This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft File: wN3S1PAw-jY4wEvmNu-T0oknFlI.mft (raw, json) Hash identifier: 4Nab1r6SxMoQVftkMSJnbrROIeTexalIuMYDnq5JJps= Subject key identifier: 09:EB:38:D7:AE:E9:82:62:78:40:71:4D:F5:AC:AE:FC:1C:1B:3B:F8 Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52 Certificate issuer: /CN=c0ddd2d4f030fa3638c04be636ef93d289271652 Certificate serial: 019B085A237A63EBBA1E04EE8B4C7927E27F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft Manifest number: 05AE Signing time: Wed 10 Dec 2025 13:01:23 +0000 Manifest this update: Wed 10 Dec 2025 13:01:23 +0000 Manifest next update: Thu 11 Dec 2025 13:01:23 +0000 Files and hashes: 1: 7XfhLun6Ve5uRxXwPsgdrE6D-fI.roa (hash: b8AATSifx7/LvpsKfDCuwWcrOC9fgkYZg2ZM6+VpEfM=) 2: iuHoct3zHKPAQY0zJWbgQODPfEo.roa (hash: Un9DAj/KSTfz3PzRpucfMK4GqYVgsTE2tiPdLJ964Po=) 3: wN3S1PAw-jY4wEvmNu-T0oknFlI.crl (hash: ngbPpxxOeGgsbAbw7ljn6WnPBein4KnmRqzDP/GjwSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:5a:23:7a:63:eb:ba:1e:04:ee:8b:4c:79:27:e2:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652 Validity Not Before: Dec 10 13:01:23 2025 GMT Not After : Dec 11 13:01:23 2025 GMT Subject: CN=09eb38d7aee982627840714df5acaefc1c1b3bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:75:db:b8:d4:42:27:3e:60:fd:7f:4b:a4:25: 79:05:9f:a5:61:b5:ac:63:a2:b7:59:14:e3:ba:71: 7c:29:7a:6a:33:d7:ec:75:2f:61:70:81:7b:a0:27: 73:ff:b2:f6:c6:1a:a5:de:66:c7:a0:71:a6:df:a6: 2e:07:6e:19:17:3b:ff:eb:40:ad:f0:2b:21:3c:cf: 82:af:6e:af:31:18:96:a4:e6:8b:91:16:d8:21:c3: dc:2b:9d:d1:14:45:58:9a:23:a8:cf:9a:ff:42:5f: c9:46:b8:7e:25:ec:86:68:82:50:e0:c6:b3:99:c0: f3:cf:22:dc:11:3d:07:6c:b0:98:25:d7:55:e7:2c: 67:d3:59:b0:73:87:4f:11:4e:3f:42:ab:fe:f3:01: c4:c4:f0:8c:33:19:f5:9e:4d:23:52:5d:d3:20:26: bf:6c:74:37:dc:29:59:f4:27:f1:dd:14:70:0e:58: 44:c5:d7:56:fe:a3:d5:0d:9f:8b:31:95:94:74:34: c7:95:24:43:0a:7f:e9:c0:b0:0f:c0:b8:51:c8:8c: 88:3d:15:97:f2:9e:39:9a:ec:5e:0e:b9:34:a0:b9: 78:16:3c:b7:a6:c3:20:96:0f:09:b0:59:16:c5:83: 26:a9:af:15:1d:10:5e:4b:e8:09:ec:a2:28:1d:10: 87:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EB:38:D7:AE:E9:82:62:78:40:71:4D:F5:AC:AE:FC:1C:1B:3B:F8 X509v3 Authority Key Identifier: keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:00:50:3d:58:5f:fa:58:34:1b:d0:b9:67:0e:29:22:af:1d: