This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft File: wei4jx4wVzoOIOR51boAtOkYJ7Y.mft (raw, json) Hash identifier: dZr6+xZvBA2mnQZg9C09ZTm35EVt0nh/CpuGCKJfDAw= Subject key identifier: 60:AF:54:56:82:3B:97:66:EA:1B:AE:FB:0E:86:D1:14:E8:6E:DC:53 Authority key identifier: C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6 Certificate issuer: /CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6 Certificate serial: 019B4B15CD37436700EF1D1D82B34DCF365E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 12:01:18 +0000 Manifest this update: Tue 23 Dec 2025 12:01:18 +0000 Manifest next update: Wed 24 Dec 2025 12:01:18 +0000 Files and hashes: 1: _hY8OE1vA86wyK3ByKxKme_jHPA.roa (hash: 77qfF/YB8xlTjgPPV6F7smZo7NAYUmHDjTAKbxWVa7Q=) 2: wei4jx4wVzoOIOR51boAtOkYJ7Y.crl (hash: CKk9mvm150q0ytNf1m7l8NROn7S94GTp8itEYhjKRh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 12:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:cd:37:43:67:00:ef:1d:1d:82:b3:4d:cf:36:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6 Validity Not Before: Dec 23 12:01:18 2025 GMT Not After : Dec 24 12:01:18 2025 GMT Subject: CN=60af5456823b9766ea1baefb0e86d114e86edc53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:35:dd:29:ac:56:18:d5:f1:b3:22:f0:70:29: 11:70:3f:46:44:c9:52:a8:2e:ce:8d:22:42:c3:d9: e1:98:5d:d6:c7:b5:02:ac:da:45:0e:04:89:a3:a9: 50:ae:33:7b:eb:73:10:ee:35:d0:14:21:11:87:dd: 70:04:6a:57:05:42:c4:32:14:a6:66:8b:5c:33:a6: fb:dd:34:b8:64:5e:16:d8:52:d3:f4:0a:f6:e5:58: 65:b8:5d:c8:b1:9e:3c:bb:cd:b5:32:b6:ca:0a:2a: 3e:2a:af:55:98:dc:a8:9f:98:8d:67:07:d1:7a:d6: 86:c0:cf:f7:35:43:65:46:15:d3:51:5c:d6:3d:75: b5:6d:45:31:58:32:62:c5:02:e6:08:b0:ae:8f:32: 38:44:3e:2b:71:46:d8:c3:cc:f6:fb:a1:04:97:e6: c3:f3:50:ba:3d:12:6d:05:f7:29:56:2a:f7:ba:b3: c8:7d:5a:fe:1c:9c:6e:27:9a:7e:09:72:e3:cf:3b: 54:41:ad:36:5f:b0:b9:b7:2f:89:e3:31:2f:41:d1: a1:19:25:53:1e:71:c3:aa:56:9c:3d:e1:71:1b:29: aa:6f:a6:98:60:03:bd:aa:3d:8c:69:8e:cb:81:b5: a4:ec:9c:53:66:ec:ce:9a:2d:8c:39:58:26:4c:7b: 52:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AF:54:56:82:3B:97:66:EA:1B:AE:FB:0E:86:D1:14:E8:6E:DC:53 X509v3 Authority Key Identifier: keyid:C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:f4:21:8b:bb:f2:44:2f:e2:fa:87:5a:3f:8c:20:a0:1e:0f: d0:36:0f:63:7d:a3:23:ed:5a:58:05:48:c8:a9:1f:0c:22:81: 