This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft File: we7iyrhrXuQPwncMqMtcUMYrdVs.mft (raw, json) Hash identifier: QLtOUHyAzYNxu99h1NBNpn0/7uWVj7dRajpvzS6lV1M= Subject key identifier: 9A:D3:9A:88:17:AD:13:05:68:DF:8E:8B:F6:D0:6F:6E:C8:39:E1:71 Authority key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B Certificate issuer: /CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b Certificate serial: 019B2F3057965A3EE4363AF0F335B0DD3FDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft Manifest number: 13FB Signing time: Thu 18 Dec 2025 02:00:55 +0000 Manifest this update: Thu 18 Dec 2025 02:00:55 +0000 Manifest next update: Fri 19 Dec 2025 02:00:55 +0000 Files and hashes: 1: C82fBmTW8-iwXu5pgvR1VTX1CPI.roa (hash: VxKUMucn3gu4aXap48afqVYi1a/XU7LxwPuTbOudfsE=) 2: we7iyrhrXuQPwncMqMtcUMYrdVs.crl (hash: YAZp/at0FPdOLYj7/xREss/AeXy/Rkp+l10NakYrRTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:57:96:5a:3e:e4:36:3a:f0:f3:35:b0:dd:3f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b Validity Not Before: Dec 18 02:00:55 2025 GMT Not After : Dec 19 02:00:55 2025 GMT Subject: CN=9ad39a8817ad130568df8e8bf6d06f6ec839e171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:64:4e:29:06:66:71:75:1e:55:e9:84:c3:68: dc:87:ca:ad:75:46:1b:94:29:18:50:cd:68:f6:85: ef:03:c4:18:25:d6:69:66:3a:2a:38:bd:e7:ed:20: 89:3e:04:c2:bd:01:83:59:76:63:5c:2e:9b:22:fc: 97:56:eb:c3:3c:ac:83:c7:57:40:cb:17:e8:10:30: 8d:9b:9c:ab:e2:9a:51:9f:6c:0c:01:3f:e7:c7:34: 8e:76:fe:95:ff:e7:3f:0c:a1:62:7e:45:3f:42:a5: f0:f4:d6:43:50:19:a2:f6:aa:9d:f6:69:d0:3e:3c: 02:7f:d1:9c:cf:20:ff:6d:d8:0b:8a:8f:ce:95:50: d2:16:a2:9e:e5:ba:c7:f5:9a:23:22:58:3f:ed:04: 59:98:91:33:ba:8d:36:1b:ca:eb:76:43:f3:88:37: 90:ec:e8:25:82:af:5c:df:8a:60:ae:90:21:65:62: ad:2e:91:15:da:ce:4e:0e:6e:78:60:ea:c0:8b:4e: f5:8f:6b:09:d0:53:84:18:7d:3a:e2:f2:56:f5:12: 48:dc:9c:02:3f:48:40:89:2f:38:a3:a3:e8:96:8a: 28:62:8e:34:c0:3d:1f:df:80:c7:95:a2:50:80:6f: 02:8e:c5:98:75:5c:e0:d7:03:bf:d7:4f:9f:de:39: 4a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D3:9A:88:17:AD:13:05:68:DF:8E:8B:F6:D0:6F:6E:C8:39:E1:71 X509v3 Authority Key Identifier: keyid:C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:36:6a:33:39:60:47:57:31:1b:36:5b:b2:50:18:95:58:12: b1:5f:ca:bf:f7:d9:5a:de:7c:a0:8e:15:ae:2e:32:a2:a8:87: