This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft File: w1k2RMcJGfYIPygZpz89Oeucteg.mft (raw, json) Hash identifier: oA33SHe/Jsrk0SSbt+ee+KC0GLYq8XWHsbahQ1YTQ3A= Subject key identifier: DB:95:AC:3A:C7:18:38:FE:BD:FD:96:1A:C5:DF:62:35:B8:49:AA:98 Authority key identifier: C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8 Certificate issuer: /CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8 Certificate serial: 019B337B830295FD6085AA31FD9A72BDD7A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft Manifest number: 1048 Signing time: Thu 18 Dec 2025 22:01:31 +0000 Manifest this update: Thu 18 Dec 2025 22:01:31 +0000 Manifest next update: Fri 19 Dec 2025 22:01:31 +0000 Files and hashes: 1: w1k2RMcJGfYIPygZpz89Oeucteg.crl (hash: a2Nx7ArD9wg7dpSo7Iclux0s+jGm5tE+cnOU8TSs/Tc=) 2: zwDf_kkH_sbuGk9WPwUaPDjfffs.roa (hash: EodK3W1jmYTJC73uP7dzhnrwbPzudn9QK+eDEFeCQfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:83:02:95:fd:60:85:aa:31:fd:9a:72:bd:d7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8 Validity Not Before: Dec 18 22:01:31 2025 GMT Not After : Dec 19 22:01:31 2025 GMT Subject: CN=db95ac3ac71838febdfd961ac5df6235b849aa98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ff:f1:69:af:54:58:05:34:a8:b0:d3:31:49: 05:37:4b:18:09:55:3d:d5:c7:d3:ec:83:52:a0:05: f7:46:f7:2e:a4:1f:69:45:bc:fd:c4:12:de:e1:cf: 60:db:e4:a5:c9:89:55:14:5f:79:79:90:ad:92:c8: cd:e8:d0:2c:54:61:1d:86:0b:9f:a0:c6:d0:19:5e: 14:35:71:15:7d:4b:55:74:50:b6:14:57:9b:4c:0c: 62:53:01:3c:05:83:94:16:00:5b:74:42:15:73:f0: 67:fc:9e:88:c8:de:41:f6:54:94:61:ec:8c:aa:05: 21:1b:b3:d1:81:4c:ef:1e:ab:5d:2c:ab:3f:5a:13: 9f:ef:24:57:14:1d:10:b6:26:78:44:b6:1c:cb:78: 43:1b:89:1e:72:16:5a:f4:b6:5f:de:6a:af:04:04: f5:92:f5:37:9f:c0:6e:fb:88:91:2c:2b:5f:2f:2b: cb:3a:2e:8e:ce:59:95:96:f2:ea:a9:fe:3a:6a:e8: 21:94:69:cc:f1:fd:2a:4e:af:d4:8a:33:4b:c7:a7: 12:aa:eb:90:fb:e3:bf:ef:89:45:ea:23:d0:d6:9f: 62:be:c7:db:ce:98:f4:3c:2d:a0:1c:e1:03:e2:f5: ca:2c:8a:53:54:b6:0b:e9:cd:5e:f6:19:56:cc:da: d1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:95:AC:3A:C7:18:38:FE:BD:FD:96:1A:C5:DF:62:35:B8:49:AA:98 X509v3 Authority Key Identifier: keyid:C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:93:0b:0b:63:85:c4:dc:ee:b7:b2:9d:5e:8e:58:20:05:12: 8d:f1:f0:93:c1:40:f0:36:4e:eb:91:f6:7c:b0:84:fb:20:ea: 