This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft File: w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft (raw, json) Hash identifier: 3rZVSHt0z1b8qcdPSHWLdhmeVwOpxiIPslYpvLA3ltA= Subject key identifier: B8:B7:D4:7A:05:F7:72:52:91:C1:61:B2:83:03:B3:34:39:78:21:2E Authority key identifier: C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7 Certificate issuer: /CN=c36806ea062f6053841288b446e2e0ded5b2f2e7 Certificate serial: 019B31C372DA4212F4C68625982698620FA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 14:00:50 +0000 Manifest this update: Thu 18 Dec 2025 14:00:50 +0000 Manifest next update: Fri 19 Dec 2025 14:00:50 +0000 Files and hashes: 1: VvJo0lhVWVTAqGHGg1amh53Ljec.roa (hash: GwM4oNfSgsrgVocC2bDhcn2ZlYGWFP0EuCABmBUvrpo=) 2: w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl (hash: 0pMH3D2nBYOjyOZeortYAWFiyQ7qItmYBD+x5TQDdWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:72:da:42:12:f4:c6:86:25:98:26:98:62:0f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c36806ea062f6053841288b446e2e0ded5b2f2e7 Validity Not Before: Dec 18 14:00:50 2025 GMT Not After : Dec 19 14:00:50 2025 GMT Subject: CN=b8b7d47a05f7725291c161b28303b3343978212e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:18:65:66:af:8b:74:2d:67:0b:8b:e7:e6: db:c0:9d:c7:11:d2:ce:40:94:5d:2b:a7:eb:ca:c9: f9:6a:dd:e8:a8:1a:a3:ff:15:1a:69:17:e9:7f:8b: 5e:a5:4b:b9:b0:dd:d2:e2:78:80:45:e1:35:b4:d2: 5e:44:71:ac:06:98:e8:26:8a:32:0f:43:ea:77:00: 71:58:b4:fb:40:de:a3:27:84:ef:1d:c0:a7:6d:4d: fa:4a:58:1b:4b:4d:36:dd:bb:e9:a5:cc:8a:1d:05: ab:76:8f:6d:cd:91:5e:5e:67:d4:f2:92:47:4d:d9: 46:1a:35:9e:31:55:4e:c5:99:e9:83:ac:67:a8:3a: eb:a8:cd:be:93:fd:9f:54:bf:89:b0:d0:8e:84:db: eb:b6:f0:9d:b7:69:71:98:26:5a:b4:38:1e:3d:1a: f7:52:04:a0:b8:81:dc:e6:de:98:61:0a:7a:ea:f4: 1f:f8:91:29:0a:96:73:00:7f:3f:2b:9f:8c:c3:b2: ae:3e:44:d1:92:60:2c:2b:16:c0:62:41:30:54:66: 3b:ac:46:b9:01:77:52:0b:cb:c3:05:99:71:35:a2: ba:fd:6c:10:13:03:76:90:47:d4:41:9f:02:e2:a7: a7:fe:90:e5:65:db:23:68:d9:ae:1f:5a:93:0d:9e: e2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B7:D4:7A:05:F7:72:52:91:C1:61:B2:83:03:B3:34:39:78:21:2E X509v3 Authority Key Identifier: keyid:C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f1:3e:89:28:d6:f6:7c:53:0b:dc:0e:1f:63:f9:68:de:1a: bb:7d:6b:76:53:2b:36:45:f4:15:a0:88:7c:22:04:8d:10:a7: 