This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft File: Ip-w-z0njhsoCnd94gDvvQi6rDA.mft (raw, json) Hash identifier: YmhJ+UM+5x8qzWQ94vD5tIjGdU5fl+oRDqsxUSG/eyQ= Subject key identifier: 4D:0E:D3:10:A2:E8:31:57:65:81:3A:71:89:43:74:9C:0D:51:49:56 Authority key identifier: 22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30 Certificate issuer: /CN=229fb0fb3d278e1b280a777de200efbd08baac30 Certificate serial: 019B30E91F8B7468F9945BB3C96AF8718853 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft Manifest number: 09F9 Signing time: Thu 18 Dec 2025 10:02:22 +0000 Manifest this update: Thu 18 Dec 2025 10:02:22 +0000 Manifest next update: Fri 19 Dec 2025 10:02:22 +0000 Files and hashes: 1: EdKpa32IZ9Dnd3k-vmeHaMU23Tw.roa (hash: WGOFdfPIgmzQx9aGUgM6u6XYxnkTJOLa0M2Z4HLrsFA=) 2: Ip-w-z0njhsoCnd94gDvvQi6rDA.crl (hash: +aNFK/83xatZ0sV9J24vGhNnKEgtHaoNFKZWGNhWFbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:1f:8b:74:68:f9:94:5b:b3:c9:6a:f8:71:88:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229fb0fb3d278e1b280a777de200efbd08baac30 Validity Not Before: Dec 18 10:02:22 2025 GMT Not After : Dec 19 10:02:22 2025 GMT Subject: CN=4d0ed310a2e8315765813a718943749c0d514956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f1:81:4b:de:2e:52:8c:c1:ff:0a:a5:2d:2f: 83:b6:70:99:dc:82:9b:6a:e8:5b:cd:7e:ff:e2:d6: 67:72:0a:23:27:18:a0:13:18:90:82:81:97:da:22: bf:62:f3:7c:40:36:3c:b9:c5:f0:d3:01:87:60:3b: 96:38:da:43:85:95:b0:99:f8:d3:d2:d5:0c:1f:d5: d7:f0:0d:87:68:65:1d:9d:78:e2:98:06:6a:64:cf: 17:4c:37:d4:9e:23:31:a8:fa:8b:7e:5f:10:6e:5f: ab:65:bc:c4:c8:8a:00:95:f4:eb:2a:6b:6f:dc:37: dd:f4:8c:75:f8:25:fb:88:9f:13:8a:25:38:68:47: 3e:22:67:f7:fd:6e:4f:cb:64:33:bc:ea:67:cf:2f: 5d:ca:c7:32:7a:82:5d:be:a9:a3:a9:85:97:2b:cf: 93:2a:80:68:85:56:3c:da:e5:66:9b:3c:e3:d0:bc: 90:5e:52:12:dc:87:29:9a:cc:c8:f8:03:52:9a:26: f3:94:ee:27:d9:7f:ad:b2:6b:8b:02:ad:70:61:70: c0:c2:96:57:c1:9d:d2:e4:d7:ce:b5:be:73:55:c1: fe:d2:af:99:0a:38:c0:a9:88:67:8e:3e:7a:de:f2: e1:45:40:65:7b:13:76:eb:b1:af:c6:5b:34:5f:bc: cb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0E:D3:10:A2:E8:31:57:65:81:3A:71:89:43:74:9C:0D:51:49:56 X509v3 Authority Key Identifier: keyid:22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:24:57:6e:3f:67:d4:03:6e:7f:26:e4:e1:36:46:d8:30:ba: 1d:7b:89:26:44:70:e0:b9:21:36:c4:87:48:e0:ed:30:ca:39: 