This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft File: W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json) Hash identifier: gr1GuHPDqOZNq+mpyDV0O0z0N8KVaNUQdOg1Y48Gv0o= Subject key identifier: 3A:22:EA:CF:2E:75:93:FE:9F:84:20:8C:3C:74:53:0A:62:26:A3:D9 Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e Certificate serial: 019B2B1D1A8A4E688F9837F8A1FB8AE9218E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft Manifest number: 167E Signing time: Wed 17 Dec 2025 07:01:26 +0000 Manifest this update: Wed 17 Dec 2025 07:01:26 +0000 Manifest next update: Thu 18 Dec 2025 07:01:26 +0000 Files and hashes: 1: 4wGntNc85Yvx0ypR88J1OukuDr4.roa (hash: pBVnEWBMMIGiHwfDW8kLnJrA2UUG/riqaCBWB/OBtY4=) 2: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: KD6b3HpENuFGMQnjMmzmzL08Et5GKxaD7834ox8Zkas=) 3: e7uWgt7T0lZJq9oaz7pgmz5YCU0.roa (hash: vlPlcyroUG1L25J38Irl5ZjN6BImmzz1Gl5tGlK8/3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1d:1a:8a:4e:68:8f:98:37:f8:a1:fb:8a:e9:21:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e Validity Not Before: Dec 17 07:01:26 2025 GMT Not After : Dec 18 07:01:26 2025 GMT Subject: CN=3a22eacf2e7593fe9f84208c3c74530a6226a3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8e:c0:0e:c7:85:06:01:7f:9c:2f:b9:2c:43: 0d:cc:45:a0:84:d9:38:3b:e1:18:22:44:b9:72:e1: c9:29:ba:7a:46:4b:25:4d:02:16:6e:54:b3:18:26: a7:f2:c2:45:3f:21:0c:54:2f:b8:a1:f9:1c:96:d1: ed:46:7f:f3:ef:07:59:ff:f2:24:b0:44:f3:62:9c: a3:5f:e7:57:2d:70:e2:16:b3:5b:61:e1:09:64:ef: 8c:cc:21:9d:d9:c6:84:e8:7e:65:a4:69:9d:f1:96: a2:4e:a7:5c:90:f0:b1:75:03:8d:a5:7b:b9:db:6f: e9:ac:2a:5a:5b:1b:23:e8:e3:74:f5:aa:1b:0d:b8: c6:97:58:f4:92:2d:ef:e8:f5:10:d1:72:90:17:ab: 1a:28:11:2e:d7:9d:fd:e4:3b:30:79:b3:2b:3c:04: 67:95:a7:cd:05:83:ae:73:f2:73:53:c3:94:95:19: 49:cb:19:f8:52:48:bd:9b:5d:a3:c7:03:ec:c8:ee: 8c:f5:59:1f:44:8c:d6:85:f6:13:d9:cf:02:b4:ac: a6:42:98:53:86:1c:f4:d8:84:6c:e8:06:33:32:36: ea:eb:99:61:b4:12:a7:17:8e:ae:ee:49:7a:f5:3c: c5:07:1c:f5:67:a4:ac:f9:6e:c2:e1:6a:3d:20:ca: 76:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:22:EA:CF:2E:75:93:FE:9F:84:20:8C:3C:74:53:0A:62:26:A3:D9 X509v3 Authority Key Identifier: keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:6f:4a:50:c8:45:d5:85:b8:56:76:34:0f:c7:d3:b9:38:e5: 1c:1a:0f:a7:4e:9a:3e:db:c0:f1:78:36:ca:9e:a6:a8:6d:8e: 