This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft File: w1re68KNfif9nrnvsjVR2uILHQ8.mft (raw, json) Hash identifier: GNG9YIP3mgk7aS/XsvPnDS/lDLcAFS0X81lzXJjPIk0= Subject key identifier: F9:19:D5:A9:F4:C1:64:7B:B8:24:15:8D:16:D3:37:02:7A:D9:69:4B Authority key identifier: C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F Certificate issuer: /CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f Certificate serial: 019AF5E648AF852692DEE76B1157AB13E67D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft Manifest number: 1064 Signing time: Sat 06 Dec 2025 23:01:40 +0000 Manifest this update: Sat 06 Dec 2025 23:01:40 +0000 Manifest next update: Sun 07 Dec 2025 23:01:40 +0000 Files and hashes: 1: 2u_bcZkkSvx-ZcsdCRFCGyh5HjM.roa (hash: 7lJhGCJBImviva4lcJI32wc+2zEbO+nn7NwKLsiaeHg=) 2: w1re68KNfif9nrnvsjVR2uILHQ8.crl (hash: eJyIMcSsQuGFaHDs89xEBPO0C33mYza2xyOZA9fxXNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:48:af:85:26:92:de:e7:6b:11:57:ab:13:e6:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f Validity Not Before: Dec 6 23:01:40 2025 GMT Not After : Dec 7 23:01:40 2025 GMT Subject: CN=f919d5a9f4c1647bb824158d16d337027ad9694b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:79:0d:0a:78:da:b5:f6:8c:04:9c:8e:10:37: e7:b2:6d:5b:8e:fc:b9:69:3c:64:d3:04:60:fa:09: c3:c2:9a:2c:91:32:fc:16:7f:cd:ec:0d:e4:27:0f: 2d:4c:dc:f7:7b:73:61:35:60:8d:c6:9a:56:4e:bc: 9b:d0:d3:78:9c:2c:b4:d8:de:96:88:34:b3:e5:d2: ce:99:77:09:53:45:cc:4f:9a:d1:2b:95:1a:48:54: cf:43:f0:f6:65:db:16:f5:70:fc:d6:04:c6:cf:3f: e3:3e:7b:0d:4b:d5:35:ed:d6:4b:e3:00:db:4d:c3: 99:48:5c:5a:8f:cb:05:74:d1:bb:11:c7:ba:87:c3: ae:3f:c7:3a:8b:6d:e0:f2:1f:be:88:32:c8:8b:d2: 90:dd:75:5b:79:97:26:14:a0:6c:ec:91:dd:aa:e4: 1c:d1:d2:e1:9d:3f:5d:33:10:be:82:02:bc:d6:5f: d9:fe:a8:94:b8:34:44:67:59:a0:ac:98:54:a7:bd: 50:cb:ba:7c:79:3c:c7:1b:ce:09:15:6a:53:7d:b0: 76:fa:88:c3:38:70:04:74:61:08:f0:77:71:89:8c: c5:98:4f:ca:76:ad:0e:ab:6b:a6:53:d8:5d:0f:b7: 0b:4a:62:e2:2e:fa:0a:93:de:e2:4a:26:e2:4d:60: 67:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:19:D5:A9:F4:C1:64:7B:B8:24:15:8D:16:D3:37:02:7A:D9:69:4B X509v3 Authority Key Identifier: keyid:C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:eb:9e:dc:af:e7:cb:3e:a7:f7:02:3d:7e:1c:1c:49:a5:46: a6:e5:ea:c8:52:27:e0:ec:66:64:c5:bd:dd:6a:8f:53:bc:a8: 