This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft File: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft (raw, json) Hash identifier: Ow6kEuvqHYpCRi17+B1tqIohVvrKmYiBnf9k8pQAhZU= Subject key identifier: 20:18:41:DE:5B:8E:E5:4D:E9:73:3E:A9:33:75:BD:1A:15:1C:5A:EC Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96 Certificate issuer: /CN=d70b07459e2f116fb5a97f11bae75c0db491c196 Certificate serial: 019AF35209DBF02EC60DE75CD746B6506318 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 11:00:31 +0000 Manifest this update: Sat 06 Dec 2025 11:00:31 +0000 Manifest next update: Sun 07 Dec 2025 11:00:31 +0000 Files and hashes: 1: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl (hash: t00kCbd7rxkyqyu4ut3POoPniYA9tn73RIR+n8sEOoE=) 2: s9vftAOB-g2w5mpIAbtd2ux_YeM.roa (hash: vWHWtXPoZqDrxtoN/353NMnYSKtaPj8wKrdcVBwN80A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:09:db:f0:2e:c6:0d:e7:5c:d7:46:b6:50:63:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196 Validity Not Before: Dec 6 11:00:31 2025 GMT Not After : Dec 7 11:00:31 2025 GMT Subject: CN=201841de5b8ee54de9733ea93375bd1a151c5aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b3:2e:f0:1f:89:4a:0a:66:62:fa:01:63:2e: 90:54:44:31:9d:fe:7e:15:98:c1:ef:c4:aa:8c:0e: b8:16:c3:4a:17:eb:5a:3f:38:0b:43:47:b0:5d:07: 2f:c0:92:3e:6e:28:c3:07:ac:67:a3:d2:4a:de:ff: 3c:75:58:ef:93:06:a9:94:db:62:83:ab:2b:c8:57: 3a:32:39:c9:be:d8:00:e0:b9:d7:ab:a9:cd:c0:9e: c9:1f:23:4c:59:6d:3f:ee:6a:6c:22:76:76:64:7e: ea:09:e4:7d:33:e9:ad:6e:5f:78:28:c8:f3:a1:86: 50:ea:69:a6:5d:fb:cf:7e:8a:94:6f:bf:e6:ee:ce: 89:11:b3:f8:50:35:fe:c0:b0:00:44:9b:b5:9a:8a: 1e:25:e2:4b:ef:dc:c3:ea:39:d2:25:14:3e:c2:fb: e0:bd:ee:ef:a1:72:4d:74:6d:de:94:4f:b5:31:aa: 8f:ac:84:3c:14:17:aa:e0:3e:89:be:d5:f6:bf:2a: 96:52:7b:75:f6:18:67:ce:ba:75:ed:76:a5:6f:3e: 93:6f:2a:2e:7d:4e:85:30:28:69:d1:1d:a3:d1:a7: e3:6b:30:11:d4:0d:41:a7:ac:4a:40:a9:0b:15:ea: ff:c5:a6:77:4d:c4:b3:5a:5c:0f:95:b0:a0:38:b7: 63:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:18:41:DE:5B:8E:E5:4D:E9:73:3E:A9:33:75:BD:1A:15:1C:5A:EC X509v3 Authority Key Identifier: keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:05:8e:be:79:82:04:a1:10:8d:e1:90:fb:72:c8:30:1c:50: 6f:53:eb:82:01:e3:97:a7:ab:a2:e6:d6:5b:97:bc:d1:07:5b: fc:11:4d:4b:78:02:1b:d1:bb:57:11:0c:09:17:ba:e1:7d:ed: bf:65:03:51:62:ad:0b:f6:b2:bb:1d:84:5f:d6:9f:ac:d3:28: b5:49:09:b9:39:53:b7:15:66:b6:9a:75:81:a4:26:f3:ea:9b: bb:96:16:d1:6d:aa:77:52:0f:86:53:72:62:3d:f6:76:79:40: 10:06:c6:6b:22:4c:c5:58:a2:c0:34:d9:62:d8:de:79:d2:35: 21:af:80:81:aa:4d:03:32:1a:67:78:99:9f:d1:50:3a:6b:ee: e0:b6:0c:dc:d0:72:cb:e0:1e:ce:6f:b4:a3:c2:95:4e:a5:a4: 7c:7e:14:ad:5b:9e:92:48:98:74:12:30:cc:46:45:13:21:8d: f7:52:4b:67:ae:46:9a:86:bb:93:8d:60:ef:0a:cf:7b:5c:10: 31:f3:90:42:4f:54:9e:f7:9e:c4:06:91:98:11:52:0d:ae:38: ab:38:97:9a:d0:aa:0c:b5:f5:a2:bf:64:8c:83:fa:94:32:56: a9:de:82:2c:d1:08:fe:39:b6:a7:89:c3:a5:55:dd:b2:ae:3e: 94:56:86:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUgnb8C7GDedc10a2UGMYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MGIwNzQ1OWUyZjExNmZiNWE5N2YxMWJhZTc1YzBkYjQ5 MWMxOTYwHhcNMjUxMjA2MTEwMDMxWhcNMjUxMjA3MTEwMDMxWjAzMTEwLwYDVQQD EygyMDE4NDFkZTViOGVlNTRkZTk3MzNlYTkzMzc1YmQxYTE1MWM1YWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLMu8B+JSgpmYvoBYy6QVEQxnf5+ FZjB78SqjA64FsNKF+taPzgLQ0ewXQcvwJI+bijDB6xno9JK3v88dVjvkwaplNti g6sryFc6MjnJvtgA4LnXq6nNwJ7JHyNMWW0/7mpsInZ2ZH7qCeR9M+mtbl94KMjz oYZQ6mmmXfvPfoqUb7/m7s6JEbP4UDX+wLAARJu1mooeJeJL79zD6jnSJRQ+wvvg ve7voXJNdG3elE+1MaqPrIQ8FBeq4D6JvtX2vyqWUnt19hhnzrp17Xalbz6Tbyou fU6FMChp0R2j0afjazAR1A1Bp6xKQKkLFer/xaZ3TcSzWlwPlbCgOLdjiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAYQd5bjuVN6XM+qTN1vRoVHFrsMB8GA1UdIwQY MBaAFNcLB0WeLxFvtal/EbrnXA20kcGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdzSFJaNHZFVy0xcVg4UnV1ZGNEYlNSd1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kMDZmNWYtYWQ2OS00ODg1LThjNzEt YWFjZTcwYWJjNmEwLzEvMXdzSFJaNHZFVy0xcVg4UnV1ZGNEYlNSd1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9kMDZmNWYtYWQ2OS00ODg1LThjNzEtYWFjZTcwYWJjNmEw LzEvMXdzSFJaNHZFVy0xcVg4UnV1ZGNEYlNSd1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwWOvnmC BKEQjeGQ+3LIMBxQb1PrggHjl6eroubWW5e80Qdb/BFNS3gCG9G7VxEMCRe64X3t v2UDUWKtC/ayux2EX9afrNMotUkJuTlTtxVmtpp1gaQm8+qbu5YW0W2qd1IPhlNy Yj32dnlAEAbGayJMxViiwDTZYtjeedI1Ia+AgapNAzIaZ3iZn9FQOmvu4LYM3NBy y+Aezm+0o8KVTqWkfH4UrVuekkiYdBIwzEZFEyGN91JLZ65Gmoa7k41g7wrPe1wQ MfOQQk9UnveexAaRmBFSDa44qziXmtCqDLX1or9kjIP6lDJWqd6CLNEI/jm2p4nD pVXdsq4+lFaGEg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:11:08 2025 by rpki-client