This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft File: w1k5CyF0quIpYaDzwp_EAvH-I8g.mft (raw, json) Hash identifier: oFhwtXaFcXs5uIAZ34hVnx1zKmhdUTJxkvJUWgiJx4I= Subject key identifier: 92:63:11:82:C2:A7:6B:FF:F2:61:66:12:52:05:7C:7E:6F:49:21:74 Authority key identifier: C3:59:39:0B:21:74:AA:E2:29:61:A0:F3:C2:9F:C4:02:F1:FE:23:C8 Certificate issuer: /CN=c359390b2174aae22961a0f3c29fc402f1fe23c8 Certificate serial: 019AF19AD1D93EFC0EB794C4CB9585FB2662 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft Manifest number: 03CF Signing time: Sat 06 Dec 2025 03:00:46 +0000 Manifest this update: Sat 06 Dec 2025 03:00:46 +0000 Manifest next update: Sun 07 Dec 2025 03:00:46 +0000 Files and hashes: 1: roRpX3bRKDuocHxusV0WH0MjbWo.roa (hash: P8a5SzApQjB4G+3G1+p+RkD68unIbIu33oid4GIMvlk=) 2: w1k5CyF0quIpYaDzwp_EAvH-I8g.crl (hash: 3hqOwPveoeDUgr/0Sjy9V6zxuNv61gafkv98qrG8bZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.crl rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d1:d9:3e:fc:0e:b7:94:c4:cb:95:85:fb:26:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c359390b2174aae22961a0f3c29fc402f1fe23c8 Validity Not Before: Dec 6 03:00:46 2025 GMT Not After : Dec 7 03:00:46 2025 GMT Subject: CN=92631182c2a76bfff261661252057c7e6f492174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0e:b4:60:13:4b:74:4a:e6:0f:4f:ad:d9:e3: 3f:21:f8:50:33:f5:9b:68:7b:d2:a4:d0:1b:d1:74: 5e:8f:24:71:0c:cb:e8:c7:17:eb:0c:d0:76:a7:8c: f8:39:a4:65:7a:69:b6:e4:20:25:dd:44:82:60:27: 65:82:a0:40:8c:2d:3c:5a:c5:a9:db:a4:a0:0f:ba: 26:05:c5:f3:13:e3:5e:6c:aa:a2:d3:94:93:13:67: 47:e4:26:33:4b:38:fe:ca:30:d3:21:81:c1:24:9d: 80:c9:6e:61:b6:65:33:43:1f:56:4a:e2:ca:ef:c4: 10:e5:a5:52:3c:9d:ca:8f:a0:f5:d6:f9:8b:3d:53: 18:0a:51:f6:55:66:b6:77:5b:18:0c:65:66:5b:14: d5:61:5c:70:68:21:3a:00:4c:76:bd:f9:f2:aa:c5: a4:95:24:db:a9:15:8f:0f:bb:66:2b:2a:53:38:05: 91:7f:7d:eb:82:3c:bc:c7:da:04:ac:d4:c6:08:b4: 2f:0f:57:95:3c:50:aa:6c:43:2c:73:fb:87:24:8a: dd:68:50:41:88:70:de:ef:56:c8:86:24:e9:05:ba: 86:dd:ce:1e:02:59:03:0e:aa:19:88:72:15:49:3c: 32:f3:ba:4a:ed:a7:a1:af:25:02:02:7d:a7:d0:78: 6b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:63:11:82:C2:A7:6B:FF:F2:61:66:12:52:05:7C:7E:6F:49:21:74 X509v3 Authority Key Identifier: keyid:C3:59:39:0B:21:74:AA:E2:29:61:A0:F3:C2:9F:C4:02:F1:FE:23:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:04:1d:7b:32:66:98:de:9e:8d:14:bf:d8:b3:5c:b1:14:fc: b6:59:37:71:c0:03:d5:a0:e4:86:33:28:a7:27:0a:db:50:32: a1:6c:a9:93:d8:3e:5d:f4:e3:cb:f7:50:92:87:0e:d5:6b:ff: 09:b8:a1:15:c7:89:00:cc:43:35:2c:6c:95:de:64:90:fb:f2: 1e:8c:e8:96:d8:32:f6:44:bd:24:46:24:6f:30:5e:af:3c:bd: 9b:f1:d0:ba:0b:2b:29:1b:b9:d6:92:28:52:dd:3b:66:8d:3e: 2f:a0:10:ed:df:97:56:73:20:2f:8f:9e:3c:00:18:f4:6b:d9: d8:c8:a1:a9:8a:25:b9:cc:2c:ca:6c:67:7d:58:fd:8d:c4:5a: a5:bb:82:c2:a5:b3:d0:29:0a:8f:ff:c5:26:b2:55:d0:fb:3b: 16:f6:13:0d:6a:a5:76:41:aa:86:8a:ed:67:04:00:aa:03:2d: bb:70:af:b4:36:e5:fd:ca:85:b4:5c:06:21:01:29:2d:9e:7b: 4f:6d:6c:5a:5a:20:89:6a:9c:4e:98:3a:ea:24:64:98:e8:4a: 6a:f4:44:eb:32:70:a0:53:43:d7:9a:5f:1e:ae:b0:f4:e3:03: c1:46:28:eb:19:50:b7:c5:7a:32:ed:a4:9a:b8:29:f9:1e:4b: 6f:0c:3f:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtHZPvwOt5TEy5WF+yZiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNTkzOTBiMjE3NGFhZTIyOTYxYTBmM2MyOWZjNDAyZjFm ZTIzYzgwHhcNMjUxMjA2MDMwMDQ2WhcNMjUxMjA3MDMwMDQ2WjAzMTEwLwYDVQQD Eyg5MjYzMTE4MmMyYTc2YmZmZjI2MTY2MTI1MjA1N2M3ZTZmNDkyMTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw60YBNLdErmD0+t2eM/IfhQM/Wb aHvSpNAb0XRejyRxDMvoxxfrDNB2p4z4OaRlemm25CAl3USCYCdlgqBAjC08WsWp 26SgD7omBcXzE+NebKqi05STE2dH5CYzSzj+yjDTIYHBJJ2AyW5htmUzQx9WSuLK 78QQ5aVSPJ3Kj6D11vmLPVMYClH2VWa2d1sYDGVmWxTVYVxwaCE6AEx2vfnyqsWk lSTbqRWPD7tmKypTOAWRf33rgjy8x9oErNTGCLQvD1eVPFCqbEMsc/uHJIrdaFBB iHDe71bIhiTpBbqG3c4eAlkDDqoZiHIVSTwy87pK7aehryUCAn2n0HhrvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJjEYLCp2v/8mFmElIFfH5vSSF0MB8GA1UdIwQY MBaAFMNZOQshdKriKWGg88KfxALx/iPIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzFrNUN5RjBxdUlwWWFEendwX0VBdkgtSThnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81YmJhN2ItZGFhNy00NDMyLTkyNzAt ZWM1YzdkZTdhYWUxLzEvdzFrNUN5RjBxdUlwWWFEendwX0VBdkgtSThnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My81YmJhN2ItZGFhNy00NDMyLTkyNzAtZWM1YzdkZTdhYWUx LzEvdzFrNUN5RjBxdUlwWWFEendwX0VBdkgtSThnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwgQdezJm mN6ejRS/2LNcsRT8tlk3ccAD1aDkhjMopycK21AyoWypk9g+XfTjy/dQkocO1Wv/ CbihFceJAMxDNSxsld5kkPvyHozoltgy9kS9JEYkbzBerzy9m/HQugsrKRu51pIo Ut07Zo0+L6AQ7d+XVnMgL4+ePAAY9GvZ2MihqYolucwsymxnfVj9jcRapbuCwqWz 0CkKj//FJrJV0Ps7FvYTDWqldkGqhortZwQAqgMtu3CvtDbl/cqFtFwGIQEpLZ57 T21sWlogiWqcTpg66iRkmOhKavRE6zJwoFND15pfHq6w9OMDwUYo6xlQt8V6Mu2k mrgp+R5Lbww/cw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:36 2025 by rpki-client