This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft File: w6nl9TVmI-HCjy22k-BfxtYEzIE.mft (raw, json) Hash identifier: j/8UfBvU14b4Ga91RE3G6cpa5/27YVnSWimRXGXKCbU= Subject key identifier: 29:09:66:A0:B5:72:BB:91:E2:C1:13:1C:AB:46:43:5B:E4:67:DD:C4 Authority key identifier: C3:A9:E5:F5:35:66:23:E1:C2:8F:2D:B6:93:E0:5F:C6:D6:04:CC:81 Certificate issuer: /CN=c3a9e5f5356623e1c28f2db693e05fc6d604cc81 Certificate serial: 019AF12E0A487AC0BD17475500EB20E3F93D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft Manifest number: 01EE Signing time: Sat 06 Dec 2025 01:01:57 +0000 Manifest this update: Sat 06 Dec 2025 01:01:57 +0000 Manifest next update: Sun 07 Dec 2025 01:01:57 +0000 Files and hashes: 1: w6nl9TVmI-HCjy22k-BfxtYEzIE.crl (hash: r1nEpDj+38rDsWVROqGIHpb5/B5unxPkzpzAR2aMNNY=) 2: yOFLOKqrASqCbG9H8LDQX86pKIw.roa (hash: XxA6ziYUOm/wMTbCGGt/j2IVpWOap4P3oBr16w5IzVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:0a:48:7a:c0:bd:17:47:55:00:eb:20:e3:f9:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a9e5f5356623e1c28f2db693e05fc6d604cc81 Validity Not Before: Dec 6 01:01:57 2025 GMT Not After : Dec 7 01:01:57 2025 GMT Subject: CN=290966a0b572bb91e2c1131cab46435be467ddc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6f:e5:73:7b:0a:83:a4:4a:17:66:d8:9b:8c: ed:09:fc:50:d1:45:0b:03:a6:63:32:69:ed:ad:de: 7c:47:c1:7e:fc:0b:90:b6:1f:12:12:e2:1e:80:8a: b8:d5:2c:67:42:71:26:71:eb:32:8d:ac:f2:73:21: 03:f1:9e:eb:42:f4:6e:de:69:d4:3a:15:4a:db:e6: 75:fa:c9:a5:ea:8b:10:a9:79:2f:2c:62:f1:aa:79: b9:88:ed:69:9b:25:1c:25:f3:42:e4:e0:5f:0c:ea: c6:c5:12:4a:3d:fa:54:70:cb:48:38:b1:91:fa:63: c8:2a:5d:c1:6a:ad:a8:70:e8:c3:13:82:54:8f:f8: 99:28:25:b9:93:d7:29:58:93:7f:0f:0a:5f:ed:44: 02:af:43:7e:47:7e:25:96:21:73:59:1d:08:15:9b: 21:b6:c5:dc:79:c9:50:94:56:bc:31:56:6e:cb:02: 19:ed:76:3e:7e:6a:f3:4f:88:16:ca:bf:62:05:dd: a1:c6:08:5b:73:69:04:c2:3a:83:6c:f7:bd:18:6a: fa:56:db:f1:26:5f:d4:0c:ed:14:eb:f9:8a:3d:5b: 60:4d:c1:72:3f:81:82:d2:82:7d:1b:48:94:c2:d9: 55:7f:29:c9:62:8e:f3:93:2a:1c:56:6a:30:1e:a7: cc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:09:66:A0:B5:72:BB:91:E2:C1:13:1C:AB:46:43:5B:E4:67:DD:C4 X509v3 Authority Key Identifier: keyid:C3:A9:E5:F5:35:66:23:E1:C2:8F:2D:B6:93:E0:5F:C6:D6:04:CC:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:d6:65:e3:b4:15:2c:6c:b7:21:6a:85:aa:e3:f3:ea:29:20: