This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft File: W67rTDpphRQSVf1fauGIQGc0j0E.mft (raw, json) Hash identifier: 2AW+omN1INW5VA8dQOxfhRxD/3fsHfCtqf/J0pSRjGI= Subject key identifier: 90:C2:C0:D1:83:C3:6E:9F:81:60:79:91:36:12:A1:A6:93:67:B9:00 Authority key identifier: 5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41 Certificate issuer: /CN=5baeeb4c3a6985141255fd5f6ae1884067348f41 Certificate serial: 019B47A6C6B664B07B99768415B5ECA686AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft Manifest number: 0333 Signing time: Mon 22 Dec 2025 20:01:10 +0000 Manifest this update: Mon 22 Dec 2025 20:01:10 +0000 Manifest next update: Tue 23 Dec 2025 20:01:10 +0000 Files and hashes: 1: W67rTDpphRQSVf1fauGIQGc0j0E.crl (hash: 56PfAT1XOvTXZkudOZAhH5YfrbG8cwZBrTGN5lHTX0c=) 2: fImxldtEe3i_XS4-KxZuO-LAgYs.roa (hash: y0/Y4Oas1pqWDy9av0sFDF2hXjn1ElLUDcx131DTb88=) 3: w518JUndnoJzF7ArkNi72UzL1I0.roa (hash: 8BFeioFwQr4QIG7R1EZ3G0EZLDkxKgvDohVxrnoFSAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.crl rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:c6:b6:64:b0:7b:99:76:84:15:b5:ec:a6:86:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5baeeb4c3a6985141255fd5f6ae1884067348f41 Validity Not Before: Dec 22 20:01:10 2025 GMT Not After : Dec 23 20:01:10 2025 GMT Subject: CN=90c2c0d183c36e9f816079913612a1a69367b900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:59:b5:02:92:6f:22:ea:b6:6e:5e:0c:fc:4a: 2d:76:89:61:69:29:9f:71:0e:f3:bf:32:61:6a:38: 43:a1:97:a5:24:10:9f:3e:00:ef:14:0b:d1:75:de: 07:5e:e0:a2:51:22:43:b2:61:8e:ed:7d:ce:b7:87: 69:4b:fb:a3:10:34:bc:5b:c9:66:d0:9f:7a:d4:ec: eb:df:45:d3:eb:62:6b:49:3a:a6:86:a4:be:46:60: 2b:d3:92:bb:56:33:4b:c1:1f:cb:5f:3e:a2:8c:28: de:df:88:38:d2:5f:a0:9a:a3:e9:24:4e:80:ce:e0: fa:e5:0b:27:7f:77:b0:a5:be:5d:b5:ca:d5:b8:47: 0c:b7:e8:e9:99:28:41:04:1d:ed:a2:5f:90:bb:f9: 61:8a:9f:7e:ff:c1:3a:20:7a:55:61:be:c6:16:56: cf:ce:f0:3d:bd:d3:58:2c:6b:d4:20:e1:31:c0:57: 00:e3:97:6b:d2:16:b4:38:5d:ba:ac:05:fd:1c:cf: 3b:9a:86:38:2f:5f:22:c5:87:0e:8b:bb:64:73:41: 4e:40:a2:85:f8:a4:cb:be:a9:64:53:b6:4b:54:0c: 42:bf:95:f4:f2:d4:58:6e:97:44:3c:d1:49:32:b3: e6:75:32:6c:6b:d7:eb:5b:33:41:eb:30:f1:c4:d1: 57:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C2:C0:D1:83:C3:6E:9F:81:60:79:91:36:12:A1:A6:93:67:B9:00 X509v3 Authority Key Identifier: keyid:5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:94:24:f3:0d:20:2a:54:5e:c4:97:9b:14:e2:fa:16:b6:fb: b7:2b:bb:25:e5:b2:18:87:97:85:46:fb:e4:97:d0:1e:0a:00: 03:24:6f:89:45:14:7f:ce:8c:27:00:2b:ed:f5:da:92:59:c3: ac:fc:20:5b:61:ff:4d:5c:23:95:81:1f:2d:67:0c:78:ea:c4: 95:d2:4f:41:69:6d:e4:b8:3e:40:9c:58:02:21:9d:ce:fe:3f: 22:e2:24:d9:ad:a5:c0:f1:a2:59:00:5f:3b:63:57:27:0e:b1: 87:c8:29:35:6f:eb:3a:8d:cd:24:19:41:85:38:96:99:41:c1: 33:3d:67:fc:49:3c:05:71:31:b5:d0:68:c5:91:b0:16:36:cc: f0:19:ac:af:16:fb:91:87:97:01:5f:e5:96:2c:35:ba:f5:33: 11:97:00:d3:df:ea:d9:93:40:cc:54:1e:23:06:4d:26:85:a0: 3e:45:b3:0f:ab:a9:01:4b:5b:24:9b:4b:66:ad:f4:b4:7f:ca: 6e:62:04:cc:70:bc:2e:60:10:a9:6f:7e:91:31:66:5c:ef:5d: 1a:78:61:ae:c6:4a:4f:4e:03:f2:6d:61:40:62:9c:80:d7:13: 20:35:f8:75:6c:a4:b5:56:c2:eb:46:81:9f:63:19:8e:18:43: df:77:bb:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpsa2ZLB7mXaEFbXspoaqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViYWVlYjRjM2E2OTg1MTQxMjU1ZmQ1ZjZhZTE4ODQwNjcz NDhmNDEwHhcNMjUxMjIyMjAwMTEwWhcNMjUxMjIzMjAwMTEwWjAzMTEwLwYDVQQD Eyg5MGMyYzBkMTgzYzM2ZTlmODE2MDc5OTEzNjEyYTFhNjkzNjdiOTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1m1ApJvIuq2bl4M/EotdolhaSmf cQ7zvzJhajhDoZelJBCfPgDvFAvRdd4HXuCiUSJDsmGO7X3Ot4dpS/ujEDS8W8lm 0J961Ozr30XT62JrSTqmhqS+RmAr05K7VjNLwR/LXz6ijCje34g40l+gmqPpJE6A zuD65Qsnf3ewpb5dtcrVuEcMt+jpmShBBB3tol+Qu/lhip9+/8E6IHpVYb7GFlbP zvA9vdNYLGvUIOExwFcA45dr0ha0OF26rAX9HM87moY4L18ixYcOi7tkc0FOQKKF +KTLvqlkU7ZLVAxCv5X08tRYbpdEPNFJMrPmdTJsa9frWzNB6zDxxNFXewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDCwNGDw26fgWB5kTYSoaaTZ7kAMB8GA1UdIwQY MBaAFFuu60w6aYUUElX9X2rhiEBnNI9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzY3clREcHBoUlFTVmYxZmF1R0lRR2MwajBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9iNGIwMWEtMDc0Ni00NWZmLWFmNDEt MTVlMjg4YjRhNTdkLzEvVzY3clREcHBoUlFTVmYxZmF1R0lRR2MwajBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9iNGIwMWEtMDc0Ni00NWZmLWFmNDEtMTVlMjg4YjRhNTdk LzEvVzY3clREcHBoUlFTVmYxZmF1R0lRR2MwajBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpQk8w0g KlRexJebFOL6Frb7tyu7JeWyGIeXhUb75JfQHgoAAyRviUUUf86MJwAr7fXaklnD rPwgW2H/TVwjlYEfLWcMeOrEldJPQWlt5Lg+QJxYAiGdzv4/IuIk2a2lwPGiWQBf O2NXJw6xh8gpNW/rOo3NJBlBhTiWmUHBMz1n/Ek8BXExtdBoxZGwFjbM8Bmsrxb7 kYeXAV/lliw1uvUzEZcA09/q2ZNAzFQeIwZNJoWgPkWzD6upAUtbJJtLZq30tH/K bmIEzHC8LmAQqW9+kTFmXO9dGnhhrsZKT04D8m1hQGKcgNcTIDX4dWyktVbC60aB n2MZjhhD33e7wQ== -----END CERTIFICATE-----Generated at Tue Dec 23 05:03:24 2025 by rpki-client