This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft File: w1re68KNfif9nrnvsjVR2uILHQ8.mft (raw, json) Hash identifier: 2nLZkIDePnzKkoYCjyCS0Lw1edCyFOwTX3HCh2p1FKI= Subject key identifier: 08:DD:4D:F6:68:9A:40:C9:F5:14:20:40:24:7A:35:7A:D1:BB:EF:3E Authority key identifier: C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F Certificate issuer: /CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f Certificate serial: 019B2BF8C74D9436216E6A1E82078847E194 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft Manifest number: 1080 Signing time: Wed 17 Dec 2025 11:01:22 +0000 Manifest this update: Wed 17 Dec 2025 11:01:22 +0000 Manifest next update: Thu 18 Dec 2025 11:01:22 +0000 Files and hashes: 1: 2u_bcZkkSvx-ZcsdCRFCGyh5HjM.roa (hash: 7lJhGCJBImviva4lcJI32wc+2zEbO+nn7NwKLsiaeHg=) 2: w1re68KNfif9nrnvsjVR2uILHQ8.crl (hash: jiZSPHLIv6s8sNG96SH76fjwAF0JavhWwrxvZcrBaro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:c7:4d:94:36:21:6e:6a:1e:82:07:88:47:e1:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f Validity Not Before: Dec 17 11:01:22 2025 GMT Not After : Dec 18 11:01:22 2025 GMT Subject: CN=08dd4df6689a40c9f5142040247a357ad1bbef3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:ed:fe:01:f0:6c:22:be:34:b5:26:d0:f1: 57:3d:27:78:d1:c4:7f:bf:5d:bb:70:c7:22:53:86: 9f:16:d5:b4:ed:ff:14:04:cf:61:be:40:2d:2b:25: 1c:74:36:2f:de:f5:e1:62:73:2a:f8:59:c4:dc:cd: 5d:d6:86:ee:58:7f:c7:f2:56:6c:14:2e:78:29:66: 95:c1:6a:58:66:6a:7d:d1:da:18:a9:af:af:1f:36: ff:a6:84:b1:b7:e0:54:07:e0:9f:65:82:d9:fe:6d: 8b:53:2f:81:fe:5d:fb:d5:42:f6:93:87:97:31:f7: 56:39:eb:6f:60:73:d8:d2:41:34:a6:14:2c:ec:0a: b9:c9:f6:05:cc:76:b2:35:61:a4:cd:13:94:50:c9: 60:04:bf:3d:94:cb:2f:c2:20:f9:c7:29:36:ce:07: c8:a0:8a:f0:4f:06:dd:1d:f8:59:24:8f:0e:45:d2: 4d:0e:52:bc:f7:fb:1e:61:c1:24:26:86:30:cf:82: 33:38:e7:86:54:67:0e:a7:17:a9:d7:d0:c3:57:3f: 62:b3:89:3c:88:ec:3f:e3:1e:09:3d:c2:5e:ea:5d: 99:3b:bf:a8:72:e1:50:07:7c:ed:ec:29:8f:72:d4: 6a:ec:d3:4c:1f:69:c5:c6:25:e8:d9:6e:51:cc:97: 32:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DD:4D:F6:68:9A:40:C9:F5:14:20:40:24:7A:35:7A:D1:BB:EF:3E X509v3 Authority Key Identifier: keyid:C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c4:81:b7:53:0a:c1:6f:11:3b:48:b5:49:f5:e9:ce:9b:5a: 3d:52:7b:71:d7:37:a2:94:b0:41:56:f1:49:07:4e:83:10:bd: 