This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft File: we5gO3itcrp4VWgsorgGrA5-mP0.mft (raw, json) Hash identifier: p19b7ZsiBg5CwOxWfs4s4rvagF7kxY1RfSppSiilg2o= Subject key identifier: 4D:B1:EE:94:7B:BB:89:73:B8:04:DD:96:A1:91:BF:20:F2:51:11:F2 Authority key identifier: C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD Certificate issuer: /CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd Certificate serial: 019AF5AF049A18060FD577879DDE60AA6933 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 22:01:19 +0000 Manifest this update: Sat 06 Dec 2025 22:01:19 +0000 Manifest next update: Sun 07 Dec 2025 22:01:19 +0000 Files and hashes: 1: 8P5ffqPLJKYYNJnQChMlI7ALdn8.roa (hash: HRZiFpkQQ+Nr6MCSY7lvsFCZFVTwCo1gLy31/BQbop0=) 2: we5gO3itcrp4VWgsorgGrA5-mP0.crl (hash: mEJHF/AB6JOZp/+59TbNg3+wKITld1ZWyb4n8SvT3DI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:04:9a:18:06:0f:d5:77:87:9d:de:60:aa:69:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd Validity Not Before: Dec 6 22:01:19 2025 GMT Not After : Dec 7 22:01:19 2025 GMT Subject: CN=4db1ee947bbb8973b804dd96a191bf20f25111f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cf:a6:50:79:15:b1:6c:86:0f:99:2b:91:bf: 2f:c8:48:da:f6:8a:99:e7:85:ff:1f:c1:46:0d:53: 1f:53:12:57:90:56:28:b7:9b:5c:84:01:90:fc:23: 7c:7b:eb:5d:c1:5f:a2:a2:1c:f1:5a:5d:70:4a:9c: 08:79:57:c7:a8:73:72:34:36:36:12:cb:ec:89:bb: 18:df:99:93:e1:d5:4b:8b:51:e7:a1:88:61:13:f9: ff:b8:6a:44:14:91:63:ad:34:aa:89:4e:74:27:a2: f7:0d:77:c8:4f:41:0e:bf:d8:b0:70:3b:07:5c:51: c0:d6:6f:3e:60:64:42:c5:72:c0:e9:f6:4f:70:41: 24:a1:62:94:70:62:8b:f7:78:9c:8a:6f:74:b7:31: eb:c5:6b:3a:2e:e7:cb:31:8d:c0:89:32:f7:f2:4b: 02:41:9b:6d:05:5b:be:4b:06:33:bd:01:f9:03:56: 94:a2:4a:9c:2f:63:6f:c1:11:a1:fa:75:91:aa:a6: 5c:e5:9d:e6:f5:7c:19:e7:8e:58:0a:51:39:b1:5c: 1d:1b:4b:1f:35:de:36:59:dc:60:61:c8:a5:f1:72: b3:83:7c:a6:f4:5c:2b:dc:38:73:99:70:85:84:dd: f5:d9:27:84:58:24:8e:97:0a:bb:10:34:87:85:4a: 75:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B1:EE:94:7B:BB:89:73:B8:04:DD:96:A1:91:BF:20:F2:51:11:F2 X509v3 Authority Key Identifier: keyid:C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:dd:c5:bb:f6:f0:63:62:03:c4:78:35:43:05:f6:fb:27:65: 80:b5:12:e4:e3:55:f8:a2:09:b1:ff:82:26:05:73:0b:81:97: e4:8d:a3:ae:20:36:65:c0:91:70:77:b0:82:7e:e5:af:07:3d: