This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft File: Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft (raw, json) Hash identifier: QC7xEXfK6djaPfdCehFgaCVMuf/uUOu+Lme96rs0a7Y= Subject key identifier: 6C:29:B2:0C:CA:EB:6F:FC:02:BD:85:F3:D8:12:1B:F4:34:59:F9:B4 Authority key identifier: 3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D Certificate issuer: /CN=3f0a287bea92588fc5dae4f93fb25628f32d196d Certificate serial: 019B33445D33EDF7DCED6FB9586552691F74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 21:01:16 +0000 Manifest this update: Thu 18 Dec 2025 21:01:16 +0000 Manifest next update: Fri 19 Dec 2025 21:01:16 +0000 Files and hashes: 1: EWY61EBMWvIz95kZvxz3f7Ao8DM.roa (hash: hUfTdT/UdwzPCuJouTIN5MiLU84ihpYE+x77dYeKVgo=) 2: Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl (hash: xdyC+m1ks2hs48/Ikb6jBIwSVqwu81BmVfdb4X2jnzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:5d:33:ed:f7:dc:ed:6f:b9:58:65:52:69:1f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f0a287bea92588fc5dae4f93fb25628f32d196d Validity Not Before: Dec 18 21:01:16 2025 GMT Not After : Dec 19 21:01:16 2025 GMT Subject: CN=6c29b20ccaeb6ffc02bd85f3d8121bf43459f9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:92:e7:3a:1d:da:aa:df:c4:93:f1:18:d3:0a: f1:53:ec:ca:c2:87:be:ae:68:84:3a:88:f7:75:00: 61:44:6f:30:7c:98:4d:82:f9:7c:bb:8a:f8:fd:a3: 32:9d:0c:45:3f:da:2b:82:f2:50:0c:a3:74:ec:5f: cc:62:bb:db:3e:05:0b:2c:27:38:b0:1a:7c:50:ba: 49:7d:a1:b0:0b:fe:fb:b3:70:89:92:7e:a7:04:84: 1c:58:96:5f:a7:01:b8:ae:37:b8:4a:6e:87:28:80: c3:df:14:3e:68:19:f7:79:f4:ee:40:14:b9:a9:43: 0b:94:40:04:ba:82:4e:6d:05:27:0f:cd:06:0b:4e: 22:ba:87:cd:87:79:7e:18:bf:de:25:cc:02:36:bd: 5a:65:85:56:f0:3a:b8:c6:b5:bc:02:0f:77:fe:21: 58:c0:b5:4c:c3:b7:c7:e1:57:58:66:ab:fe:c6:7e: 7f:eb:43:dd:6c:37:c7:fd:bb:58:b7:a2:ca:7b:4c: 40:b8:5f:da:03:90:b9:50:50:c5:05:e2:d4:9b:43: 59:bd:0a:76:9e:e0:c1:99:9b:f6:c3:fc:e2:b1:19: 39:2f:f5:25:b1:8d:2d:ee:8d:2e:7a:c8:6a:f1:c6: 0f:c2:9b:47:cb:9d:ee:58:76:63:d7:56:04:32:e2: fb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:29:B2:0C:CA:EB:6F:FC:02:BD:85:F3:D8:12:1B:F4:34:59:F9:B4 X509v3 Authority Key Identifier: keyid:3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:9f:86:7b:9c:ab:85:0d:80:6e:62:16:77:0d:5d:ad:c6:a5: 69:43:3e:23:d4:de:65:64:13:91:8a:87:45:1a:04:34:5c:5f: 