This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft File: wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft (raw, json) Hash identifier: WeC3KYiVqnn7gsummGl1rXr3GgG+m40dd/xMwZJmRJg= Subject key identifier: B9:01:0A:86:8B:BF:84:AC:66:74:75:80:4A:34:22:A2:7C:DB:73:21 Authority key identifier: C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC Certificate issuer: /CN=c0debc8850b690f1232796911bfe3c4c9aa867dc Certificate serial: 019B0F00C2BEDA91B340FE9650861BD9D28C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft Manifest number: 0476 Signing time: Thu 11 Dec 2025 20:01:06 +0000 Manifest this update: Thu 11 Dec 2025 20:01:06 +0000 Manifest next update: Fri 12 Dec 2025 20:01:06 +0000 Files and hashes: 1: L4zdfpQTMapiD2xjjc9b_8rVphY.roa (hash: X4ulaYGn7ALPkkvP3AdThxBx//teLK+YYJfbh5wE5to=) 2: wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl (hash: YG2FlR5fJG5Ii6Wht0Ev4iA/w2equ53P0wDlmu/bNAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:c2:be:da:91:b3:40:fe:96:50:86:1b:d9:d2:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0debc8850b690f1232796911bfe3c4c9aa867dc Validity Not Before: Dec 11 20:01:06 2025 GMT Not After : Dec 12 20:01:06 2025 GMT Subject: CN=b9010a868bbf84ac667475804a3422a27cdb7321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:28:e1:1c:cd:b6:16:98:fc:7f:96:77:5a:7c: f5:d1:e7:a6:d2:eb:ab:fb:3c:af:59:d9:4a:0d:3f: f6:7c:ca:ab:3b:b9:e0:7d:7d:b3:5b:5b:8d:e0:4d: 2e:ac:d6:d9:ef:29:33:db:47:07:e4:ca:8e:61:db: 83:70:c7:2f:c5:2f:b0:e5:0d:2a:35:e8:4e:eb:4a: 9d:66:7a:73:66:f3:1f:39:6a:d1:70:1a:5e:b6:f9: 81:30:89:0e:6e:a1:46:eb:d5:64:b1:4e:75:ac:9b: ec:c0:ec:cb:a6:9f:f9:29:04:a5:23:5d:0d:c5:09: 1c:f3:36:e8:ae:7f:4b:e3:e8:39:05:88:0c:59:73: d8:00:b6:e8:96:33:1d:9e:37:45:d7:25:47:dd:15: f8:b0:fc:14:11:28:d6:cf:46:55:df:ee:f1:c4:16: 33:46:93:9b:de:76:b7:a2:65:d7:77:54:db:b0:e8: 52:65:b0:54:8e:f4:75:65:c8:50:78:45:84:48:70: 12:ad:8b:85:da:fc:20:96:da:2d:b9:b5:91:95:8b: c8:36:dd:57:9e:4e:53:95:67:b8:c6:36:a1:32:4b: 74:36:82:28:3a:56:b4:db:79:6b:66:aa:bf:f3:9c: e8:9b:36:79:bc:d1:39:55:eb:75:05:ea:d7:d8:02: a0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:01:0A:86:8B:BF:84:AC:66:74:75:80:4A:34:22:A2:7C:DB:73:21 X509v3 Authority Key Identifier: keyid:C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:e8:55:ba:ac:ff:52:31:70:10:49:b9:93:b4:cd:db:23:50: 