This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft File: 1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft (raw, json) Hash identifier: at9DGUfMC9E3eCYt9h4RgoKGt0kAIfZKWZpBDS1gmgo= Subject key identifier: 20:9A:B4:0C:4A:87:0C:80:4C:EA:98:18:1C:46:C5:D0:D1:38:D3:0E Authority key identifier: D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A Certificate issuer: /CN=d703ceac906d07f74ca94c446303d954666b583a Certificate serial: 019B31C3798DA428DB305F7473AC8D370469 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 14:00:52 +0000 Manifest this update: Thu 18 Dec 2025 14:00:52 +0000 Manifest next update: Fri 19 Dec 2025 14:00:52 +0000 Files and hashes: 1: 1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl (hash: lph2aoW12hy/lddfQSvNEBn1MHFeeX3jY1KswTtBWw8=) 2: FkDDEmYYETOpVMpWkL7RuuEpqTY.roa (hash: kK3s8Vv/PXYJJP7bWNTiE/RHQRNUSZAURtLuU/aMQ6g=) 3: _X7C7V6gpKHfD2GzsHWwwqpaOyU.roa (hash: YNwkjNTaSE+wVt7Z8QQHUfLIQalMph9DlkM4NPeZKPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:79:8d:a4:28:db:30:5f:74:73:ac:8d:37:04:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703ceac906d07f74ca94c446303d954666b583a Validity Not Before: Dec 18 14:00:52 2025 GMT Not After : Dec 19 14:00:52 2025 GMT Subject: CN=209ab40c4a870c804cea98181c46c5d0d138d30e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2e:46:d0:e7:eb:55:27:2d:b5:8a:26:5a:e1: 4c:58:1d:70:f4:2c:5f:71:87:f8:03:ac:52:a4:60: c4:ba:c7:2b:0d:a1:61:a1:7b:a3:c2:1b:80:bc:8a: a8:e2:05:6c:dc:47:30:65:da:65:af:33:9e:03:ed: ee:79:b3:da:7d:bf:c1:8a:cf:b7:17:11:4d:70:f2: d9:94:c0:5e:1a:08:18:60:b5:fc:ef:22:48:d6:ca: c3:7e:3e:0b:45:f0:2b:d1:5b:82:61:6c:74:a3:a9: ae:3c:d1:8c:ab:60:5c:1c:97:a3:e9:10:cc:57:69: 31:ba:5e:e6:19:1a:da:01:c9:e0:57:99:9c:60:10: 7e:ca:6a:2c:5f:8c:37:35:ce:e3:14:a4:8d:cd:c9: 58:dc:aa:f0:dc:47:ed:3e:61:69:e9:bd:ba:2c:a4: fb:d7:22:9b:66:6e:a3:9e:e6:1f:54:50:87:84:1d: 47:77:b1:75:ef:32:ca:43:1f:25:3a:13:10:1c:da: 06:ba:dd:7f:65:c8:08:b0:c4:a9:d0:53:69:a6:e6: 63:21:ac:0c:d0:19:4f:b6:45:72:55:fc:76:27:af: a4:17:40:94:46:a5:cc:23:d1:7d:1d:17:dd:19:23: 0e:81:6c:48:57:da:75:ab:dd:7a:23:57:e8:69:5c: 77:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9A:B4:0C:4A:87:0C:80:4C:EA:98:18:1C:46:C5:D0:D1:38:D3:0E X509v3 Authority Key Identifier: keyid:D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a9:73:d5:73:3c:52:fd:f3:2c:f6:82:6b:a9:f7:fb:90:ec: