This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft File: weOkSujPAkPx3_4mhOPdWo_IXXk.mft (raw, json) Hash identifier: LPk7gjQKZzIOBA0Eh86JLinR/6kPEubsjMEsG+/+WjY= Subject key identifier: 9A:37:05:CF:0C:E1:0D:62:FF:35:9E:86:C5:A4:11:AB:28:9B:D7:1F Authority key identifier: C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79 Certificate issuer: /CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79 Certificate serial: 019B5A5152F597C908B9F738AC078A8B8751 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft Manifest number: 160F Signing time: Fri 26 Dec 2025 11:00:37 +0000 Manifest this update: Fri 26 Dec 2025 11:00:37 +0000 Manifest next update: Sat 27 Dec 2025 11:00:37 +0000 Files and hashes: 1: 8SCwalNOCtaX1GmWAS6VFuVHGa4.roa (hash: MCBdmn43q9v0IHNEMsKZZxueWeuhZImr9/xukqPZ3tY=) 2: weOkSujPAkPx3_4mhOPdWo_IXXk.crl (hash: /NbSupc9eMBONvcDYbbPEdJBizXfff3sFGFqdItj1fo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:52:f5:97:c9:08:b9:f7:38:ac:07:8a:8b:87:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79 Validity Not Before: Dec 26 11:00:37 2025 GMT Not After : Dec 27 11:00:37 2025 GMT Subject: CN=9a3705cf0ce10d62ff359e86c5a411ab289bd71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cc:a8:a8:e5:0f:04:86:9b:35:2f:1b:61:b2: 4a:f9:73:00:e4:c9:a1:9b:fa:f7:5b:75:db:0e:a8: 48:52:39:ec:e1:42:c3:d9:5b:be:9b:1b:47:d5:36: 37:34:d3:ad:a8:53:cf:04:4c:d4:5c:31:98:32:55: c8:ba:16:7b:ee:5b:dd:da:60:92:3e:f1:10:93:ef: 2c:47:70:09:59:12:61:a6:7b:b5:ef:af:49:57:da: d3:1c:08:39:49:97:13:a0:f4:2d:2b:a0:90:11:54: 1c:b9:fd:8e:82:85:76:ef:13:2f:62:6e:2a:81:d3: 77:a9:6f:ac:c7:77:91:62:ac:c7:e0:cc:34:62:60: df:1f:92:a2:74:0c:cc:42:36:ba:36:b5:90:af:bd: c7:e5:62:62:26:a5:9b:5d:c7:ed:54:5c:22:67:66: b0:b6:ea:a0:71:16:53:29:74:49:f1:f3:74:9e:ba: b8:58:4d:d5:05:c8:2a:8b:6f:5a:c1:41:94:15:a9: 55:a1:bf:b2:ac:0c:53:71:bf:72:10:6c:ff:d7:f7: af:0f:16:6e:36:47:ab:6a:51:23:c7:ab:ab:8c:df: 87:0b:13:c5:fb:62:b7:24:81:4c:49:95:50:6e:12: 83:8d:93:fd:e8:a0:5d:26:34:b6:ed:c3:cd:9c:f7: c8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:37:05:CF:0C:E1:0D:62:FF:35:9E:86:C5:A4:11:AB:28:9B:D7:1F X509v3 Authority Key Identifier: keyid:C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:3d:fd:7f:37:26:a6:5e:d4:2a:bc:2b:47:c9:1d:8e:b8:21: 6c:49:ee:ce:95:5a:54:b8:ec:96:af:54:af:f9:82:d6:d2:ac: ff:f0:86:0a:7b:ce:67:bf:96:5c:e9:ff:fc:d4:47:08:bc:5f: 74:94:71:92:8d:93:b0:6b:d6:bb:d4:58:92:b8:57:ce:55:49: 49:8a:65:97:a3:b5:a5:42:f2:2a:c9:64:ad:50:6e:11:e9:6c: 4f:ee:a0:4b:cf:b4:0e:b4:3f:3a:d4:a7:a8:6f:35:9e:49:c7: 30:77:f5:84:ce:94:6e:fe:d5:3f:8c:bf:2f:3f:47:a8:59:3e: e7:dc:60:b7:e1:48:7e:2c:c0:3f:10:9c:28:e0:ee:90:aa:60: f1:49:9d:7d:86:b1:3e:a0:66:51:a9:7c:63:78:81:3c:55:e0: 77:19:ea:07:9a:94:c1:19:18:a3:5c:aa:5a:27:8b:bb:f2:78: 2b:df:37:73:8b:d2:68:28:88:c1:4a:75:09:64:4b:0c:1e:60: 41:32:61:c0:87:c8:b1:09:22:95:6f:17:55:a4:15:b9:21:f3: ef:84:12:00:61:77:e6:97:91:d2:07:bb:b0:23:b0:ad:7d:d7: 6d:b4:34:03:8e:f6:62:4d:11:42:88:2a:53:4d:0b:07:ba:75: 6f:9d:19:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUVL1l8kIufc4rAeKi4dRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZTNhNDRhZThjZjAyNDNmMWRmZmUyNjg0ZTNkZDVhOGZj ODVkNzkwHhcNMjUxMjI2MTEwMDM3WhcNMjUxMjI3MTEwMDM3WjAzMTEwLwYDVQQD Eyg5YTM3MDVjZjBjZTEwZDYyZmYzNTllODZjNWE0MTFhYjI4OWJkNzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8yoqOUPBIabNS8bYbJK+XMA5Mmh m/r3W3XbDqhIUjns4ULD2Vu+mxtH1TY3NNOtqFPPBEzUXDGYMlXIuhZ77lvd2mCS PvEQk+8sR3AJWRJhpnu1769JV9rTHAg5SZcToPQtK6CQEVQcuf2OgoV27xMvYm4q gdN3qW+sx3eRYqzH4Mw0YmDfH5KidAzMQja6NrWQr73H5WJiJqWbXcftVFwiZ2aw tuqgcRZTKXRJ8fN0nrq4WE3VBcgqi29awUGUFalVob+yrAxTcb9yEGz/1/evDxZu NkeralEjx6urjN+HCxPF+2K3JIFMSZVQbhKDjZP96KBdJjS27cPNnPfIpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJo3Bc8M4Q1i/zWehsWkEasom9cfMB8GA1UdIwQY MBaAFMHjpErozwJD8d/+JoTj3VqPyF15MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2VPa1N1alBBa1B4M180bWhPUGRXb19JWFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iZjRhNDQtYmI4YS00NjUxLWEwYWEt MzhkMjkyZDBmN2VjLzEvd2VPa1N1alBBa1B4M180bWhPUGRXb19JWFhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9iZjRhNDQtYmI4YS00NjUxLWEwYWEtMzhkMjkyZDBmN2Vj LzEvd2VPa1N1alBBa1B4M180bWhPUGRXb19JWFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARz39fzcm pl7UKrwrR8kdjrghbEnuzpVaVLjslq9Ur/mC1tKs//CGCnvOZ7+WXOn//NRHCLxf dJRxko2TsGvWu9RYkrhXzlVJSYpll6O1pULyKslkrVBuEelsT+6gS8+0DrQ/OtSn qG81nknHMHf1hM6Ubv7VP4y/Lz9HqFk+59xgt+FIfizAPxCcKODukKpg8UmdfYax PqBmUal8Y3iBPFXgdxnqB5qUwRkYo1yqWieLu/J4K983c4vSaCiIwUp1CWRLDB5g QTJhwIfIsQkilW8XVaQVuSHz74QSAGF35peR0ge7sCOwrX3XbbQ0A472Yk0RQogq U00LB7p1b50Zyg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:14 2025 by rpki-client