This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft File: DWutPz3QrFVvP3qA0cabn9lk3Ww.mft (raw, json) Hash identifier: yYuI5MYKnR74llvJh3gD4OjZvVJ62kMU6cetYobufYc= Subject key identifier: 4D:5F:9F:ED:09:D0:0B:07:E4:DE:3F:CF:F1:9C:BE:35:A7:4D:C1:5B Authority key identifier: 0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C Certificate issuer: /CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c Certificate serial: 019B47019E324A8FF219464BECA6E2AC7A47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft Manifest number: 1189 Signing time: Mon 22 Dec 2025 17:00:46 +0000 Manifest this update: Mon 22 Dec 2025 17:00:46 +0000 Manifest next update: Tue 23 Dec 2025 17:00:46 +0000 Files and hashes: 1: DWutPz3QrFVvP3qA0cabn9lk3Ww.crl (hash: eUJcfQIKoZJa68lJRJHz7z0I0w1idOWdAUIZBDvDDzs=) 2: clB1f_NiIoBJs06I1N2ua9KcprY.roa (hash: Hc2uBMDIF+2ALpimHYsk+DChTWTq8OrIlMci+ZWtnyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:01:9e:32:4a:8f:f2:19:46:4b:ec:a6:e2:ac:7a:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c Validity Not Before: Dec 22 17:00:46 2025 GMT Not After : Dec 23 17:00:46 2025 GMT Subject: CN=4d5f9fed09d00b07e4de3fcff19cbe35a74dc15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:75:4e:dd:39:57:4f:f6:58:e6:f8:84:2b:9c: a6:0b:42:22:c1:80:d5:9b:b0:c3:cf:d2:92:cf:f1: b7:fd:00:51:a3:d2:ba:69:b1:7a:c6:c8:76:10:40: c7:58:84:70:1d:9b:94:06:a0:47:d4:a5:e3:1f:be: c8:9b:54:9f:07:4b:34:a7:e7:ed:47:ca:07:a4:45: c8:cc:b1:d6:cb:72:7a:91:18:1f:87:8b:d7:e3:27: bd:38:50:c2:28:8a:25:e0:62:cb:17:34:80:c9:57: 6f:48:fb:39:8b:dd:48:67:1d:16:4b:22:9d:59:9d: e0:39:0d:da:b6:f1:38:d1:45:4e:01:0d:4c:6f:89: 27:bc:2c:50:34:6d:5a:e7:22:6c:29:92:90:94:b8: 37:35:69:8f:e9:9d:b0:8f:72:cf:94:2d:9a:d9:75: e4:09:91:a1:6f:34:7f:b3:67:b2:51:60:b8:98:9c: 1e:ee:14:ec:b0:51:72:0e:71:1b:12:61:8b:a5:b5: 08:14:2b:98:0e:a4:fe:33:95:fa:94:3e:15:36:54: e1:36:d4:e9:85:6f:cc:24:b1:ec:52:18:b4:6d:49: 29:db:3c:ea:f7:36:a8:d2:1e:ec:48:14:eb:58:0a: 35:dd:33:df:e7:94:6e:cd:85:f1:9b:89:90:00:8f: 82:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5F:9F:ED:09:D0:0B:07:E4:DE:3F:CF:F1:9C:BE:35:A7:4D:C1:5B X509v3 Authority Key Identifier: keyid:0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:3b:8c:96:a1:cb:5e:75:12:1d:54:6b:80:21:6a:68:d9:04: c9:14:8b:a1:ee:4b:11:06:ef:97:d5:39:7a:2e:4a:ed:ff:f2: 