This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft File: w1k5CyF0quIpYaDzwp_EAvH-I8g.mft (raw, json) Hash identifier: tGMMDjebkpIwgthLpnRULZU4pTN3aIEVV8cPPHjC7CI= Subject key identifier: 8E:72:D3:BF:84:B0:7B:D8:BD:0A:AF:C0:D6:55:1D:42:BC:19:FF:FA Authority key identifier: C3:59:39:0B:21:74:AA:E2:29:61:A0:F3:C2:9F:C4:02:F1:FE:23:C8 Certificate issuer: /CN=c359390b2174aae22961a0f3c29fc402f1fe23c8 Certificate serial: 019B3343F075809FB68E83B11FB5F42B9AF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft Manifest number: 03F1 Signing time: Thu 18 Dec 2025 21:00:49 +0000 Manifest this update: Thu 18 Dec 2025 21:00:49 +0000 Manifest next update: Fri 19 Dec 2025 21:00:49 +0000 Files and hashes: 1: roRpX3bRKDuocHxusV0WH0MjbWo.roa (hash: P8a5SzApQjB4G+3G1+p+RkD68unIbIu33oid4GIMvlk=) 2: w1k5CyF0quIpYaDzwp_EAvH-I8g.crl (hash: mSnG6yJPPwDq0rrgC0W2pVchX0HQq/hof4qkjF1ukD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.crl rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:f0:75:80:9f:b6:8e:83:b1:1f:b5:f4:2b:9a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c359390b2174aae22961a0f3c29fc402f1fe23c8 Validity Not Before: Dec 18 21:00:49 2025 GMT Not After : Dec 19 21:00:49 2025 GMT Subject: CN=8e72d3bf84b07bd8bd0aafc0d6551d42bc19fffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7e:4d:7a:7c:ab:6b:00:3f:d2:ef:f5:c5:f9: 6d:0b:aa:4c:a8:4a:32:55:e5:e8:2e:67:fa:4b:59: d1:e7:80:32:2d:f5:e5:f7:84:c2:51:72:73:41:31: a0:2b:51:83:6a:79:22:ad:f3:70:c4:83:4a:b0:75: 77:22:cf:01:b8:37:77:84:0b:4f:09:e0:f0:33:22: b2:a5:72:83:39:6f:44:f8:de:c4:dd:2c:00:99:6c: 45:61:eb:6e:3f:60:70:35:13:f6:4d:16:7e:bb:ce: 16:c7:76:ef:53:5b:42:3f:f9:c9:f1:8e:aa:f7:e9: 7c:83:04:05:79:2f:90:0d:ad:06:a9:09:16:09:41: 48:17:ba:87:d4:8d:1e:66:7c:6b:be:a3:6f:ac:37: 90:3d:e4:d5:dc:30:15:aa:07:b7:7b:6e:df:29:d7: b6:5b:a1:ba:f2:6b:c3:91:08:99:56:d5:71:60:41: 24:35:b4:20:5b:1d:20:ca:d4:7e:1c:f7:7e:cb:75: 0c:1f:29:cc:47:26:d2:43:33:91:0e:ed:72:89:52: 13:eb:96:8c:3e:21:3f:6a:e3:95:09:2b:7b:1d:b4: cb:34:8a:63:6a:a6:3b:c5:9f:bf:d4:e8:97:ab:3e: 0d:94:f7:26:14:53:73:28:70:9c:67:42:99:61:5d: 26:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:72:D3:BF:84:B0:7B:D8:BD:0A:AF:C0:D6:55:1D:42:BC:19:FF:FA X509v3 Authority Key Identifier: keyid:C3:59:39:0B:21:74:AA:E2:29:61:A0:F3:C2:9F:C4:02:F1:FE:23:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f4:5e:38:bf:18:8d:1d:d5:76:7f:d5:ad:67:4e:3e:ea:71: