This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft File: w4yh1BjCGOJveVGBqeO7e3nURD8.mft (raw, json) Hash identifier: jmfBVQQMUzO3HiFo/es06Vl8fLTDTlgj+U4MDnQtcIs= Subject key identifier: 20:27:77:D2:D6:F2:CF:F9:CB:11:6E:88:03:2D:83:24:5F:F4:CB:3D Authority key identifier: C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F Certificate issuer: /CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f Certificate serial: 019B3A912EC49BF8F9B56DF4B49EDD983E2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 07:02:31 +0000 Manifest this update: Sat 20 Dec 2025 07:02:31 +0000 Manifest next update: Sun 21 Dec 2025 07:02:31 +0000 Files and hashes: 1: HtKtiVg-0zn3K5n3LScDDg1_p88.roa (hash: to3WuOq+FMznKALAAApfBe9RQEcWrRQ420WrsW7wdUU=) 2: w4yh1BjCGOJveVGBqeO7e3nURD8.crl (hash: dVblVnQO7CWhaFMsx1KWben48e3GYUfXdWy8Ho8fsn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:2e:c4:9b:f8:f9:b5:6d:f4:b4:9e:dd:98:3e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f Validity Not Before: Dec 20 07:02:31 2025 GMT Not After : Dec 21 07:02:31 2025 GMT Subject: CN=202777d2d6f2cff9cb116e88032d83245ff4cb3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ae:7e:6b:a5:b6:de:ad:7f:3d:07:9a:12:ca: e0:f9:4a:ae:30:bf:73:79:47:a4:15:39:b8:ef:49: 61:9f:12:cf:b0:3b:db:ab:33:e6:8b:f3:57:46:55: ad:7d:46:c5:46:30:9a:5f:87:01:41:b3:53:cf:9c: ce:60:0f:60:23:e4:90:73:ce:e7:d6:3c:a0:67:15: fc:47:1f:f0:4c:2a:a0:68:7d:31:3a:71:b4:ab:a9: 2b:a8:db:22:35:c9:25:e7:84:59:80:82:78:fa:a2: 0f:72:33:32:01:86:dc:84:3e:19:7f:9d:c8:db:77: f8:e0:11:13:9b:b9:87:2f:52:51:08:bb:aa:68:6c: 94:d5:05:f4:91:f8:d5:02:fa:c3:ca:ee:c2:0d:16: b3:69:1f:3c:e2:74:f5:7c:72:fa:c9:22:a8:c0:0c: 1c:3a:8e:1a:39:1f:33:e3:b5:c1:34:ef:0f:9a:ee: 1a:ea:bb:cf:ed:f8:27:aa:ee:b1:95:37:ef:7a:d5: 9d:50:ac:95:23:61:17:a3:e0:6e:96:41:98:6c:42: c1:9d:11:c0:f4:90:0e:20:ef:f8:1e:22:05:40:c7: 20:f1:f2:47:74:fd:fd:d1:c4:65:d8:8b:f2:81:17: a6:e1:08:08:4b:e8:64:58:98:e9:e4:d8:67:40:ab: b0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:27:77:D2:D6:F2:CF:F9:CB:11:6E:88:03:2D:83:24:5F:F4:CB:3D X509v3 Authority Key Identifier: keyid:C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:46:82:a7:84:97:2c:28:e9:9f:d3:58:53:58:1a:4a:66:85: a9:2b:9d:5c:9e:4a:77:ab:13:01:9e:36:17:bb:5b:ed:a2:cc: 65:5c:1e:4b:58:fe:97:4f:36:02:b9:cd:05:23:a9:15:d8:f5: 