This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft File: RwwsmDticWkhhXHGuClHru6l984.mft (raw, json) Hash identifier: lJ7q8fHBlsfFJhCsqllEw6/kTdlwRhG8S2th3VrIPes= Subject key identifier: C3:DF:A1:E5:4E:3C:F6:C8:1C:F7:98:3B:46:30:40:10:69:40:D1:98 Authority key identifier: 47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE Certificate issuer: /CN=470c2c983b627169218571c6b82947aeeea5f7ce Certificate serial: 019B46CA8361EFF9ADC54872812620792DD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft Manifest number: 1791 Signing time: Mon 22 Dec 2025 16:00:35 +0000 Manifest this update: Mon 22 Dec 2025 16:00:35 +0000 Manifest next update: Tue 23 Dec 2025 16:00:35 +0000 Files and hashes: 1: B3HRVDq17dmYEd_4fHtjlcnZx1I.roa (hash: bT7FTTeSzclYhdeU0fsaRQxAGT8mqDYR/4kWlCp4d8o=) 2: RwwsmDticWkhhXHGuClHru6l984.crl (hash: w/0Uc2FrIdoU2fDduxwAQ0flqC9TlSJ0TZrHMXLUjCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:83:61:ef:f9:ad:c5:48:72:81:26:20:79:2d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=470c2c983b627169218571c6b82947aeeea5f7ce Validity Not Before: Dec 22 16:00:35 2025 GMT Not After : Dec 23 16:00:35 2025 GMT Subject: CN=c3dfa1e54e3cf6c81cf7983b463040106940d198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:19:b5:d4:84:12:b7:35:9c:93:4f:40:82:3e: 9e:be:9a:e5:83:b6:86:5a:89:c0:cf:77:31:36:7f: fe:c2:b9:d3:31:2c:02:3b:fd:22:04:8d:3b:9d:da: b4:c3:a2:44:ee:33:f9:44:15:39:9c:c8:2d:20:2a: 85:aa:d6:a1:a9:1b:3b:e9:0c:3e:3b:03:00:0a:e7: 75:ae:49:23:eb:58:32:ab:2b:86:89:38:c5:b8:1a: 42:4a:c2:ec:85:ba:b2:23:bd:8d:18:48:1a:10:85: 3c:6f:f9:ff:6e:a6:95:f4:06:42:4e:30:59:ab:8e: 34:d5:2b:df:c5:8e:de:47:f7:89:39:2e:c8:ea:a2: d1:8c:74:06:e0:30:f7:45:6e:95:8b:28:d5:39:c8: 3d:d5:c4:68:fe:cd:49:b2:22:29:0b:6e:69:fc:fe: bd:61:16:ba:09:5e:8d:4c:ac:66:e1:1e:ab:e9:c2: 7e:04:b4:48:98:35:10:24:ff:2b:a5:a3:88:d5:52: f4:07:b8:bb:0f:4c:eb:e1:0c:81:7d:ac:d8:7d:90: 4d:a1:9a:cc:9f:7c:8c:0d:ec:69:dc:45:69:3f:79: 24:c8:b5:b4:ad:84:82:fc:6a:75:21:4f:0b:a7:cb: 1e:9a:52:63:bd:4b:ed:2e:f1:65:95:b4:16:2d:d7: 5f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DF:A1:E5:4E:3C:F6:C8:1C:F7:98:3B:46:30:40:10:69:40:D1:98 X509v3 Authority Key Identifier: keyid:47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:a7:8a:e7:f2:f3:0a:b1:82:5f:51:54:0a:33:05:2f:ce:8b: ce:6a:aa:ae:1d:65:62:05:25:f2:d6:91:3a:c1:34:05:24:5a: 