This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json) Hash identifier: BjBvZk3VDss9d/Ie5BKlrsrMppohuseYEvody5xZfIs= Subject key identifier: C7:E9:48:2C:94:E5:09:CF:53:BE:AD:5F:E7:10:B7:C1:44:A4:B3:86 Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02 Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102 Certificate serial: 019B292FD814939185872D2DB2529336742A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft Manifest number: 177F Signing time: Tue 16 Dec 2025 22:02:39 +0000 Manifest this update: Tue 16 Dec 2025 22:02:39 +0000 Manifest next update: Wed 17 Dec 2025 22:02:39 +0000 Files and hashes: 1: mdzOjm97CLLzPCbjlPobKIT1pLw.roa (hash: t6RlQNOZ4r0YZ3Um/Nvgu1T4czU0EwLc7Ga8Lg+Wxu4=) 2: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: zz7sOlxhusKeIt+BjSntrqodKmQM+VJIk7PfXRU/jrU=) 3: yHP9EGdLjDrqdAgK0gSgkfOYdDE.roa (hash: 9lzUExWqudI5IZaHPGACvDV+UoMVt4hmvKdyWsLEU8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2f:d8:14:93:91:85:87:2d:2d:b2:52:93:36:74:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102 Validity Not Before: Dec 16 22:02:39 2025 GMT Not After : Dec 17 22:02:39 2025 GMT Subject: CN=c7e9482c94e509cf53bead5fe710b7c144a4b386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:27:c7:bb:dc:29:8f:0f:9a:e7:74:b0:af:1f: df:3f:5f:a8:9b:4c:50:e0:35:ed:18:63:a9:b3:51: 8d:46:71:26:03:84:fe:51:9d:93:61:fe:dc:7d:be: b2:ba:f7:30:db:3a:ef:3f:23:f4:64:af:9f:8b:fa: 1e:a8:d5:5e:46:77:39:e7:e3:58:ff:01:e5:f9:81: bd:fa:6d:69:1d:0a:20:27:b9:1d:56:c7:e3:96:cc: ab:a9:19:67:3f:22:8b:5c:5f:6a:4a:19:8e:c3:cc: 43:5e:9a:46:98:8f:15:9b:8c:cb:e2:33:23:56:fb: 60:09:03:b6:b9:1d:92:4a:77:03:12:9c:23:3c:67: 90:1b:61:bd:70:79:81:d7:72:a3:65:2f:25:84:98: b0:63:d1:dd:16:33:0d:14:42:07:a5:eb:fb:62:24: 45:30:dd:24:13:44:2c:f1:39:8a:20:23:07:2c:e9: 1c:a2:c0:5a:c2:81:6f:8d:4a:9f:b9:f4:dc:ee:11: 43:1a:12:8a:6c:6c:a4:43:03:ee:b7:c9:35:a0:fd: 53:4f:51:dc:e2:1c:0a:b2:21:c7:f8:46:b0:29:68: d6:d6:22:51:fd:dc:2a:10:63:95:f5:ca:25:64:f1: 1c:9b:c2:ae:7d:ef:3e:bb:4b:99:41:5d:cc:d9:63: 6c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E9:48:2C:94:E5:09:CF:53:BE:AD:5F:E7:10:B7:C1:44:A4:B3:86 X509v3 Authority Key Identifier: keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:8f:fd:f4:f9:80:8b:79:e3:db:cb:45:e5:fa:26:3c:d8:44: 80:c5:0e:a4:94:a1:b8:31:03:d2:58:a4:57:fb:72:6d:e9:32: f2:f5:0d:ee:82:00:40:13:cc:a8:c0:2d:d9:a4:28:39:fd:ae: de:f7:3f:04:cb:2a:4d:a1:ea:1d:95:1c:2c:6e:6c:54:35:f6: 8d:4c:4c:39:36:50:07:f2:cd:60:52:79:d2:9a:2c:4b:21:b3: 9d:4c:7d:76:cd:12:c8:00:a1:ff:03:28:bc:7f:21:26:a7:a5: 93:de:f8:0a:59:5c:06:62:d9:ab:50:4f:85:eb:a5:fe:3d:29: b0:0f:73:36:3f:e6:f4:61:e4:13:4e:31:ea:74:51:2e:a2:64: 8f:ce:95:b6:1f:8e:7c:0d:13:94:11:95:00:23:c9:0c:16:a7: 16:cc:4f:71:93:57:4f:37:d2:55:f9:ef:39:a7:05:50:1d:e7: 38:e5:9f:40:ca:eb:3d:4c:21:f5:f8:cf:73:3f:7b:8a:fe:62: 29:13:18:fa:49:7b:3a:de:93:b5:2f:c9:4c:b3:92:68:cd:a5: 7a:21:e6:b8:e2:38:ce:5d:03:21:a7:ea:23:70:79:e0:d2:16: 49:4d:92:47:27:21:4e:ac:07:cd:7d:3d:1e:fb:3e:2f:4f:44: 59:0f:d8:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspL9gUk5GFhy0tslKTNnQqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYmQyNmZlMjI5NWU0NjJiZTI2Nzg1MzNlZmE1MzFlMjNi N2YxMDIwHhcNMjUxMjE2MjIwMjM5WhcNMjUxMjE3MjIwMjM5WjAzMTEwLwYDVQQD EyhjN2U5NDgyYzk0ZTUwOWNmNTNiZWFkNWZlNzEwYjdjMTQ0YTRiMzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSfHu9wpjw+a53Swrx/fP1+om0xQ 4DXtGGOps1GNRnEmA4T+UZ2TYf7cfb6yuvcw2zrvPyP0ZK+fi/oeqNVeRnc55+NY /wHl+YG9+m1pHQogJ7kdVsfjlsyrqRlnPyKLXF9qShmOw8xDXppGmI8Vm4zL4jMj VvtgCQO2uR2SSncDEpwjPGeQG2G9cHmB13KjZS8lhJiwY9HdFjMNFEIHpev7YiRF MN0kE0Qs8TmKICMHLOkcosBawoFvjUqfufTc7hFDGhKKbGykQwPut8k1oP1TT1Hc 4hwKsiHH+EawKWjW1iJR/dwqEGOV9colZPEcm8Kufe8+u0uZQV3M2WNsBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfpSCyU5QnPU76tX+cQt8FEpLOGMB8GA1UdIwQY MBaAFMO9Jv4ileRiviZ4Uz76Ux4jt/ECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85YzVhMDAtMGI1Zi00YTk1LTk4YTgt OGJkOTc2OTEwZGJmLzEvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC85YzVhMDAtMGI1Zi00YTk1LTk4YTgtOGJkOTc2OTEwZGJm LzEvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnI/99PmA i3nj28tF5fomPNhEgMUOpJShuDED0likV/tybeky8vUN7oIAQBPMqMAt2aQoOf2u 3vc/BMsqTaHqHZUcLG5sVDX2jUxMOTZQB/LNYFJ50posSyGznUx9ds0SyACh/wMo vH8hJqelk974CllcBmLZq1BPheul/j0psA9zNj/m9GHkE04x6nRRLqJkj86Vth+O fA0TlBGVACPJDBanFsxPcZNXTzfSVfnvOacFUB3nOOWfQMrrPUwh9fjPcz97iv5i KRMY+kl7Ot6TtS/JTLOSaM2leiHmuOI4zl0DIafqI3B54NIWSU2SRychTqwHzX09 Hvs+L09EWQ/Yfg== -----END CERTIFICATE-----Generated at Wed Dec 17 04:14:58 2025 by rpki-client