This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft File: w0CU4yNtzRyDURN5Gjgk2ilz35s.mft (raw, json) Hash identifier: 3/6KQL8EZmEyGJ3uAwneCitGk0r/XNhfSy9EIMuc6EA= Subject key identifier: F0:74:3C:06:A6:76:61:3B:D9:5A:98:0D:41:48:5C:A3:97:AF:16:53 Authority key identifier: C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B Certificate issuer: /CN=c34094e3236dcd1c835113791a3824da2973df9b Certificate serial: 019B386A0602B00149C5288CDE67072045F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft Manifest number: 0120 Signing time: Fri 19 Dec 2025 21:00:30 +0000 Manifest this update: Fri 19 Dec 2025 21:00:30 +0000 Manifest next update: Sat 20 Dec 2025 21:00:30 +0000 Files and hashes: 1: 4RPSqbfmeC-IC3WR5JrPY-ti6aQ.roa (hash: egyP6+hpVOsfhjTSw14Ho98ZzzCiujpdZ4z2/ZYR+NI=) 2: E1huK4lRaNqnfDwjhKC7S27samY.roa (hash: 5eWDICwAkK513LsxaFUCZCYFQIVOjrg6WQ+rcwXWfbg=) 3: V7FxeBgowMJ9uzRZi_USZCw6XMI.roa (hash: tBwxfUXaS851zDbs0JMu4PFLXBxOjlI4hBYncc4yuPg=) 4: w0CU4yNtzRyDURN5Gjgk2ilz35s.crl (hash: 5sysz4hu1ARbxDS8yrzRHeuZT5inzMDVD2ux8P5pppE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:06:02:b0:01:49:c5:28:8c:de:67:07:20:45:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c34094e3236dcd1c835113791a3824da2973df9b Validity Not Before: Dec 19 21:00:30 2025 GMT Not After : Dec 20 21:00:30 2025 GMT Subject: CN=f0743c06a676613bd95a980d41485ca397af1653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:20:a8:e4:68:19:ed:7c:a4:62:93:4c:85:e1: bc:31:03:db:02:f0:de:a9:7e:f8:ae:3d:66:39:58: 1f:f1:84:8b:16:a6:98:33:b2:b6:81:09:15:e2:4f: 01:df:cc:cb:38:f2:4b:5f:6e:d7:5a:bb:c7:82:19: 0a:85:a5:82:dc:18:6e:89:6d:12:ef:a3:f1:e2:05: 51:12:20:5f:88:e5:3f:a0:56:56:3e:d0:5a:d5:14: 26:27:3f:e4:36:76:90:7b:43:37:74:e2:57:5d:88: 2c:37:86:02:c0:ae:ae:83:81:8f:f7:94:28:5b:e1: 22:e6:9a:58:d6:a6:a4:05:eb:18:0b:07:e1:bd:88: d2:ee:26:4d:bb:a4:96:25:1c:3e:0c:b5:3f:a5:0b: 22:24:3e:c0:90:68:d7:c3:c1:9a:bb:a4:a8:cb:15: ee:95:cc:2d:9c:73:49:9a:84:ca:c7:f9:58:13:c1: ef:62:63:0d:77:b6:3f:fb:aa:7e:ba:32:18:43:28: 42:43:c1:d3:c0:92:d3:a2:15:3a:fd:23:d0:5b:f4: 4d:a4:78:a5:92:66:b9:c9:ed:05:56:d5:bf:16:4a: f1:b4:ed:41:b2:8d:17:06:86:57:5e:e3:93:55:a9: 1b:55:4a:88:a5:67:04:b4:e4:cf:f5:57:e0:69:cd: e1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:74:3C:06:A6:76:61:3B:D9:5A:98:0D:41:48:5C:A3:97:AF:16:53 X509v3 Authority Key Identifier: keyid:C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:03:c1:97:64:7d:ab:5e:50:74:02:9b:99:7d:ad:95:98:00: 