This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft File: wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft (raw, json) Hash identifier: MgSw0B+5H+tBd0TkyOeyS4pb67n01R/nhJ+wTbDdxJc= Subject key identifier: F0:B8:7D:77:40:AB:51:25:56:C8:EA:DC:89:C1:3E:4A:12:E0:7E:A3 Authority key identifier: C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F Certificate issuer: /CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f Certificate serial: 019B262D82AD1F25C6912FAEDBD8FC7E6013 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft Manifest number: 15DB Signing time: Tue 16 Dec 2025 08:01:15 +0000 Manifest this update: Tue 16 Dec 2025 08:01:15 +0000 Manifest next update: Wed 17 Dec 2025 08:01:15 +0000 Files and hashes: 1: ZDdnNxC-Iv1H5A5BkJloJqSNxf8.roa (hash: UCqx4EaKls5iWpImDrWYZpurlTDip+uji9Lqqm7JLEg=) 2: wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl (hash: 1FedVwPiyLXY2vjUQJU8boNlL4Hj+pIyucDYaSqvAuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:82:ad:1f:25:c6:91:2f:ae:db:d8:fc:7e:60:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f Validity Not Before: Dec 16 08:01:15 2025 GMT Not After : Dec 17 08:01:15 2025 GMT Subject: CN=f0b87d7740ab512556c8eadc89c13e4a12e07ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ea:ec:93:31:4a:c1:0c:41:fa:87:9f:b1:44: aa:97:bd:aa:34:51:63:9b:9d:62:0d:32:cd:95:84: 83:03:83:cf:20:22:1b:f4:1c:e7:ee:db:c2:a0:bc: c9:ad:8a:eb:87:ae:59:1f:8f:46:d4:5e:5a:68:28: ef:4f:80:ba:a5:fb:d1:71:9b:7d:e8:55:99:dd:ef: b4:dc:6f:69:de:3b:48:5e:e2:15:86:15:1e:61:15: bf:f7:7e:5c:31:00:fd:a0:c6:06:0a:c6:a4:3a:bc: 53:1b:08:7e:94:40:13:f8:2c:db:74:d3:71:44:7f: e2:db:e6:ea:b8:ff:c6:55:16:71:4f:11:b6:46:ca: 7c:30:bf:4b:27:7e:a6:af:8f:4d:69:3d:5a:5d:fc: 65:7d:ad:a1:5d:ef:fc:37:4c:62:46:ac:74:4e:36: 3c:bb:6d:ea:75:3e:3e:f9:ba:df:18:f0:98:06:c0: f7:2a:b6:21:2c:71:13:40:98:ba:c0:61:eb:e7:3c: dc:8c:ca:05:15:fc:bd:b9:36:da:05:2f:98:7d:53: ae:6a:c4:89:6a:5d:07:99:85:1a:a8:49:3c:84:04: 10:dd:ea:06:47:06:48:e0:72:2c:07:7e:6c:44:bc: 28:fd:c6:d6:a0:2d:09:e2:48:6a:73:7b:c5:2a:23: 9e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B8:7D:77:40:AB:51:25:56:C8:EA:DC:89:C1:3E:4A:12:E0:7E:A3 X509v3 Authority Key Identifier: keyid:C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:94:93:c3:2e:7f:96:3a:7c:29:56:47:8c:d5:64:68:16:f7: 35:fb:db:21:6c:e7:15:51:96:71:67:3e:9e:d8:e9:60:be:d5: 