This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft File: wKqzltZQgmAnwr2KBiByEJIQnik.mft (raw, json) Hash identifier: y6gtPtVaUOF2qP8e26SBhXYn3FlXdNW/Puq6apAL2vI= Subject key identifier: 2B:CD:5F:37:A9:82:EC:3F:7D:0C:CA:2D:52:8F:75:5F:39:38:6E:9B Authority key identifier: C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29 Certificate issuer: /CN=c0aab396d650826027c2bd8a0620721092109e29 Certificate serial: 019B3AC6B39D44511811F47B5D987CFEBC76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft Manifest number: 023D Signing time: Sat 20 Dec 2025 08:00:59 +0000 Manifest this update: Sat 20 Dec 2025 08:00:59 +0000 Manifest next update: Sun 21 Dec 2025 08:00:59 +0000 Files and hashes: 1: 1-3Qgxms0TF7_t45sXmwfqKuxgx4.roa (hash: eg5E6/TcBdh8UicXk+q4AVkisjFIPzrl/3K2hjF8xxg=) 2: wKqzltZQgmAnwr2KBiByEJIQnik.crl (hash: TTMStfdCetXG7anyph7mXp8/gsfr3YzoBxtjCBZlRSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:b3:9d:44:51:18:11:f4:7b:5d:98:7c:fe:bc:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0aab396d650826027c2bd8a0620721092109e29 Validity Not Before: Dec 20 08:00:59 2025 GMT Not After : Dec 21 08:00:59 2025 GMT Subject: CN=2bcd5f37a982ec3f7d0cca2d528f755f39386e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:83:c7:8c:6b:f6:c9:fe:76:8d:68:fc:bf:43: f1:0b:bc:03:ce:8c:0f:81:c1:66:44:e3:bb:21:c6: e5:87:be:3b:a1:18:fd:08:da:bf:58:3a:0a:78:af: 8c:0a:9a:7c:5c:a3:15:e7:c4:e5:9f:15:3d:6c:ef: 92:60:a6:a1:ba:8f:96:d3:f8:c5:44:d9:1e:52:bc: 6e:72:e2:1a:fe:f7:67:92:44:08:24:ff:f1:fc:59: d5:2a:ec:63:c3:66:c0:2e:14:8c:9b:0e:58:7a:d4: a8:56:f5:9a:76:e6:66:cf:d9:71:a9:5c:c5:71:44: 34:db:70:87:d7:88:1f:fc:de:1a:7c:89:19:4e:53: 9f:62:a3:92:5f:ae:ab:b5:f2:c7:57:43:43:c4:9f: 46:3e:10:14:c2:16:5e:79:ae:62:9e:94:1d:98:78: e4:a8:b1:ae:e0:4e:ea:6f:f3:7a:d6:75:b6:d6:ec: df:2e:73:1e:98:c6:67:cc:0b:64:e5:9d:b2:d6:fd: 51:55:fe:31:e0:d0:6c:23:63:17:12:8c:77:8e:00: 39:ff:2e:ae:78:ec:03:d5:a1:eb:27:08:19:59:81: 12:23:8b:15:d8:94:87:f5:51:9b:8b:55:f4:eb:12: 2b:c9:3f:25:3f:cb:09:1b:0e:f4:9f:4c:c7:eb:22: 0e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CD:5F:37:A9:82:EC:3F:7D:0C:CA:2D:52:8F:75:5F:39:38:6E:9B X509v3 Authority Key Identifier: keyid:C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:7e:6c:e1:50:ee:7d:fe:0f:8c:a6:9e:43:ab:5c:c4:bf:c4: 39:84:76:ce:b5:e9:89:52:f0:68:af:26:58:be:3f:f3:9b:02: 