This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft File: w1k2RMcJGfYIPygZpz89Oeucteg.mft (raw, json) Hash identifier: z5R2kTd/usLLA7PCIweLKvAvjnYzHWucbUh70K5TuZQ= Subject key identifier: 63:9A:8F:A3:FC:04:9B:80:FC:12:C8:A4:E4:0F:86:2F:B2:B2:0F:26 Authority key identifier: C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8 Certificate issuer: /CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8 Certificate serial: 019B3569B42FDE4635BE63E467B7648AF7D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft Manifest number: 1049 Signing time: Fri 19 Dec 2025 07:01:18 +0000 Manifest this update: Fri 19 Dec 2025 07:01:18 +0000 Manifest next update: Sat 20 Dec 2025 07:01:18 +0000 Files and hashes: 1: w1k2RMcJGfYIPygZpz89Oeucteg.crl (hash: sB73/R1DhoWYhTZjW2a6dH0BxBRDZUIoCl5mA38zHtU=) 2: zwDf_kkH_sbuGk9WPwUaPDjfffs.roa (hash: EodK3W1jmYTJC73uP7dzhnrwbPzudn9QK+eDEFeCQfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:b4:2f:de:46:35:be:63:e4:67:b7:64:8a:f7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8 Validity Not Before: Dec 19 07:01:18 2025 GMT Not After : Dec 20 07:01:18 2025 GMT Subject: CN=639a8fa3fc049b80fc12c8a4e40f862fb2b20f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c2:00:84:c8:22:2b:3b:80:b0:ae:54:c4:d7: 49:da:2a:55:2b:16:86:30:f6:a9:c0:8e:9f:eb:5d: 05:43:54:c7:a1:a6:67:79:32:48:25:b4:58:48:e0: d4:8b:10:10:c0:dc:b7:b6:28:e9:19:e1:26:f5:45: 9b:aa:58:8d:1d:f7:03:b4:a8:f5:c2:03:ea:e2:ee: 26:8a:68:ff:f4:ba:2d:7b:6b:63:45:b4:62:a0:4f: 7f:e6:bd:72:5e:4a:fa:f3:44:12:33:84:6c:a1:ae: fd:cb:b6:9f:60:aa:09:bb:44:5b:b0:cd:c6:51:a4: c5:d9:ad:e4:fe:b1:d8:5d:14:f7:9e:ce:a4:26:86: 8c:de:92:a6:71:a2:c5:72:77:d3:d1:ae:7e:e9:9b: 43:00:70:d3:03:4e:29:f7:aa:65:e4:8c:89:17:e7: 2e:13:da:ee:06:e8:82:b4:0f:0b:4c:86:7e:38:93: 20:5d:ed:e8:00:c1:db:ac:2e:2d:36:5b:cb:ad:c7: 61:0e:08:78:04:ed:15:68:ca:b3:24:de:47:78:2e: a2:64:8f:37:53:ef:98:08:c8:9e:52:1f:28:e7:a2: 86:a0:9a:3f:c4:e3:d9:7e:6f:35:ab:0e:62:9a:4c: a9:36:5f:f6:d6:93:32:e4:5d:aa:f4:3e:22:ee:a9: c5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9A:8F:A3:FC:04:9B:80:FC:12:C8:A4:E4:0F:86:2F:B2:B2:0F:26 X509v3 Authority Key Identifier: keyid:C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:7d:68:b0:9d:3a:3d:cd:5b:cc:0f:43:ea:6c:22:2c:bf:3c: de:ef:90:8c:33:76:d1:6e:2a:08:e1:96:7a:3f:87:0a:d9:80: 