This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft File: PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft (raw, json) Hash identifier: aGVtlNiLoGYWCdpfwXoLo/RC+JGoHQIzvAaBGpEJl/A= Subject key identifier: 1F:DF:9C:AF:CE:E1:71:31:9A:C5:71:39:9A:B4:94:18:AD:64:57:4E Authority key identifier: 3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68 Certificate issuer: /CN=3d639fa4eddc162df3659e721d247ff338962f68 Certificate serial: 019B43250959EBC025A9EFEB54CFCD0FC40D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft Manifest number: 61 Signing time: Sun 21 Dec 2025 23:00:59 +0000 Manifest this update: Sun 21 Dec 2025 23:00:59 +0000 Manifest next update: Mon 22 Dec 2025 23:00:59 +0000 Files and hashes: 1: PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl (hash: q4VEhqLHAtOv5NmvcM5WkHOdH4MWBx2ucoEDN0FhK/g=) 2: mUsc8rGd4_JM4XnD9bClRCU4zxo.roa (hash: 3sss9GFoAf2253c6EyBbZyTorugY9kFPDM+aiR2bERI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:09:59:eb:c0:25:a9:ef:eb:54:cf:cd:0f:c4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d639fa4eddc162df3659e721d247ff338962f68 Validity Not Before: Dec 21 23:00:59 2025 GMT Not After : Dec 22 23:00:59 2025 GMT Subject: CN=1fdf9cafcee171319ac571399ab49418ad64574e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1d:06:13:d9:51:12:b2:63:10:14:9a:19:da: 83:b4:95:b2:a0:3e:e7:5d:9b:ea:80:25:0c:93:bb: 39:17:f3:a7:65:7f:f3:24:8f:07:b7:66:01:24:1c: 53:8f:c0:12:6c:eb:b5:6f:84:95:50:f8:8f:f7:19: b0:32:1c:20:57:ca:6a:11:eb:9b:dc:89:2b:89:60: c2:a9:5c:ef:61:37:13:20:77:4a:1a:2a:bd:61:46: 00:91:15:d1:e5:cb:1c:72:76:3e:c0:26:ce:55:c2: ed:1d:65:f7:3e:f8:d5:93:5e:c5:26:14:2a:77:e5: 21:db:55:99:b7:25:a3:1d:7e:2d:68:be:7d:c5:f6: d5:93:38:92:25:6b:0a:af:cf:61:d8:d9:a2:6d:eb: 0a:4e:00:7e:ce:bb:e5:bb:86:7b:9a:59:0d:e1:c8: d4:36:ed:c2:cd:82:55:3e:46:7d:aa:0c:d9:51:1c: 21:18:ab:fc:f3:e4:86:88:fc:01:93:37:e1:70:0b: 5b:a4:8b:26:98:d6:55:81:cc:e9:6b:44:74:23:46: 3f:7b:41:3f:cc:78:3d:2c:90:bc:33:bc:01:8c:a2: d3:e5:3e:bb:12:a3:be:47:f2:ab:27:cc:0b:df:50: f5:46:09:b3:5c:3f:4f:17:4f:2b:d3:c3:c3:04:4b: 2e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DF:9C:AF:CE:E1:71:31:9A:C5:71:39:9A:B4:94:18:AD:64:57:4E X509v3 Authority Key Identifier: keyid:3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:93:bc:2d:72:48:16:56:4c:2f:e0:a2:60:d3:44:3e:2f:05: