This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft File: w4yh1BjCGOJveVGBqeO7e3nURD8.mft (raw, json) Hash identifier: rZmeHPJ/auVTfhkzXuEG/yk0LpFA7iBbpHM8RvI3aNg= Subject key identifier: 88:75:00:C8:02:27:CE:2B:9C:5F:4F:B7:F0:23:3B:44:2D:85:D4:B8 Authority key identifier: C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F Certificate issuer: /CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f Certificate serial: 019AF50AE3D01F2BD7844982C592F1FB8472 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 19:02:02 +0000 Manifest this update: Sat 06 Dec 2025 19:02:02 +0000 Manifest next update: Sun 07 Dec 2025 19:02:02 +0000 Files and hashes: 1: HtKtiVg-0zn3K5n3LScDDg1_p88.roa (hash: to3WuOq+FMznKALAAApfBe9RQEcWrRQ420WrsW7wdUU=) 2: w4yh1BjCGOJveVGBqeO7e3nURD8.crl (hash: lKntw9rr8rQIsJ/YmCdyQCD86u6zLNrqbMLdZqrKqow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:e3:d0:1f:2b:d7:84:49:82:c5:92:f1:fb:84:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f Validity Not Before: Dec 6 19:02:02 2025 GMT Not After : Dec 7 19:02:02 2025 GMT Subject: CN=887500c80227ce2b9c5f4fb7f0233b442d85d4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5d:9f:49:3a:ac:d6:ec:da:a2:0f:bc:c1:56: 3a:69:9a:8d:54:8b:b8:a7:2a:b1:2e:9c:5c:0a:43: 8e:ae:bf:47:ca:fc:c4:e3:8b:d3:20:0a:0d:bb:97: 64:22:c8:e6:31:58:da:88:43:2f:d8:37:0e:2b:4e: 55:fd:73:a4:d3:69:59:c0:23:bf:c4:db:9e:d9:fd: e0:30:78:7c:b1:56:30:7f:4b:03:fd:19:9b:08:23: 83:90:1c:f4:f7:a2:a8:11:14:52:53:b5:a4:5d:5e: 4c:b3:78:10:e1:13:ec:aa:65:0d:50:8b:43:6a:46: 9b:2b:2d:e4:c7:13:ad:6c:83:c1:2d:e1:01:29:47: 7f:70:e0:f7:31:ae:17:64:fe:d3:de:92:b6:72:17: db:bc:32:71:a5:61:6b:67:00:74:4a:c1:16:ba:e7: 9a:fc:34:28:d4:3b:a8:76:94:14:9f:bb:07:88:8a: d7:63:21:69:46:02:90:df:14:5e:e3:ac:8b:78:29: 30:c4:b3:9d:41:fe:2c:14:10:8a:ba:21:a9:1c:b7: 60:56:64:8e:40:6d:5f:42:b4:e0:5e:e9:44:9a:5d: 39:9b:54:1a:ea:02:01:52:e8:1a:ab:fd:ba:11:47: b8:d1:46:e9:3e:34:38:e1:e2:21:25:af:87:51:51: d1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:75:00:C8:02:27:CE:2B:9C:5F:4F:B7:F0:23:3B:44:2D:85:D4:B8 X509v3 Authority Key Identifier: keyid:C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:8c:fa:9e:00:0b:4f:ed:72:3d:42:e0:46:e5:36:39:40:23: 86:81:f4:49:2f:81:ff:d0:05:63:65:e4:42:68:2f:b4:55:86: 0c:9c:1b:4b:fd:6c:2a:ee:f9:a5:11:24:f9:3a:d0:3f:18:24: 