This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft File: MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft (raw, json) Hash identifier: Llr0gto18E4fFx4pJ/Y/PfYmqXAq00MOD8+IB04mzeM= Subject key identifier: 6E:D3:45:FC:90:C2:DF:DC:F4:EF:79:8E:70:2C:97:CE:B7:6E:82:09 Authority key identifier: 31:6B:3F:33:4E:26:91:10:69:0E:9E:C6:A7:A5:85:DF:E4:FE:87:04 Certificate issuer: /CN=316b3f334e269110690e9ec6a7a585dfe4fe8704 Certificate serial: 019B318CFD4A96A59267382215D0F43DB70F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft Manifest number: 1034 Signing time: Thu 18 Dec 2025 13:01:22 +0000 Manifest this update: Thu 18 Dec 2025 13:01:22 +0000 Manifest next update: Fri 19 Dec 2025 13:01:22 +0000 Files and hashes: 1: MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl (hash: +bQsnHFRFaYa2cAb1pa5X2dGrdrW2GAMct8Voow+JSI=) 2: jlPrG3yw9VWSwdIgD6U56n3FJO4.roa (hash: //BBruzTksW7mSOBdLHpnW4EtV41ZFbnLnxHoJuolZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:fd:4a:96:a5:92:67:38:22:15:d0:f4:3d:b7:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=316b3f334e269110690e9ec6a7a585dfe4fe8704 Validity Not Before: Dec 18 13:01:22 2025 GMT Not After : Dec 19 13:01:22 2025 GMT Subject: CN=6ed345fc90c2dfdcf4ef798e702c97ceb76e8209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:48:b9:46:cd:36:97:a9:b1:2d:43:a5:ba:c0: 0e:98:0f:ac:66:11:30:c9:22:a2:1e:c2:fb:aa:0f: 30:b9:3f:7d:eb:1f:67:42:23:36:fa:4f:98:2b:7f: b5:07:2b:6a:8c:d1:6d:d2:a3:03:bf:d4:c8:06:fb: a5:4b:1c:7f:3a:7f:c4:0f:79:ea:ea:e4:c1:43:7e: 82:ba:f4:11:10:a7:d1:3e:9e:ba:ed:93:0f:23:fc: d2:96:8f:d4:6b:eb:f3:81:08:93:57:04:c8:28:ba: 4d:62:05:d0:7a:ff:ab:a6:9b:35:46:07:46:27:75: d4:a3:64:ad:7b:34:01:d0:ac:3d:4e:a2:b7:e8:7c: e1:55:95:d6:35:13:eb:da:6d:d3:68:7a:0a:51:be: 45:71:27:17:0b:25:62:b8:1f:e9:a3:24:2f:11:d5: e4:02:f2:01:6d:7c:04:4f:a6:dc:cd:6b:88:69:0a: 0c:00:8c:eb:fc:6a:9b:43:ba:9a:61:1a:a4:45:8b: 1a:fb:1e:1f:bb:39:2e:48:9c:4f:28:4d:68:e9:07: b2:e5:76:02:3d:71:af:38:10:d8:87:f8:3d:00:e7: 7f:fb:85:1a:1c:2d:b1:e4:94:de:79:22:4c:49:45: 0f:57:78:04:4b:f2:95:06:d3:97:5b:80:23:12:f5: 64:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D3:45:FC:90:C2:DF:DC:F4:EF:79:8E:70:2C:97:CE:B7:6E:82:09 X509v3 Authority Key Identifier: keyid:31:6B:3F:33:4E:26:91:10:69:0E:9E:C6:A7:A5:85:DF:E4:FE:87:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:48:f5:47:84:1f:70:7f:fb:9e:58:8c:c8:f8:f1:f5:ff:cc: 