0f:f8:e9:71:85:f5:bf:c7:00:c5:7c:3f:ff:b4:05:f9:27:51: 67:6e:5e:4e:86:17:98:87:80:a5:d1:32:54:e4:42:15:ad:63: dd:ed:05:e7:ce:ef:cb:4a:dc:58:40:23:ff:61:31:02:e9:f0: 21:a2:fa:65:92:fa:46:1e:35:67:68:65:06:04:08:11:d1:f7: 02:46:bb:f1:6a:c6:dc:7f:c4:ed:c3:d2:11:36:b3:22:a9:cc: 42:ad:e2:cd:19:d2:0a:09:62:10:5d:7c:56:1d:0e:9f:59:77: 38:e0:ee:04:18:69:41:fb:07:9d:22:4c:10:dd:47:f8:5f:69: c7:41:a9:67:44:c8:9f:47:9b:a8:4c:d8:91:6d:69:b3:6e:b2: e4:cd:0e:97:2b:43:f5:6a:e5:c9:19:10:fd:a3:2a:df:7e:09: c5:d3:aa:ba:33:e7:a2:91:c8:ae:39:91:14:b1:44:52:81:c7: df:e1:30:0d:24:6b:67:85:f4:ce:09:09:cc:85:74:bd:b9:bc: 91:7d:32:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kS7Em/j5tW30tJ7dmD4uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOGNhMWQ0MThjMjE4ZTI2Zjc5NTE4MWE5ZTNiYjdiNzlk NDQ0M2YwHhcNMjUxMjIwMDcwMjMxWhcNMjUxMjIxMDcwMjMxWjAzMTEwLwYDVQQD EygyMDI3NzdkMmQ2ZjJjZmY5Y2IxMTZlODgwMzJkODMyNDVmZjRjYjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK5+a6W23q1/PQeaEsrg+UquML9z eUekFTm470lhnxLPsDvbqzPmi/NXRlWtfUbFRjCaX4cBQbNTz5zOYA9gI+SQc87n 1jygZxX8Rx/wTCqgaH0xOnG0q6krqNsiNckl54RZgIJ4+qIPcjMyAYbchD4Zf53I 23f44BETm7mHL1JRCLuqaGyU1QX0kfjVAvrDyu7CDRazaR884nT1fHL6ySKowAwc Oo4aOR8z47XBNO8Pmu4a6rvP7fgnqu6xlTfvetWdUKyVI2EXo+BulkGYbELBnRHA 9JAOIO/4HiIFQMcg8fJHdP390cRl2IvygRem4QgIS+hkWJjp5NhnQKuw/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAnd9LW8s/5yxFuiAMtgyRf9Ms9MB8GA1UdIwQY MBaAFMOModQYwhjib3lRganju3t51EQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzR5aDFCakNHT0p2ZVZHQnFlTzdlM25VUkQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS82ZmNiYTgtYWRiOC00MTFmLTllNDYt MmVmMjdhMTkxNmJkLzEvdzR5aDFCakNHT0p2ZVZHQnFlTzdlM25VUkQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS82ZmNiYTgtYWRiOC00MTFmLTllNDYtMmVmMjdhMTkxNmJk LzEvdzR5aDFCakNHT0p2ZVZHQnFlTzdlM25VUkQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtEaCp4SX LCjpn9NYU1gaSmaFqSudXJ5Kd6sTAZ42F7tb7aLMZVweS1j+l082ArnNBSOpFdj1 D/jpcYX1v8cAxXw//7QF+SdRZ25eToYXmIeApdEyVORCFa1j3e0F587vy0rcWEAj /2ExAunwIaL6ZZL6Rh41Z2hlBgQIEdH3Aka78WrG3H/E7cPSETazIqnMQq3izRnS CgliEF18Vh0On1l3OODuBBhpQfsHnSJMEN1H+F9px0GpZ0TIn0ebqEzYkW1ps26y 5M0OlytD9WrlyRkQ/aMq334JxdOqujPnopHIrjmRFLFEUoHH3+EwDSRrZ4X0zgkJ zIV0vbm8kX0y1Q== -----END CERTIFICATE-----Generated at Sat Dec 20 09:13:38 2025 by rpki-client