This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft File: WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json) Hash identifier: lHMgTfNQRVMLs/Nww6taH/kaaQntSByZa8WFwC9wIY0= Subject key identifier: B6:55:3E:F3:B3:79:87:D7:1B:A0:5F:83:2F:88:72:74:2D:BD:B3:58 Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c Certificate serial: 019B4ADEB860555DFC3CD8101CDB22877E6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft Manifest number: 14EA Signing time: Tue 23 Dec 2025 11:01:08 +0000 Manifest this update: Tue 23 Dec 2025 11:01:08 +0000 Manifest next update: Wed 24 Dec 2025 11:01:08 +0000 Files and hashes: 1: 0D01ZS927DpHThbFhFQ-_hFWxII.roa (hash: W9Yn7dxHb0Wn1s2QKfIJNqloaSt38wuy4qDOcPmUhfU=) 2: KZZiPS9ZeOzzb7Ol0GU3vdesmec.roa (hash: vFZw/xYafILFh9yVo7+bAnIUSWqHvFS5F2SG90lZkR0=) 3: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: GaHGb/VKaoEpCkdh6fzO5kM4Ezl84OG9KvaNDBRK6MM=) 4: Xo3ldLDsIsZwGbJ3VdetX-GULwc.roa (hash: 81La9U37EUF9V2tnd1e+qs0cFhZ17T44E32Wc8vicAU=) 5: _WlES2eSPPAcdb99IjbgTsc5Xro.roa (hash: EOl3gK+o3EL4dSF6oUVZ6VSDAeYTaurQvmfArpGviOI=) 6: sBlJ4mJbmZ7QPuvf5LufFr5BMyU.roa (hash: i/AotRsBPnt5Nf8geU1CUYhpvrjw/c5dfcC4n774/K4=) 7: wcZznbX9VosJP0oVFOMR9sEtRTM.roa (hash: z/i6QSkFVh2Ed4/qc7yxip/ox8LwcslNmjsXdqJkdo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:b8:60:55:5d:fc:3c:d8:10:1c:db:22:87:7e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597a01de87e011803f890ae17749020f995f140c Validity Not Before: Dec 23 11:01:08 2025 GMT Not After : Dec 24 11:01:08 2025 GMT Subject: CN=b6553ef3b37987d71ba05f832f8872742dbdb358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:fb:ad:78:d5:8b:20:f3:1c:cf:c2:ad:b5: 13:53:b5:4d:76:51:3c:a2:f5:96:d8:d6:c1:4e:88: d3:1d:b6:fe:bd:00:91:04:db:d4:13:f7:a7:80:53: d9:8a:cb:db:67:7f:d0:7a:c3:1a:69:48:b3:0e:f4: 62:62:ca:4a:65:21:be:29:eb:0c:8c:d7:b0:ae:f7: 7f:d9:94:1b:38:4b:d6:c5:85:8b:08:3e:23:34:73: ca:f3:88:59:75:65:58:57:99:ea:8d:59:6a:99:5d: 5d:56:74:61:4f:00:73:56:86:98:27:c5:19:d4:8d: 68:2b:a7:50:65:1f:87:4c:59:21:97:89:87:ef:e5: 7c:34:01:74:b8:4c:87:7c:ea:be:24:e5:db:b2:e8: 56:9d:44:3f:88:13:3f:cd:9b:b3:be:a8:6c:fe:25: 1e:12:24:73:f8:90:00:97:39:42:fe:e5:96:fc:7e: 11:47:12:18:50:31:83:ee:8d:9d:8f:76:8d:90:62: 24:ac:b3:d3:b5:6e:bc:cd:c5:a7:5b:ad:7b:ba:fc: f4:45:ae:29:a5:32:ae:ac:0c:c2:03:13:5d:0d:ce: ac:a7:8f:37:bb:19:05:7e:36:39:89:c1:b6:6c:08: d8:3f:02:f0:61:ca:4d:dc:d2:5d:5d:5d:56:e1:09: 