3d:8a:4e:3d:40:c3:02:4a:5c:c4:62:66:f6:44:10:cc:14:5f: 50:2c:6c:77:6c:d8:e1:d0:a3:ae:48:13:2a:87:2f:d3:92:63: de:f9:1c:70:91:b2:2d:01:81:b4:d9:7c:9f:9e:cc:bf:a3:ba: 82:7f:ed:79:c8:5e:97:72:3a:ac:34:f2:76:ca:f2:3d:31:d5: f1:94:fd:e4:46:e7:b0:e4:be:f8:8d:7b:eb:8b:6f:a7:1c:7c: 4c:fe:4c:27:9d:41:00:65:6d:06:99:9c:3f:cb:04:b3:c8:30: 1b:70:9d:50:49:70:bc:56:30:3f:dd:4e:a6:21:20:7b:ff:0f: a0:f0:23:ed:51:a6:cf:54:27:86:ce:ae:28:f7:04:df:62:04: dc:85:08:6c:05:fc:9e:0b:95:f5:f1:e7:1e:0a:23:86:9d:93: a3:6f:3b:93:53:4b:ed:84:da:c5:6c:21:0e:1e:86:41:e0:f7: 9f:0f:7d:fb:55:5f:e1:19:3d:bb:bb:c6:21:12:02:92:0c:bf: f6:e2:42:cc:f9:05:e3:4a:1a:6e:2b:86:3a:9a:af:d9:ec:df: 1e:40:f1:26:8a:3e:05:a7:df:bf:39:55:5e:c9:aa:1f:96:4b: 85:31:ad:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjP1KlqWSZzgiFdD0PbcPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNmIzZjMzNGUyNjkxMTA2OTBlOWVjNmE3YTU4NWRmZTRm ZTg3MDQwHhcNMjUxMjE4MTMwMTIyWhcNMjUxMjE5MTMwMTIyWjAzMTEwLwYDVQQD Eyg2ZWQzNDVmYzkwYzJkZmRjZjRlZjc5OGU3MDJjOTdjZWI3NmU4MjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0i5Rs02l6mxLUOlusAOmA+sZhEw ySKiHsL7qg8wuT996x9nQiM2+k+YK3+1BytqjNFt0qMDv9TIBvulSxx/On/ED3nq 6uTBQ36CuvQREKfRPp667ZMPI/zSlo/Ua+vzgQiTVwTIKLpNYgXQev+rpps1RgdG J3XUo2StezQB0Kw9TqK36HzhVZXWNRPr2m3TaHoKUb5FcScXCyViuB/poyQvEdXk AvIBbXwET6bczWuIaQoMAIzr/GqbQ7qaYRqkRYsa+x4fuzkuSJxPKE1o6Qey5XYC PXGvOBDYh/g9AOd/+4UaHC2x5JTeeSJMSUUPV3gES/KVBtOXW4AjEvVkTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7TRfyQwt/c9O95jnAsl863boIJMB8GA1UdIwQY MBaAFDFrPzNOJpEQaQ6exqelhd/k/ocEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVdzX00wNG1rUkJwRHA3R3A2V0YzLVQtaHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84Y2NkNmQtMTM0Yy00ZWJiLWFlZmMt ZWM2MDM5MjY2MDBiLzEvTVdzX00wNG1rUkJwRHA3R3A2V0YzLVQtaHdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84Y2NkNmQtMTM0Yy00ZWJiLWFlZmMtZWM2MDM5MjY2MDBi LzEvTVdzX00wNG1rUkJwRHA3R3A2V0YzLVQtaHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkj1R4Qf cH/7nliMyPjx9f/MPYpOPUDDAkpcxGJm9kQQzBRfUCxsd2zY4dCjrkgTKocv05Jj 3vkccJGyLQGBtNl8n57Mv6O6gn/techel3I6rDTydsryPTHV8ZT95EbnsOS++I17 64tvpxx8TP5MJ51BAGVtBpmcP8sEs8gwG3CdUElwvFYwP91OpiEge/8PoPAj7VGm z1Qnhs6uKPcE32IE3IUIbAX8nguV9fHnHgojhp2To287k1NL7YTaxWwhDh6GQeD3 nw99+1Vf4Rk9u7vGIRICkgy/9uJCzPkF40oabiuGOpqv2ezfHkDxJoo+BaffvzlV XsmqH5ZLhTGtKA== -----END CERTIFICATE-----Generated at Thu Dec 18 15:26:56 2025 by rpki-client