This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft File: _RGW2Y3s046wP18GtI5VbHTyMfQ.mft (raw, json) Hash identifier: firU4Fj0iGw3WB4XIvEqt8dbdA6KVSc+FhQ7dkSLwrk= Subject key identifier: 49:06:E7:D7:0C:91:B9:3A:28:0E:BB:50:0E:15:1F:28:10:7D:1E:87 Authority key identifier: FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4 Certificate issuer: /CN=fd1196d98decd38eb03f5f06b48e556c74f231f4 Certificate serial: 019AF50A01A18FC37510CA2701A53D20122D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft Manifest number: 1361 Signing time: Sat 06 Dec 2025 19:01:04 +0000 Manifest this update: Sat 06 Dec 2025 19:01:04 +0000 Manifest next update: Sun 07 Dec 2025 19:01:04 +0000 Files and hashes: 1: 27FHmyzi6Se6krMAx8iyaZkkui4.roa (hash: hxU0+n4GJmSaVALTik02VPB85RwSKnzwnJh1oS8Qx2Y=) 2: Vt65vwu21Gw3Ig_WCeQCArrV49M.roa (hash: JhPPfXj32nubKkCUS1s8L7cjVu7ayJ+kkjBpXd9CNao=) 3: _RGW2Y3s046wP18GtI5VbHTyMfQ.crl (hash: w6znvBrw+E7yxX/owuOxHobJYk5KSKgLXb6MTiwUYlo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:01:a1:8f:c3:75:10:ca:27:01:a5:3d:20:12:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd1196d98decd38eb03f5f06b48e556c74f231f4 Validity Not Before: Dec 6 19:01:04 2025 GMT Not After : Dec 7 19:01:04 2025 GMT Subject: CN=4906e7d70c91b93a280ebb500e151f28107d1e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:da:b2:db:08:c9:ff:99:ac:66:ce:ec:32:dc: 22:30:a3:ae:26:2a:89:a8:59:b7:31:c4:d5:1b:ec: 9a:5f:59:8c:b7:40:a5:c4:6d:c9:bc:22:7a:18:cf: 83:a0:20:03:1e:c3:41:1f:e9:a7:85:df:52:fb:dd: 21:96:fb:6c:03:dd:92:df:f1:79:40:0f:72:43:9e: cf:59:4a:a5:b6:45:8f:79:4e:a5:be:e1:37:90:80: 36:c7:f5:13:9b:06:08:0c:c6:23:13:46:23:11:37: 1a:39:66:89:06:d8:58:4c:9a:36:2a:e9:a2:0c:01: db:a9:10:6b:62:09:23:17:d2:c4:e1:b3:b8:e6:df: 39:ec:4c:09:68:82:7f:a3:90:6e:84:80:9e:f3:0b: c3:0d:a1:61:77:5f:81:55:74:c0:58:94:32:95:38: eb:a5:0b:68:ce:d7:35:33:67:1f:55:9c:07:24:ac: a5:d2:ea:5b:6d:70:84:8d:4d:57:e5:63:0c:1c:8d: d7:b1:69:a0:b4:3d:64:8e:a2:bb:c7:8c:6f:1a:f1: 60:a7:97:0f:c5:01:80:9d:3a:91:54:7a:24:00:0b: 60:1a:72:25:c7:d6:93:6d:79:47:15:d7:56:c5:bc: 4d:ff:da:83:7f:b9:72:e5:68:b5:e0:44:97:87:cd: 0f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:06:E7:D7:0C:91:B9:3A:28:0E:BB:50:0E:15:1F:28:10:7D:1E:87 X509v3 Authority Key Identifier: keyid:FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ae:51:23:17:c0:2e:41:ff:ec:0c:fc:d9:8e:78:78:9f:e2: d0:58:25:0a:ec:29:79:24:54:c6:a1:78:3b:1d:12:e0:2c:3f: 03:ca:e6:d0:b4:68:44:b9:06:f7:12:5d:9d:f0:92:35:e2:d8: 57:08:8c:42:ed:88:b2:63:22:a4:77:b0:61:14:0b:cd:19:54: 79:02:e2:5a:da:b6:00:c1:b2:11:85:3e:34:ff:28:47:db:57: a4:48:b9:b4:f4:ad:37:62:c2:21:f8:3c:c2:08:18:52:ec:a5: b6:df:69:9a:52:11:d7:54:22:1a:ee:c4:98:13:67:9c:5b:34: 4a:34:ee:5b:c7:64:d7:ae:a8:a9:6e:dc:60:13:5a:2f:5b:3b: b4:5e:22:d0:47:09:9f:ef:f5:c3:41:ba:be:2c:12:aa:e5:5e: d1:d9:41:7a:dd:d5:0b:dc:da:aa:54:61:7e:40:84:c0:b9:dd: 82:4b:3d:34:7d:8d:ad:ba:5b:c7:ac:99:c5:d7:cb:a7:2f:16: 99:9f:a3:4a:d5:2f:83:2e:11:d2:fc:ce:01:78:98:ef:9a:93: 18:40:ca:b8:5d:84:71:c6:a7:19:00:6f:e5:c9:59:f0:a7:64: e4:8c:44:68:f9:9a:79:f5:60:35:4d:b0:1d:41:91:44:2b:d6: c9:e0:82:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CgGhj8N1EMonAaU9IBItMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMTE5NmQ5OGRlY2QzOGViMDNmNWYwNmI0OGU1NTZjNzRm MjMxZjQwHhcNMjUxMjA2MTkwMTA0WhcNMjUxMjA3MTkwMTA0WjAzMTEwLwYDVQQD Eyg0OTA2ZTdkNzBjOTFiOTNhMjgwZWJiNTAwZTE1MWYyODEwN2QxZTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttqy2wjJ/5msZs7sMtwiMKOuJiqJ qFm3McTVG+yaX1mMt0ClxG3JvCJ6GM+DoCADHsNBH+mnhd9S+90hlvtsA92S3/F5 QA9yQ57PWUqltkWPeU6lvuE3kIA2x/UTmwYIDMYjE0YjETcaOWaJBthYTJo2Kumi DAHbqRBrYgkjF9LE4bO45t857EwJaIJ/o5BuhICe8wvDDaFhd1+BVXTAWJQylTjr pQtoztc1M2cfVZwHJKyl0upbbXCEjU1X5WMMHI3XsWmgtD1kjqK7x4xvGvFgp5cP xQGAnTqRVHokAAtgGnIlx9aTbXlHFddWxbxN/9qDf7ly5Wi14ESXh80PjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkG59cMkbk6KA67UA4VHygQfR6HMB8GA1UdIwQY MBaAFP0RltmN7NOOsD9fBrSOVWx08jH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1JHVzJZM3MwNDZ3UDE4R3RJNVZiSFR5TWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS80ZDU2NjAtNTM2NC00NDU0LWE5YmUt NGY4OTAyYmZlMTcyLzEvX1JHVzJZM3MwNDZ3UDE4R3RJNVZiSFR5TWZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS80ZDU2NjAtNTM2NC00NDU0LWE5YmUtNGY4OTAyYmZlMTcy LzEvX1JHVzJZM3MwNDZ3UDE4R3RJNVZiSFR5TWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARK5RIxfA LkH/7Az82Y54eJ/i0FglCuwpeSRUxqF4Ox0S4Cw/A8rm0LRoRLkG9xJdnfCSNeLY VwiMQu2IsmMipHewYRQLzRlUeQLiWtq2AMGyEYU+NP8oR9tXpEi5tPStN2LCIfg8 wggYUuyltt9pmlIR11QiGu7EmBNnnFs0SjTuW8dk166oqW7cYBNaL1s7tF4i0EcJ n+/1w0G6viwSquVe0dlBet3VC9zaqlRhfkCEwLndgks9NH2Nrbpbx6yZxdfLpy8W mZ+jStUvgy4R0vzOAXiY75qTGEDKuF2EccanGQBv5clZ8Kdk5IxEaPmaefVgNU2w HUGRRCvWyeCCAw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:05:41 2025 by rpki-client