This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft File: w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft (raw, json) Hash identifier: Gs4ZXSFsU2NkOTgVy111UrFwR+TwHmBxA/5B8lpy3go= Subject key identifier: E8:70:98:37:94:F8:4E:6C:AD:0F:6F:6B:D6:80:81:C8:E0:85:72:F5 Authority key identifier: C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7 Certificate issuer: /CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7 Certificate serial: 019AF1D1EC05C2E2F94A4204BD58AE30DB61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft Manifest number: 0D3E Signing time: Sat 06 Dec 2025 04:00:57 +0000 Manifest this update: Sat 06 Dec 2025 04:00:57 +0000 Manifest next update: Sun 07 Dec 2025 04:00:57 +0000 Files and hashes: 1: fZsTaHsMiRTOQx_qTx-PLjSdXVE.roa (hash: 7tvMPnX4kI566+vmNqApn9A48bhDZNJ8LvI46Pf6Yd0=) 2: w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl (hash: +AAaR0fcUuzu2ocn0c8Fmp0HaKud9L/RXW8u+w/CYMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ec:05:c2:e2:f9:4a:42:04:bd:58:ae:30:db:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7 Validity Not Before: Dec 6 04:00:57 2025 GMT Not After : Dec 7 04:00:57 2025 GMT Subject: CN=e870983794f84e6cad0f6f6bd68081c8e08572f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3f:ce:b3:2a:6f:56:90:81:64:8b:a1:fd:e7: 63:04:70:bd:fd:af:06:ff:ab:85:b3:6f:ee:59:04: 56:39:f5:c7:31:a7:fc:43:90:e1:b7:0f:47:89:35: f6:02:8e:d0:89:4f:0e:9f:ef:7c:65:1f:08:db:24: 29:41:52:f8:00:e4:b7:cd:e5:d5:3a:74:5b:07:d5: 74:6a:b4:23:15:6d:58:6c:35:dc:8c:7a:f6:a3:ca: b1:0a:df:7a:72:f6:06:1d:45:2a:2d:36:a4:d9:1c: f9:45:cd:aa:72:d3:5c:8c:a7:4b:43:8f:91:f9:d0: 9d:bf:5b:a2:c4:1b:42:94:da:43:f7:82:9a:82:7e: 84:16:19:e0:77:8c:bc:35:ef:e2:15:b2:16:c8:90: e8:a0:26:66:9c:d1:95:87:34:be:73:fc:d1:3a:84: 41:8b:e5:fa:81:fc:15:2b:6d:0f:31:68:11:72:18: 08:44:14:14:7d:59:61:7f:81:53:d3:e3:f2:c4:00: 65:04:fe:94:74:6e:e8:fc:8f:7d:60:89:79:fd:56: 13:6f:92:e0:56:1b:22:5f:9a:37:cf:fc:4c:40:7c: e1:37:41:32:19:d6:fc:18:3b:9a:b2:d6:ed:dc:f9: 1a:c6:cb:e0:47:b3:b2:a9:eb:d4:e6:0a:7d:c6:cc: bd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:70:98:37:94:F8:4E:6C:AD:0F:6F:6B:D6:80:81:C8:E0:85:72:F5 X509v3 Authority Key Identifier: keyid:C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b1:33:7c:4c:a5:5b:ab:12:32:c6:35:00:a4:aa:9f:f1:a7: 59:a6:fe:20:06:64:4a:68:64:18:51:ad:cb:70:9b:6f:9d:59: 2a:a9:23:04:a8:23:cf:39:c6:32:6c:f9:39:dd:27:6b:9c:99: eb:c7:5b:79:53:54:9d:10:82:62:de:96:1f:de:02:3a:0f:a5: 2b:5b:ef:19:e3:d1:b9:19:f9:e9:4f:fa:3b:b7:17:19:7d:9b: c4:d7:cc:d6:39:fa:01:ed:2e:e1:18:b9:e0:84:1d:85:67:79: 1f:bb:83:f3:69:f3:93:e8:4b:da:5a:ab:f5:bd:fb:b3:20:b7: d9:e5:0f:d1:dc:e2:90:6b:ef:ce:79:15:04:58:df:f1:36:bd: 31:56:f0:91:05:3a:ac:7a:1f:48:cb:32:a5:eb:0e:7b:8d:93: 46:80:a5:79:68:51:6c:f1:61:8b:d5:ff:47:a9:d5:67:0d:44: a0:9e:f4:fb:49:94:c9:dd:7f:84:75:2e:fe:af:cb:fe:36:db: 11:f5:c6:ca:91:a4:09:42:80:02:13:91:74:96:b8:04:ce:dc: 05:de:bb:7d:62:1a:28:6c:c4:c2:18:d2:5b:6f:e8:a7:f7:f2: ff:f2:da:9a:ce:ff:45:fb:8f:59:48:12:dc:02:ff:0a:29:45: 2c:05:b5:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ewFwuL5SkIEvViuMNthMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYjM5NjJhZWU0ZThhZTRjNmNjZDg5NzllNTM5ODAyZWEw ZTRjZTcwHhcNMjUxMjA2MDQwMDU3WhcNMjUxMjA3MDQwMDU3WjAzMTEwLwYDVQQD EyhlODcwOTgzNzk0Zjg0ZTZjYWQwZjZmNmJkNjgwODFjOGUwODU3MmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D/OsypvVpCBZIuh/edjBHC9/a8G /6uFs2/uWQRWOfXHMaf8Q5Dhtw9HiTX2Ao7QiU8On+98ZR8I2yQpQVL4AOS3zeXV OnRbB9V0arQjFW1YbDXcjHr2o8qxCt96cvYGHUUqLTak2Rz5Rc2qctNcjKdLQ4+R +dCdv1uixBtClNpD94Kagn6EFhngd4y8Ne/iFbIWyJDooCZmnNGVhzS+c/zROoRB i+X6gfwVK20PMWgRchgIRBQUfVlhf4FT0+PyxABlBP6UdG7o/I99YIl5/VYTb5Lg VhsiX5o3z/xMQHzhN0EyGdb8GDuastbt3PkaxsvgR7OyqevU5gp9xsy9hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhwmDeU+E5srQ9va9aAgcjghXL1MB8GA1UdIwQY MBaAFMOzliruTorkxszYl55TmALqDkznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzdPV0t1NU9pdVRHek5pWG5sT1lBdW9PVE9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yNjQ1YTctNTMyYy00ZmExLWJjZGQt ZWE1ZGFkOGI0NzY1LzEvdzdPV0t1NU9pdVRHek5pWG5sT1lBdW9PVE9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8yNjQ1YTctNTMyYy00ZmExLWJjZGQtZWE1ZGFkOGI0NzY1 LzEvdzdPV0t1NU9pdVRHek5pWG5sT1lBdW9PVE9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrEzfEyl W6sSMsY1AKSqn/GnWab+IAZkSmhkGFGty3Cbb51ZKqkjBKgjzznGMmz5Od0na5yZ 68dbeVNUnRCCYt6WH94COg+lK1vvGePRuRn56U/6O7cXGX2bxNfM1jn6Ae0u4Ri5 4IQdhWd5H7uD82nzk+hL2lqr9b37syC32eUP0dzikGvvznkVBFjf8Ta9MVbwkQU6 rHofSMsypesOe42TRoCleWhRbPFhi9X/R6nVZw1EoJ70+0mUyd1/hHUu/q/L/jbb EfXGypGkCUKAAhORdJa4BM7cBd67fWIaKGzEwhjSW2/op/fy//Lams7/RfuPWUgS 3AL/CilFLAW1Bg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:20 2025 by rpki-client