93:fd:a9:22:db:ed:f9:57:b0:70:f8:66:0d:24:72:8b:61:23: 84:c4:dc:98:2b:92:56:3d:c6:43:75:66:aa:98:64:c4:58:7b: 86:71:c7:a9:c9:39:09:f4:14:fe:d0:61:8b:97:84:6c:f8:ac: f5:55:b6:a8:34:14:81:54:5f:ac:9e:5e:c8:58:0d:14:d0:15: c3:f5:db:48:c8:51:76:75:8a:1d:37:18:79:99:86:af:a8:db: df:9f:3a:e3:30:ce:9a:2b:c1:4a:bc:66:b5:3b:fe:14:09:e3: c8:09:a5:2e:23:51:b6:40:bc:b7:5c:c1:3a:b4:2f:94:1b:ce: 92:30:ac:35:bb:39:30:8a:b9:f4:44:15:a2:1c:e5:d9:ed:fa: d9:72:e0:69:28:ed:71:3f:a0:10:0f:91:14:9c:bb:ac:63:1c: 58:00:ab:91:df:31:3a:e7:f4:62:c8:5e:77:ea:5f:47:83:ba: 57:b6:ea:97:1f:9c:ec:25:13:83:dc:1a:65:26:fd:b6:26:ff: ea:4f:03:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CuPQHyvXhEmCxZLx+4RyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOGNhMWQ0MThjMjE4ZTI2Zjc5NTE4MWE5ZTNiYjdiNzlk NDQ0M2YwHhcNMjUxMjA2MTkwMjAyWhcNMjUxMjA3MTkwMjAyWjAzMTEwLwYDVQQD Eyg4ODc1MDBjODAyMjdjZTJiOWM1ZjRmYjdmMDIzM2I0NDJkODVkNGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3V2fSTqs1uzaog+8wVY6aZqNVIu4 pyqxLpxcCkOOrr9HyvzE44vTIAoNu5dkIsjmMVjaiEMv2DcOK05V/XOk02lZwCO/ xNue2f3gMHh8sVYwf0sD/RmbCCODkBz096KoERRSU7WkXV5Ms3gQ4RPsqmUNUItD akabKy3kxxOtbIPBLeEBKUd/cOD3Ma4XZP7T3pK2chfbvDJxpWFrZwB0SsEWuuea /DQo1DuodpQUn7sHiIrXYyFpRgKQ3xRe46yLeCkwxLOdQf4sFBCKuiGpHLdgVmSO QG1fQrTgXulEml05m1Qa6gIBUugaq/26EUe40UbpPjQ44eIhJa+HUVHRkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIh1AMgCJ84rnF9Pt/AjO0QthdS4MB8GA1UdIwQY MBaAFMOModQYwhjib3lRganju3t51EQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzR5aDFCakNHT0p2ZVZHQnFlTzdlM25VUkQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS82ZmNiYTgtYWRiOC00MTFmLTllNDYt MmVmMjdhMTkxNmJkLzEvdzR5aDFCakNHT0p2ZVZHQnFlTzdlM25VUkQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS82ZmNiYTgtYWRiOC00MTFmLTllNDYtMmVmMjdhMTkxNmJk LzEvdzR5aDFCakNHT0p2ZVZHQnFlTzdlM25VUkQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoz6ngAL T+1yPULgRuU2OUAjhoH0SS+B/9AFY2XkQmgvtFWGDJwbS/1sKu75pREk+TrQPxgk k/2pItvt+VewcPhmDSRyi2EjhMTcmCuSVj3GQ3VmqphkxFh7hnHHqck5CfQU/tBh i5eEbPis9VW2qDQUgVRfrJ5eyFgNFNAVw/XbSMhRdnWKHTcYeZmGr6jb35864zDO mivBSrxmtTv+FAnjyAmlLiNRtkC8t1zBOrQvlBvOkjCsNbs5MIq59EQVohzl2e36 2XLgaSjtcT+gEA+RFJy7rGMcWACrkd8xOuf0Yshed+pfR4O6V7bqlx+c7CUTg9wa ZSb9tib/6k8D1w== -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:33 2025 by rpki-client