dc:3c:71:88:ab:e9:48:73:55:8b:a3:07:c7:86:5a:12:50:25: 47:0d:e1:c7:66:04:ab:63:15:5f:b1:99:77:6a:b8:6f:9b:f4: 7d:af:71:9e:ce:29:fe:f3:2e:d5:be:e2:c0:13:ee:a7:35:a1: b1:9a:04:a7:de:f7:28:06:00:27:8b:26:93:f6:3d:10:f0:cf: 54:c8:12:f4:30:39:c1:a2:51:f0:58:b0:53:08:1d:10:8f:33: 2a:1f:99:d5:a4:89:59:97:63:ba:0b:8b:10:be:88:11:26:a5: 31:a0:ed:ed:ef:f0:c3:12:82:9d:0a:43:24:be:f8:79:6b:98: 9d:44:a7:01:e3:c4:75:1c:05:7e:49:73:39:6e:90:5c:34:89: a6:2c:c6:b2:4e:71:9b:12:08:25:59:cc:93:b6:be:04:31:41: b7:8f:7d:e8:5d:cb:ae:b6:95:08:cd:0d:4f:ce:16:a6:42:8c: a0:06:57:d0:d0:39:d0:7a:59:db:03:f7:0b:68:29:ea:3c:bf: 19:4b:35:f0:dd:09:a0:82:12:40:3d:5d:ec:89:ed:70:eb:14: 1c:6b:92:36:95:a0:31:ac:4e:53:44:67:b6:43:18:fe:9e:2d: ab:c5:b3:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJQlZ68Alqe/rVM/ND8QNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNjM5ZmE0ZWRkYzE2MmRmMzY1OWU3MjFkMjQ3ZmYzMzg5 NjJmNjgwHhcNMjUxMjIxMjMwMDU5WhcNMjUxMjIyMjMwMDU5WjAzMTEwLwYDVQQD EygxZmRmOWNhZmNlZTE3MTMxOWFjNTcxMzk5YWI0OTQxOGFkNjQ1NzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh0GE9lRErJjEBSaGdqDtJWyoD7n XZvqgCUMk7s5F/OnZX/zJI8Ht2YBJBxTj8ASbOu1b4SVUPiP9xmwMhwgV8pqEeub 3IkriWDCqVzvYTcTIHdKGiq9YUYAkRXR5csccnY+wCbOVcLtHWX3PvjVk17FJhQq d+Uh21WZtyWjHX4taL59xfbVkziSJWsKr89h2NmibesKTgB+zrvlu4Z7mlkN4cjU Nu3CzYJVPkZ9qgzZURwhGKv88+SGiPwBkzfhcAtbpIsmmNZVgczpa0R0I0Y/e0E/ zHg9LJC8M7wBjKLT5T67EqO+R/KrJ8wL31D1RgmzXD9PF08r08PDBEsucQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/fnK/O4XExmsVxOZq0lBitZFdOMB8GA1UdIwQY MBaAFD1jn6Tt3BYt82Wech0kf/M4li9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFdPZnBPM2NGaTN6Wlo1eUhTUl84emlXTDJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jNzc5ODMtYmUzYS00OGUzLWI1ZDAt YWQyODRkMjgyNGE0LzEvUFdPZnBPM2NGaTN6Wlo1eUhTUl84emlXTDJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9jNzc5ODMtYmUzYS00OGUzLWI1ZDAtYWQyODRkMjgyNGE0 LzEvUFdPZnBPM2NGaTN6Wlo1eUhTUl84emlXTDJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJO8LXJI FlZML+CiYNNEPi8F3DxxiKvpSHNVi6MHx4ZaElAlRw3hx2YEq2MVX7GZd2q4b5v0 fa9xns4p/vMu1b7iwBPupzWhsZoEp973KAYAJ4smk/Y9EPDPVMgS9DA5waJR8Fiw UwgdEI8zKh+Z1aSJWZdjuguLEL6IESalMaDt7e/wwxKCnQpDJL74eWuYnUSnAePE dRwFfklzOW6QXDSJpizGsk5xmxIIJVnMk7a+BDFBt4996F3LrraVCM0NT84WpkKM oAZX0NA50HpZ2wP3C2gp6jy/GUs18N0JoIISQD1d7IntcOsUHGuSNpWgMaxOU0Rn tkMY/p4tq8Wz0A== -----END CERTIFICATE-----Generated at Mon Dec 22 06:35:09 2025 by rpki-client