This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft File: w3oiGyndRjBow6jVysFGsFe1qe0.mft (raw, json) Hash identifier: DIgL5hirp8cbvITEUM5jQFCg/wWlJh0aRK8RonZKWKM= Subject key identifier: 1B:27:5C:B7:9D:FF:41:C0:75:07:20:2E:BE:04:D1:85:84:22:F0:73 Authority key identifier: C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED Certificate issuer: /CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed Certificate serial: 019B2FD5B1106F5196967624FAA8052FB74F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft Manifest number: 13DD Signing time: Thu 18 Dec 2025 05:01:32 +0000 Manifest this update: Thu 18 Dec 2025 05:01:32 +0000 Manifest next update: Fri 19 Dec 2025 05:01:32 +0000 Files and hashes: 1: I_YmXjobjQiqgaE7GnBooBc13Bo.roa (hash: uhenmFA0jnoDV3gl2RrmVWDxmBkSpRWlCD4TJWA6V5M=) 2: w3oiGyndRjBow6jVysFGsFe1qe0.crl (hash: HgCv7w/OcN9Ymv0yNQk2cANePrnzJANMipdsts471tA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:b1:10:6f:51:96:96:76:24:fa:a8:05:2f:b7:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed Validity Not Before: Dec 18 05:01:32 2025 GMT Not After : Dec 19 05:01:32 2025 GMT Subject: CN=1b275cb79dff41c07507202ebe04d1858422f073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9f:03:92:b7:75:f5:29:ee:d3:a4:1f:db:68: bf:5e:9c:36:b8:ad:1b:fa:d1:7d:ea:53:02:4f:5b: 2f:22:b7:93:e1:9b:16:c3:3a:84:50:f1:7a:20:5f: 16:34:0d:7a:20:c2:96:a3:f8:43:02:a6:8f:c4:c5: b1:d9:27:74:aa:b0:fb:fa:96:81:8a:db:42:91:6a: a6:e1:d9:0b:96:c8:64:5e:45:32:a5:01:90:1f:cc: de:79:4e:5b:e7:88:19:8c:93:5a:b1:63:20:46:06: ae:61:01:58:34:26:80:92:11:6e:96:e5:16:fa:e1: 92:5e:d7:c1:f9:33:34:06:17:39:ad:9c:90:cb:c6: f0:99:21:fd:d6:cb:4c:ed:86:fb:e8:d9:60:77:a7: ca:01:75:0f:d7:c5:2d:2d:d6:43:af:39:fd:cb:6a: 03:dd:15:e1:ba:2c:e8:37:c1:00:9b:de:27:51:9f: 54:da:cd:ae:f5:d8:e9:c2:f0:c5:be:21:c5:af:9d: 7c:d8:9d:9e:be:b3:9a:aa:11:76:eb:16:7d:c4:3d: bb:b3:a1:ac:3d:1c:27:09:e3:46:97:41:ef:07:74: 78:6d:4d:b3:23:ba:84:b0:09:5f:1d:ba:34:da:9a: ef:cf:c6:22:71:2e:10:db:34:68:54:69:f3:ad:66: c8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:27:5C:B7:9D:FF:41:C0:75:07:20:2E:BE:04:D1:85:84:22:F0:73 X509v3 Authority Key Identifier: keyid:C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:86:f6:cb:ce:f5:32:21:0f:43:80:49:3a:71:a5:24:c5:81: ee:c4:c3:26:c3:a9:6f:2b:a8:21:b3:fe:01:e3:3b:ee:3f:7f: 