This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft File: MW2V2INsHxFqce4h3sD_Zx4eBw0.mft (raw, json) Hash identifier: DakuQJ9LzeFYfqGogksRBnudia2i/zl4WAzp7hAjKPs= Subject key identifier: 07:BD:71:D4:4A:66:72:0C:5E:56:08:60:8F:25:36:7A:9E:FF:BC:B4 Authority key identifier: 31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D Certificate issuer: /CN=316d95d8836c1f116a71ee21dec0ff671e1e070d Certificate serial: 019AF49C4B3A021D52511F8995E2BED21CA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft Manifest number: 0E43 Signing time: Sat 06 Dec 2025 17:01:14 +0000 Manifest this update: Sat 06 Dec 2025 17:01:14 +0000 Manifest next update: Sun 07 Dec 2025 17:01:14 +0000 Files and hashes: 1: MW2V2INsHxFqce4h3sD_Zx4eBw0.crl (hash: Xj+8+6JHAQEDS6aTAFkmOj+jaBcSj9ZivvIbmnhPGG4=) 2: NaSNw-5nplSi1oWgCIXAtq-282g.roa (hash: PHVRipc0hRgzJt/VWrGp9MNvQSbNc+wyfThzb/6H1hk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:4b:3a:02:1d:52:51:1f:89:95:e2:be:d2:1c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=316d95d8836c1f116a71ee21dec0ff671e1e070d Validity Not Before: Dec 6 17:01:14 2025 GMT Not After : Dec 7 17:01:14 2025 GMT Subject: CN=07bd71d44a66720c5e5608608f25367a9effbcb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f2:79:60:e4:77:fb:73:c5:6d:7f:37:41:c1: 60:a7:18:bd:b3:b0:e6:57:51:cb:32:13:37:54:91: 56:ca:c0:4b:81:a2:7c:0e:78:2a:ca:56:2f:1a:78: 1b:e8:43:b9:04:6e:33:85:f0:8c:0b:8f:f9:72:17: c7:0b:22:7d:5c:e1:ca:22:9d:55:be:50:a3:2c:82: 12:49:d1:c7:aa:07:ce:2d:3c:0c:de:8a:e3:8c:ae: 37:4c:9f:5b:27:9f:04:34:64:c9:16:dd:26:f5:fc: 0b:9f:b6:93:f9:da:96:f5:68:97:51:82:78:ad:a7: ce:55:7d:fe:93:92:eb:e8:3d:a9:e2:72:9b:f6:d8: 26:51:e9:73:26:89:0f:af:43:88:80:0c:25:90:2b: aa:5f:68:2b:93:34:e9:0e:3b:86:e7:ef:bf:40:1b: b0:78:bc:06:c7:08:3f:fa:56:d3:2e:64:ea:f2:31: 7d:d1:ff:99:85:7c:08:97:26:56:65:31:e3:7f:3f: 68:7d:18:07:4c:54:1b:4f:15:47:b2:46:02:1b:e6: f0:30:57:2d:0b:f7:ee:2a:62:13:1e:7e:92:92:40: c1:16:a0:d5:3a:1f:c2:f9:6b:d8:5c:c7:20:61:b5: ff:e6:07:cd:2a:19:a1:03:cf:42:1f:3a:1b:f1:63: f1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BD:71:D4:4A:66:72:0C:5E:56:08:60:8F:25:36:7A:9E:FF:BC:B4 X509v3 Authority Key Identifier: keyid:31:6D:95:D8:83:6C:1F:11:6A:71:EE:21:DE:C0:FF:67:1E:1E:07:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW2V2INsHxFqce4h3sD_Zx4eBw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6d7d65-f215-42f8-9a5a-123720bfe746/1/MW2V2INsHxFqce4h3sD_Zx4eBw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:53:21:df:10:8e:75:6a:eb:29:73:3d:5d:b1:32:71:47:0d: 