This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft File: wDleyIIdj4GJQTOSvYdte9eVwWw.mft (raw, json) Hash identifier: zS0roUhYxDqfnryNSliL6lqxe6kynOEokTRC0wSJ3Yc= Subject key identifier: B4:3F:F1:F8:AF:75:9A:2B:D2:44:99:78:F2:FF:E4:FA:8A:2A:F5:E8 Authority key identifier: C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C Certificate issuer: /CN=c0395ec8821d8f8189413392bd876d7bd795c16c Certificate serial: 019B435C05C06F871D0314A75977D0E812C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 00:01:02 +0000 Manifest this update: Mon 22 Dec 2025 00:01:02 +0000 Manifest next update: Tue 23 Dec 2025 00:01:02 +0000 Files and hashes: 1: P3YoBo67vazrugYfMD3lybaWtAo.roa (hash: /AdjcQW3/wvGSZ4+BEuR5TlveAfDafAH3hNdQ89CSF4=) 2: wDleyIIdj4GJQTOSvYdte9eVwWw.crl (hash: bII6qs+NujE6WkRUTfeXG3rFovAOeIZdlLCEhLTGKDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 00:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:05:c0:6f:87:1d:03:14:a7:59:77:d0:e8:12:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0395ec8821d8f8189413392bd876d7bd795c16c Validity Not Before: Dec 22 00:01:02 2025 GMT Not After : Dec 23 00:01:02 2025 GMT Subject: CN=b43ff1f8af759a2bd2449978f2ffe4fa8a2af5e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:38:d8:ad:f8:ff:8d:43:e3:07:52:21:35:76: 9d:5e:f6:60:db:27:cc:5c:ce:51:0d:d8:42:39:53: fc:c5:48:91:36:80:1a:6d:62:4a:0c:bf:43:32:e1: 97:9e:4f:4d:92:f9:a0:1a:e7:43:bc:b4:99:84:b1: e0:0e:84:71:9e:84:1b:9d:ad:66:f0:50:26:69:3e: 36:fe:43:2e:f9:15:05:c4:e1:a5:b4:f4:43:23:0d: 9f:53:2a:8d:17:df:94:2b:f0:05:e9:fc:55:99:ff: 48:e3:06:45:41:62:65:6f:20:ad:cd:d0:88:d3:6c: 50:34:38:40:52:f7:cb:fb:19:a1:2f:d8:6a:b7:8d: ef:b2:67:98:4d:2f:83:2a:86:75:01:bc:4d:95:01: 02:cd:f9:24:a0:7c:3d:8d:f5:d5:ab:a1:f0:5a:75: 0c:96:1c:4d:2b:0e:95:44:07:e7:5a:a8:7a:2d:0d: cb:e8:3e:94:76:a0:8d:57:c3:f0:c9:ab:33:45:db: 90:c2:a0:b3:e9:7e:f4:db:35:16:a9:e2:fc:b7:21: b5:50:78:24:71:ab:b1:3d:b0:81:13:68:75:a3:74: 1d:fd:18:4c:19:dd:f9:05:74:f3:c3:c4:1d:a6:3e: 89:65:a1:08:36:0d:f8:bc:a4:b1:09:d9:2e:c0:76: a5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3F:F1:F8:AF:75:9A:2B:D2:44:99:78:F2:FF:E4:FA:8A:2A:F5:E8 X509v3 Authority Key Identifier: keyid:C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:37:2b:57:a1:85:1b:61:c3:f1:ea:89:25:94:c6:ff:d2:84: 7a:50:9a:91:b9:81:44:d0:dc:5e:34:7a:16:51:f2:92:aa:9a: