This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft File: w-twdDgV_kRclYo8URfvJ1PTD34.mft (raw, json) Hash identifier: ysp6IXvMAM9lYgjdryFZBKBp7RgmnpzFxXDO2u3cB5Y= Subject key identifier: 76:74:27:9B:A1:0F:D1:E7:E4:7B:29:B3:61:11:91:85:8C:44:52:90 Authority key identifier: C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E Certificate issuer: /CN=c3eb70743815fe445c958a3c5117ef2753d30f7e Certificate serial: 019AF164691D170C49E68442E09417B6ACAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:01:20 +0000 Manifest this update: Sat 06 Dec 2025 02:01:20 +0000 Manifest next update: Sun 07 Dec 2025 02:01:20 +0000 Files and hashes: 1: GzCIBu4tHiFH76_Ly9Ei_0SMBpg.roa (hash: ucUps3PWBgmn642QIizMtNVpME3QV9nJ//n0R1ijDxA=) 2: w-twdDgV_kRclYo8URfvJ1PTD34.crl (hash: pSxw4OspyobVMeqTPOF/62SaDqKw3hV2DXCTcOCIA0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:69:1d:17:0c:49:e6:84:42:e0:94:17:b6:ac:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3eb70743815fe445c958a3c5117ef2753d30f7e Validity Not Before: Dec 6 02:01:20 2025 GMT Not After : Dec 7 02:01:20 2025 GMT Subject: CN=7674279ba10fd1e7e47b29b3611191858c445290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a1:99:70:26:b1:f0:7f:76:f1:51:e3:9b:ae: 66:9b:a3:36:49:99:f0:fe:e2:22:ed:ca:01:9a:59: 48:db:70:ec:3d:01:00:b7:32:0a:f0:27:4b:62:3a: 67:23:c5:fd:11:e4:f9:7e:0d:2a:0a:f5:47:0c:0f: cb:da:5d:ab:4e:e5:8e:30:1a:16:25:22:2e:b9:ea: 06:68:b4:61:fe:c9:4c:86:19:d5:32:d5:0e:61:9e: 64:b9:bb:62:26:4d:cd:6b:88:df:1a:5d:31:f5:4a: 00:2d:3e:4d:20:4f:83:5b:2d:71:a3:92:a7:1b:e1: 3a:8d:bc:df:90:f0:fd:13:db:c3:c5:6c:ab:36:2b: a9:e5:6c:65:0a:41:2f:32:81:0e:67:14:00:c1:28: ec:9b:c6:95:ef:91:5e:35:3e:32:a0:11:75:a3:0f: 26:36:c6:cc:32:0c:ff:d5:4a:13:73:1e:4b:d2:77: 89:0b:a5:cd:0e:18:ed:30:ce:1a:8a:b1:e9:7c:4c: f5:b2:7c:13:15:76:c5:e0:ef:c3:bc:6a:2a:fe:18: 1c:d1:0e:14:05:0e:c4:03:61:e1:cb:fe:cd:fc:24: 44:b5:69:21:27:b6:2e:2b:82:6f:2d:39:42:46:ff: 67:a0:30:e6:23:0c:ce:2b:80:34:7d:2e:be:4f:68: 92:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:74:27:9B:A1:0F:D1:E7:E4:7B:29:B3:61:11:91:85:8C:44:52:90 X509v3 Authority Key Identifier: keyid:C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:18:11:60:e5:f6:32:93:a7:de:9b:5c:27:a0:57:85:3d:09: 17:7e:4b:ba:b7:79:92:f1:7f:48:6b:37:da:4e:42:9a:f0:3c: 