This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft File: w5VnlKe5iREVrTr5RXPnlhsWS6w.mft (raw, json) Hash identifier: 1AFhipnddNBc4tvemoBzMp65E1vJzdsFyURxQLUxP5E= Subject key identifier: 26:3B:1E:7F:03:FB:5E:B4:D4:28:7E:E4:A3:DC:F1:41:8A:11:51:6E Authority key identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC Certificate issuer: /CN=c3956794a7b9891115ad3af94573e7961b164bac Certificate serial: 019B1BAB1BA4527B133F2A31CBC8CE354336 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft Manifest number: 0B68 Signing time: Sun 14 Dec 2025 07:02:37 +0000 Manifest this update: Sun 14 Dec 2025 07:02:37 +0000 Manifest next update: Mon 15 Dec 2025 07:02:37 +0000 Files and hashes: 1: Peoo9gs9EBNgjwn3QmaIgoVdA2I.roa (hash: o5UcaRmySAHefVpyYqfIuBk+qGysWoCNDWxnf1QQroQ=) 2: w5VnlKe5iREVrTr5RXPnlhsWS6w.crl (hash: 1Jqu4ZABnrY3I43JJH0C3vc6lY2GCwa1wb4Xg8fUdJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 07:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:ab:1b:a4:52:7b:13:3f:2a:31:cb:c8:ce:35:43:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3956794a7b9891115ad3af94573e7961b164bac Validity Not Before: Dec 14 07:02:37 2025 GMT Not After : Dec 15 07:02:37 2025 GMT Subject: CN=263b1e7f03fb5eb4d4287ee4a3dcf1418a11516e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:65:0c:6e:17:54:da:42:7b:6a:70:d4:1d:b2: 3a:3b:bf:1c:d5:e7:cc:44:8d:6a:cc:6c:de:3a:66: 89:88:e1:1b:71:28:3b:22:4f:dc:4a:4e:bd:83:94: 1f:55:ee:40:f1:a7:e2:c8:d1:17:54:1d:4b:00:9b: a2:59:a1:eb:01:81:88:2a:d3:98:ea:9a:d8:6d:d8: 51:4b:9f:56:75:dc:42:90:39:6b:3c:95:b4:bc:bd: 5e:b1:98:b1:d3:2b:47:d0:6a:3a:2b:44:cb:0e:f2: c3:f7:c5:36:8e:44:48:ba:77:64:e8:d6:14:31:5a: 2c:44:33:ae:69:f1:4c:c0:70:a4:2e:f7:4a:67:08: 6b:ba:61:6d:7d:2f:05:87:6f:95:34:74:5b:07:30: c6:ae:44:14:e8:c0:28:e9:21:8e:3d:5b:bb:8d:fa: 97:bd:eb:d3:f2:9f:f7:79:54:03:5e:17:c8:50:a8: 22:95:4d:79:91:cd:59:df:b8:3b:20:45:fc:be:b8: 68:00:ed:33:e8:cf:77:62:e1:46:ea:ad:70:b2:17: eb:c3:46:db:a5:31:13:14:59:f8:be:81:38:26:9b: 1a:fe:18:db:fa:ba:4f:4c:eb:03:04:ed:cd:06:ba: 2a:40:0a:c1:a7:e6:88:e1:65:4e:75:bc:3f:55:37: 28:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3B:1E:7F:03:FB:5E:B4:D4:28:7E:E4:A3:DC:F1:41:8A:11:51:6E X509v3 Authority Key Identifier: keyid:C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e3:61:8e:6f:d7:ef:a6:51:fe:ed:ac:1e:c1:c6:a6:f3:09: 