58:6c:dc:13:f3:da:57:50:8b:cc:4f:f7:00:71:6a:c3:39:ff: c9:bf:04:85:ef:a7:8d:22:37:89:82:c6:82:9b:c9:14:26:15: f6:69:3c:b9:fb:f4:3d:51:01:f9:f4:68:c2:07:cf:41:48:64: 27:22:ab:b1:0c:00:59:3b:f9:50:6d:31:bb:c9:ee:7c:33:45: 99:7e:97:00:f1:37:ce:e0:37:0a:46:70:ea:aa:b8:13:3d:eb: 59:35:c1:e7:ae:32:5e:19:05:cd:d7:35:cc:3b:11:20:d3:d3: 9a:67:b9:9d:61:99:47:99:cc:01:5c:e6:52:e8:a1:fa:8e:45: fa:bc:27:58:1c:b2:9c:34:3d:79:6a:20:a8:8d:8b:f2:19:0e: db:56:7d:ec:d3:4f:01:88:60:0d:81:ce:35:88:87:e4:03:e6: e7:79:db:6f:0f:cd:73:a7:03:41:e7:99:b5:82:ab:a1:62:8d: 51:c1:d1:4d:8c:48:81:e2:ce:93:c6:4a:37:cb:0d:8e:a3:93: 8f:57:e3:a3:b6:29:2f:59:49:2d:ca:5e:d0:3a:10:58:5c:6a: a5:b9:37:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw3LaQhL0xoYlmCaYYg+kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNjgwNmVhMDYyZjYwNTM4NDEyODhiNDQ2ZTJlMGRlZDVi MmYyZTcwHhcNMjUxMjE4MTQwMDUwWhcNMjUxMjE5MTQwMDUwWjAzMTEwLwYDVQQD EyhiOGI3ZDQ3YTA1Zjc3MjUyOTFjMTYxYjI4MzAzYjMzNDM5NzgyMTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLgYZWavi3QtZwuL5+bbwJ3HEdLO QJRdK6frysn5at3oqBqj/xUaaRfpf4tepUu5sN3S4niAReE1tNJeRHGsBpjoJooy D0PqdwBxWLT7QN6jJ4TvHcCnbU36SlgbS0023bvppcyKHQWrdo9tzZFeXmfU8pJH TdlGGjWeMVVOxZnpg6xnqDrrqM2+k/2fVL+JsNCOhNvrtvCdt2lxmCZatDgePRr3 UgSguIHc5t6YYQp66vQf+JEpCpZzAH8/K5+Mw7KuPkTRkmAsKxbAYkEwVGY7rEa5 AXdSC8vDBZlxNaK6/WwQEwN2kEfUQZ8C4qen/pDlZdsjaNmuH1qTDZ7iawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLi31HoF93JSkcFhsoMDszQ5eCEuMB8GA1UdIwQY MBaAFMNoBuoGL2BThBKItEbi4N7VsvLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzJnRzZnWXZZRk9FRW9pMFJ1TGczdFd5OHVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zNjNiYTctODllMy00OTVmLWFhMmUt YzFlYjczZmZkNDE2LzEvdzJnRzZnWXZZRk9FRW9pMFJ1TGczdFd5OHVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8zNjNiYTctODllMy00OTVmLWFhMmUtYzFlYjczZmZkNDE2 LzEvdzJnRzZnWXZZRk9FRW9pMFJ1TGczdFd5OHVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPE+iSjW 9nxTC9wOH2P5aN4au31rdlMrNkX0FaCIfCIEjRCnWGzcE/PaV1CLzE/3AHFqwzn/ yb8Ehe+njSI3iYLGgpvJFCYV9mk8ufv0PVEB+fRowgfPQUhkJyKrsQwAWTv5UG0x u8nufDNFmX6XAPE3zuA3CkZw6qq4Ez3rWTXB564yXhkFzdc1zDsRINPTmme5nWGZ R5nMAVzmUuih+o5F+rwnWByynDQ9eWogqI2L8hkO21Z97NNPAYhgDYHONYiH5APm 53nbbw/Nc6cDQeeZtYKroWKNUcHRTYxIgeLOk8ZKN8sNjqOTj1fjo7YpL1lJLcpe 0DoQWFxqpbk3fw== -----END CERTIFICATE-----Generated at Thu Dec 18 15:41:56 2025 by rpki-client