This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft File: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft (raw, json) Hash identifier: 8PnQiFREIxUUlHyVxYGYgNbiVP2PdzJB054YoWY0KUU= Subject key identifier: 09:0F:82:74:D4:50:56:C8:92:24:BC:16:83:50:6A:AC:5A:97:3B:27 Authority key identifier: D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C Certificate issuer: /CN=d70af942465ff265b896f0d1b762490f27dc322c Certificate serial: 019AF3F7C252AB968BE9EB40AEFB1DD90D43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft Manifest number: 140D Signing time: Sat 06 Dec 2025 14:01:31 +0000 Manifest this update: Sat 06 Dec 2025 14:01:31 +0000 Manifest next update: Sun 07 Dec 2025 14:01:31 +0000 Files and hashes: 1: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl (hash: KY2t9WLLf/4wgHrOfWZ70JvxNyp441mX3KMPgTspE0A=) 2: do1YRGxwXBzhu7NScxWRh1sCTkI.roa (hash: tvb6mnRRTkKS3vhIPuaGGEBZgzp8Y6OmqBEm+R+Kc5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:c2:52:ab:96:8b:e9:eb:40:ae:fb:1d:d9:0d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70af942465ff265b896f0d1b762490f27dc322c Validity Not Before: Dec 6 14:01:31 2025 GMT Not After : Dec 7 14:01:31 2025 GMT Subject: CN=090f8274d45056c89224bc1683506aac5a973b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c3:1b:0f:06:d0:0b:ab:c9:ea:63:21:03:27: d3:a2:cf:53:5c:df:e2:c1:b7:89:aa:cd:ba:c1:f9: 00:18:72:49:62:50:ff:79:2e:58:37:a5:d3:9b:d3: 9b:ac:72:d6:cc:d4:17:c0:26:c9:17:64:c1:a9:3c: f6:52:06:40:c9:cc:db:67:f2:e9:d0:85:cb:15:11: e5:54:49:97:b2:c5:67:c3:96:ec:29:9a:d5:6d:e6: 30:6d:3b:49:1d:94:3e:ca:e9:34:14:81:c1:96:7d: 7c:ef:d4:f7:10:ad:de:9a:c1:67:73:89:89:26:b8: 4a:63:9f:3c:76:85:a4:37:03:b3:90:6b:a8:d8:df: 95:18:8c:d9:3a:bf:2d:d0:02:4d:a8:c9:1b:2a:95: 30:81:07:5c:fc:41:ec:34:3b:6b:c5:e3:bb:4e:96: d9:50:3d:d9:d7:29:89:42:eb:fb:f7:cf:83:25:e7: 67:6d:6c:3e:2d:a9:85:dd:2a:ba:6b:c9:76:8e:aa: 39:10:07:9d:e9:13:02:30:55:cc:8b:1b:13:9a:27: 4b:25:f5:3f:6b:a0:c0:25:13:ba:be:b4:cb:81:43: dd:2d:55:e2:99:35:5b:7e:76:bd:ab:22:55:7f:dc: 1c:ab:03:fd:ac:09:50:70:0c:15:95:95:79:86:0f: c7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0F:82:74:D4:50:56:C8:92:24:BC:16:83:50:6A:AC:5A:97:3B:27 X509v3 Authority Key Identifier: keyid:D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a9:61:b5:5f:36:8d:08:47:f5:2a:aa:c7:98:1e:d3:e1:73: 