This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft File: w1k2RMcJGfYIPygZpz89Oeucteg.mft (raw, json) Hash identifier: FHAsMZX+kgLzjSw9Qpp6bnP20xmispZ/TTwQN7WYZGo= Subject key identifier: 6A:D3:CC:E7:18:4E:E3:80:67:2D:C2:63:53:78:AF:38:31:BD:C6:31 Authority key identifier: C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8 Certificate issuer: /CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8 Certificate serial: 019AF1D1A308C10F415A28A7A1CF47BF2381 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft Manifest number: 1026 Signing time: Sat 06 Dec 2025 04:00:39 +0000 Manifest this update: Sat 06 Dec 2025 04:00:39 +0000 Manifest next update: Sun 07 Dec 2025 04:00:39 +0000 Files and hashes: 1: w1k2RMcJGfYIPygZpz89Oeucteg.crl (hash: 9lpXH+hQIFyZ7B0qWevO570RIiR9u6w2XfKqdlFWkpw=) 2: zwDf_kkH_sbuGk9WPwUaPDjfffs.roa (hash: EodK3W1jmYTJC73uP7dzhnrwbPzudn9QK+eDEFeCQfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a3:08:c1:0f:41:5a:28:a7:a1:cf:47:bf:23:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8 Validity Not Before: Dec 6 04:00:39 2025 GMT Not After : Dec 7 04:00:39 2025 GMT Subject: CN=6ad3cce7184ee380672dc2635378af3831bdc631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:44:ab:b4:19:30:ce:6b:ca:51:8f:4c:08:28: fa:3a:21:4e:d9:39:31:58:f1:ea:b5:0f:ce:0b:53: c9:d5:f0:20:49:cd:73:be:83:9d:34:a5:dd:89:a6: 8b:2d:f5:0b:3a:5f:bb:94:18:8d:55:53:fa:1c:85: 8d:1f:8a:45:3e:55:c2:99:79:d4:81:9b:72:05:e4: 18:e3:aa:09:24:d8:55:f1:ee:29:b6:c0:e0:b8:ab: 07:8f:ad:4e:4a:ce:f4:75:4f:87:cd:fd:4c:e5:8e: 48:ba:06:9e:2c:27:87:6d:86:f8:52:20:14:64:44: 56:95:6d:cc:11:31:2a:ed:ae:82:34:42:3f:f9:4a: 40:ba:13:8b:14:e6:2d:e6:b1:85:0e:69:b0:ce:f6: 1d:3a:0a:be:60:af:00:62:3c:d0:0d:d2:5b:54:67: 0d:31:cf:11:25:89:ce:95:da:b7:99:6a:4c:6d:63: 98:e6:2a:52:fd:ef:28:6e:5f:27:0e:70:f1:06:92: 24:34:32:f0:9f:0c:0a:c8:09:7f:ce:99:42:6f:49: 76:d3:3c:ad:03:bf:5e:68:61:df:22:dc:4c:0e:60: 8b:b8:23:38:ab:44:8f:f5:c1:95:e5:d1:31:b1:f7: 3c:9e:d2:49:ad:3f:c0:e2:05:7a:b8:91:78:01:51: 6a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D3:CC:E7:18:4E:E3:80:67:2D:C2:63:53:78:AF:38:31:BD:C6:31 X509v3 Authority Key Identifier: keyid:C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ee:2a:a9:63:61:8c:c4:52:90:ec:da:e6:b5:70:6d:9f:1b: 89:96:eb:5c:16:9d:a6:45:29:f0:dc:ac:74:dc:13:88:09:ce: 