This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft File: w-iL5cCvqz0dvhLceTEMRJnhJ60.mft (raw, json) Hash identifier: gQvUTdn+Z5jjK551GuDmXWh+dkXZo33Tt2KnkwxykrY= Subject key identifier: 88:C2:49:0A:85:27:17:EF:40:97:E8:65:30:06:A2:D3:4A:33:25:4D Authority key identifier: C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD Certificate issuer: /CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad Certificate serial: 019B26D20F2BD6B505AABDAF8AED901CFCA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft Manifest number: 0301 Signing time: Tue 16 Dec 2025 11:00:59 +0000 Manifest this update: Tue 16 Dec 2025 11:00:59 +0000 Manifest next update: Wed 17 Dec 2025 11:00:59 +0000 Files and hashes: 1: 2x7OqnJPBLrGZL2rttYvcbQz8Tw.roa (hash: WNGnFlqIRITx+enQw6qGHRhLudWi7SmIAW5VCe5iYGY=) 2: w-iL5cCvqz0dvhLceTEMRJnhJ60.crl (hash: qYhHLabJpW4GLnJB7pGzK78hJH/9GYggrmp+hlUhmWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d2:0f:2b:d6:b5:05:aa:bd:af:8a:ed:90:1c:fc:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad Validity Not Before: Dec 16 11:00:59 2025 GMT Not After : Dec 17 11:00:59 2025 GMT Subject: CN=88c2490a852717ef4097e8653006a2d34a33254d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5e:e1:32:1b:da:5d:62:42:06:7e:8a:f2:58: df:0d:25:df:52:96:1b:eb:d2:22:8e:18:fe:db:a9: 3c:7e:75:7c:0c:d3:82:8f:4f:e0:55:f3:e1:38:37: 7a:c9:aa:0e:ec:6a:96:4f:5a:4b:64:58:d0:84:69: 7a:e7:e6:31:c3:63:02:a7:65:ce:12:8c:f7:a7:b4: 33:53:ed:a2:50:0e:00:2a:9f:6d:51:a5:a6:d9:37: 58:cb:52:dd:20:68:16:51:4a:7d:9c:0c:3e:24:ec: 04:31:c8:49:8f:2a:ce:f5:af:b6:bf:09:07:16:32: ee:30:92:c3:0f:6a:48:cc:12:fb:9d:35:0b:af:47: d1:71:9c:15:31:01:0c:bb:a1:91:42:cb:93:f2:03: 75:1a:3b:f8:28:fa:77:e4:c6:f0:2d:9a:1d:14:c9: 4d:63:a5:bf:5c:e1:2e:64:9e:b3:c1:48:06:a5:fe: e7:be:be:25:1a:ed:4b:79:99:97:87:fb:f9:dd:e2: 00:4d:62:20:27:6d:14:7b:d1:83:3c:21:d3:ee:e0: c2:a0:7d:52:cc:a8:ea:47:f0:ed:29:81:d8:1b:50: 31:a9:a3:09:4a:bf:2a:4d:24:50:ff:f8:99:7f:36: e9:c7:be:28:cf:14:ca:e3:90:31:a6:92:4b:d9:d2: 90:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C2:49:0A:85:27:17:EF:40:97:E8:65:30:06:A2:D3:4A:33:25:4D X509v3 Authority Key Identifier: keyid:C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:6f:26:af:72:51:2c:a8:45:4d:fd:18:0c:58:01:23:4e:34: cb:c8:df:b4:14:21:09:aa:ca:da:32:92:cc:ea:8d:b2:1f:c7: 