:74:ee:02:89:4f: e9:e8:25:e8:e9:be:b7:ec:d0:92:c5:5a:f1:bd:fb: 08:ca:11:17:a4:a1:fa:b6:1b:22:01:01:d5:4b:4b: 28:17:f1:3e:17:93:36:d3:91:81:b7:b6:96:20:b9: 59:94:96:0c:62:95:7d:95:aa:6a:51:4c:cb:5e:35: 04:a6:d5:f2:9f:0e:09:3c:d2:2b:06:16:2e:8b:48: 7f:a1:41:32:1b:7e:33:8d:2e:3d:38:c0:97:5f:a1: 45:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:38:A4:FC:D7:62:EB:88:08:62:C5:CD:7D:76:D8:31:27:97:62:80 X509v3 Authority Key Identifier: keyid:C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:10:84:56:5b:37:93:07:06:4d:98:98:d3:b3:50:3a:75:1c: 02:64:60:b3:07:b3:3f:3b:21:9c:6c:17:c0:39:50:6a:70:00: ad:f5:f2:22:30:87:e0:58:e6:6a:e7:c5:2b:19:47:4b:20:45: a3:88:f8:7f:17:3b:c7:a7:72:7c:23:62:54:c1:bf:ff:5e:6e: 48:9c:ea:f8:c2:80:2a:18:3d:ea:9e:4e:6c:3e:c6:d8:db:27: e4:e2:07:57:6c:be:32:c3:e9:a4:3f:f6:1d:a6:be:f7:36:5b: c6:07:4b:f6:f2:e9:5e:b1:d8:0c:57:9d:1f:69:36:e4:76:e8: 43:06:d1:c8:30:b7:e3:b4:fa:20:38:f8:0d:3b:88:80:24:4d: 61:4f:a6:0a:b8:1a:35:7f:d4:70:3a:5d:e2:9c:a2:b1:7d:b7: 55:73:82:0e:fd:dc:5d:61:4a:2c:eb:36:ee:d6:c2:35:4d:9c: fb:f6:95:83:f3:db:7d:14:53:68:89:05:0a:9e:10:09:3c:00: 46:bc:e0:a9:4e:ab:81:83:25:f7:ac:6f:6e:a3:02:e1:58:4a: a9:77:5c:28:aa:6f:2c:ab:37:6f:35:f9:d5:78:fb:76:c0:4e: 72:55:72:bf:bc:b7:e5:54:ec:3b:4d:31:52:f7:4e:72:49:b5: 1c:0c:05:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9poOJmdOA0m+xDFAqAaaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNTU3MjJiNGU4YTQ4MjQwYWNkZjVmMzM3ODM4YWEyMDZh YTAyZGEwHhcNMjUxMjI2MTQwMTA5WhcNMjUxMjI3MTQwMTA5WjAzMTEwLwYDVQQD Eyg5YjM4YTRmY2Q3NjJlYjg4MDg2MmM1Y2Q3ZDc2ZDgzMTI3OTc2MjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKs+bT9krpga7dldf04eZVzZ7ARp sEW23KP2/bXhB/w8HCoKOzGO4hLpgiYCXRyRGw+y3WEZV53g9zbFZlLKkoBlOb2h 6xZtO/k3erNomvmD2lli+S27GFxW7H3SqEQJmYJOSb/MdA64KQ+9hNTpl+puH0kh EM940DNb6Tfbb1e9CE1qKRR8BmE/dtyZS97E9YK34Z6Ihzdt49q/W6WIdO4CiU/p 6CXo6b637NCSxVrxvfsIyhEXpKH6thsiAQHVS0soF/E+F5M205GBt7aWILlZlJYM YpV9lapqUUzLXjUEptXynw4JPNIrBhYui0h/oUEyG34zjS49OMCXX6FFHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJs4pPzXYuuICGLFzX122DEnl2KAMB8GA1UdIwQY MBaAFMNVcitOikgkCs318zeDiqIGqgLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZTk5NTgtOWZmMi00MTIzLTliNWYt YTJlZjkwYzllOTEzLzEvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xZTk5NTgtOWZmMi00MTIzLTliNWYtYTJlZjkwYzllOTEz LzEvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBCEVls3 kwcGTZiY07NQOnUcAmRgswezPzshnGwXwDlQanAArfXyIjCH4FjmaufFKxlHSyBF o4j4fxc7x6dyfCNiVMG//15uSJzq+MKAKhg96p5ObD7G2Nsn5OIHV2y+MsPppD/2 Haa+9zZbxgdL9vLpXrHYDFedH2k25HboQwbRyDC347T6IDj4DTuIgCRNYU+mCrga NX/UcDpd4pyisX23VXOCDv3cXWFKLOs27tbCNU2c+/aVg/PbfRRTaIkFCp4QCTwA RrzgqU6rgYMl96xvbqMC4VhKqXdcKKpvLKs3bzX51Xj7dsBOclVyv7y35VTsO00x UvdOckm1HAwFTQ== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:24 2025 by rpki-client