8e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:55:3E:F3:B3:79:87:D7:1B:A0:5F:83:2F:88:72:74:2D:BD:B3:58 X509v3 Authority Key Identifier: keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:65:29:ed:b6:49:53:87:c6:f5:c6:2a:be:1c:98:8d:d2:a7: 1a:60:41:38:8c:76:30:62:da:42:08:b1:04:71:b3:bf:71:60: bd:57:09:ad:5b:3e:a6:ef:d4:72:85:45:ea:46:ed:a6:11:ce: 91:2d:b6:8f:f0:f9:23:a5:ae:67:55:f1:d0:bf:be:12:42:ab: 3e:0d:67:1b:f1:4f:5b:6b:17:cb:40:6b:cf:d8:a6:1c:ce:52: fc:e2:c6:b7:a4:4f:d1:1b:be:02:e8:b8:75:06:b5:57:d6:88: de:ca:99:4d:ea:41:68:c8:26:77:e2:18:32:23:82:c8:c3:8e: 6b:3b:82:89:98:74:e8:1f:cd:38:b1:44:98:dd:ef:d1:de:98: 99:de:f9:76:46:07:b5:ff:16:6b:d9:0f:b3:ca:4c:6e:fd:91: b4:e5:20:87:04:74:0d:fa:00:8d:a8:8e:d4:9e:6b:6b:74:84: a5:85:5c:3d:18:a1:c6:9b:bd:ec:35:96:74:21:50:aa:d1:81: 6d:3b:83:60:f5:53:d8:1b:30:69:6f:a0:8a:23:93:cf:71:0d: fd:a0:5c:60:4c:96:cc:31:1e:c8:33:d3:d9:fb:bf:5e:b7:57: 00:d1:a6:8f:66:3a:c2:49:62:94:c0:10:23:45:46:45:29:b1: a9:14:25:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3rhgVV38PNgQHNsih35vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5N2EwMWRlODdlMDExODAzZjg5MGFlMTc3NDkwMjBmOTk1 ZjE0MGMwHhcNMjUxMjIzMTEwMTA4WhcNMjUxMjI0MTEwMTA4WjAzMTEwLwYDVQQD EyhiNjU1M2VmM2IzNzk4N2Q3MWJhMDVmODMyZjg4NzI3NDJkYmRiMzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbj7rXjViyDzHM/CrbUTU7VNdlE8 ovWW2NbBTojTHbb+vQCRBNvUE/engFPZisvbZ3/QesMaaUizDvRiYspKZSG+KesM jNewrvd/2ZQbOEvWxYWLCD4jNHPK84hZdWVYV5nqjVlqmV1dVnRhTwBzVoaYJ8UZ 1I1oK6dQZR+HTFkhl4mH7+V8NAF0uEyHfOq+JOXbsuhWnUQ/iBM/zZuzvqhs/iUe EiRz+JAAlzlC/uWW/H4RRxIYUDGD7o2dj3aNkGIkrLPTtW68zcWnW617uvz0Ra4p pTKurAzCAxNdDc6sp483uxkFfjY5icG2bAjYPwLwYcpN3NJdXV1W4QmOuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZVPvOzeYfXG6Bfgy+IcnQtvbNYMB8GA1UdIwQY MBaAFFl6Ad6H4BGAP4kK4XdJAg+ZXxQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yM2VkOWEtMWNhNS00NWVhLTliOGMt NzM1MzNkZTA5OWMzLzEvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8yM2VkOWEtMWNhNS00NWVhLTliOGMtNzM1MzNkZTA5OWMz LzEvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmUp7bZJ U4fG9cYqvhyYjdKnGmBBOIx2MGLaQgixBHGzv3FgvVcJrVs+pu/UcoVF6kbtphHO kS22j/D5I6WuZ1Xx0L++EkKrPg1nG/FPW2sXy0Brz9imHM5S/OLGt6RP0Ru+Aui4 dQa1V9aI3sqZTepBaMgmd+IYMiOCyMOOazuCiZh06B/NOLFEmN3v0d6Ymd75dkYH tf8Wa9kPs8pMbv2RtOUghwR0DfoAjaiO1J5ra3SEpYVcPRihxpu97DWWdCFQqtGB bTuDYPVT2BswaW+giiOTz3EN/aBcYEyWzDEeyDPT2fu/XrdXANGmj2Y6wklilMAQ I0VGRSmxqRQleQ== -----END CERTIFICATE-----Generated at Tue Dec 23 18:33:18 2025 by rpki-client