2f:84:95:ce:90:56:aa:b6:d7:15:21:0d:73:b8:1c:9e:63:2a: 7e:bd:cc:52:01:2d:3c:4f:94:48:d7:be:a9:1a:5a:2d:1b:4b: 2d:56:d1:5d:a7:07:cc:85:78:5c:ea:17:c6:44:36:49:bc:03: f4:d7:4c:e6:25:c3:84:ab:50:17:43:3b:30:b5:e4:d5:83:a5: 5d:e7:ae:b9:9b:dd:4e:97:06:b3:97:4b:78:3c:3a:04:8c:2f: 74:3d:88:9e:37:aa:1a:5d:7a:4d:b3:e4:0a:f6:c0:70:19:7f: bf:85:57:e1:ff:b7:3f:f1:a4:da:c6:6e:4d:b3:0a:f7:82:f7: e9:51:d8:88:9e:33:e3:8a:ed:b7:09:5c:2e:2f:80:b3:74:c7: d9:8c:e6:e8:bf:ab:0b:ca:4b:76:b2:81:00:00:1e:95:aa:b2: 01:f3:db:97:d1:03:c2:e0:65:10:cf:93:26:05:0d:18:45:2a: da:7d:de:de:83:3c:e1:a5:e8:03:7b:0d:8f:21:66:5f:a2:94: 2f:45:b0:eb:64:05:d3:8d:bc:9c:5d:a0:4a:1c:30:f3:f4:b2: 7f:f7:e4:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLYKtHyXGkS+u29j8fmATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMzFkNDY1NjE3NDRhNjgxMDE2YzhkNmY5YTYxYjljMTdj YjdmMGYwHhcNMjUxMjE2MDgwMTE1WhcNMjUxMjE3MDgwMTE1WjAzMTEwLwYDVQQD EyhmMGI4N2Q3NzQwYWI1MTI1NTZjOGVhZGM4OWMxM2U0YTEyZTA3ZWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmurskzFKwQxB+oefsUSql72qNFFj m51iDTLNlYSDA4PPICIb9Bzn7tvCoLzJrYrrh65ZH49G1F5aaCjvT4C6pfvRcZt9 6FWZ3e+03G9p3jtIXuIVhhUeYRW/935cMQD9oMYGCsakOrxTGwh+lEAT+CzbdNNx RH/i2+bquP/GVRZxTxG2Rsp8ML9LJ36mr49NaT1aXfxlfa2hXe/8N0xiRqx0TjY8 u23qdT4++brfGPCYBsD3KrYhLHETQJi6wGHr5zzcjMoFFfy9uTbaBS+YfVOuasSJ al0HmYUaqEk8hAQQ3eoGRwZI4HIsB35sRLwo/cbWoC0J4khqc3vFKiOeyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPC4fXdAq1ElVsjq3InBPkoS4H6jMB8GA1UdIwQY MBaAFMEx1GVhdEpoEBbI1vmmG5wXy38PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1RIVVpXRjBTbWdRRnNqVy1hWWJuQmZMZnc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84MmJhOWQtMzg4Mi00N2ZkLTkxZDUt NGI3ZTVjNWE5ZDRiLzEvd1RIVVpXRjBTbWdRRnNqVy1hWWJuQmZMZnc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi84MmJhOWQtMzg4Mi00N2ZkLTkxZDUtNGI3ZTVjNWE5ZDRi LzEvd1RIVVpXRjBTbWdRRnNqVy1hWWJuQmZMZnc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJSTwy5/ ljp8KVZHjNVkaBb3NfvbIWznFVGWcWc+ntjpYL7VL4SVzpBWqrbXFSENc7gcnmMq fr3MUgEtPE+USNe+qRpaLRtLLVbRXacHzIV4XOoXxkQ2SbwD9NdM5iXDhKtQF0M7 MLXk1YOlXeeuuZvdTpcGs5dLeDw6BIwvdD2InjeqGl16TbPkCvbAcBl/v4VX4f+3 P/Gk2sZuTbMK94L36VHYiJ4z44rttwlcLi+As3TH2Yzm6L+rC8pLdrKBAAAelaqy AfPbl9EDwuBlEM+TJgUNGEUq2n3e3oM84aXoA3sNjyFmX6KUL0Ww62QF0428nF2g Shww8/Syf/fkPA== -----END CERTIFICATE-----Generated at Tue Dec 16 11:47:09 2025 by rpki-client