This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft File: 1-w8AoW8RYMy3oFQNkqyohm6YeI.mft (raw, json) Hash identifier: pAdHWVSa1yMxFC3vA2wIOwoxfZbK556jFEuYPsh8B3w= Subject key identifier: 91:2B:19:BF:95:20:9D:DE:5D:1E:EE:09:7E:9F:7B:A1:97:CF:C9:92 Authority key identifier: D7:EC:3C:02:85:BC:45:83:32:DE:81:50:36:4A:B2:A2:19:BA:61:E2 Certificate issuer: /CN=d7ec3c0285bc458332de8150364ab2a219ba61e2 Certificate serial: 019AF352A10569227DF039BD03E0B1B27570 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft Manifest number: 0101 Signing time: Sat 06 Dec 2025 11:01:09 +0000 Manifest this update: Sat 06 Dec 2025 11:01:09 +0000 Manifest next update: Sun 07 Dec 2025 11:01:09 +0000 Files and hashes: 1: 1-w8AoW8RYMy3oFQNkqyohm6YeI.crl (hash: PZYpn5PTEaH8saq7G2Ybqft8Wxbz8oCS8wBI7cXnz9w=) 2: I-zs-8rljmDPlErQ03m2L3NV_DU.roa (hash: UzoSi4X1KX7g6G8RqFjoqfYd2UGDWS9dFOixZ89hyRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:a1:05:69:22:7d:f0:39:bd:03:e0:b1:b2:75:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7ec3c0285bc458332de8150364ab2a219ba61e2 Validity Not Before: Dec 6 11:01:09 2025 GMT Not After : Dec 7 11:01:09 2025 GMT Subject: CN=912b19bf95209dde5d1eee097e9f7ba197cfc992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b4:32:44:0c:39:ef:f8:82:5f:56:b4:3f:0d: ee:c3:1d:de:62:14:42:9c:c6:ba:ab:f7:ad:e7:01: 58:a5:a0:8e:8a:d2:ed:b0:fb:0d:36:bc:3b:be:6d: 87:58:bb:b4:5e:9f:ae:18:de:2e:f7:47:82:c8:95: 52:1d:69:d1:fd:1a:c5:a9:ea:5b:72:4f:c9:6c:19: ed:46:02:9b:96:23:32:67:c9:57:d5:d0:a8:5b:36: 49:eb:05:e5:02:48:d1:1a:34:20:e0:c5:97:10:ba: 61:db:6c:61:8d:02:9e:c5:99:99:f5:98:59:ba:1b: f7:95:d9:d7:15:82:bb:87:a6:c4:54:aa:12:3b:95: dd:2a:d4:ad:7d:5d:18:81:ba:09:a1:d4:c9:36:b2: 88:c3:9b:a7:a0:7c:be:4f:0e:77:02:fd:31:10:d7: 16:02:8f:f7:e7:85:51:cc:64:69:f3:f1:74:f9:16: d5:e8:80:86:36:a4:c3:53:57:ec:1a:ce:60:cd:97: 15:7e:2b:10:ac:cb:3c:a5:fd:a1:81:80:a2:15:2b: f3:74:29:6f:b3:16:b3:a7:1c:00:67:8c:8a:8c:e7: d4:bb:00:57:e2:5c:22:b8:87:e2:48:bc:ae:34:3c: f1:d9:45:63:67:67:4a:d6:ff:41:75:c6:e3:a7:2f: 46:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2B:19:BF:95:20:9D:DE:5D:1E:EE:09:7E:9F:7B:A1:97:CF:C9:92 X509v3 Authority Key Identifier: keyid:D7:EC:3C:02:85:BC:45:83:32:DE:81:50:36:4A:B2:A2:19:BA:61:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:86:53:97:ef:e2:61:7a:61:79:e3:03:cb:66:88:16:4c:0b: 