8d:56:67:8e:f8:1a:e8:03:1f:23:bc:c8:2e:c1:d9:2b:49:7c: c7:42:81:02:99:43:ca:b0:07:21:bc:6e:9b:53:d1:b0:aa:12: d6:41:cf:f2:55:28:72:fb:95:ee:fa:86:39:25:49:9d:a7:41: 30:b3:ed:74:43:e8:bf:d6:ac:fe:85:a2:43:46:d6:cf:13:98: 33:0c:5d:16:a2:8a:76:c7:65:96:31:b5:cf:a3:d9:5a:3c:38: a6:a7:0f:c0:96:a7:fc:62:71:ea:a0:f3:a2:62:3a:a6:9f:f7: bb:d8:81:4b:c8:6d:be:d5:f2:a4:d7:3e:59:e6:88:db:62:86: 1b:49:c8:0b:07:cc:19:6a:ae:2c:9a:eb:9c:24:5d:56:e1:5e: 41:54:21:e9:8d:af:87:b5:75:e7:b9:84:f4:e3:31:04:0d:e7: f4:2e:fa:8c:d6:c4:50:12:87:86:21:cf:ae:c1:e0:e8:96:6d: 85:3e:12:84:95:6f:d4:3c:8d:2a:2e:60:19:f8:e5:ae:db:ff: 1c:1d:55:5e:7a:ac:ce:3e:b8:04:e3:fe:b6:6d:e2:84:e7:10: 15:d0:cc:18:80:0f:04:51:92:70:47:ca:57:ce:13:f7:62:4b: c0:5b:2b:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4agYCsAFJxSiM3mcHIEX3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNDA5NGUzMjM2ZGNkMWM4MzUxMTM3OTFhMzgyNGRhMjk3 M2RmOWIwHhcNMjUxMjE5MjEwMDMwWhcNMjUxMjIwMjEwMDMwWjAzMTEwLwYDVQQD EyhmMDc0M2MwNmE2NzY2MTNiZDk1YTk4MGQ0MTQ4NWNhMzk3YWYxNjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCCo5GgZ7XykYpNMheG8MQPbAvDe qX74rj1mOVgf8YSLFqaYM7K2gQkV4k8B38zLOPJLX27XWrvHghkKhaWC3BhuiW0S 76Px4gVREiBfiOU/oFZWPtBa1RQmJz/kNnaQe0M3dOJXXYgsN4YCwK6ug4GP95Qo W+Ei5ppY1qakBesYCwfhvYjS7iZNu6SWJRw+DLU/pQsiJD7AkGjXw8Gau6SoyxXu lcwtnHNJmoTKx/lYE8HvYmMNd7Y/+6p+ujIYQyhCQ8HTwJLTohU6/SPQW/RNpHil kma5ye0FVtW/FkrxtO1Bso0XBoZXXuOTVakbVUqIpWcEtOTP9Vfgac3hkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPB0PAamdmE72VqYDUFIXKOXrxZTMB8GA1UdIwQY MBaAFMNAlOMjbc0cg1ETeRo4JNopc9+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzBDVTR5TnR6UnlEVVJONUdqZ2syaWx6MzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jZmIyNTEtOTIzZi00MGMxLTk4MzIt ZThhMzlkZDYwODY0LzEvdzBDVTR5TnR6UnlEVVJONUdqZ2syaWx6MzVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9jZmIyNTEtOTIzZi00MGMxLTk4MzItZThhMzlkZDYwODY0 LzEvdzBDVTR5TnR6UnlEVVJONUdqZ2syaWx6MzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQPBl2R9 q15QdAKbmX2tlZgAjVZnjvga6AMfI7zILsHZK0l8x0KBAplDyrAHIbxum1PRsKoS 1kHP8lUocvuV7vqGOSVJnadBMLPtdEPov9as/oWiQ0bWzxOYMwxdFqKKdsdlljG1 z6PZWjw4pqcPwJan/GJx6qDzomI6pp/3u9iBS8htvtXypNc+WeaI22KGG0nICwfM GWquLJrrnCRdVuFeQVQh6Y2vh7V157mE9OMxBA3n9C76jNbEUBKHhiHPrsHg6JZt hT4ShJVv1DyNKi5gGfjlrtv/HB1VXnqszj64BOP+tm3ihOcQFdDMGIAPBFGScEfK V84T92JLwFsr7g== -----END CERTIFICATE-----Generated at Fri Dec 19 22:37:42 2025 by rpki-client