This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft File: w98u83AH1U-Gu6J1c9M61pXJ7lw.mft (raw, json) Hash identifier: eCuhNG6ZSE1E+uqqxsrRwQpX7O2O6tMCeHHDhdWfe5w= Subject key identifier: C6:C1:D8:83:69:20:DF:46:10:96:81:41:4B:9D:8A:FB:F5:1F:FD:C6 Authority key identifier: C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C Certificate issuer: /CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c Certificate serial: 019B104A3B8B37A961F8FA00D22D3DB595A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft Manifest number: 0C1F Signing time: Fri 12 Dec 2025 02:00:58 +0000 Manifest this update: Fri 12 Dec 2025 02:00:58 +0000 Manifest next update: Sat 13 Dec 2025 02:00:58 +0000 Files and hashes: 1: MSS8bajhBaU5VhOzrfA52HmDj84.roa (hash: YEJDRIIvwqwjWO6NfGeQmsZ7v3rXxoUkegHU1CblIHc=) 2: w98u83AH1U-Gu6J1c9M61pXJ7lw.crl (hash: pBEz1UNJAnVaJLzgJ/wduBEPe7utOVMgeQa0IFjVMio=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:4a:3b:8b:37:a9:61:f8:fa:00:d2:2d:3d:b5:95:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c Validity Not Before: Dec 12 02:00:58 2025 GMT Not After : Dec 13 02:00:58 2025 GMT Subject: CN=c6c1d8836920df46109681414b9d8afbf51ffdc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0a:8a:e3:b7:47:28:af:33:82:6a:54:92:89: 0d:94:e5:c2:bd:6e:dc:66:23:6b:fc:62:c5:2c:5f: ae:b4:3e:75:f1:cb:fc:4d:0e:3e:9e:63:63:33:ef: e2:17:f4:62:cc:d9:04:b5:a9:0f:e7:03:67:19:ef: be:20:ec:4a:73:80:ad:0b:18:71:e8:c0:8b:ae:14: 62:e7:6c:b2:62:24:05:91:77:4e:32:e9:19:a3:e4: ae:9a:86:12:92:48:22:ea:6e:ae:f1:7c:7c:01:4c: b5:63:3c:e6:13:eb:3d:15:e6:5b:c7:19:7e:db:a4: 5c:65:8f:99:e0:ea:fe:74:f8:3e:5c:89:7a:c1:9f: b5:ff:e1:90:45:dc:81:54:d4:ec:f0:e0:4c:27:54: 13:17:9b:eb:c2:d6:e7:96:f3:4f:6b:7e:96:49:68: d5:06:68:bb:6d:51:fe:9f:ae:a3:d0:7d:75:e8:e1: fb:c2:8a:fd:50:3f:6e:6f:05:8a:16:7c:48:97:75: 86:81:d5:87:ea:30:71:5a:b0:56:0b:4e:55:43:09: 3e:c9:6d:34:86:ee:57:c0:01:41:44:30:8a:c5:8e: 22:80:f3:1a:4f:58:44:d4:8e:d7:63:a9:05:4b:27: 89:ce:8b:8f:f6:02:60:e0:bf:16:4a:06:3a:aa:17: b2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C1:D8:83:69:20:DF:46:10:96:81:41:4B:9D:8A:FB:F5:1F:FD:C6 X509v3 Authority Key Identifier: keyid:C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:25:23:e1:96:0b:21:44:da:04:de:41:c9:59:d0:1d:71:a3: a9:76:6a:bf:43:61:55:25:4a:2b:a2:b5:8d:19:4f:57:7c:0d: 66:f3:06:6d:e9:49:b7:b4:be:d2:c7:c5:20:9c:75:3b:32:dd: 64:4b:1f:55:62:50:22:ba:c1:5e:cc:28:f3:f1:0a:6c:eb:76: 39:e7:39:64:9c:26:68:83:3b:41:7f:00:0f:70:ef:d1:04:c0: a1:98:7f:f4:a5:c4:0c:20:e8:08:48:26:f0:85:d8:6a:51:d5: 72:8e:4e:80:b0:32:65:e6:fa:4f:1c:af:10:f3:e9:0d:9d:97: 36:5b:4b:24:35:c9:f2:f9:ad:4a:97:09:b1:90:fb:99:93:db: 48:bb:f0:53:22:a4:60:c5:96:50:65:e6:cd:0f:77:8e:fe:c2: 51:54:71:f2:39:95:06:c3:3e:6e:f1:e0:b5:40:f0:2d:f5:86: 3a:3f:e3:3a:c1:f9:d0:46:18:48:4e:3a:f8:6b:2c:78:dc:bd: d7:8a:52:87:bb:50:3c:c7:e0:f6:a4:28:64:ce:58:73:be:aa: fe:52:e9:6a:6e:d5:14:1e:92:b1:fe:f6:cf:8e:13:c8:f3:0d: 78:79:f3:53:8b:4e:2e:af:93:d3:d3:19:f0:4a:dd:c7:a9:92: c5:52:04:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSjuLN6lh+PoA0i09tZWjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZGYyZWYzNzAwN2Q1NGY4NmJiYTI3NTczZDMzYWQ2OTVj OWVlNWMwHhcNMjUxMjEyMDIwMDU4WhcNMjUxMjEzMDIwMDU4WjAzMTEwLwYDVQQD EyhjNmMxZDg4MzY5MjBkZjQ2MTA5NjgxNDE0YjlkOGFmYmY1MWZmZGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgqK47dHKK8zgmpUkokNlOXCvW7c ZiNr/GLFLF+utD518cv8TQ4+nmNjM+/iF/RizNkEtakP5wNnGe++IOxKc4CtCxhx 6MCLrhRi52yyYiQFkXdOMukZo+SumoYSkkgi6m6u8Xx8AUy1YzzmE+s9FeZbxxl+ 26RcZY+Z4Or+dPg+XIl6wZ+1/+GQRdyBVNTs8OBMJ1QTF5vrwtbnlvNPa36WSWjV Bmi7bVH+n66j0H116OH7wor9UD9ubwWKFnxIl3WGgdWH6jBxWrBWC05VQwk+yW00 hu5XwAFBRDCKxY4igPMaT1hE1I7XY6kFSyeJzouP9gJg4L8WSgY6qhey1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbB2INpIN9GEJaBQUudivv1H/3GMB8GA1UdIwQY MBaAFMPfLvNwB9VPhruidXPTOtaVye5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85YTk3ZjAtNTBiNi00ODQ0LTg5ZDQt MjNhMjc2YTQyOGFiLzEvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi85YTk3ZjAtNTBiNi00ODQ0LTg5ZDQtMjNhMjc2YTQyOGFi LzEvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCUj4ZYL IUTaBN5ByVnQHXGjqXZqv0NhVSVKK6K1jRlPV3wNZvMGbelJt7S+0sfFIJx1OzLd ZEsfVWJQIrrBXswo8/EKbOt2Oec5ZJwmaIM7QX8AD3Dv0QTAoZh/9KXEDCDoCEgm 8IXYalHVco5OgLAyZeb6TxyvEPPpDZ2XNltLJDXJ8vmtSpcJsZD7mZPbSLvwUyKk YMWWUGXmzQ93jv7CUVRx8jmVBsM+bvHgtUDwLfWGOj/jOsH50EYYSE46+GsseNy9 14pSh7tQPMfg9qQoZM5Yc76q/lLpam7VFB6Ssf72z44TyPMNeHnzU4tOLq+T09MZ 8Erdx6mSxVIEIg== -----END CERTIFICATE-----Generated at Fri Dec 12 08:01:01 2025 by rpki-client