62:3f:4c:89:88:cc:46:da:ef:45:1b:71:e6:45:53:dd:ae:8a: 63:3d:8b:ef:fa:34:83:5a:ab:b2:df:7b:c7:7e:a3:4c:13:4a: 89:87:ab:30:fb:a7:37:0c:1d:19:4f:2d:01:78:1b:14:e0:a0: 40:92:e2:43:a4:3e:1a:7f:4e:ac:96:f8:6b:bd:85:1b:c0:77: e3:4e:ca:46:a4:6f:55:b1:f1:52:fd:1a:6c:d5:96:ea:25:59: be:e3:21:65:7f:21:90:91:57:70:63:d5:9c:29:4b:38:2b:3e: 8c:b5:be:76:95:69:4c:53:ec:5e:2f:93:05:c3:01:da:ed:82: f9:6a:05:1e:01:06:37:e9:1f:4a:01:c1:63:bc:37:f7:f0:f8: 91:47:54:d1:b0:1d:24:28:42:fa:57:8e:00:71:53:a2:55:81: d8:35:c0:63:82:d9:10:2c:a0:38:16:b0:49:fd:43:72:20:d6: 9c:2b:5d:1c:c8:a7:11:b5:37:47:84:b3:e3:c4:da:3c:61:1a: 7a:da:3d:c3:6d:39:9a:ce:5a:c4:ae:07:51:66:6e:e4:ba:04: d0:63:3c:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAZ4ySo/yGUZL7KbirHpHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNmJhZDNmM2RkMGFjNTU2ZjNmN2E4MGQxYzY5YjlmZDk2 NGRkNmMwHhcNMjUxMjIyMTcwMDQ2WhcNMjUxMjIzMTcwMDQ2WjAzMTEwLwYDVQQD Eyg0ZDVmOWZlZDA5ZDAwYjA3ZTRkZTNmY2ZmMTljYmUzNWE3NGRjMTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHVO3TlXT/ZY5viEK5ymC0IiwYDV m7DDz9KSz/G3/QBRo9K6abF6xsh2EEDHWIRwHZuUBqBH1KXjH77Im1SfB0s0p+ft R8oHpEXIzLHWy3J6kRgfh4vX4ye9OFDCKIol4GLLFzSAyVdvSPs5i91IZx0WSyKd WZ3gOQ3atvE40UVOAQ1Mb4knvCxQNG1a5yJsKZKQlLg3NWmP6Z2wj3LPlC2a2XXk CZGhbzR/s2eyUWC4mJwe7hTssFFyDnEbEmGLpbUIFCuYDqT+M5X6lD4VNlThNtTp hW/MJLHsUhi0bUkp2zzq9zao0h7sSBTrWAo13TPf55RuzYXxm4mQAI+C6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1fn+0J0AsH5N4/z/GcvjWnTcFbMB8GA1UdIwQY MBaAFA1rrT890KxVbz96gNHGm5/ZZN1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFd1dFB6M1FyRlZ2UDNxQTBjYWJuOWxrM1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hY2E3MzYtNDA4OC00ODBiLWFmNWYt ODliNmMyMTlkOTBiLzEvRFd1dFB6M1FyRlZ2UDNxQTBjYWJuOWxrM1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9hY2E3MzYtNDA4OC00ODBiLWFmNWYtODliNmMyMTlkOTBi LzEvRFd1dFB6M1FyRlZ2UDNxQTBjYWJuOWxrM1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDuMlqHL XnUSHVRrgCFqaNkEyRSLoe5LEQbvl9U5ei5K7f/yYj9MiYjMRtrvRRtx5kVT3a6K Yz2L7/o0g1qrst97x36jTBNKiYerMPunNwwdGU8tAXgbFOCgQJLiQ6Q+Gn9OrJb4 a72FG8B3407KRqRvVbHxUv0abNWW6iVZvuMhZX8hkJFXcGPVnClLOCs+jLW+dpVp TFPsXi+TBcMB2u2C+WoFHgEGN+kfSgHBY7w39/D4kUdU0bAdJChC+leOAHFTolWB 2DXAY4LZECygOBawSf1DciDWnCtdHMinEbU3R4Sz48TaPGEaeto9w205ms5axK4H UWZu5LoE0GM86w== -----END CERTIFICATE-----Generated at Mon Dec 22 20:48:57 2025 by rpki-client