66:78:0c:9a:b8:d0:15:42:cb:b3:c3:ea:41:df:56:ed:3a:0c: 4c:3c:43:22:6c:2c:c2:22:7e:4f:7e:9b:7c:85:55:cf:12:03: 05:86:3f:ae:7d:4a:20:72:bb:34:21:1f:b1:df:70:52:95:a9: 44:29:3e:31:44:ec:60:d8:90:dc:a4:f8:46:ab:ca:a3:10:28: 69:53:56:16:c5:4b:ed:d4:df:a3:35:f4:44:5c:30:3c:90:f6: 74:92:c2:cf:0c:26:73:ac:0d:5b:5b:6f:ff:10:b0:19:00:11: 24:54:19:61:0c:65:46:1b:34:a0:9c:68:e8:27:92:ff:42:d4: 32:ce:3c:74:d5:46:fc:33:1b:11:16:b5:4f:d2:f3:84:43:19: 37:c7:ba:ad:5b:ee:5c:74:d2:46:47:a7:58:4b:33:26:0e:6d: f2:26:e4:3a:d5:3b:43:52:29:e9:20:67:b4:e3:8e:a1:07:9e: 3b:36:37:6b:43:c7:a9:81:57:fe:62:dd:19:7b:3d:f4:1e:1c: 4e:1f:a0:d4:35:95:b1:eb:ad:3a:c5:4f:d3:e8:d6:fd:30:49: 64:6d:3b:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHRqKTmiPmDf4ofuK6SGOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViN2E5MDVlMjVhNGQ1Y2NjYjJlZWJlNGUyZDVjMzkyMDgx OTc1OGUwHhcNMjUxMjE3MDcwMTI2WhcNMjUxMjE4MDcwMTI2WjAzMTEwLwYDVQQD EygzYTIyZWFjZjJlNzU5M2ZlOWY4NDIwOGMzYzc0NTMwYTYyMjZhM2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs47ADseFBgF/nC+5LEMNzEWghNk4 O+EYIkS5cuHJKbp6RkslTQIWblSzGCan8sJFPyEMVC+4ofkcltHtRn/z7wdZ//Ik sETzYpyjX+dXLXDiFrNbYeEJZO+MzCGd2caE6H5lpGmd8ZaiTqdckPCxdQONpXu5 22/prCpaWxsj6ON09aobDbjGl1j0ki3v6PUQ0XKQF6saKBEu15395DswebMrPARn lafNBYOuc/JzU8OUlRlJyxn4Uki9m12jxwPsyO6M9VkfRIzWhfYT2c8CtKymQphT hhz02IRs6AYzMjbq65lhtBKnF46u7kl69TzFBxz1Z6Ss+W7C4Wo9IMp2cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDoi6s8udZP+n4QgjDx0UwpiJqPZMB8GA1UdIwQY MBaAFFt6kF4lpNXMyy7r5OLVw5IIGXWOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzNxUVhpV2sxY3pMTHV2azR0WERrZ2daZFk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jMTIzOTUtYzBmOC00ZTA1LThjYjEt NzNhM2QwN2QyYzMxLzEvVzNxUVhpV2sxY3pMTHV2azR0WERrZ2daZFk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jMTIzOTUtYzBmOC00ZTA1LThjYjEtNzNhM2QwN2QyYzMx LzEvVzNxUVhpV2sxY3pMTHV2azR0WERrZ2daZFk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMm9KUMhF 1YW4VnY0D8fTuTjlHBoPp06aPtvA8Xg2yp6mqG2OZngMmrjQFULLs8PqQd9W7ToM TDxDImwswiJ+T36bfIVVzxIDBYY/rn1KIHK7NCEfsd9wUpWpRCk+MUTsYNiQ3KT4 RqvKoxAoaVNWFsVL7dTfozX0RFwwPJD2dJLCzwwmc6wNW1tv/xCwGQARJFQZYQxl Rhs0oJxo6CeS/0LUMs48dNVG/DMbERa1T9LzhEMZN8e6rVvuXHTSRkenWEszJg5t 8ibkOtU7Q1Ip6SBntOOOoQeeOzY3a0PHqYFX/mLdGXs99B4cTh+g1DWVseutOsVP 0+jW/TBJZG07lg== -----END CERTIFICATE-----Generated at Wed Dec 17 16:38:12 2025 by rpki-client