This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft File: DWutPz3QrFVvP3qA0cabn9lk3Ww.mft (raw, json) Hash identifier: PW70BZV+3+5tnQeTUFy294irxBK4RwXs4MMZCJ1rgLk= Subject key identifier: E0:6E:8C:AC:F3:ED:AC:69:0F:62:80:44:30:65:7A:31:F9:75:7C:A7 Authority key identifier: 0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C Certificate issuer: /CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c Certificate serial: 019B0F0037732666D08637D6297ADF425DEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft Manifest number: 116C Signing time: Thu 11 Dec 2025 20:00:30 +0000 Manifest this update: Thu 11 Dec 2025 20:00:30 +0000 Manifest next update: Fri 12 Dec 2025 20:00:30 +0000 Files and hashes: 1: DWutPz3QrFVvP3qA0cabn9lk3Ww.crl (hash: +kNY6BEN+vI7Gdr2iWalA1SoaMVXUvsOdXzj7MR8cds=) 2: clB1f_NiIoBJs06I1N2ua9KcprY.roa (hash: Hc2uBMDIF+2ALpimHYsk+DChTWTq8OrIlMci+ZWtnyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 20:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:37:73:26:66:d0:86:37:d6:29:7a:df:42:5d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c Validity Not Before: Dec 11 20:00:30 2025 GMT Not After : Dec 12 20:00:30 2025 GMT Subject: CN=e06e8cacf3edac690f62804430657a31f9757ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:be:19:ae:09:6c:3e:5b:6f:16:ee:dc:58:3a: 6a:2e:0b:16:2e:87:eb:8d:7c:f2:62:7d:57:0c:52: 17:cc:17:f5:97:45:8a:63:f0:69:94:0a:7e:48:e5: 7a:43:bf:7c:e7:2c:4d:75:58:ee:24:19:99:01:3d: 2f:36:13:f3:59:e9:26:55:72:89:8d:09:3d:31:d3: 5c:6c:1f:ee:51:ae:66:d6:5d:81:ee:10:fd:29:94: f2:ef:a8:71:7d:17:82:e3:06:8a:a7:01:76:40:44: 88:95:94:c7:5f:27:52:c8:91:2c:32:e9:5c:76:4c: ea:a5:58:71:d2:1a:f7:66:57:56:51:4f:3b:27:af: 1b:c6:d5:e9:d4:2b:71:fb:4a:fc:09:95:14:72:47: 70:09:a1:6d:8f:51:c0:e3:2b:b0:02:f2:d1:7b:64: 0e:4e:34:bf:75:23:42:3a:ac:61:13:8c:4e:e5:81: 68:81:6f:d8:72:8f:c7:41:9d:94:94:e6:f2:79:0f: 8a:45:b2:cc:f1:c3:40:7f:28:15:d9:e3:fa:99:94: ce:85:f4:c3:18:33:16:4c:33:ca:3c:90:41:23:e9: 9a:7a:d9:0a:66:21:0f:6c:71:e8:96:57:f0:3d:ae: fa:43:4a:2f:f1:ac:ae:48:cd:9d:16:0f:ea:72:64: 6e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6E:8C:AC:F3:ED:AC:69:0F:62:80:44:30:65:7A:31:F9:75:7C:A7 X509v3 Authority Key Identifier: keyid:0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:d9:bf:31:9a:ec:2b:5e:49:f2:dd:d3:3f:bf:ef:32:0e:a9: 7f:29:f9:d3:e2:fd:2e:c3:c9:12:91:6e:26:4d:48:67:72:1c: 