06:6c:b5:c7:e0:69:dc:b5:d4:5d:ea:b8:92:0f:7c:06:a8:d0: 96:82:6e:f8:1f:4f:a5:3e:81:e0:af:74:e2:06:18:04:e1:b6: 88:a3:d5:e3:63:43:fe:76:b1:c8:b3:37:cd:ea:b4:4d:ee:27: 78:58:35:dd:55:cd:4e:5d:48:1d:dc:5c:91:b8:7a:40:cc:9d: d8:5d:9f:71:a4:43:ad:69:86:c1:3c:9d:8e:3a:27:67:68:b8: 9c:d2:5e:ca:df:44:b8:4f:c8:88:9c:57:af:7e:7b:d3:fa:b5: 25:29:27:ff:6f:84:49:2c:42:0c:67:5b:9a:ff:46:72:a4:37: ba:1b:aa:95:cd:3f:5d:1b:6a:df:37:81:2a:41:8f:23:2d:63: b7:4a:81:db:22:a4:88:b4:19:1a:82:2e:c4:c9:c7:ef:d8:1c: 26:60:9f:4d:87:2f:09:81:de:0b:e2:bc:2f:36:8f:6b:fb:03: f3:3b:7f:df:47:2b:9b:5f:a2:1c:e8:a4:21:d5:9c:f2:f7:0a: 13:d9:d2:c1:64:f4:fe:3f:c2:eb:2f:c5:c3:a2:f8:75:9e:14: 2a:04:eb:b0:3c:a3:a7:ac:ee:14:e4:e5:e2:d2:aa:ff:f4:bc: 7d:8d:9c:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqxukUnsTPyoxy8jONUM2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOTU2Nzk0YTdiOTg5MTExNWFkM2FmOTQ1NzNlNzk2MWIx NjRiYWMwHhcNMjUxMjE0MDcwMjM3WhcNMjUxMjE1MDcwMjM3WjAzMTEwLwYDVQQD EygyNjNiMWU3ZjAzZmI1ZWI0ZDQyODdlZTRhM2RjZjE0MThhMTE1MTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WUMbhdU2kJ7anDUHbI6O78c1efM RI1qzGzeOmaJiOEbcSg7Ik/cSk69g5QfVe5A8afiyNEXVB1LAJuiWaHrAYGIKtOY 6prYbdhRS59WddxCkDlrPJW0vL1esZix0ytH0Go6K0TLDvLD98U2jkRIundk6NYU MVosRDOuafFMwHCkLvdKZwhrumFtfS8Fh2+VNHRbBzDGrkQU6MAo6SGOPVu7jfqX vevT8p/3eVQDXhfIUKgilU15kc1Z37g7IEX8vrhoAO0z6M93YuFG6q1wshfrw0bb pTETFFn4voE4Jpsa/hjb+rpPTOsDBO3NBroqQArBp+aI4WVOdbw/VTco3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCY7Hn8D+1601Ch+5KPc8UGKEVFuMB8GA1UdIwQY MBaAFMOVZ5SnuYkRFa06+UVz55YbFkusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzVWbmxLZTVpUkVWclRyNVJYUG5saHNXUzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9lODkzNWItZTk1OS00NjI5LWJlZWYt NTAwNGZiMjg4ODRlLzEvdzVWbmxLZTVpUkVWclRyNVJYUG5saHNXUzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9lODkzNWItZTk1OS00NjI5LWJlZWYtNTAwNGZiMjg4ODRl LzEvdzVWbmxLZTVpUkVWclRyNVJYUG5saHNXUzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALuNhjm/X 76ZR/u2sHsHGpvMJBmy1x+Bp3LXUXeq4kg98BqjQloJu+B9PpT6B4K904gYYBOG2 iKPV42ND/naxyLM3zeq0Te4neFg13VXNTl1IHdxckbh6QMyd2F2fcaRDrWmGwTyd jjonZ2i4nNJeyt9EuE/IiJxXr3570/q1JSkn/2+ESSxCDGdbmv9GcqQ3uhuqlc0/ XRtq3zeBKkGPIy1jt0qB2yKkiLQZGoIuxMnH79gcJmCfTYcvCYHeC+K8LzaPa/sD 8zt/30crm1+iHOikIdWc8vcKE9nSwWT0/j/C6y/Fw6L4dZ4UKgTrsDyjp6zuFOTl 4tKq//S8fY2cQw== -----END CERTIFICATE-----Generated at Sun Dec 14 17:28:03 2025 by rpki-client