22:9f:8a:01:cb:7d:23:d0:11:6d:6c:46:a5:72:c7:8e:55:b9: fa:9c:ba:c6:7b:d7:cd:d7:27:ff:1b:97:41:2e:56:c3:b7:23: 61:aa:02:85:8a:3d:0f:ab:47:59:dc:01:c5:d7:0a:12:97:58: 46:13:c6:cb:ae:96:ff:19:3b:10:19:d9:2e:67:af:29:95:72: de:41:c4:5f:93:aa:bd:15:bf:4f:34:e6:70:cf:3a:c4:ca:0c: 44:0a:81:4e:f9:5c:4f:5d:ba:71:7b:98:df:34:8b:b7:9a:7e: 41:1b:2f:4c:c5:2c:b5:55:00:d9:bd:1b:c6:3f:e4:32:c4:c7: 77:bd:d9:95:dd:69:b1:78:06:ae:5e:5f:62:77:f7:7d:fa:8a: c6:60:b1:8c:3a:d5:52:3e:02:23:05:ba:0e:53:9a:f6:ed:f1: 1a:56:61:25:38:5e:30:ab:86:66:09:2c:31:40:e0:e8:1f:09: 22:2f:18:ab:8b:42:de:f3:1d:c6:85:93:bf:84:2e:85:8d:23: 87:1b:aa:87:b0:0c:ef:5d:25:88:60:50:65:9e:3b:8a:80:00: f9:3b:ec:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze4MClf1ghaox/ZpyvdenMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNTkzNjQ0YzcwOTE5ZjYwODNmMjgxOWE3M2YzZDM5ZWI5 Y2I1ZTgwHhcNMjUxMjE4MjIwMTMxWhcNMjUxMjE5MjIwMTMxWjAzMTEwLwYDVQQD EyhkYjk1YWMzYWM3MTgzOGZlYmRmZDk2MWFjNWRmNjIzNWI4NDlhYTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf/xaa9UWAU0qLDTMUkFN0sYCVU9 1cfT7INSoAX3RvcupB9pRbz9xBLe4c9g2+SlyYlVFF95eZCtksjN6NAsVGEdhguf oMbQGV4UNXEVfUtVdFC2FFebTAxiUwE8BYOUFgBbdEIVc/Bn/J6IyN5B9lSUYeyM qgUhG7PRgUzvHqtdLKs/WhOf7yRXFB0QtiZ4RLYcy3hDG4kechZa9LZf3mqvBAT1 kvU3n8Bu+4iRLCtfLyvLOi6OzlmVlvLqqf46aughlGnM8f0qTq/UijNLx6cSquuQ ++O/74lF6iPQ1p9ivsfbzpj0PC2gHOED4vXKLIpTVLYL6c1e9hlWzNrR2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNuVrDrHGDj+vf2WGsXfYjW4SaqYMB8GA1UdIwQY MBaAFMNZNkTHCRn2CD8oGac/PTnrnLXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzFrMlJNY0pHZllJUHlnWnB6ODlPZXVjdGVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9lYjNhYjUtNTZjZC00MjI3LWIwNmQt YTZjZTM4ZjNkMWQ4LzEvdzFrMlJNY0pHZllJUHlnWnB6ODlPZXVjdGVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9lYjNhYjUtNTZjZC00MjI3LWIwNmQtYTZjZTM4ZjNkMWQ4 LzEvdzFrMlJNY0pHZllJUHlnWnB6ODlPZXVjdGVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJMLC2OF xNzut7KdXo5YIAUSjfHwk8FA8DZO65H2fLCE+yDqIp+KAct9I9ARbWxGpXLHjlW5 +py6xnvXzdcn/xuXQS5Ww7cjYaoChYo9D6tHWdwBxdcKEpdYRhPGy66W/xk7EBnZ LmevKZVy3kHEX5OqvRW/TzTmcM86xMoMRAqBTvlcT126cXuY3zSLt5p+QRsvTMUs tVUA2b0bxj/kMsTHd73Zld1psXgGrl5fYnf3ffqKxmCxjDrVUj4CIwW6DlOa9u3x GlZhJTheMKuGZgksMUDg6B8JIi8Yq4tC3vMdxoWTv4QuhY0jhxuqh7AM710liGBQ ZZ47ioAA+Tvsbg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:43:43 2025 by rpki-client