5b:ac:6b:ac:dc:33:11:bd:62:f5:b5:1d:7c:8e:4f:0f:4d:c8: 38:75:ea:72:00:cc:a7:6f:86:c7:f0:29:7b:ca:7d:59:ac:c8: ed:f1:82:6a:81:85:ca:b6:70:b4:cd:61:9d:a7:d0:10:0e:ee: 56:0f:54:46:4a:f6:77:d4:a6:ad:1e:1a:76:43:da:0f:7a:3a: fa:0d:a5:84:cd:9d:73:97:d2:70:1d:72:60:ef:f0:50:94:ab: 07:95:b5:f0:bf:61:68:a9:fa:bf:af:67:e6:07:23:54:8a:de: 75:12:26:16:7e:21:87:24:d3:1a:35:a9:8a:bd:db:85:e2:3f: 1a:9d:c6:c1:e3:4b:63:5a:b1:57:76:83:01:bd:f1:68:85:fa: d9:b1:e2:86:70:0a:87:d3:f3:81:e1:90:ab:b2:4c:3a:4f:f9: c5:a1:71:ad:cc:36:b8:af:1c:00:dd:be:ba:d5:61:3a:9b:49: ad:8f:7a:9d:2a:19:3c:35:e3:a7:ef:cd:90:36:27:8f:bb:83: 14:98:c7:a3:82:ef:e2:a3:04:4c:fa:22:6c:d7:33:87:60:b6: 72:0a:51:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15kivhSaS3udrEVerE+Z9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWFkZWViYzI4ZDdlMjdmZDllYjllZmIyMzU1MWRhZTIw YjFkMGYwHhcNMjUxMjA2MjMwMTQwWhcNMjUxMjA3MjMwMTQwWjAzMTEwLwYDVQQD EyhmOTE5ZDVhOWY0YzE2NDdiYjgyNDE1OGQxNmQzMzcwMjdhZDk2OTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHkNCnjatfaMBJyOEDfnsm1bjvy5 aTxk0wRg+gnDwposkTL8Fn/N7A3kJw8tTNz3e3NhNWCNxppWTryb0NN4nCy02N6W iDSz5dLOmXcJU0XMT5rRK5UaSFTPQ/D2ZdsW9XD81gTGzz/jPnsNS9U17dZL4wDb TcOZSFxaj8sFdNG7Ece6h8OuP8c6i23g8h++iDLIi9KQ3XVbeZcmFKBs7JHdquQc 0dLhnT9dMxC+ggK81l/Z/qiUuDREZ1mgrJhUp71Qy7p8eTzHG84JFWpTfbB2+ojD OHAEdGEI8HdxiYzFmE/Kdq0Oq2umU9hdD7cLSmLiLvoKk97iSibiTWBnRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkZ1an0wWR7uCQVjRbTNwJ62WlLMB8GA1UdIwQY MBaAFMNa3uvCjX4n/Z6577I1UdriCx0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzFyZTY4S05maWY5bnJudnNqVlIydUlMSFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84MzlkMWMtNGRiMy00NWNjLWIwNGYt YjU1ZDdkN2YyYzQ4LzEvdzFyZTY4S05maWY5bnJudnNqVlIydUlMSFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy84MzlkMWMtNGRiMy00NWNjLWIwNGYtYjU1ZDdkN2YyYzQ4 LzEvdzFyZTY4S05maWY5bnJudnNqVlIydUlMSFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAheue3K/n yz6n9wI9fhwcSaVGpuXqyFIn4OxmZMW93WqPU7yoW6xrrNwzEb1i9bUdfI5PD03I OHXqcgDMp2+Gx/Ape8p9WazI7fGCaoGFyrZwtM1hnafQEA7uVg9URkr2d9SmrR4a dkPaD3o6+g2lhM2dc5fScB1yYO/wUJSrB5W18L9haKn6v69n5gcjVIredRImFn4h hyTTGjWpir3bheI/Gp3GweNLY1qxV3aDAb3xaIX62bHihnAKh9PzgeGQq7JMOk/5 xaFxrcw2uK8cAN2+utVhOptJrY96nSoZPDXjp+/NkDYnj7uDFJjHo4Lv4qMETPoi bNczh2C2cgpRdQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:50:26 2025 by rpki-client