17:d9:8d:f2:1e:44:66:5a:7b:f0:2b:cc:7a:cc:8a:33:ba:1c: de:0e:bc:21:c7:91:c8:9a:bc:ba:c9:e4:7a:13:63:c0:7b:5c: ce:62:1e:5f:47:9d:0c:12:ee:89:ac:e3:23:4f:18:fc:53:18: 01:20:0f:ae:65:ac:ce:56:88:39:23:c6:7d:b7:21:ff:8b:79: ea:64:37:87:78:39:4a:29:42:d8:3e:cf:99:7c:9f:10:d8:7f: e4:62:a8:51:fe:fd:d4:3d:f8:10:46:82:de:02:5b:1b:b6:be: 50:19:8b:c9:b9:58:52:dd:d4:93:ff:39:e9:9b:14:56:0c:e7: 9e:36:18:5f:b0:fd:cf:b6:c0:dd:b7:90:8a:d7:d5:1d:98:c9: f2:f1:b3:6d:67:50:13:d4:04:f3:dd:a2:0e:12:ea:d8:22:28: b3:9f:b9:0b:e1:ba:96:4b:2e:00:4d:9b:8e:6c:65:9a:bf:7d: ba:0d:da:c4:fc:b4:a7:44:27:9a:a2:b5:71:ba:a4:f3:a3:95: c7:f9:4d:82:fd:9c:47:17:0e:9b:d4:14:55:63:b4:df:d1:d4: 81:45:9f:a9:aa:e8:e6:1a:1c:9a:5a:90:77:db:42:a1:f1:67: e0:20:59:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nEs6Ah1SUR+JleK+0hyjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNmQ5NWQ4ODM2YzFmMTE2YTcxZWUyMWRlYzBmZjY3MWUx ZTA3MGQwHhcNMjUxMjA2MTcwMTE0WhcNMjUxMjA3MTcwMTE0WjAzMTEwLwYDVQQD EygwN2JkNzFkNDRhNjY3MjBjNWU1NjA4NjA4ZjI1MzY3YTllZmZiY2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/J5YOR3+3PFbX83QcFgpxi9s7Dm V1HLMhM3VJFWysBLgaJ8DngqylYvGngb6EO5BG4zhfCMC4/5chfHCyJ9XOHKIp1V vlCjLIISSdHHqgfOLTwM3orjjK43TJ9bJ58ENGTJFt0m9fwLn7aT+dqW9WiXUYJ4 rafOVX3+k5Lr6D2p4nKb9tgmUelzJokPr0OIgAwlkCuqX2grkzTpDjuG5++/QBuw eLwGxwg/+lbTLmTq8jF90f+ZhXwIlyZWZTHjfz9ofRgHTFQbTxVHskYCG+bwMFct C/fuKmITHn6SkkDBFqDVOh/C+WvYXMcgYbX/5gfNKhmhA89CHzob8WPxYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAe9cdRKZnIMXlYIYI8lNnqe/7y0MB8GA1UdIwQY MBaAFDFtldiDbB8RanHuId7A/2ceHgcNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVcyVjJJTnNIeEZxY2U0aDNzRF9aeDRlQncwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82ZDdkNjUtZjIxNS00MmY4LTlhNWEt MTIzNzIwYmZlNzQ2LzEvTVcyVjJJTnNIeEZxY2U0aDNzRF9aeDRlQncwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC82ZDdkNjUtZjIxNS00MmY4LTlhNWEtMTIzNzIwYmZlNzQ2 LzEvTVcyVjJJTnNIeEZxY2U0aDNzRF9aeDRlQncwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVMh3xCO dWrrKXM9XbEycUcNF9mN8h5EZlp78CvMesyKM7oc3g68IceRyJq8usnkehNjwHtc zmIeX0edDBLuiazjI08Y/FMYASAPrmWszlaIOSPGfbch/4t56mQ3h3g5SilC2D7P mXyfENh/5GKoUf791D34EEaC3gJbG7a+UBmLyblYUt3Uk/856ZsUVgznnjYYX7D9 z7bA3beQitfVHZjJ8vGzbWdQE9QE892iDhLq2CIos5+5C+G6lksuAE2bjmxlmr99 ug3axPy0p0QnmqK1cbqk86OVx/lNgv2cRxcOm9QUVWO039HUgUWfqaro5hocmlqQ d9tCofFn4CBZlg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:13:53 2025 by rpki-client