This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json) Hash identifier: DehjFUJzlSJXt9SOUT5Y/rtcT0iAOZnz7p7lcGXU+zE= Subject key identifier: 7A:B8:F0:2C:C1:92:53:2C:D0:5D:64:3F:C3:14:26:D3:C4:A8:DD:81 Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 019AF3F7B74742D74E6E9F6AFBFE566BE7E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 14:01:29 +0000 Manifest this update: Sat 06 Dec 2025 14:01:29 +0000 Manifest next update: Sun 07 Dec 2025 14:01:29 +0000 Files and hashes: 1: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: 5C8E/eZWQ1oHdOzg05iPDW2SsOYf6l8juCTJqfbNbzU=) 2: 3YD_MRnl9Z0M-5gb5pCh5nc9hwk.roa (hash: evl0gnXGBj3jpscK/Lmbf+kXEngR8HlbQU4a4Qn4JRY=) 3: 5wJESiDMAZmj-ilD4vzwMI5_ssg.roa (hash: +GY+k9R/JjbgE/bu3urmYp0AN8h15Gn0d4y/CuRmzBU=) 4: 7Cn94brCANl81RCeGqUf6f3wZjs.roa (hash: YTesKuaBb88vyg7FC7tve1XNAAciZyS+TUm60ayEkGs=) 5: E07_Ifx3SYqr0ZkCl5_UWpx91po.roa (hash: 70YxDQ66SkXpTbaq/hxG4SBeUqdr/4bsejOynO4V4mw=) 6: Oe2ZInEj059O0GiOPtXNU0_R6MI.roa (hash: t8ba+S8fY0Jk7zkL111LjDk68FhBP0J/JQnAfb8aRYU=) 7: aKFi1aME1l1V_WYgzTGI4swO8z4.roa (hash: J96GhwyVxGlf3VlcFOTAObMIbztxwxb0EC7z2fTuLyY=) 8: c35KLXIqnQLDzGQrWv8LHC2jXps.roa (hash: RoucjcIt4vL7sa6JcKcnG6f3UgWawurBha3WBbsL36o=) 9: ikkLHj8L2gbMUX3D4taYH4bLq_k.roa (hash: H50XZ4z2D599HF8sTbfTiJpRuYbZmd0jgsQgZY7w/J4=) 10: jeSah0AYaVPkKlFJhlP8bOZnD28.roa (hash: UMcRa6RBKPUQaaBfW3b1N03s8KaWhFm00Ptm56oj9wU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:b7:47:42:d7:4e:6e:9f:6a:fb:fe:56:6b:e7:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Dec 6 14:01:29 2025 GMT Not After : Dec 7 14:01:29 2025 GMT Subject: CN=7ab8f02cc192532cd05d643fc31426d3c4a8dd81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:04:76:4f:59:4a:87:3b:36:cf:54:ea:5a:b5: 1f:92:69:91:aa:8a:a6:f5:82:01:ae:d7:5e:e7:fe: 39:b8:3b:ed:12:ed:d7:66:e4:e1:9f:47:e5:c6:4b: e5:0f:f5:13:c0:8b:4b:bb:5e:ca:ab:1a:8d:fa:bf: 2c:5e:88:ae:5f:17:14:c0:30:8c:0f:25:cf:28:7c: 54:02:18:4c:7b:e9:6f:29:13:dc:b2:8a:7a:2a:bb: bd:e3:20:b7:f3:1e:71:75:79:d2:cd:37:93:d7:bf: 24:24:be:0a:ba:31:98:63:75:66:a0:43:9a:de:1a: 19:c0:97:40:90:03:c5:97:e2:34:07:72:f1:8b:56: 2a:27:c3:c7:b4:95:7f:a5:4a:72:aa:55:21:ac:8e: 12:5e:95:5c:6e:2f:a6:e6:57:50:fc:29:75:28:d3: 5c:f5:6c:d3:9a:3f:10:6a:3f:b2:34:6d:93:24:56: 40:23:01:35:57:9d:08:3b:28:69:12:df:a3:c5:a7: 