This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft File: MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft (raw, json) Hash identifier: fctgavBedIbBQ5DDTq2LPikToxNRTWvyXcQ1ODF9FOk= Subject key identifier: 80:DF:10:D8:69:1B:BA:0E:AD:AC:62:AC:71:91:9E:21:ED:4F:54:22 Authority key identifier: 31:6B:3F:33:4E:26:91:10:69:0E:9E:C6:A7:A5:85:DF:E4:FE:87:04 Certificate issuer: /CN=316b3f334e269110690e9ec6a7a585dfe4fe8704 Certificate serial: 019B202B573B0887BC6B5BDDC76A3F48E8D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft Manifest number: 102B Signing time: Mon 15 Dec 2025 04:01:09 +0000 Manifest this update: Mon 15 Dec 2025 04:01:09 +0000 Manifest next update: Tue 16 Dec 2025 04:01:09 +0000 Files and hashes: 1: MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl (hash: Z9mTSV/jIfzZD5Hc7cNLX+2+d+gq3gvDyAl8dXirqk4=) 2: jlPrG3yw9VWSwdIgD6U56n3FJO4.roa (hash: //BBruzTksW7mSOBdLHpnW4EtV41ZFbnLnxHoJuolZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 04:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:2b:57:3b:08:87:bc:6b:5b:dd:c7:6a:3f:48:e8:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=316b3f334e269110690e9ec6a7a585dfe4fe8704 Validity Not Before: Dec 15 04:01:09 2025 GMT Not After : Dec 16 04:01:09 2025 GMT Subject: CN=80df10d8691bba0eadac62ac71919e21ed4f5422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:39:0e:d7:b8:b6:7f:5e:67:ee:e4:b8:93:c2: 0c:a2:ca:f9:5a:8a:1c:39:57:e4:8b:a1:a7:d6:c6: f4:63:81:ab:2a:70:bc:08:79:2a:d9:c7:5a:d4:72: 47:28:32:91:02:6b:ee:59:3d:0a:b4:65:ad:69:af: dd:36:1e:c2:f2:b3:77:31:45:d5:13:22:d7:22:18: 48:82:84:5a:0c:69:30:7c:78:30:7c:a8:3c:cf:53: a2:b6:09:c3:71:00:d0:41:a8:c9:e1:a7:32:1f:53: 0b:21:b0:b2:89:f1:65:12:de:b5:df:23:ef:91:27: 6a:5e:b6:f2:22:60:5a:d6:9b:64:b2:8a:c1:76:d0: 14:67:ca:d9:7d:5f:f6:76:09:2f:e7:e6:ea:02:f7: 55:42:1f:43:e0:3f:d4:8d:7e:98:74:b5:24:1e:b2: 25:17:a6:3e:85:36:c4:a8:cc:1c:93:ab:f4:bc:12: 1e:55:e5:11:0f:0e:df:3d:79:6d:5e:08:09:08:84: fe:86:22:9a:9c:c5:ac:05:4b:fa:62:d2:6c:aa:f0: 68:58:50:ec:a7:a9:f1:54:59:43:a1:61:3c:a7:18: ed:58:8b:ff:0c:4c:1d:2b:2e:8b:c2:59:2c:b0:65: df:56:45:75:0c:74:21:e9:61:23:36:18:11:a0:01: f6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DF:10:D8:69:1B:BA:0E:AD:AC:62:AC:71:91:9E:21:ED:4F:54:22 X509v3 Authority Key Identifier: keyid:31:6B:3F:33:4E:26:91:10:69:0E:9E:C6:A7:A5:85:DF:E4:FE:87:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:12:fd:ed:f6:83:d1:9e:6c:ea:15:8d:3d:1a:8b:7e:d8:8b: 