This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft File: pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft (raw, json) Hash identifier: gS8zyRtxwbIj/tRq1c0iuSRTNs4ohxRmlGgtyqtAnzg= Subject key identifier: 3C:46:F8:FE:FB:1C:1C:B9:29:4D:A7:AD:FF:14:6D:B8:E7:AA:4E:3D Authority key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C Certificate issuer: /CN=a561ccb03741056715a6be4805321662d88e7e7c Certificate serial: 019B2EFACAC0A147823A4A356D8CEF16FAD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft Manifest number: 09AA Signing time: Thu 18 Dec 2025 01:02:26 +0000 Manifest this update: Thu 18 Dec 2025 01:02:26 +0000 Manifest next update: Fri 19 Dec 2025 01:02:26 +0000 Files and hashes: 1: Ht6Wd5Bw2md9CUATtRL2VX-XFlc.roa (hash: 6oTLBNPocrrlaUNBq/IOSo88GlYRhWvOfw5kea2nyRc=) 2: ZrGtCqKCK6D0hI3hPtXzoUeoPWc.roa (hash: 2oHhvMXHLj14EEFTSzUZ5GuRtYtjQRNwBSzyWSxhAWE=) 3: pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl (hash: zLeDwJViNRo7+PBVhT1qKwl5pJ+2v+4ZawRe9E+diX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:ca:c0:a1:47:82:3a:4a:35:6d:8c:ef:16:fa:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a561ccb03741056715a6be4805321662d88e7e7c Validity Not Before: Dec 18 01:02:26 2025 GMT Not After : Dec 19 01:02:26 2025 GMT Subject: CN=3c46f8fefb1c1cb9294da7adff146db8e7aa4e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7e:57:74:ee:fa:1e:f2:40:5a:24:c4:89:84: 4c:7a:68:99:04:42:5b:18:4a:d8:50:03:83:65:a6: 02:a2:db:9a:2c:3c:e0:c4:8c:44:2f:cb:53:5e:78: b1:c9:9e:d4:90:b2:ad:ff:82:25:c8:49:d2:66:b1: 15:61:5f:4b:66:ea:06:ac:cd:67:06:fe:a1:08:51: 6f:40:6d:20:7a:db:71:e8:87:1e:60:44:f7:eb:8c: 51:61:cc:0b:4d:7e:d6:2d:eb:11:6f:eb:f4:c2:7e: 0d:e8:43:34:17:2d:ae:e0:05:85:f5:92:7c:dd:cc: 2b:e7:34:f2:6b:77:46:e9:e0:fa:af:39:7e:74:8e: 3b:c7:fc:77:d2:ea:c2:4d:51:f7:35:64:a2:81:d2: 44:94:8f:cb:45:05:d4:e5:28:c4:d7:11:de:88:c8: 90:6b:99:79:60:fd:4a:4a:90:e5:d5:ee:bf:df:fe: 75:b2:a6:dc:24:02:b5:ae:ee:eb:ea:15:ba:cb:09: c7:34:5b:00:31:ac:0e:9b:9b:00:1e:3e:cb:07:dd: cd:f8:33:aa:8c:e8:26:01:0e:fa:00:50:ef:5d:04: 96:b3:4b:99:7a:6a:2c:66:3e:82:a6:05:f6:96:a8: db:5a:ce:71:dd:01:cf:29:fd:e1:93:f0:03:1e:6b: 1c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:46:F8:FE:FB:1C:1C:B9:29:4D:A7:AD:FF:14:6D:B8:E7:AA:4E:3D X509v3 Authority Key Identifier: keyid:A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:36:0b:98:d4:4e:f5:09:35:5a:68:31:29:b2:23:74:55:66: 6d:36:13:14:73:10:23:d6:55:5a:29:ad:da:c9:6a:d0:fe:4f: 9b:a9:e3:fd:2f:73:0e:be:f5:99:9c:87:a7:95:ce:4f:ba:ec: 90:3c:a0:32:6f:4d:98:5b:94:7e:57:9f:fd:ba:d0:34:d9:54: 4f:13:b0:b9:cd:1d:b8:eb:3f:89:9e:8c:cc:f5:d5:8e:aa:48: c3:21:64:4b:e1:a9:74:7c:ae:39:37:a4:a4:fb:e5:0f:11:ca: c0:6b:56:16:dc:f3:ca:e9:6c:42:cb:10:26:15:fc:54:bb:0f: 66:fa:24:64:70:64:93:ca:f8:85:b0:b1:bb:2f:57:68:1d:8b: 99:61:25:1c:c8:a3:62:e6:65:48:4c:e0:ce:b8:4b:4f:4a:36: 3d:26:46:15:d7:ed:0f:ee:b7:c7:96:d9:2c:97:36:fe:c6:db: 24:ef:84:f2:db:b5:83:01:9f:b1:b9:21:50:b3:80:4a:76:c0: 4b:3d:1b:cd:b5:e2:b5:43:45:aa:64:21:f3:17:56:6c:cb:6c: e7:8f:52:c8:55:67:e2:2e:57:2a:21:1e:92:c6:b1:61:39:8d: 85:ce:0d:53:4e:92:be:4a:eb:26:98:b2:d1:8f:c1:19:74:12: f9:51:dc:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+srAoUeCOko1bYzvFvrSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NjFjY2IwMzc0MTA1NjcxNWE2YmU0ODA1MzIxNjYyZDg4 ZTdlN2MwHhcNMjUxMjE4MDEwMjI2WhcNMjUxMjE5MDEwMjI2WjAzMTEwLwYDVQQD EygzYzQ2ZjhmZWZiMWMxY2I5Mjk0ZGE3YWRmZjE0NmRiOGU3YWE0ZTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH5XdO76HvJAWiTEiYRMemiZBEJb GErYUAODZaYCotuaLDzgxIxEL8tTXnixyZ7UkLKt/4IlyEnSZrEVYV9LZuoGrM1n Bv6hCFFvQG0gettx6IceYET364xRYcwLTX7WLesRb+v0wn4N6EM0Fy2u4AWF9ZJ8 3cwr5zTya3dG6eD6rzl+dI47x/x30urCTVH3NWSigdJElI/LRQXU5SjE1xHeiMiQ a5l5YP1KSpDl1e6/3/51sqbcJAK1ru7r6hW6ywnHNFsAMawOm5sAHj7LB93N+DOq jOgmAQ76AFDvXQSWs0uZemosZj6CpgX2lqjbWs5x3QHPKf3hk/ADHmscCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxG+P77HBy5KU2nrf8Ubbjnqk49MB8GA1UdIwQY MBaAFKVhzLA3QQVnFaa+SAUyFmLYjn58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YmM3ZmEtMDQ2Mi00Y2Y2LTkxODkt YWU0ZTY5ODY2NGYxLzEvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC80YmM3ZmEtMDQ2Mi00Y2Y2LTkxODktYWU0ZTY5ODY2NGYx LzEvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDYLmNRO 9Qk1WmgxKbIjdFVmbTYTFHMQI9ZVWimt2slq0P5Pm6nj/S9zDr71mZyHp5XOT7rs kDygMm9NmFuUflef/brQNNlUTxOwuc0duOs/iZ6MzPXVjqpIwyFkS+GpdHyuOTek pPvlDxHKwGtWFtzzyulsQssQJhX8VLsPZvokZHBkk8r4hbCxuy9XaB2LmWElHMij YuZlSEzgzrhLT0o2PSZGFdftD+63x5bZLJc2/sbbJO+E8tu1gwGfsbkhULOASnbA Sz0bzbXitUNFqmQh8xdWbMts549SyFVn4i5XKiEeksaxYTmNhc4NU06SvkrrJpiy 0Y/BGXQS+VHclw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:46:12 2025 by rpki-client