This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft File: rw3BKw8bUz2NBOxhF9a55RL8qp8.mft (raw, json) Hash identifier: kBv7+Gian95M4mMs/oIR15ll74bzsAa+Kx+xWu30vD0= Subject key identifier: 28:82:89:84:74:76:0C:8C:81:3A:BC:F4:AC:EC:0F:1A:8A:7A:0D:EF Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f Certificate serial: 019AF389A0CAF49A87E3D9867672A4257D08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft Manifest number: 150D Signing time: Sat 06 Dec 2025 12:01:14 +0000 Manifest this update: Sat 06 Dec 2025 12:01:14 +0000 Manifest next update: Sun 07 Dec 2025 12:01:14 +0000 Files and hashes: 1: IPW3rYP7oE9P_ES0-kMgln06Sio.roa (hash: 9eLRN0ajqZHckDjlFErwwqTneM3/U1IZfbIXWVVHKRk=) 2: S11P7YKPNs_v7YdolA0FgB6j23E.roa (hash: TBKKGcG+I3pRwCi4L7A30ry5+YnjawyAWGjuVum7Pns=) 3: rw3BKw8bUz2NBOxhF9a55RL8qp8.crl (hash: yJ7wJxFuy3pD5BysvhXSbeA1/KZpQW42ejGzXb4nQGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:a0:ca:f4:9a:87:e3:d9:86:76:72:a4:25:7d:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f Validity Not Before: Dec 6 12:01:14 2025 GMT Not After : Dec 7 12:01:14 2025 GMT Subject: CN=2882898474760c8c813abcf4acec0f1a8a7a0def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f1:f4:dd:95:1f:54:81:c6:c0:cc:4b:fb:73: f4:e9:aa:e5:0b:be:86:41:18:b7:31:51:80:d2:fc: dd:89:85:8b:83:c0:ab:fd:30:3c:fe:5b:a6:2e:b6: 70:80:5f:6d:b7:7a:c3:ef:97:66:6a:96:14:c2:02: 76:08:d6:7f:ef:f1:69:ab:96:e3:22:2e:fe:52:38: ee:e4:1e:bc:2a:83:16:17:4f:14:55:4d:71:f4:2a: 46:d9:19:3d:a3:ba:f0:a9:8c:fe:08:50:3e:02:01: 1d:06:50:5b:10:f3:81:30:30:90:15:79:38:c1:b6: 1e:7e:e3:2e:e1:31:d6:51:6e:3a:dc:8a:f6:e7:c4: d3:35:06:68:c1:51:8a:cf:1b:c0:3b:af:e6:cf:35: b5:c0:eb:dc:10:cb:35:18:70:d2:a6:a8:a6:e6:32: ef:0e:5b:d4:e2:96:01:61:ae:c3:19:66:3d:e8:4d: d0:75:87:23:76:58:da:d3:d2:c9:ec:44:f2:d9:65: b2:88:45:77:3e:89:a5:dd:1c:49:13:a8:c1:29:27: a1:8a:d4:87:8c:0f:47:8e:1e:45:00:64:a2:1e:16: 76:be:9b:4a:46:e3:2b:f9:a5:00:c2:7a:31:2a:2c: 5f:f5:ad:4a:62:36:1a:27:e8:83:17:95:fe:d0:9f: 63:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:82:89:84:74:76:0C:8C:81:3A:BC:F4:AC:EC:0F:1A:8A:7A:0D:EF X509v3 Authority Key Identifier: keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:79:14:73:7b:d6:36:f1:1a:08:ec:64:03:9e:41:5c:d0:fb: 4a:32:fe:ce:df:72:04:74:2e:ef:69:2b:88:16:79:33:81:18: d8:5f:10:ab:e1:0d:88:b6:76:3b:2e:80:7b:99:eb:02:9c:c5: 63:59:07:72:02:16:2c:f3:38:93:e7:12:60:84:9d:be:63:9f: db:ff:f3:bf:9e:92:55:7a:a4:a1:f8:ba:42:63:3e:76:90:ae: 01:f4:48:b0:e1:d9:fa:67:c4:77:1b:a8:99:6f:13:89:dc:27: 2b:f7:7d:7a:69:73:85:74:62:dd:51:a1:96:65:43:f2:15:19: ac:ce:04:cc:8a:3a:f7:4d:49:0d:d3:9a:14:3f:58:38:14:99: b4:3f:a8:22:9a:7b:16:a0:b1:90:78:3b:69:ce:97:ac:17:6c: af:97:aa:3b:8f:da:38:25:80:63:9d:cb:91:ac:b2:d3:16:bb: 06:87:5a:98:2a:9d:2d:61:ff:13:22:cf:fa:7e:e8:ea:77:b6: 81:2a:85:cf:1a:c0:84:52:9c:4f:e6:01:a2:6a:cc:ef:49:8e: 84:0c:ed:d9:9b:ef:98:da:ea:d9:1c:e2:69:dc:61:49:d0:35: fd:c5:14:ee:09:26:fb:a4:88:19:26:2d:7a:ef:e3:ae:ea:06: 55:43:21:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziaDK9JqH49mGdnKkJX0IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMGRjMTJiMGYxYjUzM2Q4ZDA0ZWM2MTE3ZDZiOWU1MTJm Y2FhOWYwHhcNMjUxMjA2MTIwMTE0WhcNMjUxMjA3MTIwMTE0WjAzMTEwLwYDVQQD EygyODgyODk4NDc0NzYwYzhjODEzYWJjZjRhY2VjMGYxYThhN2EwZGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvH03ZUfVIHGwMxL+3P06arlC76G QRi3MVGA0vzdiYWLg8Cr/TA8/lumLrZwgF9tt3rD75dmapYUwgJ2CNZ/7/Fpq5bj Ii7+Ujju5B68KoMWF08UVU1x9CpG2Rk9o7rwqYz+CFA+AgEdBlBbEPOBMDCQFXk4 wbYefuMu4THWUW463Ir258TTNQZowVGKzxvAO6/mzzW1wOvcEMs1GHDSpqim5jLv DlvU4pYBYa7DGWY96E3QdYcjdlja09LJ7ETy2WWyiEV3Poml3RxJE6jBKSehitSH jA9Hjh5FAGSiHhZ2vptKRuMr+aUAwnoxKixf9a1KYjYaJ+iDF5X+0J9j7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiCiYR0dgyMgTq89KzsDxqKeg3vMB8GA1UdIwQY MBaAFK8NwSsPG1M9jQTsYRfWueUS/KqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnczQkt3OGJVejJOQk94aEY5YTU1Ukw4cXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jMzE3NGEtYTc5NC00NGVlLThkMjYt YmM1YjY5MTQ0NTg3LzEvcnczQkt3OGJVejJOQk94aEY5YTU1Ukw4cXA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9jMzE3NGEtYTc5NC00NGVlLThkMjYtYmM1YjY5MTQ0NTg3 LzEvcnczQkt3OGJVejJOQk94aEY5YTU1Ukw4cXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3kUc3vW NvEaCOxkA55BXND7SjL+zt9yBHQu72kriBZ5M4EY2F8Qq+ENiLZ2Oy6Ae5nrApzF Y1kHcgIWLPM4k+cSYISdvmOf2//zv56SVXqkofi6QmM+dpCuAfRIsOHZ+mfEdxuo mW8TidwnK/d9emlzhXRi3VGhlmVD8hUZrM4EzIo6901JDdOaFD9YOBSZtD+oIpp7 FqCxkHg7ac6XrBdsr5eqO4/aOCWAY53Lkayy0xa7BodamCqdLWH/EyLP+n7o6ne2 gSqFzxrAhFKcT+YBomrM70mOhAzt2ZvvmNrq2RziadxhSdA1/cUU7gkm+6SIGSYt eu/jruoGVUMh9w== -----END CERTIFICATE-----Generated at Sat Dec 6 19:33:19 2025 by rpki-client