06:8c:f3:44:1d:4a:f5:d9:15:68:7b:6d:23:f9:f2: 5e:94:2a:4c:18:00:42:8d:25:47:28:0a:54:16:59: 57:5f:3b:16:d2:ea:6f:11:aa:91:ea:60:bd:37:36: 2d:e2:01:72:38:93:b9:de:0a:74:cd:41:1a:ca:f9: b1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B8:F0:2C:C1:92:53:2C:D0:5D:64:3F:C3:14:26:D3:C4:A8:DD:81 X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:4a:eb:0c:a4:94:ee:07:8c:fd:f0:0b:13:41:6f:45:d8:2b: 7d:ae:6a:83:ee:cf:4a:28:41:4d:f2:2d:8a:28:81:32:df:a7: 33:cd:d0:70:80:71:2e:de:27:bb:fa:5e:09:49:3f:f0:e2:2c: 75:25:bc:a2:fc:fd:2d:9a:d0:d5:a4:40:17:d8:aa:b8:51:ff: 11:dc:ce:9a:56:15:5b:25:3d:09:40:63:39:56:71:0d:b1:95: 2b:74:4c:86:c5:a6:db:cf:be:ea:40:22:6a:34:a8:f5:de:8f: 25:6b:34:59:74:b5:19:a8:f9:0d:82:e8:24:b9:4a:b2:a1:61: 32:e7:d4:dd:16:56:b6:a5:4a:96:f2:b2:11:7f:4e:7d:30:8f: 0f:4a:41:88:e4:4a:0b:4c:fa:27:a6:69:98:0c:82:54:3f:b0: c1:7f:9d:5c:c3:df:a2:8c:82:00:f0:b3:3c:95:6a:78:f6:54: a6:20:47:82:8b:07:a0:fa:e4:b7:38:d1:51:ea:b9:01:8a:c7: fc:c7:60:ac:30:eb:ff:63:7b:e2:ad:56:e7:29:03:d1:57:f2: 1f:58:41:66:ff:3d:1e:2b:fc:97:ba:13:96:e7:5d:58:53:3d: 9a:72:29:4e:1d:20:17:e8:67:57:3b:a3:b6:8c:fa:93:e1:55: cf:04:d3:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz97dHQtdObp9q+/5Wa+fjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjUxMjA2MTQwMTI5WhcNMjUxMjA3MTQwMTI5WjAzMTEwLwYDVQQD Eyg3YWI4ZjAyY2MxOTI1MzJjZDA1ZDY0M2ZjMzE0MjZkM2M0YThkZDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QR2T1lKhzs2z1TqWrUfkmmRqoqm 9YIBrtde5/45uDvtEu3XZuThn0flxkvlD/UTwItLu17KqxqN+r8sXoiuXxcUwDCM DyXPKHxUAhhMe+lvKRPcsop6Kru94yC38x5xdXnSzTeT178kJL4KujGYY3VmoEOa 3hoZwJdAkAPFl+I0B3Lxi1YqJ8PHtJV/pUpyqlUhrI4SXpVcbi+m5ldQ/Cl1KNNc 9WzTmj8Qaj+yNG2TJFZAIwE1V50IOyhpEt+jxacGjPNEHUr12RVoe20j+fJelCpM GABCjSVHKApUFllXXzsW0upvEaqR6mC9NzYt4gFyOJO53gp0zUEayvmxCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHq48CzBklMs0F1kP8MUJtPEqN2BMB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0rrDKSU 7geM/fALE0FvRdgrfa5qg+7PSihBTfItiiiBMt+nM83QcIBxLt4nu/peCUk/8OIs dSW8ovz9LZrQ1aRAF9iquFH/EdzOmlYVWyU9CUBjOVZxDbGVK3RMhsWm28++6kAi ajSo9d6PJWs0WXS1Gaj5DYLoJLlKsqFhMufU3RZWtqVKlvKyEX9OfTCPD0pBiORK C0z6J6ZpmAyCVD+wwX+dXMPfooyCAPCzPJVqePZUpiBHgosHoPrktzjRUeq5AYrH /MdgrDDr/2N74q1W5ykD0VfyH1hBZv89Hiv8l7oTluddWFM9mnIpTh0gF+hnVzuj toz6k+FVzwTTXA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:35:12 2025 by rpki-client