fb:21:f9:e5:55:90:4b:71:71:aa:e2:bb:b4:d5:74:79:75:9f: 9b:53:1b:84:78:a1:a5:78:24:af:ed:36:ef:a4:bb:cc:17:21: dd:56:d9:e9:05:46:46:1c:ff:20:b5:53:4c:da:dd:0c:87:c0: e8:22:bc:25:3b:a6:f2:84:6a:24:09:af:79:84:f2:5e:11:cd: 93:5b:97:a0:14:ea:bb:35:9e:d5:30:8b:06:80:05:70:88:a5: 60:8e:ad:04:37:73:93:85:04:7b:5b:9b:86:06:72:d3:d8:01: d8:42:22:1d:c7:30:39:5d:fd:2a:f1:2e:89:c6:ae:50:24:1f: 57:0b:58:10:2f:cc:2f:8e:63:0a:29:07:2e:31:e0:64:2f:f4: a4:ff:8b:15:11:d2:11:e7:f0:b0:be:67:96:e4:e1:33:80:0e: 1c:e6:1f:be:a0:c1:56:9c:aa:6f:5f:bf:a4:81:c3:54:39:c2: 20:c9:e4:f1:a1:b1:43:c8:90:7d:5d:e0:70:a2:63:a6:5d:cf: 78:9f:ce:e4:dc:cd:87:a6:b2:03:bb:da:51:02:71:ca:89:2a: cb:97:04:64:33:5a:ad:ff:dd:64:25:1c:29:6b:ea:b1:ea:e4: 2a:4d:0d:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgpIesC9F0dVAOsg4/k9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYTllNWY1MzU2NjIzZTFjMjhmMmRiNjkzZTA1ZmM2ZDYw NGNjODEwHhcNMjUxMjA2MDEwMTU3WhcNMjUxMjA3MDEwMTU3WjAzMTEwLwYDVQQD EygyOTA5NjZhMGI1NzJiYjkxZTJjMTEzMWNhYjQ2NDM1YmU0NjdkZGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG/lc3sKg6RKF2bYm4ztCfxQ0UUL A6ZjMmntrd58R8F+/AuQth8SEuIegIq41SxnQnEmcesyjazycyED8Z7rQvRu3mnU OhVK2+Z1+sml6osQqXkvLGLxqnm5iO1pmyUcJfNC5OBfDOrGxRJKPfpUcMtIOLGR +mPIKl3Baq2ocOjDE4JUj/iZKCW5k9cpWJN/Dwpf7UQCr0N+R34lliFzWR0IFZsh tsXceclQlFa8MVZuywIZ7XY+fmrzT4gWyr9iBd2hxghbc2kEwjqDbPe9GGr6Vtvx Jl/UDO0U6/mKPVtgTcFyP4GC0oJ9G0iUwtlVfynJYo7zkyocVmowHqfMLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkJZqC1cruR4sETHKtGQ1vkZ93EMB8GA1UdIwQY MBaAFMOp5fU1ZiPhwo8ttpPgX8bWBMyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzZubDlUVm1JLUhDankyMmstQmZ4dFlFeklFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9mNWI2M2ItZDBlMC00NjBjLTkzMDgt N2NlZjEwYWRlOGRmLzEvdzZubDlUVm1JLUhDankyMmstQmZ4dFlFeklFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9mNWI2M2ItZDBlMC00NjBjLTkzMDgtN2NlZjEwYWRlOGRm LzEvdzZubDlUVm1JLUhDankyMmstQmZ4dFlFeklFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeNZl47QV LGy3IWqFquPz6ikg+yH55VWQS3FxquK7tNV0eXWfm1MbhHihpXgkr+0276S7zBch 3VbZ6QVGRhz/ILVTTNrdDIfA6CK8JTum8oRqJAmveYTyXhHNk1uXoBTquzWe1TCL BoAFcIilYI6tBDdzk4UEe1ubhgZy09gB2EIiHccwOV39KvEuicauUCQfVwtYEC/M L45jCikHLjHgZC/0pP+LFRHSEefwsL5nluThM4AOHOYfvqDBVpyqb1+/pIHDVDnC IMnk8aGxQ8iQfV3gcKJjpl3PeJ/O5NzNh6ayA7vaUQJxyokqy5cEZDNarf/dZCUc KWvqserkKk0New== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:22 2025 by rpki-client