This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft File: PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft (raw, json) Hash identifier: 9wRBobtw5YYDmmTsu643iV7efv3/GXpaVUkfeZZGCgA= Subject key identifier: C4:0F:6E:5C:62:A2:85:3D:22:46:6A:AB:C0:C9:6E:DC:A7:B9:F2:28 Authority key identifier: 3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF Certificate issuer: /CN=3f058e432bbf72369750a9951d5259430b5ca4bf Certificate serial: 019AF5775656CFC982A596E5C90EC85F36D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 21:00:30 +0000 Manifest this update: Sat 06 Dec 2025 21:00:30 +0000 Manifest next update: Sun 07 Dec 2025 21:00:30 +0000 Files and hashes: 1: LHapQb8ix5yDr9XdIdq3SLfgGJQ.roa (hash: OTBcvGKIAwNH7dYThkaA46DYb8Du7nUhG7Wp8v0hqOA=) 2: PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl (hash: VMHBbQ8x0YmbaJ6bjdmJYFFgTHZwXDEClQg7c1oUQSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:56:56:cf:c9:82:a5:96:e5:c9:0e:c8:5f:36:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f058e432bbf72369750a9951d5259430b5ca4bf Validity Not Before: Dec 6 21:00:30 2025 GMT Not After : Dec 7 21:00:30 2025 GMT Subject: CN=c40f6e5c62a2853d22466aabc0c96edca7b9f228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:aa:d3:fd:2f:47:1c:ff:e1:e2:f0:85:14:d4: 40:e4:6b:7f:4a:72:32:b7:f8:e1:08:99:d0:44:3a: 70:ed:11:e5:e0:d4:52:6a:c7:1e:c0:c2:68:15:8e: 12:f2:8f:dc:bb:d7:a7:75:76:06:c0:ab:9a:1f:94: 68:78:20:1d:e7:00:d7:82:08:ad:e5:02:5c:01:3a: cb:19:98:07:ea:87:4c:8f:6b:5d:44:c0:fe:00:aa: b9:8d:64:da:eb:54:f0:0b:6b:19:a0:e6:84:28:05: 48:66:c6:9a:fd:d1:91:68:2a:54:2d:ea:d5:c3:9a: 08:44:7b:42:73:19:73:30:99:87:5d:ab:f1:ba:1a: be:6e:23:3d:b5:ec:85:7b:a3:d5:c0:fd:61:81:04: f5:e9:cb:49:f7:59:da:af:9c:8c:d2:2a:14:ad:db: 16:d8:98:95:55:16:30:06:7c:6d:8b:43:fe:16:61: 12:7b:a4:f7:46:13:f3:a5:f8:c3:b5:71:84:43:84: 54:06:1d:17:26:f9:03:ba:77:35:d4:20:40:71:dc: 18:12:ce:8a:09:39:63:dc:82:c6:e1:de:68:f9:78: 98:64:86:d5:50:8c:e1:d9:fa:38:c7:5e:f9:39:91: a3:eb:8c:4b:1c:1d:4c:cb:e0:79:2c:17:f7:f3:99: 28:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0F:6E:5C:62:A2:85:3D:22:46:6A:AB:C0:C9:6E:DC:A7:B9:F2:28 X509v3 Authority Key Identifier: keyid:3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:6d:d2:a8:7d:bf:1a:54:e4:29:cb:ff:47:b0:a2:65:ec:a5: 13:82:a0:a5:4a:b3:2a:a0:9d:13:7a:a1:c0:d3:d6:d3:18:e0: f2:aa:86:57:9a:8b:e7:f3:86:38:2c:e1:0b:a4:46:d9:b7:d5: 37:26:fc:2b:1d:4c:94:a2:a8:24:24:f2:8b:e0:7c:d2:a9:34: 08:7d:e2:d1:2b:a2:94:01:86:fc:ca:52:e1:07:4b:0e:10:4e: a6:e3:50:35:e7:7f:d6:e3:28:80:49:86:83:a8:e9:c2:31:3f: a4:d9:a7:9a:9b:04:13:ff:95:a8:da:38:dc:33:cb:7d:b3:94: 6d:33:c9:d3:88:f8:6c:ee:eb:4f:8f:9b:1b:4e:ef:a4:72:65: 16:e7:79:9a:ed:c2:50:80:89:8c:8d:e6:96:a4:82:2d:04:32: 4c:5a:87:e8:e3:1d:3e:60:9f:4a:11:27:a6:98:13:36:27:bd: 80:5c:41:8d:0b:65:72:02:88:53:f9:f9:0c:39:d1:f9:c6:2c: 1a:6b:93:6d:80:7e:b9:ab:0a:dd:5e:ed:49:cd:58:25:f1:5f: a7:6c:7e:13:7b:ec:c6:c6:e6:ce:0d:61:5c:69:8b:7d:e3:8b: 37:e6:2f:ec:5e:0b:d1:3b:7d:6a:f0:77:0c:7e:47:62:bf:ac: 89:0c:bf:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d1ZWz8mCpZblyQ7IXzbWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMDU4ZTQzMmJiZjcyMzY5NzUwYTk5NTFkNTI1OTQzMGI1 Y2E0YmYwHhcNMjUxMjA2MjEwMDMwWhcNMjUxMjA3MjEwMDMwWjAzMTEwLwYDVQQD EyhjNDBmNmU1YzYyYTI4NTNkMjI0NjZhYWJjMGM5NmVkY2E3YjlmMjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6rT/S9HHP/h4vCFFNRA5Gt/SnIy t/jhCJnQRDpw7RHl4NRSascewMJoFY4S8o/cu9endXYGwKuaH5RoeCAd5wDXggit 5QJcATrLGZgH6odMj2tdRMD+AKq5jWTa61TwC2sZoOaEKAVIZsaa/dGRaCpULerV w5oIRHtCcxlzMJmHXavxuhq+biM9teyFe6PVwP1hgQT16ctJ91nar5yM0ioUrdsW 2JiVVRYwBnxti0P+FmESe6T3RhPzpfjDtXGEQ4RUBh0XJvkDunc11CBAcdwYEs6K CTlj3ILG4d5o+XiYZIbVUIzh2fo4x175OZGj64xLHB1My+B5LBf385ko9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQPblxiooU9IkZqq8DJbtynufIoMB8GA1UdIwQY MBaAFD8FjkMrv3I2l1CplR1SWUMLXKS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kZTY4YzYtNjUwZi00ZGZhLWJkMTMt MDAwMDgyYzEyM2U3LzEvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9kZTY4YzYtNjUwZi00ZGZhLWJkMTMtMDAwMDgyYzEyM2U3 LzEvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwm3SqH2/ GlTkKcv/R7CiZeylE4KgpUqzKqCdE3qhwNPW0xjg8qqGV5qL5/OGOCzhC6RG2bfV Nyb8Kx1MlKKoJCTyi+B80qk0CH3i0SuilAGG/MpS4QdLDhBOpuNQNed/1uMogEmG g6jpwjE/pNmnmpsEE/+VqNo43DPLfbOUbTPJ04j4bO7rT4+bG07vpHJlFud5mu3C UICJjI3mlqSCLQQyTFqH6OMdPmCfShEnppgTNie9gFxBjQtlcgKIU/n5DDnR+cYs GmuTbYB+uasK3V7tSc1YJfFfp2x+E3vsxsbmzg1hXGmLfeOLN+Yv7F4L0Tt9avB3 DH5HYr+siQy/Ig== -----END CERTIFICATE-----Generated at Sat Dec 6 23:57:07 2025 by rpki-client