9f:d1:61:e1:f4:f1:1c:1a:98:8c:82:11:23:ae:9e:64:95:be: 98:0e:15:c6:fa:e8:87:3e:1e:36:02:55:51:cc:11:46:fb:99: 24:d5:a0:04:ea:e0:d9:e2:04:3f:b1:d4:e0:bc:85:06:e6:c3: d5:39:9b:b8:6d:19:a7:a7:30:7e:cc:34:86:07:83:62:19:16: 08:e8:74:8f:c3:5b:90:50:50:d9:f9:db:61:91:5a:f5:d7:b8: 67:a7:4f:9a:72:f1:3f:57:fb:07:bb:28:5f:d9:0d:a9:0d:f1: 05:e9:ed:d6:74:06:fe:8f:24:f9:e6:63:ec:ad:89:d3:f0:8e: d0:ba:73:36:60:58:bd:65:38:57:11:bb:3f:61:de:b7:05:10: de:df:24:50:a5:d2:a4:57:25:32:e9:e1:7e:c6:ad:34:d7:17: cf:50:b5:88:62:0a:9d:19:f6:37:7e:de:08:4a:4b:c9:26:0a: 60:9a:18:50:54:ab:ef:5c:25:24:aa:68:1f:f8:6a:0d:78:fb: 2a:54:f2:94:3c:7d:9a:c6:58:d0:94:eb:68:f7:c3:23:b9:b8: ff:fe:62:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPADdzJmbQhjfWKXrfQl3sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNmJhZDNmM2RkMGFjNTU2ZjNmN2E4MGQxYzY5YjlmZDk2 NGRkNmMwHhcNMjUxMjExMjAwMDMwWhcNMjUxMjEyMjAwMDMwWjAzMTEwLwYDVQQD EyhlMDZlOGNhY2YzZWRhYzY5MGY2MjgwNDQzMDY1N2EzMWY5NzU3Y2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3r4ZrglsPltvFu7cWDpqLgsWLofr jXzyYn1XDFIXzBf1l0WKY/BplAp+SOV6Q7985yxNdVjuJBmZAT0vNhPzWekmVXKJ jQk9MdNcbB/uUa5m1l2B7hD9KZTy76hxfReC4waKpwF2QESIlZTHXydSyJEsMulc dkzqpVhx0hr3ZldWUU87J68bxtXp1Ctx+0r8CZUUckdwCaFtj1HA4yuwAvLRe2QO TjS/dSNCOqxhE4xO5YFogW/Yco/HQZ2UlObyeQ+KRbLM8cNAfygV2eP6mZTOhfTD GDMWTDPKPJBBI+maetkKZiEPbHHollfwPa76Q0ov8ayuSM2dFg/qcmRuSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBujKzz7axpD2KARDBlejH5dXynMB8GA1UdIwQY MBaAFA1rrT890KxVbz96gNHGm5/ZZN1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFd1dFB6M1FyRlZ2UDNxQTBjYWJuOWxrM1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hY2E3MzYtNDA4OC00ODBiLWFmNWYt ODliNmMyMTlkOTBiLzEvRFd1dFB6M1FyRlZ2UDNxQTBjYWJuOWxrM1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9hY2E3MzYtNDA4OC00ODBiLWFmNWYtODliNmMyMTlkOTBi LzEvRFd1dFB6M1FyRlZ2UDNxQTBjYWJuOWxrM1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtm/MZrs K15J8t3TP7/vMg6pfyn50+L9LsPJEpFuJk1IZ3Icn9Fh4fTxHBqYjIIRI66eZJW+ mA4Vxvrohz4eNgJVUcwRRvuZJNWgBOrg2eIEP7HU4LyFBubD1TmbuG0Zp6cwfsw0 hgeDYhkWCOh0j8NbkFBQ2fnbYZFa9de4Z6dPmnLxP1f7B7soX9kNqQ3xBent1nQG /o8k+eZj7K2J0/CO0LpzNmBYvWU4VxG7P2HetwUQ3t8kUKXSpFclMunhfsatNNcX z1C1iGIKnRn2N37eCEpLySYKYJoYUFSr71wlJKpoH/hqDXj7KlTylDx9msZY0JTr aPfDI7m4//5iqA== -----END CERTIFICATE-----Generated at Fri Dec 12 06:11:44 2025 by rpki-client