This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft File: Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft (raw, json) Hash identifier: 4tiEItGfbrSgYsS0UrYIhMnT7S5xefaivJy00CwuJ3k= Subject key identifier: 84:25:98:BB:1A:51:AF:8F:4C:CC:F7:21:B4:C3:18:2F:E5:79:5F:0D Authority key identifier: 33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07 Certificate issuer: /CN=330e3fdb11d826bc01663290bd7ca406b8d76507 Certificate serial: 019AF31B64100EADE85CE03FB9BCFA53054A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft Manifest number: 0E46 Signing time: Sat 06 Dec 2025 10:00:49 +0000 Manifest this update: Sat 06 Dec 2025 10:00:49 +0000 Manifest next update: Sun 07 Dec 2025 10:00:49 +0000 Files and hashes: 1: DT1onb-4ObKDzalYYHYuQuaaeIo.roa (hash: vu1nm9V8jbxKLGzlJsgL+mHK04vH81jI0saGvnr/HOw=) 2: Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl (hash: NZJYL0dIA2vyysOQQky4LHQeKDUFwxNQvd5jVn4eNsQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:64:10:0e:ad:e8:5c:e0:3f:b9:bc:fa:53:05:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=330e3fdb11d826bc01663290bd7ca406b8d76507 Validity Not Before: Dec 6 10:00:49 2025 GMT Not After : Dec 7 10:00:49 2025 GMT Subject: CN=842598bb1a51af8f4cccf721b4c3182fe5795f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c9:3a:d5:5b:c8:9a:bc:f1:1a:b5:1a:96:f5: 64:96:11:90:af:18:67:1b:14:c5:72:18:fe:eb:f0: 2f:cf:1f:4b:7c:09:1a:b4:2e:ed:3a:8d:96:b5:12: 14:12:e4:d6:c5:06:70:d8:db:61:a8:69:04:22:41: 93:a1:09:e1:fa:23:82:de:bc:da:ae:16:ba:13:12: 06:34:9c:13:da:4c:d7:94:ba:23:ff:6a:a3:ca:3a: 54:eb:51:8b:02:d7:54:11:9f:ee:a8:61:9b:ff:31: 3f:6d:9d:c8:fc:66:52:14:c9:56:77:90:66:ab:19: 9e:ea:67:b5:50:5a:21:16:5d:8e:89:06:e1:00:7f: bd:73:3f:66:29:42:be:c3:63:3f:80:3b:68:74:43: 4c:40:b0:50:60:47:90:fa:1c:d1:90:bf:56:8f:9a: 2b:ff:6a:00:38:24:84:8b:15:eb:a9:fc:92:7e:7e: ce:4e:1a:80:db:96:9a:34:a3:46:f2:5e:d9:79:d7: 57:d4:4d:ed:1f:7d:cc:89:c9:06:d6:96:48:2e:17: d2:1e:44:d3:5b:e4:d7:6f:13:95:04:c3:6d:c6:96: 23:c9:6b:e5:34:f4:a5:73:e9:49:29:92:be:55:11: 57:66:d4:ad:36:27:57:ca:21:45:79:5b:7c:56:62: 9b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:25:98:BB:1A:51:AF:8F:4C:CC:F7:21:B4:C3:18:2F:E5:79:5F:0D X509v3 Authority Key Identifier: keyid:33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fe:1c:31:59:dd:38:a0:42:65:66:1d:de:d5:80:2d:60:a5: a4:74:6d:43:b8:86:9c:41:7c:9e:d3:43:a8:43:75:42:7e:a9: c4:97:a2:d6:5f:e3:47:c7:62:cd:c9:c9:1b:b3:b7:91:36:79: cf:3b:ad:4b:24:15:11:9f:28:cf:87:c7:39:95:30:d4:64:c0: dc:71:44:29:12:56:17:0f:37:34:b8:d3:93:90:38:89:3e:11: f2:92:6e:68:d9:db:ec:ea:a4:d1:65:87:00:7a:ca:e7:df:15: 3b:1e:bb:d7:07:27:76:e9:2d:4d:3a:a7:25:e1:40:aa:c9:93: 88:e4:83:fe:26:39:5e:07:82:ca:89:25:9f:46:67:f1:2b:4d: 3b:3e:e1:30:ba:20:49:d9:c0:02:0f:25:34:28:af:2c:89:b6: 73:35:ac:42:a5:d8:f2:8b:e4:dd:28:6e:11:3b:3b:bc:de:c9: 51:33:2d:51:41:d0:09:d5:4f:16:0d:ec:57:72:fa:6f:4a:1b: 86:67:ad:7b:de:d8:3d:d6:10:ab:ce:35:23:f1:4d:29:5c:f0: a8:03:f2:4a:e6:dc:2a:24:d7:7c:5f:66:4a:13:d6:1c:84:42: e9:ee:9e:56:29:d8:ca:9e:b5:a6:91:d8:c4:72:68:16:ac:da: b9:cc:b7:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2QQDq3oXOA/ubz6UwVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMGUzZmRiMTFkODI2YmMwMTY2MzI5MGJkN2NhNDA2Yjhk NzY1MDcwHhcNMjUxMjA2MTAwMDQ5WhcNMjUxMjA3MTAwMDQ5WjAzMTEwLwYDVQQD Eyg4NDI1OThiYjFhNTFhZjhmNGNjY2Y3MjFiNGMzMTgyZmU1Nzk1ZjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8k61VvImrzxGrUalvVklhGQrxhn GxTFchj+6/Avzx9LfAkatC7tOo2WtRIUEuTWxQZw2NthqGkEIkGToQnh+iOC3rza rha6ExIGNJwT2kzXlLoj/2qjyjpU61GLAtdUEZ/uqGGb/zE/bZ3I/GZSFMlWd5Bm qxme6me1UFohFl2OiQbhAH+9cz9mKUK+w2M/gDtodENMQLBQYEeQ+hzRkL9Wj5or /2oAOCSEixXrqfySfn7OThqA25aaNKNG8l7ZeddX1E3tH33MickG1pZILhfSHkTT W+TXbxOVBMNtxpYjyWvlNPSlc+lJKZK+VRFXZtStNidXyiFFeVt8VmKbUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQlmLsaUa+PTMz3IbTDGC/leV8NMB8GA1UdIwQY MBaAFDMOP9sR2Ca8AWYykL18pAa412UHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXc0XzJ4SFlKcndCWmpLUXZYeWtCcmpYWlFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zNGM2MTgtNGQ0My00NzM2LTg1OWYt OWQyYTQyYWZmYjFiLzEvTXc0XzJ4SFlKcndCWmpLUXZYeWtCcmpYWlFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8zNGM2MTgtNGQ0My00NzM2LTg1OWYtOWQyYTQyYWZmYjFi LzEvTXc0XzJ4SFlKcndCWmpLUXZYeWtCcmpYWlFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/4cMVnd OKBCZWYd3tWALWClpHRtQ7iGnEF8ntNDqEN1Qn6pxJei1l/jR8dizcnJG7O3kTZ5 zzutSyQVEZ8oz4fHOZUw1GTA3HFEKRJWFw83NLjTk5A4iT4R8pJuaNnb7Oqk0WWH AHrK598VOx671wcnduktTTqnJeFAqsmTiOSD/iY5XgeCyokln0Zn8StNOz7hMLog SdnAAg8lNCivLIm2czWsQqXY8ovk3ShuETs7vN7JUTMtUUHQCdVPFg3sV3L6b0ob hmete97YPdYQq841I/FNKVzwqAPySubcKiTXfF9mShPWHIRC6e6eVinYyp61ppHY xHJoFqzaucy31Q== -----END CERTIFICATE-----Generated at Sat Dec 6 18:53:31 2025 by rpki-client