This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft File: w1VyK06KSCQKzfXzN4OKogaqAto.mft (raw, json) Hash identifier: sGbbZC2tmbjnbQu+bwOHzJ1jYu2FZm2KrzqzbzDGYzk= Subject key identifier: 22:DC:53:A2:F8:DD:23:C8:0E:F8:EF:E9:81:34:2C:89:14:42:D6:3D Authority key identifier: C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA Certificate issuer: /CN=c355722b4e8a48240acdf5f337838aa206aa02da Certificate serial: 019AF2AE0FA3280A66337C6D4963249D2A16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 08:01:24 +0000 Manifest this update: Sat 06 Dec 2025 08:01:24 +0000 Manifest next update: Sun 07 Dec 2025 08:01:24 +0000 Files and hashes: 1: skK36GoSOdR0likALCjbuukKSIA.roa (hash: rM2HKFoUwc02gigzQD8leLnlbHQm3zNCncQ93i9jwp0=) 2: w1VyK06KSCQKzfXzN4OKogaqAto.crl (hash: dNxKKM8Qi41acBn0mrDqO8kwqkJotI9xxuyM+wxgMLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.crl rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ae:0f:a3:28:0a:66:33:7c:6d:49:63:24:9d:2a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c355722b4e8a48240acdf5f337838aa206aa02da Validity Not Before: Dec 6 08:01:24 2025 GMT Not After : Dec 7 08:01:24 2025 GMT Subject: CN=22dc53a2f8dd23c80ef8efe981342c891442d63d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:39:dc:c2:7d:87:8c:d7:2d:dd:c1:2d:f5:d8: cd:a0:08:3c:1d:30:25:a1:92:c1:2b:cc:a8:e1:8d: 8f:98:29:28:79:8b:11:13:26:43:22:50:2b:ac:8c: f9:41:b6:1c:78:8d:f8:92:a5:3e:4b:88:14:a1:b3: dc:ca:ea:dd:27:c5:29:c6:92:ea:ec:69:8e:3e:5d: c2:f7:20:b5:b7:91:57:0f:b8:f4:81:49:08:c0:40: 3b:e2:67:6a:0a:e3:2e:ea:e8:89:90:24:a3:76:62: fb:fb:80:19:b3:54:66:97:e7:96:32:fc:55:97:af: 3d:ac:b5:15:f7:11:ce:e7:de:b2:2e:ad:3d:85:6a: 13:ef:2b:1c:fc:72:ff:27:f0:a3:c8:ae:9a:37:df: 7f:06:2f:e1:32:37:06:18:39:dd:e4:4b:df:3f:41: c4:56:75:3a:f0:40:06:86:5d:66:ae:26:7e:7f:d9: 80:11:39:e8:e2:96:00:c9:a7:7e:c1:39:ad:f2:17: e1:fa:fb:bb:81:65:57:3b:43:52:ab:d8:fe:59:b5: 44:87:46:27:1f:87:6c:ef:42:88:6d:a2:9e:45:cc: 55:a5:89:61:9e:a9:ce:20:3f:46:21:b0:3d:2b:7e: 41:1e:f9:3f:61:f8:11:9c:30:72:25:3e:9a:77:a4: 0d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DC:53:A2:F8:DD:23:C8:0E:F8:EF:E9:81:34:2C:89:14:42:D6:3D X509v3 Authority Key Identifier: keyid:C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:d8:d6:6e:b9:9e:0a:bf:12:01:90:65:c6:46:91:30:a3:cd: fe:33:f5:b8:3d:9d:10:87:68:b4:fc:1c:22:3c:41:c6:27:35: 23:70:02:6d:5e:97:b7:60:ed:5b:1d:b2:df:d8:23:74:0e:41: 3f:07:fb:f7:72:d4:d5:30:be:64:b6:e7:61:a4:8a:7f:b5:c5: 9d:2d:64:df:56:59:2a:11:7d:e6:39:44:b4:43:13:40:b1:9a: 2e:dc:db:e8:a3:39:3c:0d:46:c6:57:43:c1:bf:5d:20:34:7f: 00:55:02:d4:af:fb:16:6e:c6:31:7c:23:7f:45:57:06:15:4f: 08:ce:48:91:59:ee:70:06:be:c2:eb:85:f6:28:cd:e2:ee:34: e9:77:8c:0b:f8:25:a2:d0:dc:30:8d:29:2f:ca:4b:e8:2e:38: 3a:c6:44:2f:f7:08:4f:cb:c4:7b:05:5f:c7:07:86:16:dc:79: ac:39:6a:53:31:a2:e8:23:da:8b:49:95:21:d4:10:0e:56:2c: 71:7f:eb:e5:cb:cf:d0:a6:37:30:d0:eb:c4:c4:59:f4:b6:e9: 9a:56:2d:b1:0a:01:27:c5:6d:cc:1d:77:9e:4a:99:d0:03:72: 4d:8f:fb:f5:78:98:82:d6:7b:61:bf:07:67:0c:f4:e1:11:53: ef:2d:f9:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrg+jKApmM3xtSWMknSoWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNTU3MjJiNGU4YTQ4MjQwYWNkZjVmMzM3ODM4YWEyMDZh YTAyZGEwHhcNMjUxMjA2MDgwMTI0WhcNMjUxMjA3MDgwMTI0WjAzMTEwLwYDVQQD EygyMmRjNTNhMmY4ZGQyM2M4MGVmOGVmZTk4MTM0MmM4OTE0NDJkNjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjncwn2HjNct3cEt9djNoAg8HTAl oZLBK8yo4Y2PmCkoeYsREyZDIlArrIz5QbYceI34kqU+S4gUobPcyurdJ8UpxpLq 7GmOPl3C9yC1t5FXD7j0gUkIwEA74mdqCuMu6uiJkCSjdmL7+4AZs1Rml+eWMvxV l689rLUV9xHO596yLq09hWoT7ysc/HL/J/CjyK6aN99/Bi/hMjcGGDnd5EvfP0HE VnU68EAGhl1mriZ+f9mAETno4pYAyad+wTmt8hfh+vu7gWVXO0NSq9j+WbVEh0Yn H4ds70KIbaKeRcxVpYlhnqnOID9GIbA9K35BHvk/YfgRnDByJT6ad6QN+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLcU6L43SPIDvjv6YE0LIkUQtY9MB8GA1UdIwQY MBaAFMNVcitOikgkCs318zeDiqIGqgLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZTk5NTgtOWZmMi00MTIzLTliNWYt YTJlZjkwYzllOTEzLzEvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xZTk5NTgtOWZmMi00MTIzLTliNWYtYTJlZjkwYzllOTEz LzEvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNjWbrme Cr8SAZBlxkaRMKPN/jP1uD2dEIdotPwcIjxBxic1I3ACbV6Xt2DtWx2y39gjdA5B Pwf793LU1TC+ZLbnYaSKf7XFnS1k31ZZKhF95jlEtEMTQLGaLtzb6KM5PA1GxldD wb9dIDR/AFUC1K/7Fm7GMXwjf0VXBhVPCM5IkVnucAa+wuuF9ijN4u406XeMC/gl otDcMI0pL8pL6C44OsZEL/cIT8vEewVfxweGFtx5rDlqUzGi6CPai0mVIdQQDlYs cX/r5cvP0KY3MNDrxMRZ9LbpmlYtsQoBJ8VtzB13nkqZ0ANyTY/79XiYgtZ7Yb8H Zwz04RFT7y35Cw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:03:01 2025 by rpki-client