This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft File: w3oiGyndRjBow6jVysFGsFe1qe0.mft (raw, json) Hash identifier: bizkdK04364MKyyZBF6joa6Ad1ZOMlq/geajg8o/oMc= Subject key identifier: 85:D4:8F:4F:8F:B5:ED:31:68:7C:AE:73:BB:D8:BC:B8:C4:2A:13:0A Authority key identifier: C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED Certificate issuer: /CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed Certificate serial: 019AF208A17ECFFDBBA495C3635F391B6B9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft Manifest number: 13BD Signing time: Sat 06 Dec 2025 05:00:43 +0000 Manifest this update: Sat 06 Dec 2025 05:00:43 +0000 Manifest next update: Sun 07 Dec 2025 05:00:43 +0000 Files and hashes: 1: I_YmXjobjQiqgaE7GnBooBc13Bo.roa (hash: uhenmFA0jnoDV3gl2RrmVWDxmBkSpRWlCD4TJWA6V5M=) 2: w3oiGyndRjBow6jVysFGsFe1qe0.crl (hash: TlWkLdp2iNvU5156pzUhFHdi12BYcuIOiZ5cR231+v8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a1:7e:cf:fd:bb:a4:95:c3:63:5f:39:1b:6b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed Validity Not Before: Dec 6 05:00:43 2025 GMT Not After : Dec 7 05:00:43 2025 GMT Subject: CN=85d48f4f8fb5ed31687cae73bbd8bcb8c42a130a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:08:54:1e:11:ed:d7:89:29:d9:44:d9:16:4f: 8f:39:a3:68:63:1d:aa:6c:0d:92:8b:4e:e5:dd:91: f4:08:42:a2:53:b4:d0:29:c9:4d:67:75:a4:1c:79: 3e:31:35:19:f9:3d:85:0c:2f:cc:27:94:1d:86:90: d7:1c:1c:ec:eb:bf:1e:ee:8b:72:4f:87:b7:d7:41: 2f:22:8d:d5:28:8d:df:ed:ee:06:e2:78:74:fb:fa: 6f:ab:c2:8d:f7:1e:f0:23:52:71:95:b0:48:b3:e4: 3d:8a:ef:80:cd:34:09:ed:fa:75:c4:6a:b7:26:56: 22:9b:15:c5:20:ac:a0:29:3a:18:ef:4c:7d:23:24: 24:d6:df:a3:1b:e7:7d:ad:aa:71:c1:0e:06:f8:f7: 47:47:1c:0e:00:c5:ee:d8:d1:af:1c:91:a6:04:5a: f4:e9:2b:69:a5:81:19:43:b1:cf:6e:21:99:3d:3d: 06:64:63:f3:c1:ec:0d:d3:08:2f:fd:1a:c4:37:76: e1:54:93:58:5f:95:c8:53:32:81:23:e2:ab:77:5a: c6:a5:3f:a5:24:f9:cd:6e:fc:d1:1f:89:89:29:3f: 26:d7:d7:31:cf:89:ab:c9:3a:0e:f0:d5:2d:66:6f: 78:25:dd:d2:4e:89:67:73:41:d2:61:57:d1:00:b9: 9b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D4:8F:4F:8F:B5:ED:31:68:7C:AE:73:BB:D8:BC:B8:C4:2A:13:0A X509v3 Authority Key Identifier: keyid:C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:bc:1d:38:36:1d:b1:a2:d4:02:bc:81:6d:3b:c3:f0:a8:4f: 5d:03:06:4a:e1:f9:c6:a7:51:b3:4a:ed:5b:13:92:3f:a5:b4: 