77:1f:72:58:21:55:ff:fc:44:fc:0d:b4:b3:fd:e4:ad:c2:01: b7:23:29:81:94:30:2b:fe:d8:12:19:43:6e:a8:fe:9c:95:4c: 0f:35:3a:54:97:e5:26:af:ab:7c:bb:bb:55:ec:fc:73:1d:5c: a0:b6:70:5e:a7:04:ec:bf:55:6d:d4:00:31:e5:00:27:de:bd: b7:38:a5:d9:18:28:30:d8:58:b8:e9:0c:9f:c5:9b:ed:e1:e7: 7f:cd:e5:7d:f6:6a:95:1b:9a:96:c6:70:3a:24:c3:23:42:34: 79:1f:c9:38:32:44:31:f6:54:0a:55:b9:65:a3:2b:b8:6c:78: f8:75:9f:3c:15:c5:db:58:bc:bd:25:38:6f:3a:5c:fc:0c:a9: c0:06:5f:d8:44:e7:d0:b8:fd:3a:b5:5a:2a:97:d3:37:c3:29: d3:5d:40:8c:bc:bf:5e:98:7d:78:11:35:27:13:0a:9a:88:a7: 40:ac:fd:b5:d3:30:83:83:07:22:49:e2:9f:5a:da:d4:db:f4: cd:b3:db:f1:e9:fe:83:e1:7f:e9:40:f1:cf:97:06:e4:f6:5d: 13:b7:08:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6R+LdGj5lFuzyWr4cYhTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyOWZiMGZiM2QyNzhlMWIyODBhNzc3ZGUyMDBlZmJkMDhi YWFjMzAwHhcNMjUxMjE4MTAwMjIyWhcNMjUxMjE5MTAwMjIyWjAzMTEwLwYDVQQD Eyg0ZDBlZDMxMGEyZTgzMTU3NjU4MTNhNzE4OTQzNzQ5YzBkNTE0OTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PGBS94uUozB/wqlLS+DtnCZ3IKb auhbzX7/4tZncgojJxigExiQgoGX2iK/YvN8QDY8ucXw0wGHYDuWONpDhZWwmfjT 0tUMH9XX8A2HaGUdnXjimAZqZM8XTDfUniMxqPqLfl8Qbl+rZbzEyIoAlfTrKmtv 3Dfd9Ix1+CX7iJ8TiiU4aEc+Imf3/W5Py2QzvOpnzy9dyscyeoJdvqmjqYWXK8+T KoBohVY82uVmmzzj0LyQXlIS3IcpmszI+ANSmibzlO4n2X+tsmuLAq1wYXDAwpZX wZ3S5NfOtb5zVcH+0q+ZCjjAqYhnjj563vLhRUBlexN267Gvxls0X7zLlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0O0xCi6DFXZYE6cYlDdJwNUUlWMB8GA1UdIwQY MBaAFCKfsPs9J44bKAp3feIA770IuqwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXAtdy16MG5qaHNvQ25kOTRnRHZ2UWk2ckRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82YzU0YTktOWZlNS00ODkzLTlkYTct N2I5ODY2MzNhYzVlLzEvSXAtdy16MG5qaHNvQ25kOTRnRHZ2UWk2ckRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS82YzU0YTktOWZlNS00ODkzLTlkYTctN2I5ODY2MzNhYzVl LzEvSXAtdy16MG5qaHNvQ25kOTRnRHZ2UWk2ckRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyRXbj9n 1ANufybk4TZG2DC6HXuJJkRw4LkhNsSHSODtMMo5dx9yWCFV//xE/A20s/3krcIB tyMpgZQwK/7YEhlDbqj+nJVMDzU6VJflJq+rfLu7Vez8cx1coLZwXqcE7L9VbdQA MeUAJ969tzil2RgoMNhYuOkMn8Wb7eHnf83lffZqlRualsZwOiTDI0I0eR/JODJE MfZUClW5ZaMruGx4+HWfPBXF21i8vSU4bzpc/AypwAZf2ETn0Lj9OrVaKpfTN8Mp 011AjLy/Xph9eBE1JxMKmoinQKz9tdMwg4MHIknin1ra1Nv0zbPb8en+g+F/6UDx z5cG5PZdE7cI0w== -----END CERTIFICATE-----Generated at Thu Dec 18 17:32:09 2025 by rpki-client