15:77:e8:2d:b8:6a:00:f1:b8:0c:4e:93:2d:00:78:c8:d3:32: c2:ba:af:4f:15:78:11:aa:0e:53:5f:f1:69:b1:f9:c2:92:94: 99:ea:b2:5b:22:f3:7c:05:bb:8e:96:fc:6c:a0:ee:b6:e9:e8: 17:f0:10:e3:0e:83:8c:91:35:90:f6:49:4d:bd:a0:98:16:a7: 0d:23:6a:cb:9a:5d:02:38:3e:ae:8d:7a:24:5a:6c:bd:41:b0: af:f0:af:2a:3c:07:fd:1b:e6:a8:0b:a1:a7:ad:cd:d6:a4:63: 56:5b:21:cd:95:25:54:4f:bc:00:e9:ae:32:3d:b5:70:b0:7d: 7d:82:f0:1b:61:ec:56:d3:15:8f:ff:44:56:ff:c3:d8:7f:2b: 7f:27:5e:4e:ed:6d:eb:38:e2:66:29:36:a6:d9:cf:cd:5b:6e: 80:4b:61:42:99:a0:61:30:ea:d2:af:be:37:fb:05:ca:d2:2f: 38:9d:02:22:79:61:d3:a1:ac:cb:d1:a1:39:89:ca:0c:d3:4d: 22:c4:7b:f8:52:d9:cc:d6:bf:66:eb:3f:eb:b6:74:cf:3f:a8: 73:dc:44:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1abQv3kY1vmPkZ7dkivfQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNTkzNjQ0YzcwOTE5ZjYwODNmMjgxOWE3M2YzZDM5ZWI5 Y2I1ZTgwHhcNMjUxMjE5MDcwMTE4WhcNMjUxMjIwMDcwMTE4WjAzMTEwLwYDVQQD Eyg2MzlhOGZhM2ZjMDQ5YjgwZmMxMmM4YTRlNDBmODYyZmIyYjIwZjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8IAhMgiKzuAsK5UxNdJ2ipVKxaG MPapwI6f610FQ1THoaZneTJIJbRYSODUixAQwNy3tijpGeEm9UWbqliNHfcDtKj1 wgPq4u4mimj/9Lote2tjRbRioE9/5r1yXkr680QSM4Rsoa79y7afYKoJu0RbsM3G UaTF2a3k/rHYXRT3ns6kJoaM3pKmcaLFcnfT0a5+6ZtDAHDTA04p96pl5IyJF+cu E9ruBuiCtA8LTIZ+OJMgXe3oAMHbrC4tNlvLrcdhDgh4BO0VaMqzJN5HeC6iZI83 U++YCMieUh8o56KGoJo/xOPZfm81qw5imkypNl/21pMy5F2q9D4i7qnF5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOaj6P8BJuA/BLIpOQPhi+ysg8mMB8GA1UdIwQY MBaAFMNZNkTHCRn2CD8oGac/PTnrnLXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzFrMlJNY0pHZllJUHlnWnB6ODlPZXVjdGVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9lYjNhYjUtNTZjZC00MjI3LWIwNmQt YTZjZTM4ZjNkMWQ4LzEvdzFrMlJNY0pHZllJUHlnWnB6ODlPZXVjdGVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9lYjNhYjUtNTZjZC00MjI3LWIwNmQtYTZjZTM4ZjNkMWQ4 LzEvdzFrMlJNY0pHZllJUHlnWnB6ODlPZXVjdGVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB31osJ06 Pc1bzA9D6mwiLL883u+QjDN20W4qCOGWej+HCtmAFXfoLbhqAPG4DE6TLQB4yNMy wrqvTxV4EaoOU1/xabH5wpKUmeqyWyLzfAW7jpb8bKDutunoF/AQ4w6DjJE1kPZJ Tb2gmBanDSNqy5pdAjg+ro16JFpsvUGwr/CvKjwH/RvmqAuhp63N1qRjVlshzZUl VE+8AOmuMj21cLB9fYLwG2HsVtMVj/9EVv/D2H8rfydeTu1t6zjiZik2ptnPzVtu gEthQpmgYTDq0q++N/sFytIvOJ0CInlh06Gsy9GhOYnKDNNNIsR7+FLZzNa/Zus/ 67Z0zz+oc9xEkQ== -----END CERTIFICATE-----Generated at Fri Dec 19 09:46:12 2025 by rpki-client