This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft File: wE7eHnv2cZnnq29e0ASelggxc2I.mft (raw, json) Hash identifier: yKVQSawZDNcL+bg3/hqQ8/RR/PQPNIEFoAeydz8bjyQ= Subject key identifier: 22:10:C6:F4:62:9D:27:3C:88:98:E2:13:FD:EF:29:D5:E6:92:94:F8 Authority key identifier: C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62 Certificate issuer: /CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362 Certificate serial: 019B345684BCBB117CB2A20BBD1F1153235B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft Manifest number: 1706 Signing time: Fri 19 Dec 2025 02:00:43 +0000 Manifest this update: Fri 19 Dec 2025 02:00:43 +0000 Manifest next update: Sat 20 Dec 2025 02:00:43 +0000 Files and hashes: 1: PNGVC-CrfH1p9OIprudcP9OFefc.roa (hash: nc5dlgvbSht3Pu2b1emN1gFyKryX3zAIW0Vn1s/MtZQ=) 2: ZH517UMHt57T2FttefkfbwPx0bw.roa (hash: Tv8TZN2c/ZcUSn9bX3gVpx2AiLfp54IyB2SfPNHaM/A=) 3: wE7eHnv2cZnnq29e0ASelggxc2I.crl (hash: Nl5QZYhs00n/SBrV7DWMfB6vdpVUDBEzt/PZxL6qUUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:84:bc:bb:11:7c:b2:a2:0b:bd:1f:11:53:23:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362 Validity Not Before: Dec 19 02:00:43 2025 GMT Not After : Dec 20 02:00:43 2025 GMT Subject: CN=2210c6f4629d273c8898e213fdef29d5e69294f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8d:e2:48:61:50:81:97:1a:a0:04:1d:2c:42: e1:fa:32:98:42:bb:f2:f3:8b:13:61:1b:ed:75:c3: 78:73:90:2c:75:5a:39:ce:ab:76:d9:71:fc:ed:72: ad:78:2e:a4:25:8d:23:a5:c1:0c:5f:33:0d:81:d6: e7:72:bb:ec:8f:ce:60:e1:eb:25:a2:4d:1e:23:ab: 2f:3f:1b:d5:14:3d:dc:5a:c3:98:71:dc:ce:c5:14: 27:5c:29:74:f5:16:5d:cb:ec:82:a7:76:50:16:77: 94:69:b0:2f:f0:70:ae:c3:1d:50:a1:15:f9:60:a5: 3f:0b:2c:6e:63:da:c6:b4:ad:83:e3:71:b8:d5:6e: c1:f5:9d:08:3d:96:a4:53:5e:7d:2d:35:68:8f:48: 47:15:6f:b9:8f:36:32:69:a6:9f:b2:81:0b:72:c4: 01:34:37:58:06:1f:7c:67:cd:54:2d:5b:6f:4a:bc: dc:e4:c4:24:21:1e:cf:3f:68:54:be:97:60:3a:cc: 7d:f3:43:d0:44:7b:3b:7e:30:18:b1:c7:90:94:fc: e5:b9:68:01:63:e2:c2:6a:c5:69:7f:26:eb:7c:2d: 97:e4:2e:a8:28:2c:a1:18:95:f7:f7:b0:a0:e4:be: 54:86:f2:a1:14:3e:f9:34:88:73:76:0d:63:3f:e3: 0f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:10:C6:F4:62:9D:27:3C:88:98:E2:13:FD:EF:29:D5:E6:92:94:F8 X509v3 Authority Key Identifier: keyid:C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b5:30:aa:66:7f:ec:e2:eb:47:d1:a9:f0:c6:e0:a3:85:8c: 