94:b3:76:8f:c6:55:1c:26:22:02:bb:ae:4c:63:63:14:48:73: bd:05:df:5f:bf:61:61:25:ce:aa:03:85:15:39:41:95:93:32: 9c:d9:9b:df:21:26:68:0e:3e:d1:4a:bb:7c:da:9a:ce:72:cf: b6:af:81:45:77:2b:7d:06:46:c7:36:3b:89:4a:3d:eb:ec:1f: 64:cb:3b:06:68:b5:66:ec:0c:96:8f:45:e8:98:e1:c9:74:4b: 9f:33:89:42:31:d5:05:90:26:73:aa:d5:8b:ce:c6:94:24:cb: d6:d1:b0:8e:a5:ad:03:bc:04:65:9a:e8:25:56:85:36:66:0d: 4f:40:c9:ba:79:76:8a:51:94:b3:7e:fc:d7:a1:7c:59:d9:66: e4:0b:5f:eb:1e:b9:cc:1f:33:12:d5:8b:21:6a:73:33:44:d1: 1e:f8:ef:c3:5e:f9:7c:45:dd:5b:1a:87:95:b6:32:18:d0:9a: 51:d7:bc:1d:93:0b:94:35:7f:75:68:2b:ef:d5:e4:a6:9b:55: 6f:e7:8b:ba:fa:c0:5a:d1:42:05:56:e5:46:72:f9:b1:fa:a2: 00:56:27:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFc03Q2cA7x0dgrNNzzZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZThiODhmMWUzMDU3M2EwZTIwZTQ3OWQ1YmEwMGI0ZTkx ODI3YjYwHhcNMjUxMjIzMTIwMTE4WhcNMjUxMjI0MTIwMTE4WjAzMTEwLwYDVQQD Eyg2MGFmNTQ1NjgyM2I5NzY2ZWExYmFlZmIwZTg2ZDExNGU4NmVkYzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzXdKaxWGNXxsyLwcCkRcD9GRMlS qC7OjSJCw9nhmF3Wx7UCrNpFDgSJo6lQrjN763MQ7jXQFCERh91wBGpXBULEMhSm ZotcM6b73TS4ZF4W2FLT9Ar25VhluF3IsZ48u821MrbKCio+Kq9VmNyon5iNZwfR etaGwM/3NUNlRhXTUVzWPXW1bUUxWDJixQLmCLCujzI4RD4rcUbYw8z2+6EEl+bD 81C6PRJtBfcpVir3urPIfVr+HJxuJ5p+CXLjzztUQa02X7C5ty+J4zEvQdGhGSVT HnHDqlacPeFxGymqb6aYYAO9qj2MaY7LgbWk7JxTZuzOmi2MOVgmTHtS1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCvVFaCO5dm6huu+w6G0RTobtxTMB8GA1UdIwQY MBaAFMHouI8eMFc6DiDkedW6ALTpGCe2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2VpNGp4NHdWem9PSU9SNTFib0F0T2tZSjdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NTcxOTctYzYyOC00OGIxLTk1NmQt ZWZmZTk1NWE1ZDY0LzEvd2VpNGp4NHdWem9PSU9SNTFib0F0T2tZSjdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82NTcxOTctYzYyOC00OGIxLTk1NmQtZWZmZTk1NWE1ZDY0 LzEvd2VpNGp4NHdWem9PSU9SNTFib0F0T2tZSjdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvQhi7vy RC/i+odaP4wgoB4P0DYPY32jI+1aWAVIyKkfDCKBlLN2j8ZVHCYiAruuTGNjFEhz vQXfX79hYSXOqgOFFTlBlZMynNmb3yEmaA4+0Uq7fNqaznLPtq+BRXcrfQZGxzY7 iUo96+wfZMs7Bmi1ZuwMlo9F6JjhyXRLnzOJQjHVBZAmc6rVi87GlCTL1tGwjqWt A7wEZZroJVaFNmYNT0DJunl2ilGUs37816F8Wdlm5Atf6x65zB8zEtWLIWpzM0TR Hvjvw175fEXdWxqHlbYyGNCaUde8HZMLlDV/dWgr79XkpptVb+eLuvrAWtFCBVbl RnL5sfqiAFYnjw== -----END CERTIFICATE-----Generated at Tue Dec 23 16:25:31 2025 by rpki-client