This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft File: w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft (raw, json) Hash identifier: SH+Ni7qWxW56Q/EZFWjUJYitYDFX1eHzo+1klAJsyEQ= Subject key identifier: 03:39:06:29:46:57:B1:31:39:22:CF:95:6F:9D:01:35:6C:66:11:B2 Authority key identifier: C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84 Certificate issuer: /CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84 Certificate serial: 019B3BA232216ECC1D77C07B2825852BA283 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft Manifest number: 0746 Signing time: Sat 20 Dec 2025 12:00:43 +0000 Manifest this update: Sat 20 Dec 2025 12:00:43 +0000 Manifest next update: Sun 21 Dec 2025 12:00:43 +0000 Files and hashes: 1: w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl (hash: n35nTgYx90TZjWhqNWq1lrVP/EMDjAdzlr2qgOtE+AM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:32:21:6e:cc:1d:77:c0:7b:28:25:85:2b:a2:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84 Validity Not Before: Dec 20 12:00:43 2025 GMT Not After : Dec 21 12:00:43 2025 GMT Subject: CN=033906294657b1313922cf956f9d01356c6611b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:ad:a8:ac:29:d4:6c:c9:74:06:6c:58:47: 9b:b1:ed:40:40:ba:bb:71:c6:06:76:f3:86:88:83: 46:fb:a5:5b:43:51:1c:86:ea:85:85:a5:44:b4:1f: 9e:b9:86:0c:f8:ef:34:a0:c0:a5:59:8d:3a:2f:93: 4c:c7:73:36:9a:f7:d7:e3:60:dc:e5:23:eb:a6:01: ab:32:c1:b4:05:fc:eb:a0:ec:7c:3c:a5:5c:8a:f4: 2c:8b:87:79:7d:ae:1e:aa:2b:64:ee:f8:32:73:4b: e5:4f:76:4d:e7:d1:68:85:e3:94:01:f4:36:4b:e2: 8a:65:2e:ad:e8:df:ab:9b:d7:ce:f8:9f:02:56:6b: ff:e7:c7:59:c2:63:f6:bb:4f:b4:e1:08:e5:8c:b2: b9:79:66:0e:c5:cf:90:d8:b6:49:de:35:a1:24:e8: 41:a3:54:33:10:01:5c:88:09:53:14:96:8d:62:67: 81:5a:b8:29:ca:9a:ff:99:43:ea:c8:e7:fc:86:d0: bd:93:2f:f6:8e:df:d2:de:e2:e0:52:67:27:86:63: 5e:77:a3:b7:39:07:2e:8a:d9:d2:9b:c3:77:16:37: 97:68:6f:21:7e:a1:22:06:3d:da:b4:a5:e8:6b:2e: 37:07:4f:a5:2b:c4:52:09:89:11:77:de:1f:73:d3: bb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:39:06:29:46:57:B1:31:39:22:CF:95:6F:9D:01:35:6C:66:11:B2 X509v3 Authority Key Identifier: keyid:C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:24:af:8f:3e:5a:88:96:9e:88:49:ed:50:5b:13:26:fc:19: a8:85:fc:5b:8a:38:8c:39:95:fd:ea:88:55:4b:fb:a9:be:c5: ab:e2:8d:89:41:24:84:e9:0d:c3:d4:58:90:87:f6:bb:0b:88: f2:90:ef:bf:0a:75:23:dc:53:d1:28:c9:aa:68:92:06:70:38: be:f0:c3:88:55:ea:ad:29:9f:e1:b4:c4:81:11:f5:8d:66:9b: 93:ba:f1:b1:af:05:b4:b5:95:86:91:de:fc:49:dc:c8:60:38: e4:73:1d:2e:a9:41:4a:2d:fd:ef:03:92:3e:22:c5:eb:e6:59: 63:55:32:af:d8:9d:e6:e6:90:15:ae:b5:59:24:04:43:16:01: 7b:c4:1b:0b:1a:12:7d:9f:cc:30:6e:3c:81:9f:d3:af:40:d8: 0d:38:84:fa:c2:d1:dd:60:4c:12:bf:a0:5c:56:8a:49:a8:0a: be:f6:0d:b3:10:bd:02:08:6a:d8:42:c6:84:c2:b1:c9:19:5c: 01:2d:53:2b:35:a3:4b:fd:46:39:c8:5e:bd:72:83:47:40:9c: 27:3c:5c:ed:60:df:a5:20:4e:2c:9e:4f:ab:0e:99:79:5e:02: 40:f8:bb:13:1f:a8:39:bb:e1:95:28:92:7c:ed:52:f8:71:41: 9b:05:39:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ojIhbswdd8B7KCWFK6KDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYmMyZDJmNjgxN2I5NGMyNmFlZmRkODlmZjk0M2E4OGYz ZjFjODQwHhcNMjUxMjIwMTIwMDQzWhcNMjUxMjIxMTIwMDQzWjAzMTEwLwYDVQQD EygwMzM5MDYyOTQ2NTdiMTMxMzkyMmNmOTU2ZjlkMDEzNTZjNjYxMWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM2tqKwp1GzJdAZsWEebse1AQLq7 ccYGdvOGiING+6VbQ1EchuqFhaVEtB+euYYM+O80oMClWY06L5NMx3M2mvfX42Dc 5SPrpgGrMsG0BfzroOx8PKVcivQsi4d5fa4eqitk7vgyc0vlT3ZN59FoheOUAfQ2 S+KKZS6t6N+rm9fO+J8CVmv/58dZwmP2u0+04QjljLK5eWYOxc+Q2LZJ3jWhJOhB o1QzEAFciAlTFJaNYmeBWrgpypr/mUPqyOf8htC9ky/2jt/S3uLgUmcnhmNed6O3 OQcuitnSm8N3FjeXaG8hfqEiBj3atKXoay43B0+lK8RSCYkRd94fc9O7ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAM5BilGV7ExOSLPlW+dATVsZhGyMB8GA1UdIwQY MBaAFMO8LS9oF7lMJq792J/5Q6iPPxyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzd3dEwyZ1h1VXdtcnYzWW5fbERxSThfSElRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lNTRiZjktNmI1NS00YzNjLWFhNTAt MTUzZWVmZTcwY2Y2LzEvdzd3dEwyZ1h1VXdtcnYzWW5fbERxSThfSElRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9lNTRiZjktNmI1NS00YzNjLWFhNTAtMTUzZWVmZTcwY2Y2 LzEvdzd3dEwyZ1h1VXdtcnYzWW5fbERxSThfSElRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCSvjz5a iJaeiEntUFsTJvwZqIX8W4o4jDmV/eqIVUv7qb7Fq+KNiUEkhOkNw9RYkIf2uwuI 8pDvvwp1I9xT0SjJqmiSBnA4vvDDiFXqrSmf4bTEgRH1jWabk7rxsa8FtLWVhpHe /EncyGA45HMdLqlBSi397wOSPiLF6+ZZY1Uyr9id5uaQFa61WSQEQxYBe8QbCxoS fZ/MMG48gZ/Tr0DYDTiE+sLR3WBMEr+gXFaKSagKvvYNsxC9Aghq2ELGhMKxyRlc AS1TKzWjS/1GOchevXKDR0CcJzxc7WDfpSBOLJ5Pqw6ZeV4CQPi7Ex+oObvhlSiS fO1S+HFBmwU5dw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:50:47 2025 by rpki-client