5e:0e:12:34:f5:2d:75:1d:0a:af:ed:d4:dc:ea:b1:74:1c:e4: ca:eb:1a:6a:99:2d:48:ee:5f:50:c9:cc:d6:00:7b:1e:f5:22: f6:46:e7:64:d2:5a:f3:da:4e:48:87:16:5a:da:85:e8:e9:5d: fc:e7:9c:13:70:f0:15:d4:0d:10:c5:a2:5c:1f:b2:cc:6b:23: d4:7a:be:9c:b1:3f:a9:3b:e3:be:96:e4:bb:a6:a8:58:17:5c: 76:9c:3e:17:eb:d3:a8:43:58:1a:a6:df:2d:aa:20:44:7e:ef: 20:79:40:f5:bb:22:98:65:31:38:08:70:17:aa:f0:64:60:fe: 76:5f:3e:29:37:1b:fa:14:de:12:b2:d7:06:5d:27:6a:30:98: fd:3f:03:5b:ed:94:f6:99:e8:49:e7:db:43:fb:82:57:f9:70: 32:b8:63:90:84:22:0f:d5:93:c6:b1:a3:6a:56:e4:79:a3:93: 34:e5:84:b2:de:6f:fc:3f:ec:91:c1:4e:c2:6a:69:31:a7:6c: 32:4a:8a:d7:e8:08:7d:96:d0:16:6a:d7:2d:c4:23:0d:8a:a5: 8d:9f:3e:09:d9:34:4c:61:93:cf:38:7d:31:a0:d8:5b:d9:dc: 53:b5:c6:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VoS8uxF8sqILvR8RUyNbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNGVkZTFlN2JmNjcxOTllN2FiNmY1ZWQwMDQ5ZTk2MDgz MTczNjIwHhcNMjUxMjE5MDIwMDQzWhcNMjUxMjIwMDIwMDQzWjAzMTEwLwYDVQQD EygyMjEwYzZmNDYyOWQyNzNjODg5OGUyMTNmZGVmMjlkNWU2OTI5NGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx43iSGFQgZcaoAQdLELh+jKYQrvy 84sTYRvtdcN4c5AsdVo5zqt22XH87XKteC6kJY0jpcEMXzMNgdbncrvsj85g4esl ok0eI6svPxvVFD3cWsOYcdzOxRQnXCl09RZdy+yCp3ZQFneUabAv8HCuwx1QoRX5 YKU/CyxuY9rGtK2D43G41W7B9Z0IPZakU159LTVoj0hHFW+5jzYyaaafsoELcsQB NDdYBh98Z81ULVtvSrzc5MQkIR7PP2hUvpdgOsx980PQRHs7fjAYsceQlPzluWgB Y+LCasVpfybrfC2X5C6oKCyhGJX397Cg5L5UhvKhFD75NIhzdg1jP+MPUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIQxvRinSc8iJjiE/3vKdXmkpT4MB8GA1UdIwQY MBaAFMBO3h579nGZ56tvXtAEnpYIMXNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0U3ZUhudjJjWm5ucTI5ZTBBU2VsZ2d4YzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80OWQwNTAtZGFjZS00NWVjLTgxMzkt OWU3MWY2YTg0ODAxLzEvd0U3ZUhudjJjWm5ucTI5ZTBBU2VsZ2d4YzJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80OWQwNTAtZGFjZS00NWVjLTgxMzktOWU3MWY2YTg0ODAx LzEvd0U3ZUhudjJjWm5ucTI5ZTBBU2VsZ2d4YzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7UwqmZ/ 7OLrR9Gp8Mbgo4WMXg4SNPUtdR0Kr+3U3OqxdBzkyusaapktSO5fUMnM1gB7HvUi 9kbnZNJa89pOSIcWWtqF6Old/OecE3DwFdQNEMWiXB+yzGsj1Hq+nLE/qTvjvpbk u6aoWBdcdpw+F+vTqENYGqbfLaogRH7vIHlA9bsimGUxOAhwF6rwZGD+dl8+KTcb +hTeErLXBl0najCY/T8DW+2U9pnoSefbQ/uCV/lwMrhjkIQiD9WTxrGjalbkeaOT NOWEst5v/D/skcFOwmppMadsMkqK1+gIfZbQFmrXLcQjDYqljZ8+Cdk0TGGTzzh9 MaDYW9ncU7XG6g== -----END CERTIFICATE-----Generated at Fri Dec 19 10:42:42 2025 by rpki-client