25:2b:c4:76:bc:ba:38:e6:61:39:e5:99:8c:0e:6f:11:31:ea: 2f:cd:b7:66:05:7a:44:8c:e4:f7:ad:9f:2c:31:ce:36:27:d4: 2f:21:5d:a6:2d:d1:4a:7d:1d:2f:96:df:fa:fa:ff:ad:1b:2f: 18:d8:38:26:9b:28:ce:1b:1f:bc:e8:25:6e:11:de:6d:c2:69: 37:67:47:f4:d9:53:c7:3d:fd:aa:81:5f:30:a6:8e:08:0c:8a: 81:94:85:73:54:bd:15:cb:ed:cb:b5:f6:09:94:d9:ef:59:4d: ca:36:bc:eb:d6:c0:46:68:bb:5b:29:6c:4a:5a:36:20:d0:42: 04:70:b7:c5:12:f8:55:cc:74:1e:54:d1:d7:02:f9:61:f4:48: 71:d9:cd:3c:d3:68:50:1c:ef:1b:22:4a:ed:78:e6:af:d8:46: b7:08:dc:e5:c6:95:1d:fd:0a:fc:bf:fe:11:34:8c:73:f0:7f: a8:e7:d9:7e:bd:a8:d6:c3:89:f9:f9:c6:90:79:7b:21:50:65: df:3f:02:18:47:0d:85:8b:f0:ad:98:55:b2:c4:bd:70:62:ae: 51:30:f9:5b:e1:f9:c0:9a:41:42:d4:df:2e:8e:af:63:62:78: f8:97:14:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUqEFaSJ98Dm9A+CxsnVwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZWMzYzAyODViYzQ1ODMzMmRlODE1MDM2NGFiMmEyMTli YTYxZTIwHhcNMjUxMjA2MTEwMTA5WhcNMjUxMjA3MTEwMTA5WjAzMTEwLwYDVQQD Eyg5MTJiMTliZjk1MjA5ZGRlNWQxZWVlMDk3ZTlmN2JhMTk3Y2ZjOTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLQyRAw57/iCX1a0Pw3uwx3eYhRC nMa6q/et5wFYpaCOitLtsPsNNrw7vm2HWLu0Xp+uGN4u90eCyJVSHWnR/RrFqepb ck/JbBntRgKbliMyZ8lX1dCoWzZJ6wXlAkjRGjQg4MWXELph22xhjQKexZmZ9ZhZ uhv3ldnXFYK7h6bEVKoSO5XdKtStfV0YgboJodTJNrKIw5unoHy+Tw53Av0xENcW Ao/354VRzGRp8/F0+RbV6ICGNqTDU1fsGs5gzZcVfisQrMs8pf2hgYCiFSvzdClv sxazpxwAZ4yKjOfUuwBX4lwiuIfiSLyuNDzx2UVjZ2dK1v9Bdcbjpy9GdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJErGb+VIJ3eXR7uCX6fe6GXz8mSMB8GA1UdIwQY MBaAFNfsPAKFvEWDMt6BUDZKsqIZumHiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS13OEFvVzhSWU15M29GUU5rcXlvaG02WWVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iNTlkM2MtOWRlZi00Y2NmLWE5ZGEt MWIzMzc5YWZmNTFkLzEvMS13OEFvVzhSWU15M29GUU5rcXlvaG02WWVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9iNTlkM2MtOWRlZi00Y2NmLWE5ZGEtMWIzMzc5YWZmNTFk LzEvMS13OEFvVzhSWU15M29GUU5rcXlvaG02WWVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIZTl+/i YXpheeMDy2aIFkwLJSvEdry6OOZhOeWZjA5vETHqL823ZgV6RIzk962fLDHONifU LyFdpi3RSn0dL5bf+vr/rRsvGNg4JpsozhsfvOglbhHebcJpN2dH9NlTxz39qoFf MKaOCAyKgZSFc1S9Fcvty7X2CZTZ71lNyja869bARmi7WylsSlo2INBCBHC3xRL4 Vcx0HlTR1wL5YfRIcdnNPNNoUBzvGyJK7Xjmr9hGtwjc5caVHf0K/L/+ETSMc/B/ qOfZfr2o1sOJ+fnGkHl7IVBl3z8CGEcNhYvwrZhVssS9cGKuUTD5W+H5wJpBQtTf Lo6vY2J4+JcUxA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:31:17 2025 by rpki-client