This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft File: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft (raw, json) Hash identifier: 4aCo28jmjZW++I35HcDkpkOxc+lCtwqcKNaUXO50VcA= Subject key identifier: 45:54:9E:9A:AA:65:5D:6D:74:45:71:44:7E:68:EA:3F:A1:97:25:39 Authority key identifier: C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62 Certificate issuer: /CN=c37cd79543f1a77299d069aa36151854530dd862 Certificate serial: 019AF31D863CA4063606BBC649B02D5EA2A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft Manifest number: 08B9 Signing time: Sat 06 Dec 2025 10:03:09 +0000 Manifest this update: Sat 06 Dec 2025 10:03:09 +0000 Manifest next update: Sun 07 Dec 2025 10:03:09 +0000 Files and hashes: 1: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl (hash: UZiICpIWr4zZtUPEh/5g6HX8sd2NlSvPR/3fpPO2gMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:86:3c:a4:06:36:06:bb:c6:49:b0:2d:5e:a2:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c37cd79543f1a77299d069aa36151854530dd862 Validity Not Before: Dec 6 10:03:09 2025 GMT Not After : Dec 7 10:03:09 2025 GMT Subject: CN=45549e9aaa655d6d744571447e68ea3fa1972539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:87:fe:47:f0:6e:bd:c7:82:a0:d3:7b:b2:0a: 0c:c5:1f:8d:03:c0:8d:ce:72:06:ab:8e:ea:4c:62: 5a:97:9b:b5:3a:b3:88:8b:f2:ef:6d:1b:77:9d:3f: 6f:5f:f8:66:fc:9b:82:7c:4a:7c:a8:97:20:c3:29: b6:0e:f5:cc:b5:17:eb:a7:02:29:cb:49:d3:18:e0: 38:47:35:84:98:e5:fa:ef:4f:2d:13:5a:d2:74:14: fd:5e:a1:f5:6f:8c:8d:c8:5f:75:32:4a:4b:70:bd: 79:35:bd:9f:8d:99:54:54:9d:6d:64:fa:17:e5:bc: 13:5f:18:9a:2a:a4:8c:9f:d6:44:65:75:eb:c1:27: 63:de:ae:43:eb:19:7d:b8:73:74:69:1a:dd:c1:ed: 03:7d:c8:98:4c:16:f2:a0:32:b1:80:dd:66:29:d6: 5d:5c:e9:81:cd:cd:b0:2f:cb:0d:50:25:88:d5:44: d3:41:94:98:4a:0e:eb:9f:b1:d9:d0:c9:2f:f8:40: 1a:37:67:7a:85:0e:f6:b7:0c:03:60:5c:eb:72:98: ef:2d:d4:7c:6d:f3:7a:55:6d:ed:7d:f0:ff:51:23: 9b:66:32:a4:fc:fc:77:f2:74:bc:65:d6:55:a8:4d: be:b4:f8:6b:15:91:23:b3:f3:44:5f:59:f6:87:d8: 3f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:54:9E:9A:AA:65:5D:6D:74:45:71:44:7E:68:EA:3F:A1:97:25:39 X509v3 Authority Key Identifier: keyid:C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:24:a1:6a:04:ef:f3:17:ff:56:ec:9e:ab:91:f1:fc:6d:1b: 7f:66:e7:ff:5e:a1:b3:d8:fb:b8:6b:95:eb:37:68:e4:02:32: 3f:a5:20:c2:2e:7f:a6:1f:39:80:06:a4:ec:ef:51:00:85:90: c0:35:56:96:a0:ee:0e:1f:3a:99:94:9b:7b:33:ed:7e:9c:ef: d0:ac:98:3b:b1:2d:3a:4d:d9:dd:7e:17:78:19:2f:e6:f5:79: e4:19:47:13:16:25:49:cd:e8:6a:e0:6c:b5:34:5d:dc:53:d6: ba:71:57:c9:22:c4:9d:9f:e7:58:13:7e:bc:34:d6:e4:17:98: 26:f7:30:cc:d8:5c:ba:b9:65:43:8d:b4:8f:ba:ec:11:cf:04: 1a:60:a0:3a:24:08:2b:bd:d3:32:6b:1e:3f:54:cf:7c:ea:1b: c4:94:27:b8:14:7d:65:cd:84:6e:ff:db:ff:d3:a7:1f:d0:8e: c7:28:ae:98:ff:68:2d:42:37:02:cf:75:ee:b7:bf:35:29:a2: 91:82:8c:fa:47:df:1e:70:2a:a8:e0:9f:2e:59:d3:42:67:c2: 4f:14:f6:a4:60:26:23:0e:17:7b:09:2b:dd:a5:25:3f:40:cd: 56:f6:07:b8:5c:f2:ea:73:72:93:8e:4f:52:61:d8:b6:10:87: 0e:2a:ea:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHYY8pAY2BrvGSbAtXqKpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzN2NkNzk1NDNmMWE3NzI5OWQwNjlhYTM2MTUxODU0NTMw ZGQ4NjIwHhcNMjUxMjA2MTAwMzA5WhcNMjUxMjA3MTAwMzA5WjAzMTEwLwYDVQQD Eyg0NTU0OWU5YWFhNjU1ZDZkNzQ0NTcxNDQ3ZTY4ZWEzZmExOTcyNTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYf+R/BuvceCoNN7sgoMxR+NA8CN znIGq47qTGJal5u1OrOIi/LvbRt3nT9vX/hm/JuCfEp8qJcgwym2DvXMtRfrpwIp y0nTGOA4RzWEmOX6708tE1rSdBT9XqH1b4yNyF91MkpLcL15Nb2fjZlUVJ1tZPoX 5bwTXxiaKqSMn9ZEZXXrwSdj3q5D6xl9uHN0aRrdwe0DfciYTBbyoDKxgN1mKdZd XOmBzc2wL8sNUCWI1UTTQZSYSg7rn7HZ0Mkv+EAaN2d6hQ72twwDYFzrcpjvLdR8 bfN6VW3tffD/USObZjKk/Px38nS8ZdZVqE2+tPhrFZEjs/NEX1n2h9g/XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVUnpqqZV1tdEVxRH5o6j+hlyU5MB8GA1UdIwQY MBaAFMN815VD8adymdBpqjYVGFRTDdhiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzN6WGxVUHhwM0taMEdtcU5oVVlWRk1OMkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi82YWYxNDItMGFjNi00ZTc2LTkwNDIt NzE0ODFiYjBhNTJmLzEvdzN6WGxVUHhwM0taMEdtcU5oVVlWRk1OMkdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi82YWYxNDItMGFjNi00ZTc2LTkwNDItNzE0ODFiYjBhNTJm LzEvdzN6WGxVUHhwM0taMEdtcU5oVVlWRk1OMkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjiShagTv 8xf/Vuyeq5Hx/G0bf2bn/16hs9j7uGuV6zdo5AIyP6Ugwi5/ph85gAak7O9RAIWQ wDVWlqDuDh86mZSbezPtfpzv0KyYO7EtOk3Z3X4XeBkv5vV55BlHExYlSc3oauBs tTRd3FPWunFXySLEnZ/nWBN+vDTW5BeYJvcwzNhcurllQ420j7rsEc8EGmCgOiQI K73TMmseP1TPfOobxJQnuBR9Zc2Ebv/b/9OnH9COxyiumP9oLUI3As917re/NSmi kYKM+kffHnAqqOCfLlnTQmfCTxT2pGAmIw4Xewkr3aUlP0DNVvYHuFzy6nNyk45P UmHYthCHDirqSA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:09 2025 by rpki-client