This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft File: PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft (raw, json) Hash identifier: EQLs6WSiANar7mEw/2tvM4880pSZR5rZoZeY3FACQ60= Subject key identifier: 1F:2C:8E:8F:7E:A4:CE:10:1B:1D:3A:89:E3:83:9A:26:A2:98:68:54 Authority key identifier: 3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68 Certificate issuer: /CN=3d639fa4eddc162df3659e721d247ff338962f68 Certificate serial: 019AF209ACE2C03C1589EC1522F52EF6CC87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft Manifest number: 37 Signing time: Sat 06 Dec 2025 05:01:51 +0000 Manifest this update: Sat 06 Dec 2025 05:01:51 +0000 Manifest next update: Sun 07 Dec 2025 05:01:51 +0000 Files and hashes: 1: PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl (hash: LVZQZ+PbcdLSoQTT1cSKVjtvaB1EjPF7g8sI3GLf/go=) 2: mUsc8rGd4_JM4XnD9bClRCU4zxo.roa (hash: 3sss9GFoAf2253c6EyBbZyTorugY9kFPDM+aiR2bERI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:ac:e2:c0:3c:15:89:ec:15:22:f5:2e:f6:cc:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d639fa4eddc162df3659e721d247ff338962f68 Validity Not Before: Dec 6 05:01:51 2025 GMT Not After : Dec 7 05:01:51 2025 GMT Subject: CN=1f2c8e8f7ea4ce101b1d3a89e3839a26a2986854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:10:11:74:f3:7b:f4:2c:65:25:50:5f:66:60: 5e:ad:b6:e6:73:7a:32:64:8a:0f:58:23:30:8a:31: d8:fc:75:96:be:92:7b:64:83:5c:2b:a6:fc:94:84: d3:b9:0a:f0:19:f1:14:f8:8a:c9:5e:31:e5:f0:e4: a0:62:67:66:48:1f:b3:79:1e:6a:6a:da:3a:46:3e: ce:99:a4:fd:25:9b:50:8e:27:fb:75:bc:90:c8:6a: e3:62:a9:3e:a7:06:0d:d6:64:94:5c:8b:63:59:d8: 76:6d:44:dc:6a:12:a2:0b:82:69:42:ef:7c:92:8b: 23:60:cb:fa:47:97:a9:ce:b5:9e:bc:84:61:f0:76: 0e:75:66:34:9f:03:e9:20:f3:55:13:c5:1d:93:74: 10:fc:73:a7:22:15:27:79:e4:02:21:0a:69:f9:ac: 2b:f0:f2:b2:df:07:d4:46:f1:8d:cb:2b:dd:de:7c: a9:a4:80:1e:6a:09:89:e3:e1:e8:e1:65:bc:e6:ef: a4:eb:9c:f5:8c:e7:7e:69:c6:26:13:d4:01:10:4b: 3f:e0:f3:bc:77:6d:32:e3:be:57:9a:e9:58:c0:89: 93:cb:81:a7:12:3b:00:ac:12:3b:fb:15:fd:eb:8b: 80:69:6a:7a:c6:9a:9b:25:21:7b:cf:1e:ac:e0:da: e1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2C:8E:8F:7E:A4:CE:10:1B:1D:3A:89:E3:83:9A:26:A2:98:68:54 X509v3 Authority Key Identifier: keyid:3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:cf:d6:2f:8f:24:3d:38:a6:46:cc:a9:5b:0b:98:bd:2c:4b: bb:2d:41:f9:0e:a6:ee:a8:88:76:5b:0a:7b:ce:69:03:31:ab: 8b:e9:13:73:27:75:f3:50:65:38:34:87:48:58:89:cb:74:dd: 7b:02:4a:7f:46:98:0a:09:53:ff:91:23:11:cb:e7:2e:52:f1: 7b:fb:d8:00:0a:ab:79:f1:57:36:f9:ec:d5:5f:13:4b:13:9c: 1f:d0:f7:c4:32:97:a9:c2:6f:b5:70:6c:95:0a:43:7b:a1:4e: 92:74:c9:c8:66:50:eb:e6:f3:f3:f1:b9:0b:eb:48:6a:af:13: 4f:25:dc:34:8a:7c:00:52:6c:e9:c6:a2:ac:19:0c:88:aa:e4: bf:62:79:f0:86:5d:6f:81:12:87:a1:97:94:ce:15:fd:e0:35: 73:34:f6:72:58:cb:45:dc:ad:ab:0c:d6:40:eb:67:4b:6e:ef: 23:5d:32:8b:4a:01:cb:08:54:cc:08:68:1b:6d:e0:bd:0e:13: f3:ae:1a:f1:ba:fa:50:9e:45:fe:8e:11:1f:21:31:12:3e:75: e3:02:24:72:d1:8c:70:29:b2:7b:2e:81:d6:30:3b:36:0e:71: 18:51:b2:da:7b:d7:28:56:bb:e4:98:70:fd:ab:ee:d2:88:39: ea:51:2a:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaziwDwViewVIvUu9syHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNjM5ZmE0ZWRkYzE2MmRmMzY1OWU3MjFkMjQ3ZmYzMzg5 NjJmNjgwHhcNMjUxMjA2MDUwMTUxWhcNMjUxMjA3MDUwMTUxWjAzMTEwLwYDVQQD EygxZjJjOGU4ZjdlYTRjZTEwMWIxZDNhODllMzgzOWEyNmEyOTg2ODU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhARdPN79CxlJVBfZmBerbbmc3oy ZIoPWCMwijHY/HWWvpJ7ZINcK6b8lITTuQrwGfEU+IrJXjHl8OSgYmdmSB+zeR5q ato6Rj7OmaT9JZtQjif7dbyQyGrjYqk+pwYN1mSUXItjWdh2bUTcahKiC4JpQu98 kosjYMv6R5epzrWevIRh8HYOdWY0nwPpIPNVE8Udk3QQ/HOnIhUneeQCIQpp+awr 8PKy3wfURvGNyyvd3nyppIAeagmJ4+Ho4WW85u+k65z1jOd+acYmE9QBEEs/4PO8 d20y475XmulYwImTy4GnEjsArBI7+xX964uAaWp6xpqbJSF7zx6s4NrhhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8sjo9+pM4QGx06ieODmiaimGhUMB8GA1UdIwQY MBaAFD1jn6Tt3BYt82Wech0kf/M4li9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFdPZnBPM2NGaTN6Wlo1eUhTUl84emlXTDJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jNzc5ODMtYmUzYS00OGUzLWI1ZDAt YWQyODRkMjgyNGE0LzEvUFdPZnBPM2NGaTN6Wlo1eUhTUl84emlXTDJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9jNzc5ODMtYmUzYS00OGUzLWI1ZDAtYWQyODRkMjgyNGE0 LzEvUFdPZnBPM2NGaTN6Wlo1eUhTUl84emlXTDJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8/WL48k PTimRsypWwuYvSxLuy1B+Q6m7qiIdlsKe85pAzGri+kTcyd181BlODSHSFiJy3Td ewJKf0aYCglT/5EjEcvnLlLxe/vYAAqrefFXNvns1V8TSxOcH9D3xDKXqcJvtXBs lQpDe6FOknTJyGZQ6+bz8/G5C+tIaq8TTyXcNIp8AFJs6cairBkMiKrkv2J58IZd b4ESh6GXlM4V/eA1czT2cljLRdytqwzWQOtnS27vI10yi0oBywhUzAhoG23gvQ4T 864a8br6UJ5F/o4RHyExEj514wIkctGMcCmyey6B1jA7Ng5xGFGy2nvXKFa75Jhw /avu0og56lEqMw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:32 2025 by rpki-client