This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft File: wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft (raw, json) Hash identifier: jbI2fVG30F3vLnADJ5spEL0XiU7QYij20SV4Y+xoM5M= Subject key identifier: E7:9E:39:69:B5:50:03:0C:24:3B:45:BF:C6:09:FD:19:5C:EA:F5:CD Authority key identifier: C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F Certificate issuer: /CN=c04a3d80f6786f1791098d45ecd554f0660cce4f Certificate serial: 019B5BD1D8E796F4FD6D82EEDE0EE8A38434 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft Manifest number: 0894 Signing time: Fri 26 Dec 2025 18:00:37 +0000 Manifest this update: Fri 26 Dec 2025 18:00:37 +0000 Manifest next update: Sat 27 Dec 2025 18:00:37 +0000 Files and hashes: 1: wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl (hash: dV5pDRSPBnphPjqyeGyCkClC5/x90vbmDB1Mhg6bMqw=) 2: zpicEsTdAQH31s_U5VTklFFkx3A.roa (hash: F4NgHOhmdVZSO+9LtvSeSBchmLUaANtpy3YFPClVpoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d1:d8:e7:96:f4:fd:6d:82:ee:de:0e:e8:a3:84:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c04a3d80f6786f1791098d45ecd554f0660cce4f Validity Not Before: Dec 26 18:00:37 2025 GMT Not After : Dec 27 18:00:37 2025 GMT Subject: CN=e79e3969b550030c243b45bfc609fd195ceaf5cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d2:c1:20:77:b9:40:94:5e:dc:36:78:54:9e: 9a:02:ac:6a:cc:9b:3b:d8:c6:9b:7f:d7:b5:34:ce: 35:19:39:4f:9b:c6:94:61:e7:b4:03:5a:72:97:89: 98:aa:f5:4f:57:a6:d6:94:e9:84:4b:35:fa:6e:7d: dd:47:dc:d2:56:25:6e:5d:96:a8:d0:5c:b3:d0:bc: 9f:57:b7:84:e5:77:a0:2f:15:31:6a:b3:a2:c0:ca: db:8e:78:6e:6b:fd:ce:6e:1a:00:45:1b:ea:75:c3: 46:8b:24:58:e3:a9:32:1d:a5:d0:55:0b:1a:c8:76: 28:19:7c:51:9c:56:91:7c:9a:46:d0:2f:04:d0:e6: 01:75:09:df:42:dc:1d:f0:b7:6b:b9:0b:b0:c4:26: ee:95:9b:ef:7d:2c:c9:c8:e6:a7:61:ee:bd:1b:e2: 22:75:2a:8d:7d:2b:9e:b3:42:9e:47:b8:1a:36:e9: 8f:62:b8:3e:31:33:1d:bc:cb:86:db:0c:05:0d:a9: 15:a9:34:67:60:1b:df:7e:0f:6d:a7:9a:e1:60:b0: 26:21:17:74:21:7a:cd:a5:e5:f7:28:e7:31:b3:42: 50:14:95:16:2f:ab:a0:d1:6a:e6:dd:ec:ee:0a:89: a2:8d:1b:19:bb:1b:ff:b0:3a:4b:0f:64:c2:6f:ae: d2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9E:39:69:B5:50:03:0C:24:3B:45:BF:C6:09:FD:19:5C:EA:F5:CD X509v3 Authority Key Identifier: keyid:C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:3b:04:65:3e:79:da:fd:77:cb:bf:ba:28:dd:53:09:34:77: ca:45:ab:8b:66:4c:74:15:7d:a7:be:ca:14:22:71:06:84:45: 86:16:d2:f1:50:88:83:c9:a0:25:ff:3f:a7:a7:c3:a2:5e:3e: 91:e7:af:57:df:08:a3:8b:2d:63:4a:ce:60:ca:db:b9:78:0c: 6c:4e:90:9e:30:b3:04:79:1d:4b:29:90:2d:a3:b1:13:ab:9d: 78:8f:a3:0d:e4:9e:96:57:74:b8:8b:32:ae:dd:66:1c:e6:35: b4:3f:75:12:b0:7e:57:f5:9d:2f:97:7a:a1:7e:6c:ff:ef:e3: 9d:88:68:45:3d:27:f1:b7:a2:4a:7d:0f:ed:c9:c5:54:f6:f1: f2:48:c9:7d:52:f9:44:bd:5e:07:ef:bb:9e:a7:d5:d5:7b:7e: ec:94:64:1a:07:ba:33:99:cf:e1:6d:69:91:cf:62:0f:4b:96: 52:78:fd:73:46:b2:9b:79:0e:42:6c:79:d0:9e:e2:bb:c8:75: 00:23:a2:69:ad:31:8b:29:b1:7c:0a:9c:83:1d:e5:8a:d8:29: 53:dc:4c:b6:97:09:8f:14:f0:e3:1f:86:af:5e:ff:5e:ec:45: 4d:63:ae:41:05:8d:97:06:61:bc:35:d1:f9:6b:4e:ba:d5:a9: e7:a5:8e:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0djnlvT9bYLu3g7oo4Q0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNGEzZDgwZjY3ODZmMTc5MTA5OGQ0NWVjZDU1NGYwNjYw Y2NlNGYwHhcNMjUxMjI2MTgwMDM3WhcNMjUxMjI3MTgwMDM3WjAzMTEwLwYDVQQD EyhlNzllMzk2OWI1NTAwMzBjMjQzYjQ1YmZjNjA5ZmQxOTVjZWFmNWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9LBIHe5QJRe3DZ4VJ6aAqxqzJs7 2Mabf9e1NM41GTlPm8aUYee0A1pyl4mYqvVPV6bWlOmESzX6bn3dR9zSViVuXZao 0Fyz0LyfV7eE5XegLxUxarOiwMrbjnhua/3ObhoARRvqdcNGiyRY46kyHaXQVQsa yHYoGXxRnFaRfJpG0C8E0OYBdQnfQtwd8LdruQuwxCbulZvvfSzJyOanYe69G+Ii dSqNfSues0KeR7gaNumPYrg+MTMdvMuG2wwFDakVqTRnYBvffg9tp5rhYLAmIRd0 IXrNpeX3KOcxs0JQFJUWL6ug0Wrm3ezuComijRsZuxv/sDpLD2TCb67SGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOeeOWm1UAMMJDtFv8YJ/Rlc6vXNMB8GA1UdIwQY MBaAFMBKPYD2eG8XkQmNRezVVPBmDM5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0VvOWdQWjRieGVSQ1kxRjdOVlU4R1lNems4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMzZlYjEtOGFmNS00OTEwLThkZjQt ZWQyZTEzNmRjMDI2LzEvd0VvOWdQWjRieGVSQ1kxRjdOVlU4R1lNems4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMzZlYjEtOGFmNS00OTEwLThkZjQtZWQyZTEzNmRjMDI2 LzEvd0VvOWdQWjRieGVSQ1kxRjdOVlU4R1lNems4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzsEZT55 2v13y7+6KN1TCTR3ykWri2ZMdBV9p77KFCJxBoRFhhbS8VCIg8mgJf8/p6fDol4+ keevV98Io4stY0rOYMrbuXgMbE6QnjCzBHkdSymQLaOxE6udeI+jDeSelld0uIsy rt1mHOY1tD91ErB+V/WdL5d6oX5s/+/jnYhoRT0n8beiSn0P7cnFVPbx8kjJfVL5 RL1eB++7nqfV1Xt+7JRkGge6M5nP4W1pkc9iD0uWUnj9c0aym3kOQmx50J7iu8h1 ACOiaa0xiymxfAqcgx3litgpU9xMtpcJjxTw4x+Gr17/XuxFTWOuQQWNlwZhvDXR +WtOutWp56WOyw== -----END CERTIFICATE-----Generated at Fri Dec 26 22:44:55 2025 by rpki-client