This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft File: pW4itGIL0EL3OiqWIfDJJH1RJIo.mft (raw, json) Hash identifier: 9JeVojHqGTFynmQtiK0OStwq1jvwFG8cshviBioPhu0= Subject key identifier: F5:38:BA:39:08:3B:9F:1E:9E:4D:BB:AD:7A:75:96:2F:B0:73:C7:2E Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A Certificate issuer: /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a Certificate serial: 019AF8E7D28F33970A912C2AC7A6DF05C1EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft Manifest number: 0188 Signing time: Sun 07 Dec 2025 13:02:13 +0000 Manifest this update: Sun 07 Dec 2025 13:02:13 +0000 Manifest next update: Mon 08 Dec 2025 13:02:13 +0000 Files and hashes: 1: nzgTTwbAHjDz2-zsShiAXUCqJOU.roa (hash: GBnP7tc+zXd9JtLmcvpJOSz2ArIIJJ/9cimz8hGmRDA=) 2: pW4itGIL0EL3OiqWIfDJJH1RJIo.crl (hash: 1lAow3Qg5S8ezgBuGTaM1cvlenRFkiCKMoFXDgdGR0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 13:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:e7:d2:8f:33:97:0a:91:2c:2a:c7:a6:df:05:c1:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a Validity Not Before: Dec 7 13:02:13 2025 GMT Not After : Dec 8 13:02:13 2025 GMT Subject: CN=f538ba39083b9f1e9e4dbbad7a75962fb073c72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:be:d4:9e:b8:7a:17:e7:c4:8f:e5:8c:68:0e: 89:b8:41:c1:17:05:44:47:f7:e3:4b:e5:4d:3a:28: 9a:e9:04:21:ec:ea:e0:a8:94:23:80:80:91:a6:dd: 2b:dc:41:ed:6a:20:51:72:fb:de:55:74:bc:03:f0: bc:a6:65:be:55:36:48:eb:2e:34:fa:d8:d9:02:41: 94:15:47:4f:30:b1:45:f2:43:52:f7:e1:0d:0a:c5: b2:74:c6:87:e7:6b:3f:46:b8:1c:f1:9c:22:dc:ae: 9f:d8:c2:c0:e3:12:a4:3c:87:6f:97:7f:38:3c:c3: 3b:34:64:1e:ef:5d:73:81:33:ac:01:3c:18:f0:90: 1b:a7:c3:bd:6f:c6:34:a0:f0:24:2c:79:2c:31:dd: 16:83:8e:e0:39:6a:78:18:7d:ad:9b:92:1c:ed:0c: 7e:44:1f:c5:37:a1:e6:a6:cb:bd:99:11:ef:44:11: 15:7e:be:53:02:fd:2c:ff:f9:87:7f:ce:b0:3d:bb: 29:9a:2d:08:99:c9:d7:04:ca:2e:e8:78:aa:a1:18: 75:9e:69:23:72:0d:38:55:f1:94:51:93:9a:9c:cf: 73:37:cb:9b:f7:6d:c4:c3:dd:d5:66:dc:fa:f0:25: e7:73:bc:62:50:44:3e:19:ad:4f:75:bd:ab:b8:6b: 46:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:38:BA:39:08:3B:9F:1E:9E:4D:BB:AD:7A:75:96:2F:B0:73:C7:2E X509v3 Authority Key Identifier: keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:c6:22:54:eb:f8:c0:0c:a5:c2:d5:6a:23:c2:07:8e:2b:ed: b7:60:89:eb:5d:34:db:e6:f0:74:69:d8:a4:c3:b4:a2:e6:bd: d0:8b:80:7e:ee:08:6f:a9:6c:56:38:d2:3d:f5:59:16:1c:0b: 48:fa:c7:fa:eb:c7:bf:9c:74:9f:7a:92:f6:3d:d3:b8:a5:0a: 41:70:b8:ed:29:2d:82:54:a3:0c:15:e3:ec:dd:b3:24:f4:e5: f9:aa:6b:c3:09:87:00:3d:47:ec:7c:db:3d:f8:62:d4:e5:70: 2b:3f:cd:b4:81:9f:c6:0a:c1:ff:4b:ea:55:29:b8:61:64:70: b9:01:ff:0d:7f:cd:6e:43:58:21:df:4f:97:78:0e:47:c7:23: 03:1f:83:cf:ff:3f:cc:d7:69:8a:e0:79:07:d5:6e:a5:20:28: 2c:71:6d:9a:73:51:e0:a5:75:13:85:b0:fd:f8:7b:64:25:fa: dd:97:f0:ea:6e:b2:4b:6b:79:f5:14:9f:b6:da:23:6f:a1:99: 92:b8:12:ee:af:da:54:31:fb:39:29:53:c1:e2:80:5e:f6:5b: 46:a1:5f:95:6c:01:59:b5:b3:d9:85:55:74:16:a3:68:66:a0: 31:56:ec:b3:d0:97:e7:96:ef:e8:dc:d5:97:36:f5:86:c9:d0: f6:c0:7a:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr459KPM5cKkSwqx6bfBcHqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NmUyMmI0NjIwYmQwNDJmNzNhMmE5NjIxZjBjOTI0N2Q1 MTI0OGEwHhcNMjUxMjA3MTMwMjEzWhcNMjUxMjA4MTMwMjEzWjAzMTEwLwYDVQQD EyhmNTM4YmEzOTA4M2I5ZjFlOWU0ZGJiYWQ3YTc1OTYyZmIwNzNjNzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb7Unrh6F+fEj+WMaA6JuEHBFwVE R/fjS+VNOiia6QQh7OrgqJQjgICRpt0r3EHtaiBRcvveVXS8A/C8pmW+VTZI6y40 +tjZAkGUFUdPMLFF8kNS9+ENCsWydMaH52s/Rrgc8Zwi3K6f2MLA4xKkPIdvl384 PMM7NGQe711zgTOsATwY8JAbp8O9b8Y0oPAkLHksMd0Wg47gOWp4GH2tm5Ic7Qx+ RB/FN6Hmpsu9mRHvRBEVfr5TAv0s//mHf86wPbspmi0ImcnXBMou6HiqoRh1nmkj cg04VfGUUZOanM9zN8ub923Ew93VZtz68CXnc7xiUEQ+Ga1Pdb2ruGtG6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPU4ujkIO58enk27rXp1li+wc8cuMB8GA1UdIwQY MBaAFKVuIrRiC9BC9zoqliHwySR9USSKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFc0aXRHSUwwRUwzT2lxV0lmREpKSDFSSklvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iNzgxOGQtMzI5OC00MDY5LTgyOTAt YzZlMWNmZDYwNjYxLzEvcFc0aXRHSUwwRUwzT2lxV0lmREpKSDFSSklvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9iNzgxOGQtMzI5OC00MDY5LTgyOTAtYzZlMWNmZDYwNjYx LzEvcFc0aXRHSUwwRUwzT2lxV0lmREpKSDFSSklvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsMYiVOv4 wAylwtVqI8IHjivtt2CJ61002+bwdGnYpMO0oua90IuAfu4Ib6lsVjjSPfVZFhwL SPrH+uvHv5x0n3qS9j3TuKUKQXC47SktglSjDBXj7N2zJPTl+aprwwmHAD1H7Hzb Pfhi1OVwKz/NtIGfxgrB/0vqVSm4YWRwuQH/DX/NbkNYId9Pl3gOR8cjAx+Dz/8/ zNdpiuB5B9VupSAoLHFtmnNR4KV1E4Ww/fh7ZCX63Zfw6m6yS2t59RSfttojb6GZ krgS7q/aVDH7OSlTweKAXvZbRqFflWwBWbWz2YVVdBajaGagMVbss9CX55bv6NzV lzb1hsnQ9sB6+w== -----END CERTIFICATE-----Generated at Sun Dec 7 21:35:56 2025 by rpki-client