e3:39:b6:bd:eb:80:ac:bd:cc:64:92:92:87:5e:ac:c1:c1:e7: d0:a7:20:fc:3b:02:62:e2:09:44:9b:51:cd:48:a6:2b:b5:98: 8f:b5:6b:8e:b5:e4:19:d0:e3:cb:ef:9a:6f:91:09:00:22:68: 04:fd:5d:fd:3c:3a:ea:05:f0:2e:11:7c:c3:12:5c:80:90:ca: 3e:21:aa:d9:eb:51:e9:92:8d:23:97:71:56:58:a6:7c:64:c5: 5b:0a:79:22:0f:19:a0:dd:44:70:13:5b:bb:11:90:ff:4f:ac: 1e:6b:a5:f5:e8:4a:e4:37:46:03:11:53:3e:01:09:04:cd:e8: 4e:cb:aa:f2:1d:a6:9d:e5:af:1e:1e:79:ab:a9:a1:be:6a:a3: 96:e9:c3:09:60:00:0f:22:e3:04:bc:b0:3b:88:ff:b2:c5:2d: 03:16:1b:93:8f:7a:55:30:d5:0b:96:df:c7:81:92:c9:4a:61: 5e:04:ad:ba:d6:c5:e2:ec:a8:9e:15:a3:0f:85:c3:3f:db:7d: 84:43:62:9d:78:83:3a:c0:de:c2:fa:ca:84:fc:39:7e:3a:8b: 17:9b:84:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMFeWWj7kNjrw8zWw3T/fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZWVlMmNhYjg2YjVlZTQwZmMyNzcwY2E4Y2I1YzUwYzYy Yjc1NWIwHhcNMjUxMjE4MDIwMDU1WhcNMjUxMjE5MDIwMDU1WjAzMTEwLwYDVQQD Eyg5YWQzOWE4ODE3YWQxMzA1NjhkZjhlOGJmNmQwNmY2ZWM4MzllMTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGROKQZmcXUeVemEw2jch8qtdUYb lCkYUM1o9oXvA8QYJdZpZjoqOL3n7SCJPgTCvQGDWXZjXC6bIvyXVuvDPKyDx1dA yxfoEDCNm5yr4ppRn2wMAT/nxzSOdv6V/+c/DKFifkU/QqXw9NZDUBmi9qqd9mnQ PjwCf9GczyD/bdgLio/OlVDSFqKe5brH9ZojIlg/7QRZmJEzuo02G8rrdkPziDeQ 7Oglgq9c34pgrpAhZWKtLpEV2s5ODm54YOrAi071j2sJ0FOEGH064vJW9RJI3JwC P0hAiS84o6PoloooYo40wD0f34DHlaJQgG8CjsWYdVzg1wO/10+f3jlKdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrTmogXrRMFaN+Oi/bQb27IOeFxMB8GA1UdIwQY MBaAFMHu4sq4a17kD8J3DKjLXFDGK3VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2U3aXlyaHJYdVFQd25jTXFNdGNVTVlyZFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82MWYzZDgtMWEyNC00NDZmLWEyYjIt MGQwNzY1MmU0Y2FiLzEvd2U3aXlyaHJYdVFQd25jTXFNdGNVTVlyZFZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny82MWYzZDgtMWEyNC00NDZmLWEyYjItMGQwNzY1MmU0Y2Fi LzEvd2U3aXlyaHJYdVFQd25jTXFNdGNVTVlyZFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODZqMzlg R1cxGzZbslAYlVgSsV/Kv/fZWt58oI4Vri4yoqiH4zm2veuArL3MZJKSh16swcHn 0Kcg/DsCYuIJRJtRzUimK7WYj7VrjrXkGdDjy++ab5EJACJoBP1d/Tw66gXwLhF8 wxJcgJDKPiGq2etR6ZKNI5dxVlimfGTFWwp5Ig8ZoN1EcBNbuxGQ/0+sHmul9ehK 5DdGAxFTPgEJBM3oTsuq8h2mneWvHh55q6mhvmqjlunDCWAADyLjBLywO4j/ssUt AxYbk496VTDVC5bfx4GSyUphXgStutbF4uyonhWjD4XDP9t9hENinXiDOsDewvrK hPw5fjqLF5uENA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:54:33 2025 by rpki-client