8c:c0:81:57:81:41:d0:57:10:e1:bc:93:7e:5b:b3:85:7b:56: 59:40:2d:c5:29:eb:14:dd:36:f0:1d:39:f0:fa:b1:7a:7c:65: 0f:35:1e:eb:40:b1:32:17:27:3b:50:d5:e8:06:a6:cc:71:17: ba:63:2b:50:f0:a3:e4:e4:be:87:f6:56:d6:1f:23:2d:1b:9e: 5b:f2:a4:25:5e:15:58:bc:f0:90:c1:f0:fe:d2:d1:29:49:da: a8:0f:0f:b2:3b:24:4a:81:bd:d7:0b:f5:59:1f:15:90:cc:54: 88:e2:3f:74:57:d2:1b:f3:7e:b3:d7:f7:c2:c1:0e:4b:03:46: 1e:ec:a1:b8:a2:6b:d3:73:98:53:1b:2b:90:0a:da:61:71:05: e6:27:e8:4e:7f:10:67:83:36:b6:19:2d:af:fb:7b:9c:7f:07: 9e:c9:59:e8:c7:8d:28:87:46:f0:24:28:08:82:f0:40:3e:3c: 3d:31:9f:bb:65:31:dc:4e:b8:5d:ee:25:20:20:2e:72:65:e5: b4:e7:2e:34:80:36:d5:8d:0b:3e:13:13:99:6a:64:3d:40:10: 06:85:7b:93:4b:6d:e2:23:fd:14:3b:8c:ad:6b:13:5d:55:14: c6:bd:4a:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgK1c7CIe8a1vdx2o/SOjUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNmIzZjMzNGUyNjkxMTA2OTBlOWVjNmE3YTU4NWRmZTRm ZTg3MDQwHhcNMjUxMjE1MDQwMTA5WhcNMjUxMjE2MDQwMTA5WjAzMTEwLwYDVQQD Eyg4MGRmMTBkODY5MWJiYTBlYWRhYzYyYWM3MTkxOWUyMWVkNGY1NDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljkO17i2f15n7uS4k8IMosr5Wooc OVfki6Gn1sb0Y4GrKnC8CHkq2cda1HJHKDKRAmvuWT0KtGWtaa/dNh7C8rN3MUXV EyLXIhhIgoRaDGkwfHgwfKg8z1OitgnDcQDQQajJ4acyH1MLIbCyifFlEt613yPv kSdqXrbyImBa1ptksorBdtAUZ8rZfV/2dgkv5+bqAvdVQh9D4D/UjX6YdLUkHrIl F6Y+hTbEqMwck6v0vBIeVeURDw7fPXltXggJCIT+hiKanMWsBUv6YtJsqvBoWFDs p6nxVFlDoWE8pxjtWIv/DEwdKy6LwlkssGXfVkV1DHQh6WEjNhgRoAH2nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDfENhpG7oOraxirHGRniHtT1QiMB8GA1UdIwQY MBaAFDFrPzNOJpEQaQ6exqelhd/k/ocEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVdzX00wNG1rUkJwRHA3R3A2V0YzLVQtaHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84Y2NkNmQtMTM0Yy00ZWJiLWFlZmMt ZWM2MDM5MjY2MDBiLzEvTVdzX00wNG1rUkJwRHA3R3A2V0YzLVQtaHdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84Y2NkNmQtMTM0Yy00ZWJiLWFlZmMtZWM2MDM5MjY2MDBi LzEvTVdzX00wNG1rUkJwRHA3R3A2V0YzLVQtaHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxL97faD 0Z5s6hWNPRqLftiLjMCBV4FB0FcQ4byTfluzhXtWWUAtxSnrFN028B058Pqxenxl DzUe60CxMhcnO1DV6AamzHEXumMrUPCj5OS+h/ZW1h8jLRueW/KkJV4VWLzwkMHw /tLRKUnaqA8PsjskSoG91wv1WR8VkMxUiOI/dFfSG/N+s9f3wsEOSwNGHuyhuKJr 03OYUxsrkAraYXEF5ifoTn8QZ4M2thktr/t7nH8HnslZ6MeNKIdG8CQoCILwQD48 PTGfu2Ux3E64Xe4lICAucmXltOcuNIA21Y0LPhMTmWpkPUAQBoV7k0tt4iP9FDuM rWsTXVUUxr1KCA== -----END CERTIFICATE-----Generated at Mon Dec 15 13:21:33 2025 by rpki-client