This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft File: w4Me3AugfH40q6cBw1c9jnKvGP4.mft (raw, json) Hash identifier: LBoebzIPwbqztcxNRz2QEyCraAlQEOC+hogcqJb3mu0= Subject key identifier: 36:36:01:B4:1C:0B:2E:84:A6:06:3C:F9:78:62:93:23:B7:64:DA:3D Authority key identifier: C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE Certificate issuer: /CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe Certificate serial: 019B2D0CC2BB7FFBB49758EA5D7BD05B56D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 16:02:49 +0000 Manifest this update: Wed 17 Dec 2025 16:02:49 +0000 Manifest next update: Thu 18 Dec 2025 16:02:49 +0000 Files and hashes: 1: R3ax-Z4NwERn9kiI-gjg5Xya12A.roa (hash: ffTm+IwpNw27nllrwwqn+t+2k278/G5pqNf7iK/QlhI=) 2: w4Me3AugfH40q6cBw1c9jnKvGP4.crl (hash: DmkTANoLwwqsk+VY72OSXz+KTBC63pRRrLEajB64urk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:c2:bb:7f:fb:b4:97:58:ea:5d:7b:d0:5b:56:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe Validity Not Before: Dec 17 16:02:49 2025 GMT Not After : Dec 18 16:02:49 2025 GMT Subject: CN=363601b41c0b2e84a6063cf978629323b764da3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:57:6d:4e:1e:73:fd:ec:59:5a:a7:38:a2:16: 42:b1:e6:80:06:34:d0:ca:71:ee:6b:6d:08:13:d7: 6c:ba:a2:79:1c:96:c5:f1:c7:53:ce:bb:01:ed:17: eb:ab:5c:bc:03:1e:47:c5:26:82:f2:f4:a1:4c:e9: 51:00:84:02:5f:59:9c:fd:78:11:06:11:5e:ee:d3: e1:21:e6:58:24:a7:f8:9c:92:95:d3:7d:a5:71:4c: 91:87:b3:37:7f:6a:6e:a8:ca:f2:68:8d:7f:e9:c6: fd:be:8b:ef:64:58:17:c8:70:72:de:3d:01:0c:2d: 62:29:92:7a:c5:c2:db:ca:69:8d:f5:bd:3d:e8:76: e9:02:23:fe:8e:24:e2:18:43:78:94:d7:1f:31:31: e4:f6:84:85:9f:2b:bf:f6:4a:4f:80:56:dd:38:29: 03:fe:bc:02:6a:89:23:e0:44:09:61:29:f3:c3:52: f9:b3:9b:cc:e2:a1:b8:0b:4e:53:a2:43:91:c4:e9: 84:79:dd:fe:ee:b1:c1:8e:67:81:2a:bb:a1:16:5c: 10:31:6a:dd:c2:47:3c:ea:fa:86:06:dd:3e:72:b5: 50:67:d4:c9:ff:61:cb:af:a0:c4:50:12:bb:f9:64: 29:f5:41:45:48:7c:ff:65:02:49:46:6c:07:56:ca: e7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:36:01:B4:1C:0B:2E:84:A6:06:3C:F9:78:62:93:23:B7:64:DA:3D X509v3 Authority Key Identifier: keyid:C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:4d:b0:74:aa:08:5c:59:e4:0a:83:89:1d:cc:c6:69:6e:fa: 87:1c:f2:f5:f6:f6:fa:b3:9f:32:04:6c:af:ad:3c:67:a6:88: 95:4c:d7:3e:40:49:3a:92:26:de:53:a6:a4:6f:0c:6d:a0:49: b5:5a:88:86:0f:39:5f:58:05:45:c9:9e:98:11:97:16:fd:ce: 7e:2d:2b:5e:a6:46:98:35:fa:f4:c5:05:8d:22:52:d8:98:e9: ba:46:9c:64:e9:05:9c:69:94:cd:d4:8e:20:c3:9b:42:42:db: 07:e5:97:69:29:91:51:07:73:10:37:d4:b3:f7:82:09:69:ba: 44:c0:18:96:13:7f:a4:26:6a:a5:17:1c:8c:e7:9e:cf:55:c6: 4e:a7:83:25:ee:ef:1f:ec:89:63:ee:4f:a7:2a:ba:7a:06:fe: 1c:e4:1f:0f:5f:d2:5f:ae:93:24:0c:8c:93:b5:03:fb:07:6a: ed:6f:7d:85:91:c5:1a:da:9c:9e:93:e8:15:20:aa:00:88:fe: bf:09:e8:54:5f:0f:9f:42:74:93:ea:14:0c:70:26:2e:da:1d: 5a:a4:35:11:10:bd:74:3d:c4:a0:c2:e7:41:26:20:8b:ff:37: 62:c1:00:e9:5a:e7:42:b4:67:5e:ee:8a:c4:43:0d:8b:db:13: c9:2a:c1:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDMK7f/u0l1jqXXvQW1bWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzODMxZWRjMGJhMDdjN2UzNGFiYTcwMWMzNTczZDhlNzJh ZjE4ZmUwHhcNMjUxMjE3MTYwMjQ5WhcNMjUxMjE4MTYwMjQ5WjAzMTEwLwYDVQQD EygzNjM2MDFiNDFjMGIyZTg0YTYwNjNjZjk3ODYyOTMyM2I3NjRkYTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1dtTh5z/exZWqc4ohZCseaABjTQ ynHua20IE9dsuqJ5HJbF8cdTzrsB7Rfrq1y8Ax5HxSaC8vShTOlRAIQCX1mc/XgR BhFe7tPhIeZYJKf4nJKV032lcUyRh7M3f2puqMryaI1/6cb9vovvZFgXyHBy3j0B DC1iKZJ6xcLbymmN9b096HbpAiP+jiTiGEN4lNcfMTHk9oSFnyu/9kpPgFbdOCkD /rwCaokj4EQJYSnzw1L5s5vM4qG4C05TokORxOmEed3+7rHBjmeBKruhFlwQMWrd wkc86vqGBt0+crVQZ9TJ/2HLr6DEUBK7+WQp9UFFSHz/ZQJJRmwHVsrnZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDY2AbQcCy6EpgY8+XhikyO3ZNo9MB8GA1UdIwQY MBaAFMODHtwLoHx+NKunAcNXPY5yrxj+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzRNZTNBdWdmSDQwcTZjQncxYzlqbkt2R1A0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83ZjEyNzUtMTJmYy00Mzk3LTllM2It ZWRmNmNhZDEyNDlkLzEvdzRNZTNBdWdmSDQwcTZjQncxYzlqbkt2R1A0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83ZjEyNzUtMTJmYy00Mzk3LTllM2ItZWRmNmNhZDEyNDlk LzEvdzRNZTNBdWdmSDQwcTZjQncxYzlqbkt2R1A0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACU2wdKoI XFnkCoOJHczGaW76hxzy9fb2+rOfMgRsr608Z6aIlUzXPkBJOpIm3lOmpG8MbaBJ tVqIhg85X1gFRcmemBGXFv3Ofi0rXqZGmDX69MUFjSJS2JjpukacZOkFnGmUzdSO IMObQkLbB+WXaSmRUQdzEDfUs/eCCWm6RMAYlhN/pCZqpRccjOeez1XGTqeDJe7v H+yJY+5Ppyq6egb+HOQfD1/SX66TJAyMk7UD+wdq7W99hZHFGtqcnpPoFSCqAIj+ vwnoVF8Pn0J0k+oUDHAmLtodWqQ1ERC9dD3EoMLnQSYgi/83YsEA6VrnQrRnXu6K xEMNi9sTySrBug== -----END CERTIFICATE-----Generated at Wed Dec 17 17:54:15 2025 by rpki-client