This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft File: Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft (raw, json) Hash identifier: c6JC3+Q9oJwjGsJJOzlNTossJnnEYuIf+EM72uASKHQ= Subject key identifier: 49:B4:42:3D:D3:E5:E4:18:1B:58:E8:35:14:4F:6F:DF:97:EE:74:A6 Authority key identifier: 3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D Certificate issuer: /CN=3f0a287bea92588fc5dae4f93fb25628f32d196d Certificate serial: 019AF19AFC65B934D6C4357D7698C5F516D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:00:57 +0000 Manifest this update: Sat 06 Dec 2025 03:00:57 +0000 Manifest next update: Sun 07 Dec 2025 03:00:57 +0000 Files and hashes: 1: EWY61EBMWvIz95kZvxz3f7Ao8DM.roa (hash: hUfTdT/UdwzPCuJouTIN5MiLU84ihpYE+x77dYeKVgo=) 2: Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl (hash: vgUVy4SvdGulqwccfd+IHLzExd2oRSKgUF1IrK2D1iI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:fc:65:b9:34:d6:c4:35:7d:76:98:c5:f5:16:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f0a287bea92588fc5dae4f93fb25628f32d196d Validity Not Before: Dec 6 03:00:57 2025 GMT Not After : Dec 7 03:00:57 2025 GMT Subject: CN=49b4423dd3e5e4181b58e835144f6fdf97ee74a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f7:ec:fc:bd:5c:65:ca:b3:6a:40:db:e6:73: 16:50:4a:17:74:1c:dc:94:61:fa:2e:1d:34:9b:b0: 2c:a6:8a:b0:39:88:58:7b:f9:8f:a0:61:34:4a:96: 74:f9:de:1a:39:1f:11:e6:50:84:23:80:56:f0:55: 72:9a:d3:eb:ed:7b:87:1f:ef:4d:21:e6:6b:5d:e9: 2c:c4:63:db:d2:e9:86:db:8c:42:af:70:ac:c7:67: ab:02:f7:5e:2b:9c:89:10:a9:5b:a9:ff:a0:3b:76: 7b:74:ba:c2:87:49:a4:32:70:35:bd:d3:47:94:0e: 0c:c1:4c:1b:54:cc:58:0b:9c:3c:c9:32:bf:8c:78: 3b:f3:e8:c9:a1:04:33:ae:43:e2:f0:6f:ca:1c:81: 1e:8a:7c:b2:cb:60:f0:b0:79:dd:7f:07:d9:f6:4b: 7d:1f:56:5b:9d:dc:a0:1f:70:28:85:59:d4:34:ca: 32:ff:c3:b0:c8:c2:d8:e4:b9:56:cf:5c:2c:95:13: 14:5b:a2:f3:9b:64:c7:54:45:1f:8a:85:63:96:a1: 3b:69:c1:a9:8e:52:ce:ec:a3:b3:75:34:86:f6:b5: 38:4c:23:5b:42:63:d9:60:65:20:36:c5:87:3f:b0: 8e:f0:31:89:65:3a:89:b5:f8:c3:91:10:3b:e5:16: d1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B4:42:3D:D3:E5:E4:18:1B:58:E8:35:14:4F:6F:DF:97:EE:74:A6 X509v3 Authority Key Identifier: keyid:3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:02:79:de:04:46:e5:28:81:d4:0a:07:d6:77:7f:82:79:a5: 76:d8:ec:fc:44:d6:4f:24:3d:a3:51:2a:9f:1e:bb:e5:e7:20: 