a2:1e:09:10:94:f7:c3:48:6b:18:86:bf:5b:7e:91:1d:ec:de: df:e0:75:aa:bd:b5:d8:eb:35:40:76:98:f5:b1:79:fc:55:a3: 0d:15:8d:7b:50:86:29:df:63:2d:75:aa:23:b9:57:b4:f0:9c: 3a:3a:53:38:b7:fb:c8:89:44:9b:84:4d:1d:74:fd:a2:90:73: c7:6a:a1:88:93:cd:2a:b8:53:c6:bd:77:4e:c6:43:bf:61:8a: a8:4b:9e:8c:6d:04:a8:1d:ec:c8:69:a2:6a:88:f7:3a:94:eb: d2:f4:87:b2:85:c6:72:a1:9d:0f:9c:bf:3a:1d:64:b0:35:4b: 30:eb:aa:e3:1f:b2:7b:93:26:cf:f6:47:e3:08:17:b9:30:e3: e9:76:27:8b:97:7f:50:48:9c:53:33:81:76:e4:4c:0f:93:ab: 4c:91:f4:6b:37:65:1e:46:dc:f4:cf:b2:83:52:da:50:d7:cd: 7c:f2:73:33:39:a3:34:6b:70:fb:80:ba:49:0a:22:a2:c7:09: 6f:cd:c1:8f:a1:29:32:88:59:51:54:13:ea:6b:22:bc:df:a8: f6:6f:77:c6:3c:aa:eb:26:98:c4:f3:64:67:dd:2e:1a:7d:f5: 61:21:4d:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ/B1gJ+2joOxH7X0K5rwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNTkzOTBiMjE3NGFhZTIyOTYxYTBmM2MyOWZjNDAyZjFm ZTIzYzgwHhcNMjUxMjE4MjEwMDQ5WhcNMjUxMjE5MjEwMDQ5WjAzMTEwLwYDVQQD Eyg4ZTcyZDNiZjg0YjA3YmQ4YmQwYWFmYzBkNjU1MWQ0MmJjMTlmZmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi35NenyrawA/0u/1xfltC6pMqEoy VeXoLmf6S1nR54AyLfXl94TCUXJzQTGgK1GDankirfNwxINKsHV3Is8BuDd3hAtP CeDwMyKypXKDOW9E+N7E3SwAmWxFYetuP2BwNRP2TRZ+u84Wx3bvU1tCP/nJ8Y6q 9+l8gwQFeS+QDa0GqQkWCUFIF7qH1I0eZnxrvqNvrDeQPeTV3DAVqge3e27fKde2 W6G68mvDkQiZVtVxYEEkNbQgWx0gytR+HPd+y3UMHynMRybSQzORDu1yiVIT65aM PiE/auOVCSt7HbTLNIpjaqY7xZ+/1OiXqz4NlPcmFFNzKHCcZ0KZYV0mFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5y07+EsHvYvQqvwNZVHUK8Gf/6MB8GA1UdIwQY MBaAFMNZOQshdKriKWGg88KfxALx/iPIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzFrNUN5RjBxdUlwWWFEendwX0VBdkgtSThnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81YmJhN2ItZGFhNy00NDMyLTkyNzAt ZWM1YzdkZTdhYWUxLzEvdzFrNUN5RjBxdUlwWWFEendwX0VBdkgtSThnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My81YmJhN2ItZGFhNy00NDMyLTkyNzAtZWM1YzdkZTdhYWUx LzEvdzFrNUN5RjBxdUlwWWFEendwX0VBdkgtSThnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/ReOL8Y jR3Vdn/VrWdOPupxoh4JEJT3w0hrGIa/W36RHeze3+B1qr212Os1QHaY9bF5/FWj DRWNe1CGKd9jLXWqI7lXtPCcOjpTOLf7yIlEm4RNHXT9opBzx2qhiJPNKrhTxr13 TsZDv2GKqEuejG0EqB3syGmiaoj3OpTr0vSHsoXGcqGdD5y/Oh1ksDVLMOuq4x+y e5Mmz/ZH4wgXuTDj6XYni5d/UEicUzOBduRMD5OrTJH0azdlHkbc9M+yg1LaUNfN fPJzMzmjNGtw+4C6SQoioscJb83Bj6EpMohZUVQT6msivN+o9m93xjyq6yaYxPNk Z90uGn31YSFNKA== -----END CERTIFICATE-----Generated at Fri Dec 19 03:43:15 2025 by rpki-client