This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft File: W0Vsn395uYcZbEaEAjlqGHwVbXw.mft (raw, json) Hash identifier: sZjiWAf1G6wGX4bZ9f/KYrvM6y/+9haaQrfg9ebShbI= Subject key identifier: 83:05:A3:B2:07:97:21:37:73:C7:D8:36:51:C7:83:66:ED:BD:8A:21 Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C Certificate issuer: /CN=5b456c9f7f79b987196c468402396a187c156d7c Certificate serial: 019B0F6E24C5DD98A2BD7AA48C2EA8F6ADF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 22:00:35 +0000 Manifest this update: Thu 11 Dec 2025 22:00:35 +0000 Manifest next update: Fri 12 Dec 2025 22:00:35 +0000 Files and hashes: 1: 1-FQBZTT5afKyG6FIAOC0DP_Gyes.roa (hash: QUXwHR9U/j2PM2tc+oqu+jlOONy/4+OVBz6LYmOZ3uc=) 2: W0Vsn395uYcZbEaEAjlqGHwVbXw.crl (hash: 7y+ZtX2FtDPSaKIwB8gISEkXJL69OqUPLg9p7/bB+Us=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 22:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:24:c5:dd:98:a2:bd:7a:a4:8c:2e:a8:f6:ad:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c Validity Not Before: Dec 11 22:00:35 2025 GMT Not After : Dec 12 22:00:35 2025 GMT Subject: CN=8305a3b20797213773c7d83651c78366edbd8a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:33:f6:4e:9d:da:03:c4:6a:ff:9c:51:3e:24: 8f:e4:1b:81:c3:58:1a:55:af:0d:80:c9:9c:b1:55: e4:5e:99:06:10:90:07:99:20:91:0f:c7:9a:28:bc: 45:8b:3e:c9:fa:4f:e8:ae:da:e4:ca:32:b2:f2:aa: 5c:83:7a:d1:7d:3a:bb:cb:12:f8:1e:eb:66:79:61: 0b:8f:4f:72:5f:44:59:64:6e:a1:f0:d7:ba:f8:c9: 85:51:5f:f3:66:f5:4d:20:5a:40:7d:f5:02:5b:3d: db:36:60:7c:37:ea:77:e8:b1:82:3a:6d:46:79:60: 30:bd:06:72:62:f2:bc:df:7e:fd:9e:ec:81:f7:41: 0d:fa:e0:95:00:44:f4:ce:a2:e8:65:38:2f:a3:e4: 80:66:15:72:75:8b:ba:b8:c9:8c:0e:04:ba:35:34: 1b:4c:59:fa:aa:1c:24:60:e0:56:29:e1:b9:a9:a2: a9:d0:a9:f6:59:9e:f0:ca:13:7b:1b:06:4c:79:36: 57:68:c8:48:fd:ad:df:eb:18:9b:0f:04:53:af:07: 94:23:67:e4:40:3f:99:f3:82:67:14:66:e3:bd:a7: 0e:85:8b:34:11:f5:68:3f:12:72:04:d2:37:f4:41: ca:c3:d8:7d:33:85:dd:74:27:42:0b:c6:19:6e:1e: 0b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:05:A3:B2:07:97:21:37:73:C7:D8:36:51:C7:83:66:ED:BD:8A:21 X509v3 Authority Key Identifier: keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:5c:05:d9:db:91:56:66:8b:a6:a3:a5:94:f3:58:c6:fa:bc: 4e:e1:85:69:88:af:73:4f:96:ba:85:31:a2:18:a4:67:a7:aa: 92:29:6b:81:ef:8c:df:bd:86:a1:47:63:f2:96:a4:30:59:ae: 47:b6:d0:8b:65:79:74:11:93:88:c8:38:e8:6e:50:0f:5d:fd: e2:4c:eb:1d:67:02:f8:8c:e1:54:bb:00:3a:b9:25:25:07:56: 1e:2a:97:23:fe:45:b9:a6:5e:7d:56:b5:e1:11:1c:d6:4f:f1: 7d:c5:9d:c8:58:36:b5:5e:2a:a2:93:70:d3:c0:d7:85:e2:9a: 58:7b:fb:47:41:4a:38:25:9e:fc:93:3c:f9:01:16:ae:c6:cd: 6e:05:dc:27:75:b6:a6:55:d5:36:5d:c9:47:05:87:70:0e:f2: 6b:cf:4d:33:df:a3:10:52:46:14:b1:3a:1e:f1:03:1b:0c:b3: ae:bc:bf:b3:4c:cb:27:58:c8:60:73:f8:fc:85:a6:67:61:b3: e0:0e:eb:20:8f:b5:59:d9:b8:4a:a9:2a:a7:44:03:77:4f:5e: 34:6e:8a:d5:cd:ea:e2:a8:77:c5:13:6a:08:84:78:52:a4:88: 9a:25:89:63:59:74:b8:ec:8a:ef:bd:49:e0:a7:93:ac:5f:e6: ad:e3:4d:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbiTF3ZiivXqkjC6o9q3yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNDU2YzlmN2Y3OWI5ODcxOTZjNDY4NDAyMzk2YTE4N2Mx NTZkN2MwHhcNMjUxMjExMjIwMDM1WhcNMjUxMjEyMjIwMDM1WjAzMTEwLwYDVQQD Eyg4MzA1YTNiMjA3OTcyMTM3NzNjN2Q4MzY1MWM3ODM2NmVkYmQ4YTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzP2Tp3aA8Rq/5xRPiSP5BuBw1ga Va8NgMmcsVXkXpkGEJAHmSCRD8eaKLxFiz7J+k/ortrkyjKy8qpcg3rRfTq7yxL4 HutmeWELj09yX0RZZG6h8Ne6+MmFUV/zZvVNIFpAffUCWz3bNmB8N+p36LGCOm1G eWAwvQZyYvK83379nuyB90EN+uCVAET0zqLoZTgvo+SAZhVydYu6uMmMDgS6NTQb TFn6qhwkYOBWKeG5qaKp0Kn2WZ7wyhN7GwZMeTZXaMhI/a3f6xibDwRTrweUI2fk QD+Z84JnFGbjvacOhYs0EfVoPxJyBNI39EHKw9h9M4XddCdCC8YZbh4LLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMFo7IHlyE3c8fYNlHHg2btvYohMB8GA1UdIwQY MBaAFFtFbJ9/ebmHGWxGhAI5ahh8FW18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xZGVmY2EtZTEyNS00YjAwLTkyNTIt OWZlODZkZWE4NjJhLzEvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xZGVmY2EtZTEyNS00YjAwLTkyNTItOWZlODZkZWE4NjJh LzEvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1wF2duR VmaLpqOllPNYxvq8TuGFaYivc0+WuoUxohikZ6eqkilrge+M372GoUdj8pakMFmu R7bQi2V5dBGTiMg46G5QD1394kzrHWcC+IzhVLsAOrklJQdWHiqXI/5FuaZefVa1 4REc1k/xfcWdyFg2tV4qopNw08DXheKaWHv7R0FKOCWe/JM8+QEWrsbNbgXcJ3W2 plXVNl3JRwWHcA7ya89NM9+jEFJGFLE6HvEDGwyzrry/s0zLJ1jIYHP4/IWmZ2Gz 4A7rII+1Wdm4Sqkqp0QDd09eNG6K1c3q4qh3xRNqCIR4UqSImiWJY1l0uOyK771J 4KeTrF/mreNNqA== -----END CERTIFICATE-----Generated at Fri Dec 12 08:02:30 2025 by rpki-client