0c:17:50:b2:64:9d:aa:be:ac:74:65:7e:e8:90:ea:03:94:f8: cb:d6:a0:21:34:aa:2d:13:b0:b2:1e:3d:77:53:29:8e:13:1b: fe:3e:32:44:d7:fe:6e:04:3a:ac:44:53:17:7b:65:61:81:0b: fe:fb:a8:ad:b0:8e:05:58:83:46:e3:29:e3:56:41:67:8e:19: 00:28:52:ff:54:0f:73:75:f8:47:8f:87:f1:36:ea:52:8c:94: 4e:79:c2:82:09:cd:25:60:87:e6:7d:61:78:e9:d1:cf:d7:a0: c8:f4:af:f0:ae:91:36:e1:20:36:21:36:b5:13:ad:9f:88:e0: 83:e3:b8:c4:53:d2:db:af:e9:81:a2:d4:9a:50:09:70:fa:c2: 97:93:7d:e9:ac:d7:38:18:5d:f8:bb:82:49:d0:80:da:e1:0c: e3:42:1c:15:c0:2d:f9:49:e1:43:79:67:57:76:68:1c:6b:1b: 39:7c:6d:41:30:8c:6c:c3:39:c8:50:88:9b:ea:7f:8c:29:5b: e5:59:f2:79:e8:a5:d9:3c:96:dc:40:e9:1e:f8:00:66:fe:9b: 3b:30:eb:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvxluTTWxDV9dpjF9RbXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMGEyODdiZWE5MjU4OGZjNWRhZTRmOTNmYjI1NjI4ZjMy ZDE5NmQwHhcNMjUxMjA2MDMwMDU3WhcNMjUxMjA3MDMwMDU3WjAzMTEwLwYDVQQD Eyg0OWI0NDIzZGQzZTVlNDE4MWI1OGU4MzUxNDRmNmZkZjk3ZWU3NGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/fs/L1cZcqzakDb5nMWUEoXdBzc lGH6Lh00m7AspoqwOYhYe/mPoGE0SpZ0+d4aOR8R5lCEI4BW8FVymtPr7XuHH+9N IeZrXeksxGPb0umG24xCr3Csx2erAvdeK5yJEKlbqf+gO3Z7dLrCh0mkMnA1vdNH lA4MwUwbVMxYC5w8yTK/jHg78+jJoQQzrkPi8G/KHIEeinyyy2DwsHndfwfZ9kt9 H1ZbndygH3AohVnUNMoy/8OwyMLY5LlWz1wslRMUW6Lzm2THVEUfioVjlqE7acGp jlLO7KOzdTSG9rU4TCNbQmPZYGUgNsWHP7CO8DGJZTqJtfjDkRA75RbRSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEm0Qj3T5eQYG1joNRRPb9+X7nSmMB8GA1UdIwQY MBaAFD8KKHvqkliPxdrk+T+yVijzLRltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHdvb2UtcVNXSV9GMnVUNVA3SldLUE10R1cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85MDE0YzMtMWE0OS00ZTYyLTkyNDMt MjEzMzVkMTA2M2FmLzEvUHdvb2UtcVNXSV9GMnVUNVA3SldLUE10R1cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy85MDE0YzMtMWE0OS00ZTYyLTkyNDMtMjEzMzVkMTA2M2Fm LzEvUHdvb2UtcVNXSV9GMnVUNVA3SldLUE10R1cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaAJ53gRG 5SiB1AoH1nd/gnmldtjs/ETWTyQ9o1Eqnx675ecgDBdQsmSdqr6sdGV+6JDqA5T4 y9agITSqLROwsh49d1MpjhMb/j4yRNf+bgQ6rERTF3tlYYEL/vuorbCOBViDRuMp 41ZBZ44ZAChS/1QPc3X4R4+H8TbqUoyUTnnCggnNJWCH5n1heOnRz9egyPSv8K6R NuEgNiE2tROtn4jgg+O4xFPS26/pgaLUmlAJcPrCl5N96azXOBhd+LuCSdCA2uEM 40IcFcAt+UnhQ3lnV3ZoHGsbOXxtQTCMbMM5yFCIm+p/jClb5Vnyeeil2TyW3EDp HvgAZv6bOzDrVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:15 2025 by rpki-client