a0:ae:a7:c2:d9:c5:2e:55:67:12:6e:7a:f4:ff:78:1e:21:df: f9:13:86:0c:ad:32:3c:d4:3c:3f:95:1f:07:5f:18:bb:1c:f1: fb:53:7c:f6:bd:bf:b2:10:87:ac:a5:64:4c:2c:76:ee:76:bb: 2e:23:5a:c8:c1:fd:72:1b:18:76:36:cc:b1:85:91:54:73:90: 2b:9f:4d:b9:5d:b2:55:8f:93:00:57:25:8e:29:52:17:79:fe: 09:be:7d:7d:53:a4:b3:73:e7:77:79:89:eb:c4:4b:72:d9:77: 10:5d:1e:29:b5:13:25:5e:6b:06:bd:19:67:61:fb:64:c2:0e: ca:6a:e3:65:08:3b:6d:b7:c2:2e:3e:ff:2f:1e:0f:c1:1d:bf: 0d:6c:da:ab:16:17:09:8a:19:05:8b:6b:7a:6d:95:92:18:6a: 7d:01:9a:d2:80:25:aa:4c:39:e3:28:be:01:35:0e:75:b3:54: ce:b9:8f:0e:cc:c0:d4:98:27:4b:97:fc:d7:7c:cc:cb:5a:c1: 90:e0:84:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rwSaGAYP1XeHnd5gqmkzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZWU2MDNiNzhhZDcyYmE3ODU1NjgyY2EyYjgwNmFjMGU3 ZTk4ZmQwHhcNMjUxMjA2MjIwMTE5WhcNMjUxMjA3MjIwMTE5WjAzMTEwLwYDVQQD Eyg0ZGIxZWU5NDdiYmI4OTczYjgwNGRkOTZhMTkxYmYyMGYyNTExMWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6s+mUHkVsWyGD5krkb8vyEja9oqZ 54X/H8FGDVMfUxJXkFYot5tchAGQ/CN8e+tdwV+iohzxWl1wSpwIeVfHqHNyNDY2 EsvsibsY35mT4dVLi1HnoYhhE/n/uGpEFJFjrTSqiU50J6L3DXfIT0EOv9iwcDsH XFHA1m8+YGRCxXLA6fZPcEEkoWKUcGKL93icim90tzHrxWs6LufLMY3AiTL38ksC QZttBVu+SwYzvQH5A1aUokqcL2NvwRGh+nWRqqZc5Z3m9XwZ545YClE5sVwdG0sf Nd42WdxgYcil8XKzg3ym9Fwr3DhzmXCFhN312SeEWCSOlwq7EDSHhUp1uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2x7pR7u4lzuATdlqGRvyDyURHyMB8GA1UdIwQY MBaAFMHuYDt4rXK6eFVoLKK4BqwOfpj9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2U1Z08zaXRjcnA0Vldnc29yZ0dyQTUtbVAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85YjZkOWItODU0MS00NGJjLTk2MWEt Y2VlNWJlODdhNDZiLzEvd2U1Z08zaXRjcnA0Vldnc29yZ0dyQTUtbVAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy85YjZkOWItODU0MS00NGJjLTk2MWEtY2VlNWJlODdhNDZi LzEvd2U1Z08zaXRjcnA0Vldnc29yZ0dyQTUtbVAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA093Fu/bw Y2IDxHg1QwX2+ydlgLUS5ONV+KIJsf+CJgVzC4GX5I2jriA2ZcCRcHewgn7lrwc9 oK6nwtnFLlVnEm569P94HiHf+ROGDK0yPNQ8P5UfB18Yuxzx+1N89r2/shCHrKVk TCx27na7LiNayMH9chsYdjbMsYWRVHOQK59NuV2yVY+TAFcljilSF3n+Cb59fVOk s3Pnd3mJ68RLctl3EF0eKbUTJV5rBr0ZZ2H7ZMIOymrjZQg7bbfCLj7/Lx4PwR2/ DWzaqxYXCYoZBYtrem2VkhhqfQGa0oAlqkw54yi+ATUOdbNUzrmPDszA1JgnS5f8 13zMy1rBkOCEFA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:09:25 2025 by rpki-client