This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft File: w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft (raw, json) Hash identifier: 0XmCKchmIeAYCBnYo2UbWY9vNAZgEn6QbISxuVFZiEQ= Subject key identifier: 8F:2F:ED:EC:61:D0:21:97:5A:A7:81:3C:DE:6E:7B:64:B4:41:78:A9 Authority key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD Certificate issuer: /CN=c3e86569b1690c9dff745cbb43805b8582b005ad Certificate serial: 019AF0881B721AFA1E001B9F63813F79488B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 22:00:42 +0000 Manifest this update: Fri 05 Dec 2025 22:00:42 +0000 Manifest next update: Sat 06 Dec 2025 22:00:42 +0000 Files and hashes: 1: GfVJNtBqDjYi0Gf5Q216kr4bXN4.roa (hash: y9FyRvs17LSTei1C0cR4cXi2RJhRkUIb5SAPSm2CSi4=) 2: w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl (hash: 0ftln6/oPNVmHAuvtaOGfxrVOFJSW3b9CDvY95g+7MY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:1b:72:1a:fa:1e:00:1b:9f:63:81:3f:79:48:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3e86569b1690c9dff745cbb43805b8582b005ad Validity Not Before: Dec 5 22:00:42 2025 GMT Not After : Dec 6 22:00:42 2025 GMT Subject: CN=8f2fedec61d021975aa7813cde6e7b64b44178a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:39:37:e1:8c:3f:32:1d:e7:67:25:de:1a:00: b6:52:e0:4a:4a:cc:8a:40:38:bb:20:08:aa:25:c2: 73:2f:83:16:9f:ca:a9:b9:21:3c:6e:17:d0:04:be: c4:58:b9:88:86:58:99:1a:1f:98:36:8a:53:57:4c: e4:ae:c3:47:e3:5c:50:a1:83:ae:21:c0:3c:19:c9: aa:4b:3a:ea:76:e3:dd:df:f6:ed:b9:9b:68:36:2d: bc:63:66:ac:38:9f:dd:9b:5e:e8:a8:3a:a2:80:16: fd:18:45:1c:f7:6f:4f:77:33:c9:46:c2:93:1c:cc: d6:62:01:ff:fb:83:ce:a1:e2:02:1d:da:35:11:42: af:5c:a3:8b:42:4c:a1:40:1d:89:07:b6:e4:bd:8b: 24:cf:a4:c7:46:11:40:8c:f8:5d:de:c2:c8:98:4e: 93:62:0b:68:da:a6:53:03:72:22:ff:6d:ed:de:77: 89:d9:d3:5a:6b:73:f9:72:6d:8c:69:6c:b3:dc:e6: b8:c1:80:86:54:54:68:7c:be:d7:d5:28:ce:21:2a: e9:dc:6e:ee:2b:29:85:04:c6:17:17:06:e5:98:d4: 95:db:7f:cd:ee:9b:a7:f2:58:e6:66:47:90:16:84: 3e:db:50:c2:7e:5b:0a:90:7a:da:04:f9:9b:dc:bd: 69:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2F:ED:EC:61:D0:21:97:5A:A7:81:3C:DE:6E:7B:64:B4:41:78:A9 X509v3 Authority Key Identifier: keyid:C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:1a:eb:95:b0:1e:98:83:29:27:e7:98:ae:28:8a:70:d9:1f: f4:21:d5:74:a5:0f:8f:a7:44:44:f5:4e:52:f7:db:68:26:9c: 35:70:6d:a5:fa:0c:a8:8f:e9:54:1e:47:70:a1:4e:37:6f:a9: c3:59:9f:75:01:cf:36:c7:0a:44:63:26:5b:c5:c6:e1:4a:40: 79:79:0f:f5:ad:2d:9c:b1:ff:80:db:15:21:86:bd:4f:3b:7b: cb:63:20:08:ef:9e:22:cb:86:05:aa:d3:04:e9:6c:70:00:01: cc:a9:0e:35:73:bb:87:f5:9f:e8:a6:cf:3e:fe:a0:8c:4a:40: 56:39:b3:08:ae:0b:b1:c3:20:a2:6d:c2:b7:99:c1:11:db:ff: 2f:71:bc:02:5c:19:4f:7e:cc:1b:04:37:62:46:3a:10:7b:53: 7c:c6:45:ab:82:83:e9:da:55:43:8b:c3:22:fd:03:c7:ed:79: 1e:71:d1:d7:da:7e:47:a7:2d:f9:ac:f5:10:d6:8b:59:04:c3: 79:99:6a:5e:61:0c:92:d8:9f:93:08:e7:35:e4:9f:8f:e9:57: 45:33:66:c3:d0:76:aa:af:f2:bf:c0:7f:96:c8:f6:8b:e1:dc: 3b:8d:52:d3:79:6c:5e:7e:59:c5:76:28:63:4f:bb:5d:45:d2: 9b:2c:00:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiBtyGvoeABufY4E/eUiLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZTg2NTY5YjE2OTBjOWRmZjc0NWNiYjQzODA1Yjg1ODJi MDA1YWQwHhcNMjUxMjA1MjIwMDQyWhcNMjUxMjA2MjIwMDQyWjAzMTEwLwYDVQQD Eyg4ZjJmZWRlYzYxZDAyMTk3NWFhNzgxM2NkZTZlN2I2NGI0NDE3OGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDk34Yw/Mh3nZyXeGgC2UuBKSsyK QDi7IAiqJcJzL4MWn8qpuSE8bhfQBL7EWLmIhliZGh+YNopTV0zkrsNH41xQoYOu IcA8GcmqSzrqduPd3/btuZtoNi28Y2asOJ/dm17oqDqigBb9GEUc929PdzPJRsKT HMzWYgH/+4POoeICHdo1EUKvXKOLQkyhQB2JB7bkvYskz6THRhFAjPhd3sLImE6T Ygto2qZTA3Ii/23t3neJ2dNaa3P5cm2MaWyz3Oa4wYCGVFRofL7X1SjOISrp3G7u KymFBMYXFwblmNSV23/N7pun8ljmZkeQFoQ+21DCflsKkHraBPmb3L1p1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8v7exh0CGXWqeBPN5ue2S0QXipMB8GA1UdIwQY MBaAFMPoZWmxaQyd/3Rcu0OAW4WCsAWtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jOTc2ZmMtZDdkMy00Y2JhLWIwMmUt ZGJiYjM1YzllMzc4LzEvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jOTc2ZmMtZDdkMy00Y2JhLWIwMmUtZGJiYjM1YzllMzc4 LzEvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxrrlbAe mIMpJ+eYriiKcNkf9CHVdKUPj6dERPVOUvfbaCacNXBtpfoMqI/pVB5HcKFON2+p w1mfdQHPNscKRGMmW8XG4UpAeXkP9a0tnLH/gNsVIYa9Tzt7y2MgCO+eIsuGBarT BOlscAABzKkONXO7h/Wf6KbPPv6gjEpAVjmzCK4LscMgom3Ct5nBEdv/L3G8AlwZ T37MGwQ3YkY6EHtTfMZFq4KD6dpVQ4vDIv0Dx+15HnHR19p+R6ct+az1ENaLWQTD eZlqXmEMktifkwjnNeSfj+lXRTNmw9B2qq/yv8B/lsj2i+HcO41S03lsXn5ZxXYo Y0+7XUXSmywARA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:56 2025 by rpki-client