This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft File: PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft (raw, json) Hash identifier: mht2GWe91Ir4xdwih2+EqTp+wcbN8BJEgaSsmocD7L0= Subject key identifier: D5:7A:BF:7A:83:40:FF:57:4A:02:F7:49:8D:4F:7A:3E:FC:EE:91:15 Authority key identifier: 3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44 Certificate issuer: /CN=3d6abe5c48aecebd4a237e153c3684f30608d444 Certificate serial: 019AF57778132666DFF177337BD57BB2C0F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft Manifest number: 0568 Signing time: Sat 06 Dec 2025 21:00:38 +0000 Manifest this update: Sat 06 Dec 2025 21:00:38 +0000 Manifest next update: Sun 07 Dec 2025 21:00:38 +0000 Files and hashes: 1: 0-NbRqc8zQ3-jTIYZOwXbybz260.roa (hash: F4aAH1P/CqccbM0rJQ6/jB1mC+tQi8oCbtTD8Uif+I8=) 2: PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl (hash: uWeAJlv5Shj1FjRjaI7MBnpTPxb4AWWlw46RjzVls0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:78:13:26:66:df:f1:77:33:7b:d5:7b:b2:c0:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d6abe5c48aecebd4a237e153c3684f30608d444 Validity Not Before: Dec 6 21:00:38 2025 GMT Not After : Dec 7 21:00:38 2025 GMT Subject: CN=d57abf7a8340ff574a02f7498d4f7a3efcee9115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1d:8e:8d:3b:b0:fe:5b:f3:4e:8d:f6:79:19: fb:ea:09:69:0a:4b:35:5e:2b:3e:8b:76:07:ba:f7: 42:32:a4:36:e0:fd:41:34:8d:49:b1:f5:ab:9b:b0: 6b:e4:32:9e:b4:07:ad:c2:c3:a8:db:a1:be:bc:7a: 77:7a:d4:74:12:c9:98:b0:3f:c5:c4:8d:45:a6:dd: 47:45:67:96:58:ad:ed:26:4b:10:55:d1:d0:05:a7: e3:02:e1:cc:26:2f:14:bf:9f:23:2e:28:8f:d4:c3: e4:8f:cb:c9:dd:e6:c0:78:6d:73:a1:70:c8:ab:81: 97:6e:78:b8:49:90:2c:c4:79:42:cb:20:e8:d9:89: a9:62:ee:bf:18:da:61:78:df:ac:f8:9f:cd:0e:57: 49:18:c1:36:67:5e:43:32:d2:77:7a:36:b6:8b:84: 52:9f:50:a2:c2:50:05:45:90:6c:f5:2a:e0:51:00: 95:9b:44:f6:34:5e:7e:61:8e:e4:c8:9f:ea:b7:f5: f7:87:5c:4d:80:96:70:1f:ef:2b:96:5d:28:d6:a8: b6:05:51:e6:b1:a7:3a:a0:d8:bd:48:fd:b4:18:76: 0b:83:88:e1:dc:e2:eb:bf:43:4b:80:82:70:8b:c8: 9d:9f:2e:91:78:4e:87:f8:49:7c:74:a3:f1:2d:2d: e1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7A:BF:7A:83:40:FF:57:4A:02:F7:49:8D:4F:7A:3E:FC:EE:91:15 X509v3 Authority Key Identifier: keyid:3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:7e:a8:10:fa:46:bf:24:5b:d1:f6:04:09:aa:46:33:c9:5d: ed:c3:5b:c3:be:3a:6f:c4:91:ec:90:35:a3:bd:66:b3:ee:77: 14:bb:65:0b:8f:7e:7f:de:71:51:3f:2c:68:30:54:d6:5d:87: 24:b0:c3:e7:b0:9a:79:69:a9:61:f9:58:92:93:1d:64:9b:1d: c5:bf:18:00:17:31:4e:f4:60:86:5b:bc:7e:99:05:28:ae:4f: 37:df:78:f0:1c:9d:5b:43:b2:09:a4:9f:73:a3:bb:24:8e:31: ef:13:41:0b:4f:c0:e4:08:c5:3b:f9:8c:29:63:f2:25:4b:b8: 76:be:2c:29:56:8d:57:66:8d:fa:08:4c:b5:f6:39:4d:29:69: 15:eb:b7:39:10:bc:5a:4f:37:43:2b:00:10:2f:ed:db:8c:b1: e2:75:0f:a6:4c:30:7c:04:17:9f:ba:dc:ec:ee:39:50:48:fa: 42:5d:90:7d:ec:fe:02:2b:e1:03:61:4e:79:b8:4b:b6:16:4a: 87:ea:3f:bd:f2:0c:a0:85:dc:8a:d8:8c:d2:db:85:01:c5:40: 4a:fc:7a:77:bc:53:74:54:51:00:1f:52:8c:43:71:e1:9e:ec: 8a:dd:46:b8:f0:cf:ad:0e:58:a5:b4:62:85:b7:a8:d6:5a:3b: 0e:ad:bd:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d3gTJmbf8Xcze9V7ssDxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNmFiZTVjNDhhZWNlYmQ0YTIzN2UxNTNjMzY4NGYzMDYw OGQ0NDQwHhcNMjUxMjA2MjEwMDM4WhcNMjUxMjA3MjEwMDM4WjAzMTEwLwYDVQQD EyhkNTdhYmY3YTgzNDBmZjU3NGEwMmY3NDk4ZDRmN2EzZWZjZWU5MTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh2OjTuw/lvzTo32eRn76glpCks1 Xis+i3YHuvdCMqQ24P1BNI1JsfWrm7Br5DKetAetwsOo26G+vHp3etR0EsmYsD/F xI1Fpt1HRWeWWK3tJksQVdHQBafjAuHMJi8Uv58jLiiP1MPkj8vJ3ebAeG1zoXDI q4GXbni4SZAsxHlCyyDo2YmpYu6/GNpheN+s+J/NDldJGME2Z15DMtJ3eja2i4RS n1CiwlAFRZBs9SrgUQCVm0T2NF5+YY7kyJ/qt/X3h1xNgJZwH+8rll0o1qi2BVHm sac6oNi9SP20GHYLg4jh3OLrv0NLgIJwi8idny6ReE6H+El8dKPxLS3hIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNV6v3qDQP9XSgL3SY1Pej787pEVMB8GA1UdIwQY MBaAFD1qvlxIrs69SiN+FTw2hPMGCNREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFdxLVhFaXV6cjFLSTM0VlBEYUU4d1lJMUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC81ZmI4MDMtNDMzMy00MTc1LTkwZGYt YWVjMTRlYTE3ZWJmLzEvUFdxLVhFaXV6cjFLSTM0VlBEYUU4d1lJMUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC81ZmI4MDMtNDMzMy00MTc1LTkwZGYtYWVjMTRlYTE3ZWJm LzEvUFdxLVhFaXV6cjFLSTM0VlBEYUU4d1lJMUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxX6oEPpG vyRb0fYECapGM8ld7cNbw746b8SR7JA1o71ms+53FLtlC49+f95xUT8saDBU1l2H JLDD57CaeWmpYflYkpMdZJsdxb8YABcxTvRghlu8fpkFKK5PN9948BydW0OyCaSf c6O7JI4x7xNBC0/A5AjFO/mMKWPyJUu4dr4sKVaNV2aN+ghMtfY5TSlpFeu3ORC8 Wk83QysAEC/t24yx4nUPpkwwfAQXn7rc7O45UEj6Ql2Qfez+AivhA2FOebhLthZK h+o/vfIMoIXcitiM0tuFAcVASvx6d7xTdFRRAB9SjENx4Z7sit1GuPDPrQ5YpbRi hbeo1lo7Dq29Ig== -----END CERTIFICATE-----Generated at Sun Dec 7 06:38:12 2025 by rpki-client