27:5b:e3:03:34:b8:ed:70:c9:ab:91:b2:f6:33:46:6c:cd:c9: 7c:b5:e3:83:c3:57:ab:99:11:9a:b1:07:bb:8b:7f:37:3b:53: 14:d6:68:69:5a:26:bf:8c:94:ac:33:c8:df:bf:28:81:54:f8: da:58:06:0b:a1:ba:66:05:77:45:3e:78:73:e7:64:66:61:05: d2:4e:19:dd:63:ee:9b:fa:ec:97:e7:ce:36:67:09:5b:c9:be: 40:2c:8a:21:43:89:ba:2a:d9:46:a7:8f:b1:54:ea:f0:90:b4: 1e:79:d0:11:7e:83:94:02:9a:a2:50:02:dd:cc:32:7e:f5:e7: 23:d3:3b:53:a4:e9:e1:8f:af:77:15:74:cb:90:1f:bc:8b:6b: e1:57:90:55:0c:48:1d:a2:9d:bd:f0:e0:91:a8:78:0b:9c:ae: 27:5b:2a:e4:4f:2b:b6:ed:6e:94:3a:11:7c:99:ff:a6:05:2a: 4c:e8:3b:6f:85:3f:45:63:1a:af:20:ab:0b:ea:4d:24:3d:ca: eb:9c:1a:32:6a:1f:95:e6:95:14:39:a6:0e:a4:b3:2e:c3:5d: 44:57:a6:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRF0z7ffc7W+5WGVSaR90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMGEyODdiZWE5MjU4OGZjNWRhZTRmOTNmYjI1NjI4ZjMy ZDE5NmQwHhcNMjUxMjE4MjEwMTE2WhcNMjUxMjE5MjEwMTE2WjAzMTEwLwYDVQQD Eyg2YzI5YjIwY2NhZWI2ZmZjMDJiZDg1ZjNkODEyMWJmNDM0NTlmOWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJLnOh3aqt/Ek/EY0wrxU+zKwoe+ rmiEOoj3dQBhRG8wfJhNgvl8u4r4/aMynQxFP9orgvJQDKN07F/MYrvbPgULLCc4 sBp8ULpJfaGwC/77s3CJkn6nBIQcWJZfpwG4rje4Sm6HKIDD3xQ+aBn3efTuQBS5 qUMLlEAEuoJObQUnD80GC04iuofNh3l+GL/eJcwCNr1aZYVW8Dq4xrW8Ag93/iFY wLVMw7fH4VdYZqv+xn5/60PdbDfH/btYt6LKe0xAuF/aA5C5UFDFBeLUm0NZvQp2 nuDBmZv2w/zisRk5L/UlsY0t7o0ueshq8cYPwptHy53uWHZj11YEMuL7GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwpsgzK62/8Ar2F89gSG/Q0Wfm0MB8GA1UdIwQY MBaAFD8KKHvqkliPxdrk+T+yVijzLRltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHdvb2UtcVNXSV9GMnVUNVA3SldLUE10R1cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85MDE0YzMtMWE0OS00ZTYyLTkyNDMt MjEzMzVkMTA2M2FmLzEvUHdvb2UtcVNXSV9GMnVUNVA3SldLUE10R1cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy85MDE0YzMtMWE0OS00ZTYyLTkyNDMtMjEzMzVkMTA2M2Fm LzEvUHdvb2UtcVNXSV9GMnVUNVA3SldLUE10R1cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvJ+Ge5yr hQ2AbmIWdw1drcalaUM+I9TeZWQTkYqHRRoENFxfJ1vjAzS47XDJq5Gy9jNGbM3J fLXjg8NXq5kRmrEHu4t/NztTFNZoaVomv4yUrDPI378ogVT42lgGC6G6ZgV3RT54 c+dkZmEF0k4Z3WPum/rsl+fONmcJW8m+QCyKIUOJuirZRqePsVTq8JC0HnnQEX6D lAKaolAC3cwyfvXnI9M7U6Tp4Y+vdxV0y5AfvItr4VeQVQxIHaKdvfDgkah4C5yu J1sq5E8rtu1ulDoRfJn/pgUqTOg7b4U/RWMaryCrC+pNJD3K65waMmofleaVFDmm DqSzLsNdRFemvg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:04:54 2025 by rpki-client