e3:dc:2e:e7:48:b2:9b:95:d1:7e:1e:61:97:43:05:c0:36:b7: 9b:0c:30:9b:b1:a1:91:64:0f:a6:97:25:d4:f6:d0:e1:1e:cf: aa:24:12:fe:9b:88:b8:01:90:8b:9a:e4:29:58:88:32:42:00: 72:40:6f:6d:02:c4:eb:4a:9f:65:99:be:f4:9b:49:31:f3:77: 92:3e:96:b7:c3:75:ae:2e:3d:94:ec:bd:b0:f0:c2:08:99:4d: a7:01:ad:e4:0f:bb:98:87:b6:f3:0c:1d:24:e2:cb:41:96:8c: 73:89:0b:d5:6e:06:14:74:7c:a7:a5:6d:fe:8b:b6:4c:36:5f: 07:22:0d:b9:16:83:05:d2:75:12:7a:d2:93:cb:2c:04:a3:29: 88:dd:9c:6f:79:72:ed:29:9c:05:44:54:ed:e5:43:ea:e9:22: 91:10:3a:dd:76:ac:23:b0:d4:a7:d2:ae:1a:f1:2c:ae:f2:78: 34:de:da:21:ff:d9:65:4a:6d:49:38:c6:c5:13:1b:66:4f:d5: ac:43:2f:98:e9:6d:ad:2a:fa:33:54:aa:3d:9b:fb:0d:c4:bf: 4b:5a:36:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXAXAb4cdAxSnWXfQ6BLJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMzk1ZWM4ODIxZDhmODE4OTQxMzM5MmJkODc2ZDdiZDc5 NWMxNmMwHhcNMjUxMjIyMDAwMTAyWhcNMjUxMjIzMDAwMTAyWjAzMTEwLwYDVQQD EyhiNDNmZjFmOGFmNzU5YTJiZDI0NDk5NzhmMmZmZTRmYThhMmFmNWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijjYrfj/jUPjB1IhNXadXvZg2yfM XM5RDdhCOVP8xUiRNoAabWJKDL9DMuGXnk9NkvmgGudDvLSZhLHgDoRxnoQbna1m 8FAmaT42/kMu+RUFxOGltPRDIw2fUyqNF9+UK/AF6fxVmf9I4wZFQWJlbyCtzdCI 02xQNDhAUvfL+xmhL9hqt43vsmeYTS+DKoZ1AbxNlQECzfkkoHw9jfXVq6HwWnUM lhxNKw6VRAfnWqh6LQ3L6D6UdqCNV8PwyaszRduQwqCz6X702zUWqeL8tyG1UHgk cauxPbCBE2h1o3Qd/RhMGd35BXTzw8Qdpj6JZaEINg34vKSxCdkuwHalrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQ/8fivdZor0kSZePL/5PqKKvXoMB8GA1UdIwQY MBaAFMA5XsiCHY+BiUEzkr2HbXvXlcFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0RsZXlJSWRqNEdKUVRPU3ZZZHRlOWVWd1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wMjk2NmEtYTdhZS00MDU0LWFiMzQt ZjdlNzNkZGVmNGUyLzEvd0RsZXlJSWRqNEdKUVRPU3ZZZHRlOWVWd1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wMjk2NmEtYTdhZS00MDU0LWFiMzQtZjdlNzNkZGVmNGUy LzEvd0RsZXlJSWRqNEdKUVRPU3ZZZHRlOWVWd1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzcrV6GF G2HD8eqJJZTG/9KEelCakbmBRNDcXjR6FlHykqqa49wu50iym5XRfh5hl0MFwDa3 mwwwm7GhkWQPppcl1PbQ4R7PqiQS/puIuAGQi5rkKViIMkIAckBvbQLE60qfZZm+ 9JtJMfN3kj6Wt8N1ri49lOy9sPDCCJlNpwGt5A+7mIe28wwdJOLLQZaMc4kL1W4G FHR8p6Vt/ou2TDZfByINuRaDBdJ1EnrSk8ssBKMpiN2cb3ly7SmcBURU7eVD6uki kRA63XasI7DUp9KuGvEsrvJ4NN7aIf/ZZUptSTjGxRMbZk/VrEMvmOltrSr6M1Sq PZv7DcS/S1o2RA== -----END CERTIFICATE-----Generated at Mon Dec 22 10:16:50 2025 by rpki-client