06:ca:64:01:2c:66:47:67:85:c1:91:8a:2d:1d:03:85:98:e1: 1f:87:f2:d4:a4:2b:42:25:4e:33:a3:1d:c4:25:1a:f6:cd:01: 06:8b:da:00:7d:bf:79:71:35:16:2b:92:bc:4a:7e:bb:de:a4: 2c:cd:dd:c8:cb:8a:d8:4b:dc:87:2a:a1:76:22:7a:4e:e9:bb: a2:72:3c:b9:c2:2e:ba:3b:be:93:e7:cb:85:00:4b:61:5f:2a: 75:1a:c2:80:af:dd:29:12:b5:ed:83:2a:a7:e2:12:00:30:d2: 5a:6c:d1:05:59:4d:1a:ec:42:47:e2:b1:20:2e:d1:15:b5:48: 88:47:dc:19:f4:37:28:89:b0:63:16:00:79:57:c0:1c:47:24: 82:44:d6:b2:1c:91:9a:20:20:df:14:aa:84:d9:64:1e:4b:86: 5e:45:65:fe:8d:8f:fa:ac:1e:40:d8:84:45:c1:d7:a0:f7:b7: 2b:0a:42:99:2b:18:58:5b:28:7f:c2:3b:b6:1e:82:33:05:28: 55:a4:8d:b5:54:af:5d:f1:54:d2:fa:49:0f:12:57:2c:d0:1b: 2d:be:f8:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xrOdRFEYEfR7XZh8/rx2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYWFiMzk2ZDY1MDgyNjAyN2MyYmQ4YTA2MjA3MjEwOTIx MDllMjkwHhcNMjUxMjIwMDgwMDU5WhcNMjUxMjIxMDgwMDU5WjAzMTEwLwYDVQQD EygyYmNkNWYzN2E5ODJlYzNmN2QwY2NhMmQ1MjhmNzU1ZjM5Mzg2ZTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIPHjGv2yf52jWj8v0PxC7wDzowP gcFmROO7Icblh747oRj9CNq/WDoKeK+MCpp8XKMV58TlnxU9bO+SYKahuo+W0/jF RNkeUrxucuIa/vdnkkQIJP/x/FnVKuxjw2bALhSMmw5YetSoVvWaduZmz9lxqVzF cUQ023CH14gf/N4afIkZTlOfYqOSX66rtfLHV0NDxJ9GPhAUwhZeea5inpQdmHjk qLGu4E7qb/N61nW21uzfLnMemMZnzAtk5Z2y1v1RVf4x4NBsI2MXEox3jgA5/y6u eOwD1aHrJwgZWYESI4sV2JSH9VGbi1X06xIryT8lP8sJGw70n0zH6yIOxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvNXzepguw/fQzKLVKPdV85OG6bMB8GA1UdIwQY MBaAFMCqs5bWUIJgJ8K9igYgchCSEJ4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0txemx0WlFnbUFud3IyS0JpQnlFSklRbmlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xZDRlMDYtNGZhYS00OWE5LTg0OWIt ZTk1MDY5OTE1N2UxLzEvd0txemx0WlFnbUFud3IyS0JpQnlFSklRbmlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8xZDRlMDYtNGZhYS00OWE5LTg0OWItZTk1MDY5OTE1N2Ux LzEvd0txemx0WlFnbUFud3IyS0JpQnlFSklRbmlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe35s4VDu ff4PjKaeQ6tcxL/EOYR2zrXpiVLwaK8mWL4/85sCBspkASxmR2eFwZGKLR0DhZjh H4fy1KQrQiVOM6MdxCUa9s0BBovaAH2/eXE1FiuSvEp+u96kLM3dyMuK2Evchyqh diJ6Tum7onI8ucIuuju+k+fLhQBLYV8qdRrCgK/dKRK17YMqp+ISADDSWmzRBVlN GuxCR+KxIC7RFbVIiEfcGfQ3KImwYxYAeVfAHEckgkTWshyRmiAg3xSqhNlkHkuG XkVl/o2P+qweQNiERcHXoPe3KwpCmSsYWFsof8I7th6CMwUoVaSNtVSvXfFU0vpJ DxJXLNAbLb74rA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:38:40 2025 by rpki-client