ca:1c:8c:7e:89:45:85:a6:cc:12:b3:ce:80:b8:ee:ce:23:17: de:9e:dc:38:c6:39:05:41:78:73:fa:56:c0:9b:b6:3a:c1:f1: 9b:24:42:98:7b:50:8b:79:17:a1:be:38:74:02:d6:6c:7e:b5: 74:b3:5a:2d:23:07:8e:c7:7f:4f:82:68:a8:2e:91:90:29:0c: a8:2c:5a:b0:2f:99:f4:b5:e3:51:b3:06:99:d8:dc:6c:30:6e: 0f:ce:17:ea:9c:59:5e:30:f2:0f:55:f1:15:da:56:1d:0b:ec: c9:d2:c6:db:32:7a:ff:a0:f7:36:f2:41:f2:6f:be:7d:b7:e5: 8a:d0:94:70:9f:d3:41:08:67:a1:90:70:fa:09:b9:83:4b:d5: 3e:5b:80:5b:88:1c:d1:b5:b8:67:f9:93:fc:ab:37:6b:ec:6e: c8:f5:97:be:3c:f8:79:4b:15:10:c8:33:2d:1b:a5:88:d1:4d: 4e:9b:9a:2d:3d:db:9a:5c:30:77:ce:c6:3e:42:fa:f3:67:d5: 1d:65:6b:8d:88:c6:60:84:3c:4c:a9:22:2d:93:b5:d4:0f:3b: f8:bc:fa:54:aa:4f:64:9f:fd:fe:66:34:93:74:1d:fe:ef:61: 9b:21:d9:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIWiN6Y+u6HgTui0x5J+J/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZGRkMmQ0ZjAzMGZhMzYzOGMwNGJlNjM2ZWY5M2QyODky NzE2NTIwHhcNMjUxMjEwMTMwMTIzWhcNMjUxMjExMTMwMTIzWjAzMTEwLwYDVQQD EygwOWViMzhkN2FlZTk4MjYyNzg0MDcxNGRmNWFjYWVmYzFjMWIzYmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHXbuNRCJz5g/X9LpCV5BZ+lYbWs Y6K3WRTjunF8KXpqM9fsdS9hcIF7oCdz/7L2xhql3mbHoHGm36YuB24ZFzv/60Ct 8CshPM+Cr26vMRiWpOaLkRbYIcPcK53RFEVYmiOoz5r/Ql/JRrh+JeyGaIJQ4Maz mcDzzyLcET0HbLCYJddV5yxn01mwc4dPEU4/Qqv+8wHExPCMMxn1nk0jUl3TICa/ bHQ33ClZ9Cfx3RRwDlhExddW/qPVDZ+LMZWUdDTHlSRDCn/pwLAPwLhRyIyIPRWX 8p45muxeDrk0oLl4Fjy3psMglg8JsFkWxYMmqa8VHRBeS+gJ7KIoHRCHCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnrONeu6YJieEBxTfWsrvwcGzv4MB8GA1UdIwQY MBaAFMDd0tTwMPo2OMBL5jbvk9KJJxZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84NjgwMmUtM2Y0My00YmNhLTljYzIt NGZiNDA0ODVmZjdiLzEvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My84NjgwMmUtM2Y0My00YmNhLTljYzItNGZiNDA0ODVmZjdi LzEvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwBQPVhf +lg0G9C5Zw4pIq8dyhyMfolFhabMErPOgLjuziMX3p7cOMY5BUF4c/pWwJu2OsHx myRCmHtQi3kXob44dALWbH61dLNaLSMHjsd/T4JoqC6RkCkMqCxasC+Z9LXjUbMG mdjcbDBuD84X6pxZXjDyD1XxFdpWHQvsydLG2zJ6/6D3NvJB8m++fbflitCUcJ/T QQhnoZBw+gm5g0vVPluAW4gc0bW4Z/mT/Ks3a+xuyPWXvjz4eUsVEMgzLRuliNFN TpuaLT3bmlwwd87GPkL682fVHWVrjYjGYIQ8TKkiLZO11A87+Lz6VKpPZJ/9/mY0 k3Qd/u9hmyHZZg== -----END CERTIFICATE-----Generated at Wed Dec 10 18:24:05 2025 by rpki-client