4e:76:54:59:14:ca:42:09:3c:48:02:3e:dd:3d:0c:87:e9:21: 6f:d4:48:22:80:66:ce:b6:45:bd:35:b2:07:a9:60:4f:67:cc: 82:82:69:13:ca:d6:b9:c6:c4:35:41:b1:d8:57:17:92:f9:61: 07:a0:55:d5:99:41:d8:bc:a2:81:d3:c6:93:ec:b0:3c:25:bc: f1:dd:de:2a:4c:99:24:97:24:a2:2f:5c:a5:64:fc:e0:56:27: 96:8c:ec:72:db:bc:82:ea:81:30:8d:00:72:e9:e0:43:39:76: 9e:76:e8:81:91:c9:6c:d6:d6:03:85:d9:20:c0:23:ee:c9:a8: 22:c0:65:c3:72:0c:72:d4:c1:64:83:19:52:b0:f7:6a:4d:0a: d7:93:a4:6f:15:32:77:20:8b:48:6e:06:b4:72:87:a2:06:12: d3:e5:7f:63:09:c0:ec:f8:ab:25:ac:20:4e:57:ba:dc:66:72: 72:7b:c3:97:1f:7a:29:30:4f:ee:e2:1a:e8:f5:e9:46:1e:64: b3:b3:10:f6:bd:fe:d8:b7:9c:23:8f:7d:b2:19:2b:70:e6:ad: fa:a7:b8:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGkdFwxJ5oRC4JQXtqytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZWI3MDc0MzgxNWZlNDQ1Yzk1OGEzYzUxMTdlZjI3NTNk MzBmN2UwHhcNMjUxMjA2MDIwMTIwWhcNMjUxMjA3MDIwMTIwWjAzMTEwLwYDVQQD Eyg3Njc0Mjc5YmExMGZkMWU3ZTQ3YjI5YjM2MTExOTE4NThjNDQ1MjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qGZcCax8H928VHjm65mm6M2SZnw /uIi7coBmllI23DsPQEAtzIK8CdLYjpnI8X9EeT5fg0qCvVHDA/L2l2rTuWOMBoW JSIuueoGaLRh/slMhhnVMtUOYZ5kubtiJk3Na4jfGl0x9UoALT5NIE+DWy1xo5Kn G+E6jbzfkPD9E9vDxWyrNiup5WxlCkEvMoEOZxQAwSjsm8aV75FeNT4yoBF1ow8m NsbMMgz/1UoTcx5L0neJC6XNDhjtMM4airHpfEz1snwTFXbF4O/DvGoq/hgc0Q4U BQ7EA2Hhy/7N/CREtWkhJ7YuK4JvLTlCRv9noDDmIwzOK4A0fS6+T2iSBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZ0J5uhD9Hn5Hsps2ERkYWMRFKQMB8GA1UdIwQY MBaAFMPrcHQ4Ff5EXJWKPFEX7ydT0w9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdy10d2REZ1Zfa1JjbFlvOFVSZnZKMVBURDM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xMzc1NGMtOGJlNy00NjBlLTg1MDct MTM1NzVlZjcyOWYzLzEvdy10d2REZ1Zfa1JjbFlvOFVSZnZKMVBURDM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8xMzc1NGMtOGJlNy00NjBlLTg1MDctMTM1NzVlZjcyOWYz LzEvdy10d2REZ1Zfa1JjbFlvOFVSZnZKMVBURDM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBgRYOX2 MpOn3ptcJ6BXhT0JF35Lurd5kvF/SGs32k5CmvA8TnZUWRTKQgk8SAI+3T0Mh+kh b9RIIoBmzrZFvTWyB6lgT2fMgoJpE8rWucbENUGx2FcXkvlhB6BV1ZlB2LyigdPG k+ywPCW88d3eKkyZJJckoi9cpWT84FYnlozsctu8guqBMI0AcungQzl2nnbogZHJ bNbWA4XZIMAj7smoIsBlw3IMctTBZIMZUrD3ak0K15OkbxUydyCLSG4GtHKHogYS 0+V/YwnA7PirJawgTle63GZycnvDlx96KTBP7uIa6PXpRh5ks7MQ9r3+2LecI499 shkrcOat+qe4+A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:03 2025 by rpki-client