80:27:5a:09:a5:b5:37:b7:39:1d:d6:97:19:86:4a:c7:ed:71: 3b:f5:f6:ce:6b:8d:46:3b:ec:b0:ff:6c:c9:88:30:68:dd:f0: f9:70:41:cf:20:1a:27:da:b0:a4:d0:b8:88:a6:dc:bf:32:df: 61:dd:08:76:0f:ae:4d:61:10:32:de:cb:ff:97:a4:e3:b3:1a: 27:21:69:58:1d:c0:8e:00:e7:cb:36:ba:c7:51:86:bb:ee:7b: 79:de:3f:68:50:9d:55:54:74:e6:54:34:50:e7:a4:49:94:7b: ab:ed:69:a1:df:30:6b:85:cf:4c:c9:55:55:62:92:af:59:b6: d8:f9:56:0e:d4:22:51:25:76:5b:2a:90:7f:c0:85:da:b9:de: 73:7c:df:c4:d6:90:8c:2e:b7:ec:72:12:d3:dd:21:44:da:12: 6a:6a:42:66:59:9a:72:b2:17:85:41:41:eb:3f:d6:53:74:67: c4:d1:7f:11:4d:e1:75:08:a4:0d:a4:1a:1a:fa:5a:f2:66:c9: 0e:e8:be:57:06:91:c3:7c:6e:33:68:14:34:49:ad:19:cb:1b: 0b:75:1f:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1bEQb1GWlnYk+qgFL7dPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzN2EyMjFiMjlkZDQ2MzA2OGMzYThkNWNhYzE0NmIwNTdi NWE5ZWQwHhcNMjUxMjE4MDUwMTMyWhcNMjUxMjE5MDUwMTMyWjAzMTEwLwYDVQQD EygxYjI3NWNiNzlkZmY0MWMwNzUwNzIwMmViZTA0ZDE4NTg0MjJmMDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv58Dkrd19Snu06Qf22i/Xpw2uK0b +tF96lMCT1svIreT4ZsWwzqEUPF6IF8WNA16IMKWo/hDAqaPxMWx2Sd0qrD7+paB ittCkWqm4dkLlshkXkUypQGQH8zeeU5b54gZjJNasWMgRgauYQFYNCaAkhFuluUW +uGSXtfB+TM0Bhc5rZyQy8bwmSH91stM7Yb76Nlgd6fKAXUP18UtLdZDrzn9y2oD 3RXhuizoN8EAm94nUZ9U2s2u9djpwvDFviHFr5182J2evrOaqhF26xZ9xD27s6Gs PRwnCeNGl0HvB3R4bU2zI7qEsAlfHbo02prvz8YicS4Q2zRoVGnzrWbIfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsnXLed/0HAdQcgLr4E0YWEIvBzMB8GA1UdIwQY MBaAFMN6Ihsp3UYwaMOo1crBRrBXtantMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzNvaUd5bmRSakJvdzZqVnlzRkdzRmUxcWUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zYmU5MTQtOWQxYi00ZTBiLWJmZDIt OGJmY2Y5MDZmNzZhLzEvdzNvaUd5bmRSakJvdzZqVnlzRkdzRmUxcWUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8zYmU5MTQtOWQxYi00ZTBiLWJmZDItOGJmY2Y5MDZmNzZh LzEvdzNvaUd5bmRSakJvdzZqVnlzRkdzRmUxcWUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYb2y871 MiEPQ4BJOnGlJMWB7sTDJsOpbyuoIbP+AeM77j9/gCdaCaW1N7c5HdaXGYZKx+1x O/X2zmuNRjvssP9syYgwaN3w+XBBzyAaJ9qwpNC4iKbcvzLfYd0Idg+uTWEQMt7L /5ek47MaJyFpWB3AjgDnyza6x1GGu+57ed4/aFCdVVR05lQ0UOekSZR7q+1pod8w a4XPTMlVVWKSr1m22PlWDtQiUSV2WyqQf8CF2rnec3zfxNaQjC637HIS090hRNoS ampCZlmacrIXhUFB6z/WU3RnxNF/EU3hdQikDaQaGvpa8mbJDui+VwaRw3xuM2gU NEmtGcsbC3UfhQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:48:11 2025 by rpki-client