b2:88:f2:d3:46:87:6d:fc:7f:d0:e6:de:5f:20:e0:2b:f3:72: 69:a9:cb:2f:a4:09:54:9e:7b:7b:78:85:7f:d3:5c:83:b3:32: 71:2b:ca:47:df:b0:2d:80:8b:98:54:83:a1:16:e4:96:1d:71: 26:12:a1:97:e3:77:67:63:1b:9a:da:a2:0a:6f:28:73:3d:fa: 74:3b:d2:9f:77:53:e4:a5:cd:2b:cf:58:5a:f6:fe:71:ae:ab: c9:f3:ec:c9:b3:e7:f6:95:bb:8d:66:4f:10:1a:04:c5:15:40: 89:d2:8a:9a:e7:55:20:66:81:11:91:d1:53:c0:46:25:9d:1d: 57:a1:2c:3e:a9:48:f9:ee:3f:7b:35:05:3c:4b:67:f2:8e:ad: bf:f4:e5:db:4e:70:d1:f1:01:35:b9:f3:54:28:6d:1f:ac:e5: 76:e7:ab:00:7a:0b:2c:75:55:19:6d:ae:3b:31:f2:d2:65:37: 03:b2:5d:c9:cc:40:74:c4:c6:95:29:f2:5d:85:ee:f3:f0:5e: 0a:89:0b:6e:1f:6b:25:ff:84:f7:c1:4d:db:55:49:06:94:10: a8:e3:cf:a3:4a:40:35:27:6e:0e:9f:0e:18:b8:d6:34:5f:13: d6:a2:39:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw3mNpCjbMF90c6yNNwRpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDNjZWFjOTA2ZDA3Zjc0Y2E5NGM0NDYzMDNkOTU0NjY2 YjU4M2EwHhcNMjUxMjE4MTQwMDUyWhcNMjUxMjE5MTQwMDUyWjAzMTEwLwYDVQQD EygyMDlhYjQwYzRhODcwYzgwNGNlYTk4MTgxYzQ2YzVkMGQxMzhkMzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC5G0OfrVScttYomWuFMWB1w9Cxf cYf4A6xSpGDEuscrDaFhoXujwhuAvIqo4gVs3EcwZdplrzOeA+3uebPafb/Bis+3 FxFNcPLZlMBeGggYYLX87yJI1srDfj4LRfAr0VuCYWx0o6muPNGMq2BcHJej6RDM V2kxul7mGRraAcngV5mcYBB+ymosX4w3Nc7jFKSNzclY3Krw3EftPmFp6b26LKT7 1yKbZm6jnuYfVFCHhB1Hd7F17zLKQx8lOhMQHNoGut1/ZcgIsMSp0FNppuZjIawM 0BlPtkVyVfx2J6+kF0CURqXMI9F9HRfdGSMOgWxIV9p1q916I1foaVx3PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCatAxKhwyATOqYGBxGxdDRONMOMB8GA1UdIwQY MBaAFNcDzqyQbQf3TKlMRGMD2VRma1g6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdQT3JKQnRCX2RNcVV4RVl3UFpWR1pyV0RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wNmM3MzQtMDlhMS00ZGEzLTg5OTIt YmQ0ZDU0NDQ1YTk1LzEvMXdQT3JKQnRCX2RNcVV4RVl3UFpWR1pyV0RvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8wNmM3MzQtMDlhMS00ZGEzLTg5OTItYmQ0ZDU0NDQ1YTk1 LzEvMXdQT3JKQnRCX2RNcVV4RVl3UFpWR1pyV0RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6lz1XM8 Uv3zLPaCa6n3+5Dssojy00aHbfx/0ObeXyDgK/NyaanLL6QJVJ57e3iFf9Ncg7My cSvKR9+wLYCLmFSDoRbklh1xJhKhl+N3Z2MbmtqiCm8ocz36dDvSn3dT5KXNK89Y Wvb+ca6ryfPsybPn9pW7jWZPEBoExRVAidKKmudVIGaBEZHRU8BGJZ0dV6EsPqlI +e4/ezUFPEtn8o6tv/Tl205w0fEBNbnzVChtH6zlduerAHoLLHVVGW2uOzHy0mU3 A7JdycxAdMTGlSnyXYXu8/BeCokLbh9rJf+E98FN21VJBpQQqOPPo0pANSduDp8O GLjWNF8T1qI5mw== -----END CERTIFICATE-----Generated at Thu Dec 18 23:42:38 2025 by rpki-client