05:4f:3a:f3:29:af:46:6b:2c:81:09:a3:87:8f:13:68:88:59: 0b:a5:9e:1e:ad:aa:61:50:ca:a7:8c:71:a6:4c:4a:4f:e5:b8: 4f:1d:fc:d0:f2:a4:b0:78:c6:6b:56:6f:8d:0a:e5:43:ee:e3: 04:35:ce:07:88:c3:07:e4:26:8d:4a:92:19:44:04:80:25:19: 07:54:b5:8b:29:0d:f1:dc:45:f1:2b:2f:50:dd:71:1b:2a:ad: 1d:e1:f3:68:3d:3c:13:52:8f:70:ad:7c:cf:33:86:9c:82:2c: 97:1a:7f:37:6e:e4:55:62:ae:13:77:84:0c:44:fd:ed:1c:08: ef:3d:ef:f0:7a:d4:ea:a1:8f:49:3d:9e:1c:4c:c3:d0:5d:29: a8:98:b6:8d:3f:d1:a2:45:71:0f:c6:45:96:ef:9d:f4:26:8f: 97:42:b2:6e:a0:af:06:8b:fe:77:46:c0:95:42:9b:97:82:66: d8:b9:8f:49:58:a1:10:eb:96:9a:46:8f:35:c1:35:32:29:c9: e0:82:99:55:9a:ae:39:a3:17:da:cb:f9:23:83:af:2a:86:18: 35:a8:1f:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+MdNlDYhbmoeggeIR+GUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWFkZWViYzI4ZDdlMjdmZDllYjllZmIyMzU1MWRhZTIw YjFkMGYwHhcNMjUxMjE3MTEwMTIyWhcNMjUxMjE4MTEwMTIyWjAzMTEwLwYDVQQD EygwOGRkNGRmNjY4OWE0MGM5ZjUxNDIwNDAyNDdhMzU3YWQxYmJlZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXnt/gHwbCK+NLUm0PFXPSd40cR/ v127cMciU4afFtW07f8UBM9hvkAtKyUcdDYv3vXhYnMq+FnE3M1d1obuWH/H8lZs FC54KWaVwWpYZmp90doYqa+vHzb/poSxt+BUB+CfZYLZ/m2LUy+B/l371UL2k4eX MfdWOetvYHPY0kE0phQs7Aq5yfYFzHayNWGkzROUUMlgBL89lMsvwiD5xyk2zgfI oIrwTwbdHfhZJI8ORdJNDlK89/seYcEkJoYwz4IzOOeGVGcOpxep19DDVz9is4k8 iOw/4x4JPcJe6l2ZO7+ocuFQB3zt7CmPctRq7NNMH2nFxiXo2W5RzJcyYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjdTfZomkDJ9RQgQCR6NXrRu+8+MB8GA1UdIwQY MBaAFMNa3uvCjX4n/Z6577I1UdriCx0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzFyZTY4S05maWY5bnJudnNqVlIydUlMSFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84MzlkMWMtNGRiMy00NWNjLWIwNGYt YjU1ZDdkN2YyYzQ4LzEvdzFyZTY4S05maWY5bnJudnNqVlIydUlMSFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy84MzlkMWMtNGRiMy00NWNjLWIwNGYtYjU1ZDdkN2YyYzQ4 LzEvdzFyZTY4S05maWY5bnJudnNqVlIydUlMSFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMSBt1MK wW8RO0i1SfXpzptaPVJ7cdc3opSwQVbxSQdOgxC9BU868ymvRmssgQmjh48TaIhZ C6WeHq2qYVDKp4xxpkxKT+W4Tx380PKksHjGa1ZvjQrlQ+7jBDXOB4jDB+QmjUqS GUQEgCUZB1S1iykN8dxF8SsvUN1xGyqtHeHzaD08E1KPcK18zzOGnIIslxp/N27k VWKuE3eEDET97RwI7z3v8HrU6qGPST2eHEzD0F0pqJi2jT/RokVxD8ZFlu+d9CaP l0KybqCvBov+d0bAlUKbl4Jm2LmPSVihEOuWmkaPNcE1MinJ4IKZVZquOaMX2sv5 I4OvKoYYNagfsQ== -----END CERTIFICATE-----Generated at Wed Dec 17 17:54:49 2025 by rpki-client