87:37:d7:89:41:ea:04:c5:49:1f:01:99:5b:24:9d:85:9d:d8: 1a:b2:07:ab:47:19:93:31:4f:25:cf:45:5a:c5:5a:28:e9:cf: 9c:9d:e0:b3:81:82:3c:e4:f9:81:1c:f8:97:91:35:38:f3:29: 56:98:95:6d:6a:bb:a2:00:fc:15:66:3b:1b:e0:74:6b:a1:5b: 40:32:40:6b:a4:42:c7:c8:86:1f:39:21:b4:f7:45:86:b6:0e: d7:70:3f:f2:41:50:bc:f2:f8:0b:ca:d7:7e:1b:8f:4e:2b:15: 5e:a2:e2:2c:07:3c:6b:39:9e:3d:65:c9:95:0c:85:9e:c4:75: fe:64:b5:5b:63:f3:13:1d:e1:d9:cf:21:0f:67:6f:13:9e:a5: 9e:dd:5c:05:03:8c:ff:a7:a2:bf:b2:43:01:c1:c7:29:d9:a6: 3f:da:5c:6b:86:d3:00:f5:ac:02:07:9d:7a:31:ec:fa:e4:c4: 4b:a3:f6:ee:a1:5a:27:fe:44:46:2c:7e:d9:21:9d:a1:9a:c8: b0:61:74:e9:b2:3d:06:50:39:c5:8e:9b:0a:0c:31:38:63:11: 08:3c:53:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aMIwQ9BWiinoc9HvyOBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNTkzNjQ0YzcwOTE5ZjYwODNmMjgxOWE3M2YzZDM5ZWI5 Y2I1ZTgwHhcNMjUxMjA2MDQwMDM5WhcNMjUxMjA3MDQwMDM5WjAzMTEwLwYDVQQD Eyg2YWQzY2NlNzE4NGVlMzgwNjcyZGMyNjM1Mzc4YWYzODMxYmRjNjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokSrtBkwzmvKUY9MCCj6OiFO2Tkx WPHqtQ/OC1PJ1fAgSc1zvoOdNKXdiaaLLfULOl+7lBiNVVP6HIWNH4pFPlXCmXnU gZtyBeQY46oJJNhV8e4ptsDguKsHj61OSs70dU+Hzf1M5Y5IugaeLCeHbYb4UiAU ZERWlW3METEq7a6CNEI/+UpAuhOLFOYt5rGFDmmwzvYdOgq+YK8AYjzQDdJbVGcN Mc8RJYnOldq3mWpMbWOY5ipS/e8obl8nDnDxBpIkNDLwnwwKyAl/zplCb0l20zyt A79eaGHfItxMDmCLuCM4q0SP9cGV5dExsfc8ntJJrT/A4gV6uJF4AVFqVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrTzOcYTuOAZy3CY1N4rzgxvcYxMB8GA1UdIwQY MBaAFMNZNkTHCRn2CD8oGac/PTnrnLXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzFrMlJNY0pHZllJUHlnWnB6ODlPZXVjdGVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9lYjNhYjUtNTZjZC00MjI3LWIwNmQt YTZjZTM4ZjNkMWQ4LzEvdzFrMlJNY0pHZllJUHlnWnB6ODlPZXVjdGVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9lYjNhYjUtNTZjZC00MjI3LWIwNmQtYTZjZTM4ZjNkMWQ4 LzEvdzFrMlJNY0pHZllJUHlnWnB6ODlPZXVjdGVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+4qqWNh jMRSkOza5rVwbZ8biZbrXBadpkUp8NysdNwTiAnOhzfXiUHqBMVJHwGZWySdhZ3Y GrIHq0cZkzFPJc9FWsVaKOnPnJ3gs4GCPOT5gRz4l5E1OPMpVpiVbWq7ogD8FWY7 G+B0a6FbQDJAa6RCx8iGHzkhtPdFhrYO13A/8kFQvPL4C8rXfhuPTisVXqLiLAc8 azmePWXJlQyFnsR1/mS1W2PzEx3h2c8hD2dvE56lnt1cBQOM/6eiv7JDAcHHKdmm P9pca4bTAPWsAgedejHs+uTES6P27qFaJ/5ERix+2SGdoZrIsGF06bI9BlA5xY6b CgwxOGMRCDxTLw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:54 2025 by rpki-client