30:ea:bb:aa:df:c4:8d:cf:0d:c9:74:fb:c4:82:0f:57:e4:aa: 0a:d4:0e:92:5b:55:2f:15:89:f9:b3:5d:7f:4a:91:4b:18:1b: 39:9a:48:9e:ed:db:73:02:a9:d2:ea:71:00:cd:19:44:8e:f0: 32:e4:1c:e6:80:bc:f3:d5:e7:0e:51:1f:ac:1f:31:3b:67:73: 9b:b6:23:27:0c:0e:c2:25:44:1f:92:5e:fe:6d:68:14:bd:8b: ba:9f:f4:9b:27:0d:db:e1:c5:8e:f1:70:2a:69:d4:72:73:72: 09:eb:e7:03:48:0a:fe:ee:1a:1b:91:99:70:34:1c:01:16:76: 8c:5f:8f:11:da:bf:b6:dd:c7:67:35:37:5b:3b:87:09:fa:0c: a2:40:be:7a:74:7e:50:03:e9:34:14:35:4b:a0:ce:12:6d:ec: df:8a:0f:e9:9a:47:48:48:39:0e:dd:e5:1a:03:d3:06:45:f4: bb:82:67:95:80:a0:9e:67:41:fb:76:82:76:e8:26:c7:59:c7: bf:b7:d7:b2:89:0f:d4:f6:ab:bf:fa:8b:c8:30:87:07:ae:a9: 48:67:b5:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGyoNh7/mtxUhygSYgeS3TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MGMyYzk4M2I2MjcxNjkyMTg1NzFjNmI4Mjk0N2FlZWVh NWY3Y2UwHhcNMjUxMjIyMTYwMDM1WhcNMjUxMjIzMTYwMDM1WjAzMTEwLwYDVQQD EyhjM2RmYTFlNTRlM2NmNmM4MWNmNzk4M2I0NjMwNDAxMDY5NDBkMTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxm11IQStzWck09Agj6evprlg7aG WonAz3cxNn/+wrnTMSwCO/0iBI07ndq0w6JE7jP5RBU5nMgtICqFqtahqRs76Qw+ OwMACud1rkkj61gyqyuGiTjFuBpCSsLshbqyI72NGEgaEIU8b/n/bqaV9AZCTjBZ q4401SvfxY7eR/eJOS7I6qLRjHQG4DD3RW6ViyjVOcg91cRo/s1JsiIpC25p/P69 YRa6CV6NTKxm4R6r6cJ+BLRImDUQJP8rpaOI1VL0B7i7D0zr4QyBfazYfZBNoZrM n3yMDexp3EVpP3kkyLW0rYSC/Gp1IU8Lp8semlJjvUvtLvFllbQWLddfdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPfoeVOPPbIHPeYO0YwQBBpQNGYMB8GA1UdIwQY MBaAFEcMLJg7YnFpIYVxxrgpR67upffOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnd3c21EdGljV2toaFhIR3VDbEhydTZsOTg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80ODE0MDgtYjIxNS00ZDFhLWIzMzAt MTE1YWFjOTJlOWJmLzEvUnd3c21EdGljV2toaFhIR3VDbEhydTZsOTg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni80ODE0MDgtYjIxNS00ZDFhLWIzMzAtMTE1YWFjOTJlOWJm LzEvUnd3c21EdGljV2toaFhIR3VDbEhydTZsOTg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARaeK5/Lz CrGCX1FUCjMFL86Lzmqqrh1lYgUl8taROsE0BSRaMOq7qt/Ejc8NyXT7xIIPV+Sq CtQOkltVLxWJ+bNdf0qRSxgbOZpInu3bcwKp0upxAM0ZRI7wMuQc5oC889XnDlEf rB8xO2dzm7YjJwwOwiVEH5Je/m1oFL2Lup/0mycN2+HFjvFwKmnUcnNyCevnA0gK /u4aG5GZcDQcARZ2jF+PEdq/tt3HZzU3WzuHCfoMokC+enR+UAPpNBQ1S6DOEm3s 34oP6ZpHSEg5Dt3lGgPTBkX0u4JnlYCgnmdB+3aCdugmx1nHv7fXsokP1Parv/qL yDCHB66pSGe1Tw== -----END CERTIFICATE-----Generated at Mon Dec 22 20:45:54 2025 by rpki-client