7b:6b:cb:9a:49:31:94:5f:98:71:43:cf:74:55:02:81:3c:31: 5f:d7:c3:46:1d:0c:87:80:52:f7:1a:c5:f6:ef:2a:42:33:f5: 3f:b6:1e:cb:b5:8d:8c:e8:e5:f3:a1:cc:55:f7:dc:84:ce:1e: 03:5b:26:c2:16:9c:3a:66:2b:79:41:96:f5:8a:6d:92:59:7b: ce:67:11:93:26:57:68:b4:10:25:ec:bb:7d:d5:f9:29:d8:80: 51:1c:07:97:ac:02:72:17:df:a7:e0:0b:84:d1:57:9b:60:7f: 03:85:34:39:c8:dd:26:e5:0f:46:47:dd:c9:69:2a:5a:31:42: a2:dd:ea:36:43:49:73:b2:42:b0:7d:a8:4c:4e:fa:af:9c:61: 79:fc:df:84:6d:66:65:f9:db:33:0f:c4:59:76:09:c8:8c:ab: c7:fd:95:b4:e1:25:c5:da:34:84:47:fa:2d:b1:4f:d9:c9:e2: a8:13:17:9a:b9:7b:48:0e:74:43:e0:71:d5:25:d9:6c:57:a1: f5:65:ff:f7:22:70:fd:95:a8:df:26:a6:9c:5a:97:6b:8f:c4: 01:91:c9:45:3c:b8:0b:6f:07:04:f3:5a:db:0d:90:e2:36:8f: 61:96:47:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz98JSq5aL6etArvsd2Q1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MGFmOTQyNDY1ZmYyNjViODk2ZjBkMWI3NjI0OTBmMjdk YzMyMmMwHhcNMjUxMjA2MTQwMTMxWhcNMjUxMjA3MTQwMTMxWjAzMTEwLwYDVQQD EygwOTBmODI3NGQ0NTA1NmM4OTIyNGJjMTY4MzUwNmFhYzVhOTczYjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMMbDwbQC6vJ6mMhAyfTos9TXN/i wbeJqs26wfkAGHJJYlD/eS5YN6XTm9ObrHLWzNQXwCbJF2TBqTz2UgZAyczbZ/Lp 0IXLFRHlVEmXssVnw5bsKZrVbeYwbTtJHZQ+yuk0FIHBln1879T3EK3emsFnc4mJ JrhKY588doWkNwOzkGuo2N+VGIzZOr8t0AJNqMkbKpUwgQdc/EHsNDtrxeO7TpbZ UD3Z1ymJQuv798+DJednbWw+LamF3Sq6a8l2jqo5EAed6RMCMFXMixsTmidLJfU/ a6DAJRO6vrTLgUPdLVXimTVbfna9qyJVf9wcqwP9rAlQcAwVlZV5hg/HZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkPgnTUUFbIkiS8FoNQaqxalzsnMB8GA1UdIwQY MBaAFNcK+UJGX/JluJbw0bdiSQ8n3DIsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdyNVFrWmY4bVc0bHZEUnQySkpEeWZjTWl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9lOTIwM2QtY2RjZi00ZjIzLWEzYmYt ZjQ0OWJhZDI5ODU1LzEvMXdyNVFrWmY4bVc0bHZEUnQySkpEeWZjTWl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9lOTIwM2QtY2RjZi00ZjIzLWEzYmYtZjQ0OWJhZDI5ODU1 LzEvMXdyNVFrWmY4bVc0bHZEUnQySkpEeWZjTWl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6lhtV82 jQhH9Sqqx5ge0+Fze2vLmkkxlF+YcUPPdFUCgTwxX9fDRh0Mh4BS9xrF9u8qQjP1 P7Yey7WNjOjl86HMVffchM4eA1smwhacOmYreUGW9Yptkll7zmcRkyZXaLQQJey7 fdX5KdiAURwHl6wCchffp+ALhNFXm2B/A4U0OcjdJuUPRkfdyWkqWjFCot3qNkNJ c7JCsH2oTE76r5xhefzfhG1mZfnbMw/EWXYJyIyrx/2VtOElxdo0hEf6LbFP2cni qBMXmrl7SA50Q+Bx1SXZbFeh9WX/9yJw/ZWo3yamnFqXa4/EAZHJRTy4C28HBPNa 2w2Q4jaPYZZHRA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:53 2025 by rpki-client