85:da:9b:24:28:17:45:ce:00:37:48:4f:d5:2b:73:41:e8:be: 09:29:5d:51:81:81:f3:06:9f:98:d0:25:72:5d:5e:30:46:68: 68:23:42:09:29:f6:a3:73:1b:36:61:88:d8:67:3d:68:a5:bd: cb:f0:84:04:71:e9:fd:75:09:1e:46:9a:b4:8e:2c:49:b3:46: 96:78:dc:1c:4a:a7:62:ae:42:a3:b3:62:58:98:a7:23:ab:c0: 70:27:a0:01:85:52:05:cc:cf:74:9a:62:b2:a8:d7:77:70:55: d7:2e:8a:59:cd:32:37:89:dd:45:e2:dc:be:34:f3:2f:74:2b: 77:04:eb:d9:26:63:08:a6:24:2a:2d:87:fc:e1:c4:97:32:53: b1:c2:ee:99:04:9e:8e:f1:01:c4:9b:0a:dd:b2:45:5a:87:1c: a6:bf:ba:b2:13:14:1d:b8:2f:42:47:61:c2:d8:2c:02:1f:e1: 2e:90:d2:0e:d2:41:d8:d2:92:31:a5:ad:f4:64:42:43:69:18: 2c:40:59:1e:66:d6:ef:ab:27:c6:3f:5a:49:be:85:e2:7f:d6: ba:c0:69:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKF+z/27pJXDY185G2uaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzN2EyMjFiMjlkZDQ2MzA2OGMzYThkNWNhYzE0NmIwNTdi NWE5ZWQwHhcNMjUxMjA2MDUwMDQzWhcNMjUxMjA3MDUwMDQzWjAzMTEwLwYDVQQD Eyg4NWQ0OGY0ZjhmYjVlZDMxNjg3Y2FlNzNiYmQ4YmNiOGM0MmExMzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowhUHhHt14kp2UTZFk+POaNoYx2q bA2Si07l3ZH0CEKiU7TQKclNZ3WkHHk+MTUZ+T2FDC/MJ5QdhpDXHBzs678e7oty T4e310EvIo3VKI3f7e4G4nh0+/pvq8KN9x7wI1JxlbBIs+Q9iu+AzTQJ7fp1xGq3 JlYimxXFIKygKToY70x9IyQk1t+jG+d9rapxwQ4G+PdHRxwOAMXu2NGvHJGmBFr0 6StppYEZQ7HPbiGZPT0GZGPzwewN0wgv/RrEN3bhVJNYX5XIUzKBI+Krd1rGpT+l JPnNbvzRH4mJKT8m19cxz4mryToO8NUtZm94Jd3STolnc0HSYVfRALmbiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXUj0+Pte0xaHyuc7vYvLjEKhMKMB8GA1UdIwQY MBaAFMN6Ihsp3UYwaMOo1crBRrBXtantMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzNvaUd5bmRSakJvdzZqVnlzRkdzRmUxcWUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zYmU5MTQtOWQxYi00ZTBiLWJmZDIt OGJmY2Y5MDZmNzZhLzEvdzNvaUd5bmRSakJvdzZqVnlzRkdzRmUxcWUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8zYmU5MTQtOWQxYi00ZTBiLWJmZDItOGJmY2Y5MDZmNzZh LzEvdzNvaUd5bmRSakJvdzZqVnlzRkdzRmUxcWUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7wdODYd saLUAryBbTvD8KhPXQMGSuH5xqdRs0rtWxOSP6W0hdqbJCgXRc4AN0hP1StzQei+ CSldUYGB8wafmNAlcl1eMEZoaCNCCSn2o3MbNmGI2Gc9aKW9y/CEBHHp/XUJHkaa tI4sSbNGlnjcHEqnYq5Co7NiWJinI6vAcCegAYVSBczPdJpisqjXd3BV1y6KWc0y N4ndReLcvjTzL3QrdwTr2SZjCKYkKi2H/OHElzJTscLumQSejvEBxJsK3bJFWocc pr+6shMUHbgvQkdhwtgsAh/hLpDSDtJB2NKSMaWt9GRCQ2kYLEBZHmbW76snxj9a Sb6F4n/WusBpjg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:34 2025 by rpki-client