This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft File: wDwpVm71n88akNgtCK4QxjD5S4g.mft (raw, json) Hash identifier: KdgAVJ9693HT5oLHRjml5xVQBEu2zWTwQmx7f3Rvn0c= Subject key identifier: 98:6F:FC:7D:85:C1:D1:65:7C:01:92:19:53:3C:27:70:E8:EA:8A:31 Authority key identifier: C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88 Certificate issuer: /CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88 Certificate serial: 019B4739140249938E5873DAABA51E1B085F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft Manifest number: 0DF4 Signing time: Mon 22 Dec 2025 18:01:21 +0000 Manifest this update: Mon 22 Dec 2025 18:01:21 +0000 Manifest next update: Tue 23 Dec 2025 18:01:21 +0000 Files and hashes: 1: uzj0M_v78Wm5cOmGNR7lI0TOqoE.roa (hash: Cc5JUHGDDrTaWZVeYu5I0BROPsTv83fnO7z2DC5tGzs=) 2: wDwpVm71n88akNgtCK4QxjD5S4g.crl (hash: OW/5qzJxDKpKp1jyhbFKES9Gv4WQCExhA7ems3D94BA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 18:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:39:14:02:49:93:8e:58:73:da:ab:a5:1e:1b:08:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88 Validity Not Before: Dec 22 18:01:21 2025 GMT Not After : Dec 23 18:01:21 2025 GMT Subject: CN=986ffc7d85c1d1657c019219533c2770e8ea8a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e5:c4:79:c8:c5:72:c6:d9:a8:a1:30:07:b6: 2b:51:a7:44:c5:7d:e5:83:85:25:f0:35:5e:87:6f: 98:16:0b:2f:46:e8:8d:46:27:c0:1a:94:f6:2d:6f: 17:46:ec:6a:23:f9:d1:7e:21:48:67:5a:2e:e1:e5: 73:9b:18:9d:6a:70:a1:76:02:a9:32:f2:de:6d:a1: 65:0e:c9:3d:45:d4:84:c4:0b:c2:0b:55:57:b3:2d: 7c:2f:b5:1b:07:1a:6e:f9:50:6d:9a:36:14:66:1a: ef:1e:73:44:e5:35:02:fb:f5:bd:fb:50:c0:3c:6a: 9f:54:1c:17:1b:27:23:e7:c5:00:93:64:3d:08:ea: 53:a0:70:36:8a:c9:c3:9a:69:a7:93:1f:62:c6:b9: 46:b1:a4:67:51:0b:4f:b8:cf:1a:09:34:67:ab:7d: 13:6b:46:50:29:bb:95:34:4a:6e:07:ca:cb:dd:a5: a9:91:c8:87:0f:ce:8d:9b:7c:06:0f:c5:1a:15:fe: 05:f2:01:89:ca:05:7b:70:23:e4:ad:e3:a1:65:85: 67:7f:1f:82:3e:1a:d2:5a:c9:9e:49:ab:3a:54:71: ad:91:00:f3:99:bf:e5:fb:1e:e4:4f:50:58:da:e9: 8a:cf:25:28:87:18:96:fd:45:3c:4a:e2:b3:85:64: aa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6F:FC:7D:85:C1:D1:65:7C:01:92:19:53:3C:27:70:E8:EA:8A:31 X509v3 Authority Key Identifier: keyid:C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a2:17:93:bb:84:4b:50:32:ea:15:ef:e8:4d:7b:80:08:2c: ad:96:0c:70:00:8a:49:c8:fc:21:89:ac:62:75:7d:d2:fb:f4: 