This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft File: w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft (raw, json) Hash identifier: wbkULPfMBhvMIWEA70wLjbXBqj60t5Kgx/yNisGWLKU= Subject key identifier: E2:76:01:9A:B9:81:A9:B2:AB:3A:B1:6B:05:1D:90:92:F7:F8:E5:07 Authority key identifier: C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2 Certificate issuer: /CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2 Certificate serial: 019B1B051E1DBC06B37B0722BE869E05B2A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft Manifest number: 10C6 Signing time: Sun 14 Dec 2025 04:01:18 +0000 Manifest this update: Sun 14 Dec 2025 04:01:18 +0000 Manifest next update: Mon 15 Dec 2025 04:01:18 +0000 Files and hashes: 1: Xx4qE33JyRm22QhkLWfKDRWAGnk.roa (hash: VBDGbrM1tTGjVGL2Bxa5hAlgL/jyV9v4XsVJ8TB6uSs=) 2: eG2TuLX8aQVwCJ3-wzt6pkOEazU.roa (hash: I5NjIqWx/H03PJ2xIH/VMY1e8Yxikj5eCAeypnxIYcY=) 3: mHOne7l3lhdaqSro0d11vLE5d_4.roa (hash: 3sZoQqde77oR7zY/rsYSyM4QGdtUrSErY7LS0PKr8xo=) 4: w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl (hash: /Xjr6lgVJ1J/ew4nD1dfKvlg1bEHHYrwbuBFHB3Xhg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:05:1e:1d:bc:06:b3:7b:07:22:be:86:9e:05:b2:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2 Validity Not Before: Dec 14 04:01:18 2025 GMT Not After : Dec 15 04:01:18 2025 GMT Subject: CN=e276019ab981a9b2ab3ab16b051d9092f7f8e507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:a9:7e:69:75:cc:76:ef:4f:5f:85:5b:45: 70:8c:16:83:ff:df:b3:13:3e:d3:32:bc:71:f7:30: e0:c8:6e:2c:d1:66:0c:d7:66:c9:b9:c1:c8:45:1b: 37:2b:c9:71:dd:ae:32:9c:93:7c:69:16:f2:a0:33: ac:49:c0:98:b8:fc:72:23:eb:61:d6:68:6b:d8:14: 1b:fe:05:bc:71:72:9e:29:30:ae:7c:c5:be:43:ec: c5:3d:db:a7:95:db:eb:a0:85:b3:ca:ad:d8:65:b0: 74:4c:ff:0a:bb:2c:b5:bf:3e:b8:fa:4a:b9:7b:64: 17:bf:ef:fa:81:7c:c7:e8:fa:11:b2:65:70:61:94: 61:01:f7:8d:8b:57:1f:82:61:37:dd:46:0f:30:30: cf:53:a6:f6:df:12:b9:07:89:84:89:b3:c6:44:fe: 4b:f1:fa:a7:06:a6:d6:65:04:64:f9:9c:45:4d:bc: b9:68:0a:f0:cc:96:3c:45:a5:44:ef:af:77:8b:15: f6:d3:46:6a:95:ca:c9:08:97:38:d0:34:11:4c:45: 1d:8d:95:05:93:32:a5:b0:a9:5a:3a:d5:15:f0:33: 65:ea:ad:6c:4b:31:3c:bd:35:05:5e:ec:8e:be:56: 84:41:08:e9:3d:f4:a0:87:5f:0b:ca:d0:ef:b1:ca: e1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:76:01:9A:B9:81:A9:B2:AB:3A:B1:6B:05:1D:90:92:F7:F8:E5:07 X509v3 Authority Key Identifier: keyid:C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:a3:7d:96:f0:d4:54:7f:ec:58:71:10:b0:6a:47:c5:d3:1a: a8:a5:3f:15:29:fc:88:c0:75:c4:c4:e2:fa:0f:bf:54:0a:ec: 64:1f:cc:9e:ae:2b:ba:f5:fb:40:a0:e3:01:5e:a1:2c:ec:96: 72:ea:5b:50:c6:2c:c4:4b:25:64:85:06:02:ea:58:24:b8:7a: 11:14:3d:0c:7b:46:f4:9f:76:26:88:03:4f:9a:37:a4:87:e0: 5d:39:9d:d8:cf:7a:fe:a2:c5:46:b9:14:18:ba:9d:24:73:1b: 99:d4:14:99:60:8a:86:4b:c6:c7:36:1f:d1:1e:c6:09:36:56: 8a:e0:a6:b1:5d:20:85:4b:13:ed:0b:bd:26:4d:ad:c4:5c:bb: 52:40:26:32:ed:4d:21:9b:98:4f:5f:d9:58:d2:3d:46:48:45: e0:08:15:b5:a3:43:7f:27:59:a1:e2:4b:f4:f7:fb:13:15:c5: a4:4b:fb:91:bf:b8:d4:1d:2b:b0:1d:70:9f:f5:10:56:fa:f5: a3:25:6a:14:bc:a4:f4:d0:5f:57:26:50:21:ed:4b:78:c9:03: f3:04:3a:12:a3:5c:0f:7c:57:8e:ed:7f:6a:0a:b3:07:bd:a7: ab:2b:fa:33:7e:6f:71:5f:0a:00:20:c2:4f:9f:68:2a:52:8a: ca:e0:16:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBR4dvAazewcivoaeBbKmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYThlODY0OGUwYmEzNmEzMjNhYjlkZjYzNDFkNjY4YmRh NmI0ZDIwHhcNMjUxMjE0MDQwMTE4WhcNMjUxMjE1MDQwMTE4WjAzMTEwLwYDVQQD EyhlMjc2MDE5YWI5ODFhOWIyYWIzYWIxNmIwNTFkOTA5MmY3ZjhlNTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJypfml1zHbvT1+FW0VwjBaD/9+z Ez7TMrxx9zDgyG4s0WYM12bJucHIRRs3K8lx3a4ynJN8aRbyoDOsScCYuPxyI+th 1mhr2BQb/gW8cXKeKTCufMW+Q+zFPdunldvroIWzyq3YZbB0TP8Kuyy1vz64+kq5 e2QXv+/6gXzH6PoRsmVwYZRhAfeNi1cfgmE33UYPMDDPU6b23xK5B4mEibPGRP5L 8fqnBqbWZQRk+ZxFTby5aArwzJY8RaVE7693ixX200ZqlcrJCJc40DQRTEUdjZUF kzKlsKlaOtUV8DNl6q1sSzE8vTUFXuyOvlaEQQjpPfSgh18LytDvscrhzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJ2AZq5gamyqzqxawUdkJL3+OUHMB8GA1UdIwQY MBaAFMOo6GSOC6NqMjq532NB1mi9prTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzZqb1pJNExvMm95T3JuZlkwSFdhTDJtdE5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81YTNkMjAtZWNhYS00MGVhLTlkYjIt ZDU5ODQ1ZmI5YjNkLzEvdzZqb1pJNExvMm95T3JuZlkwSFdhTDJtdE5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC81YTNkMjAtZWNhYS00MGVhLTlkYjItZDU5ODQ1ZmI5YjNk LzEvdzZqb1pJNExvMm95T3JuZlkwSFdhTDJtdE5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKN9lvDU VH/sWHEQsGpHxdMaqKU/FSn8iMB1xMTi+g+/VArsZB/Mnq4ruvX7QKDjAV6hLOyW cupbUMYsxEslZIUGAupYJLh6ERQ9DHtG9J92JogDT5o3pIfgXTmd2M96/qLFRrkU GLqdJHMbmdQUmWCKhkvGxzYf0R7GCTZWiuCmsV0ghUsT7Qu9Jk2txFy7UkAmMu1N IZuYT1/ZWNI9RkhF4AgVtaNDfydZoeJL9Pf7ExXFpEv7kb+41B0rsB1wn/UQVvr1 oyVqFLyk9NBfVyZQIe1LeMkD8wQ6EqNcD3xXju1/agqzB72nqyv6M35vcV8KACDC T59oKlKKyuAWsQ== -----END CERTIFICATE-----Generated at Sun Dec 14 08:39:42 2025 by rpki-client