52:d3:9e:4e:fe:98:36:fa:3f:e5:dd:2c:f3:ce:b7:58:f7:11: 9d:a0:3b:33:16:6f:44:75:4c:d2:d6:d5:1c:6d:36:4a:77:5e: 44:da:e0:91:6c:12:03:45:77:52:81:a1:62:f9:3c:e9:bd:9b: 68:f9:c3:47:ae:25:cc:6b:c7:ce:57:d6:0d:13:5a:22:ca:a1: f3:08:0e:b1:83:a6:6d:28:c4:52:43:c3:79:b1:00:9d:2a:05: 3c:32:1f:c5:76:8d:0d:38:01:af:19:c2:56:17:f0:82:06:d9: a6:99:48:2e:66:6f:e7:2f:65:27:76:1e:eb:ad:da:06:94:c1: 5f:c7:13:7b:05:60:c0:b5:0f:57:5e:94:63:34:b0:21:f6:38: c5:c9:7d:b5:ca:60:6f:5a:c0:44:2c:3f:fb:0c:ad:ea:ef:1c: 24:e0:04:92:c8:c0:57:92:12:9f:da:40:ed:76:0d:49:5d:ea: 5a:54:e7:64:18:b3:9e:ec:ed:1d:85:5c:df:69:c1:d4:ce:0e: 3b:03:b6:6c:95:c8:36:fe:12:c1:78:6a:8a:84:bc:9d:52:e6: ec:bb:ea:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0g8r1rUFqr2viu2QHPyhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZTg4YmU1YzBhZmFiM2QxZGJlMTJkYzc5MzEwYzQ0OTll MTI3YWQwHhcNMjUxMjE2MTEwMDU5WhcNMjUxMjE3MTEwMDU5WjAzMTEwLwYDVQQD Eyg4OGMyNDkwYTg1MjcxN2VmNDA5N2U4NjUzMDA2YTJkMzRhMzMyNTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn17hMhvaXWJCBn6K8ljfDSXfUpYb 69Iijhj+26k8fnV8DNOCj0/gVfPhODd6yaoO7GqWT1pLZFjQhGl65+Yxw2MCp2XO Eoz3p7QzU+2iUA4AKp9tUaWm2TdYy1LdIGgWUUp9nAw+JOwEMchJjyrO9a+2vwkH FjLuMJLDD2pIzBL7nTULr0fRcZwVMQEMu6GRQsuT8gN1Gjv4KPp35MbwLZodFMlN Y6W/XOEuZJ6zwUgGpf7nvr4lGu1LeZmXh/v53eIATWIgJ20Ue9GDPCHT7uDCoH1S zKjqR/DtKYHYG1AxqaMJSr8qTSRQ//iZfzbpx74ozxTK45AxppJL2dKQhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjCSQqFJxfvQJfoZTAGotNKMyVNMB8GA1UdIwQY MBaAFMPoi+XAr6s9Hb4S3HkxDESZ4SetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdy1pTDVjQ3ZxejBkdmhMY2VURU1SSm5oSjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYTQ0OTctMDk1Mi00NjE4LTkzNzIt ZjQyY2Q0NmQwNGVjLzEvdy1pTDVjQ3ZxejBkdmhMY2VURU1SSm5oSjYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYTQ0OTctMDk1Mi00NjE4LTkzNzItZjQyY2Q0NmQwNGVj LzEvdy1pTDVjQ3ZxejBkdmhMY2VURU1SSm5oSjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUm8mr3JR LKhFTf0YDFgBI040y8jftBQhCarK2jKSzOqNsh/HUtOeTv6YNvo/5d0s8863WPcR naA7MxZvRHVM0tbVHG02SndeRNrgkWwSA0V3UoGhYvk86b2baPnDR64lzGvHzlfW DRNaIsqh8wgOsYOmbSjEUkPDebEAnSoFPDIfxXaNDTgBrxnCVhfwggbZpplILmZv 5y9lJ3Ye663aBpTBX8cTewVgwLUPV16UYzSwIfY4xcl9tcpgb1rARCw/+wyt6u8c JOAEksjAV5ISn9pA7XYNSV3qWlTnZBiznuztHYVc32nB1M4OOwO2bJXINv4SwXhq ioS8nVLm7LvqlA== -----END CERTIFICATE-----Generated at Tue Dec 16 17:21:36 2025 by rpki-client