84:cc:2c:80:c5:72:6e:9c:df:91:33:53:2f:47:70:60:96:8a: 71:53:a7:bd:6e:e1:0c:25:1b:7f:cd:69:04:48:84:b4:5f:39: ae:e8:b9:dc:a0:ed:29:16:21:96:5e:fd:b6:8e:9a:31:76:df: 24:a1:64:42:94:68:3f:09:e5:e7:63:ff:32:68:22:92:d4:01: 7c:96:7f:c9:fb:30:94:e7:da:dc:0f:ea:cb:cc:9f:ff:bb:34: f5:36:a1:e8:76:98:22:3f:8a:80:e4:eb:6f:2f:8e:12:61:e5: e2:7c:f5:9a:68:50:38:31:9a:ae:ce:1b:18:da:81:fe:d6:3b: d2:3d:4e:f2:c9:88:e0:69:a7:4d:76:81:ad:51:67:d6:38:c9: 5c:95:ef:7c:df:32:d1:09:a1:e5:b7:51:85:a4:da:d3:da:9b: a1:45:6f:61:5f:fd:7d:da:24:65:21:14:2b:8d:88:3d:39:e5: 17:2a:f1:3a:fd:d2:12:ac:ca:fa:8f:e7:69:f9:78:b8:3f:d2: 04:f8:6e:3e:de:b2:74:7f:e2:84:aa:87:c9:b8:7c:cd:18:52: f7:18:58:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHORQCSZOOWHPaq6UeGwhfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwM2MyOTU2NmVmNTlmY2YxYTkwZDgyZDA4YWUxMGM2MzBm OTRiODgwHhcNMjUxMjIyMTgwMTIxWhcNMjUxMjIzMTgwMTIxWjAzMTEwLwYDVQQD Eyg5ODZmZmM3ZDg1YzFkMTY1N2MwMTkyMTk1MzNjMjc3MGU4ZWE4YTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOXEecjFcsbZqKEwB7YrUadExX3l g4Ul8DVeh2+YFgsvRuiNRifAGpT2LW8XRuxqI/nRfiFIZ1ou4eVzmxidanChdgKp MvLebaFlDsk9RdSExAvCC1VXsy18L7UbBxpu+VBtmjYUZhrvHnNE5TUC+/W9+1DA PGqfVBwXGycj58UAk2Q9COpToHA2isnDmmmnkx9ixrlGsaRnUQtPuM8aCTRnq30T a0ZQKbuVNEpuB8rL3aWpkciHD86Nm3wGD8UaFf4F8gGJygV7cCPkreOhZYVnfx+C PhrSWsmeSas6VHGtkQDzmb/l+x7kT1BY2umKzyUohxiW/UU8SuKzhWSqtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhv/H2FwdFlfAGSGVM8J3Do6ooxMB8GA1UdIwQY MBaAFMA8KVZu9Z/PGpDYLQiuEMYw+UuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0R3cFZtNzFuODhha05ndENLNFF4akQ1UzRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lZmMxNzItNGI5NC00YzU1LTlkMzYt MDgxMTExMDNjY2Y5LzEvd0R3cFZtNzFuODhha05ndENLNFF4akQ1UzRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lZmMxNzItNGI5NC00YzU1LTlkMzYtMDgxMTExMDNjY2Y5 LzEvd0R3cFZtNzFuODhha05ndENLNFF4akQ1UzRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKIXk7uE S1Ay6hXv6E17gAgsrZYMcACKScj8IYmsYnV90vv0hMwsgMVybpzfkTNTL0dwYJaK cVOnvW7hDCUbf81pBEiEtF85rui53KDtKRYhll79to6aMXbfJKFkQpRoPwnl52P/ MmgiktQBfJZ/yfswlOfa3A/qy8yf/7s09Tah6HaYIj+KgOTrby+OEmHl4nz1mmhQ ODGars4bGNqB/tY70j1O8smI4GmnTXaBrVFn1jjJXJXvfN8y0Qmh5bdRhaTa09qb oUVvYV/9fdokZSEUK42IPTnlFyrxOv3SEqzK+o/nafl4uD/SBPhuPt6ydH/ihKqH ybh8zRhS9xhYiA== -----END CERTIFICATE-----Generated at Tue Dec 23 02:01:22 2025 by rpki-client