03:0b:5e:74:21:58:43:81:d9:7b:6d:26:56:06:3c:8a:cd:c9: 62:cc:2f:b7:e7:28:67:58:c7:73:ea:d4:f7:0b:9c:6d:a5:a2: f4:40:0d:fa:c6:43:d9:07:b6:02:a5:b5:b0:26:17:0a:3b:fc: ee:38:b0:3c:10:4a:cc:cc:d0:6d:0b:52:0e:33:af:70:6e:53: 5a:e9:7c:c5:cd:92:27:55:97:4a:f2:b8:7f:83:db:2e:4a:19: 2a:7b:88:d4:ab:4e:2c:ec:0e:46:d5:fb:d2:1f:ef:f0:79:8b: 4a:7b:23:19:0d:88:08:a6:ad:72:04:c9:9d:ad:9f:90:e8:b9: 77:d1:01:b7:ec:3d:3b:23:53:6a:bf:a8:d5:c4:60:a6:d5:98: 7b:40:81:44:94:c2:49:39:a0:36:35:42:2f:51:7e:9e:16:fe: 5d:38:81:f4:20:42:93:1f:7e:df:b2:08:19:cf:6b:42:cd:de: 60:2a:fb:18:a6:96:4e:72:c1:7f:66:4a:98:3c:cc:b3:71:cf: 8e:7f:aa:bc:b3:7b:ac:a1:8a:79:8d:4c:0b:34:10:44:e3:e7: fc:12:b7:d5:34:e7:7d:67:b0:f0:d2:8f:c0:8f:2d:ee:8e:d3: 15:2e:b6:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAMK+2pGzQP6WUIYb2dKMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZGViYzg4NTBiNjkwZjEyMzI3OTY5MTFiZmUzYzRjOWFh ODY3ZGMwHhcNMjUxMjExMjAwMTA2WhcNMjUxMjEyMjAwMTA2WjAzMTEwLwYDVQQD EyhiOTAxMGE4NjhiYmY4NGFjNjY3NDc1ODA0YTM0MjJhMjdjZGI3MzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yjhHM22Fpj8f5Z3Wnz10eem0uur +zyvWdlKDT/2fMqrO7ngfX2zW1uN4E0urNbZ7ykz20cH5MqOYduDcMcvxS+w5Q0q NehO60qdZnpzZvMfOWrRcBpetvmBMIkObqFG69VksU51rJvswOzLpp/5KQSlI10N xQkc8zborn9L4+g5BYgMWXPYALboljMdnjdF1yVH3RX4sPwUESjWz0ZV3+7xxBYz RpOb3na3omXXd1TbsOhSZbBUjvR1ZchQeEWESHASrYuF2vwgltotubWRlYvINt1X nk5TlWe4xjahMkt0NoIoOla023lrZqq/85zomzZ5vNE5Vet1BerX2AKgwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkBCoaLv4SsZnR1gEo0IqJ823MhMB8GA1UdIwQY MBaAFMDevIhQtpDxIyeWkRv+PEyaqGfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd042OGlGQzJrUEVqSjVhUkdfNDhUSnFvWjl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lM2NhNzEtMzZmMC00YzUyLWJjMDEt YzZhYzRkZDdjOGU0LzEvd042OGlGQzJrUEVqSjVhUkdfNDhUSnFvWjl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9lM2NhNzEtMzZmMC00YzUyLWJjMDEtYzZhYzRkZDdjOGU0 LzEvd042OGlGQzJrUEVqSjVhUkdfNDhUSnFvWjl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeehVuqz/ UjFwEEm5k7TN2yNQAwtedCFYQ4HZe20mVgY8is3JYswvt+coZ1jHc+rU9wucbaWi 9EAN+sZD2Qe2AqW1sCYXCjv87jiwPBBKzMzQbQtSDjOvcG5TWul8xc2SJ1WXSvK4 f4PbLkoZKnuI1KtOLOwORtX70h/v8HmLSnsjGQ2ICKatcgTJna2fkOi5d9EBt+w9 OyNTar+o1cRgptWYe0CBRJTCSTmgNjVCL1F+nhb+XTiB9CBCkx9+37IIGc9rQs3e YCr7GKaWTnLBf2ZKmDzMs3HPjn+qvLN7rKGKeY1MCzQQROPn/BK31TTnfWew8NKP wI8t7o7TFS626A== -----END CERTIFICATE-----Generated at Thu Dec 11 23:22:52 2025 by rpki-client