This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft File: wQHFvAkVovfLFlsLfXEyEvpXMy0.mft (raw, json) Hash identifier: 8fsW/q56kVYunl6om8Y+xCKBuJDBSEbQiHoGOndH5gw= Subject key identifier: AC:B0:17:EF:CA:AE:C1:DE:98:3B:EE:02:39:6B:0C:F9:16:11:BC:83 Authority key identifier: C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D Certificate issuer: /CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d Certificate serial: 019B5977824C7E05FDEEF955EDBE0683B34F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 07:02:42 +0000 Manifest this update: Fri 26 Dec 2025 07:02:42 +0000 Manifest next update: Sat 27 Dec 2025 07:02:42 +0000 Files and hashes: 1: 9rnqD1RU0JdMjSu8BzguZaGfvTA.roa (hash: GMQdSU1ONVtRLJ/ahFPu6uQVjVVqJu2bd95QqZUAXII=) 2: wQHFvAkVovfLFlsLfXEyEvpXMy0.crl (hash: etMuDUzYUJCL+/HPE4niBZm3lFAu+NvNbC6Ghlp5s7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:82:4c:7e:05:fd:ee:f9:55:ed:be:06:83:b3:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d Validity Not Before: Dec 26 07:02:42 2025 GMT Not After : Dec 27 07:02:42 2025 GMT Subject: CN=acb017efcaaec1de983bee02396b0cf91611bc83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:54:36:4a:ef:f4:32:e7:29:cf:f2:09:b6:5e: 61:92:4c:76:ed:5e:a7:82:0b:63:b3:2d:a3:55:1b: 3d:f1:34:c6:d5:de:93:d6:d2:71:44:86:02:77:74: a0:69:b0:7b:6c:8b:5b:04:06:01:4e:2e:74:53:0f: 70:e5:02:69:de:26:34:2c:bc:aa:19:2c:7b:59:05: e3:f9:ae:34:86:c4:d3:0c:84:76:b0:8c:cc:a4:95: 1d:11:62:a0:5f:cb:2e:4e:d4:71:16:f7:d7:9d:26: d8:b3:2f:83:c0:4a:ed:19:b4:c6:e8:c1:4f:b9:44: 67:ee:85:da:b1:8e:b5:bf:08:dd:53:b6:0d:77:2f: c8:6a:3e:83:d0:1e:2d:09:9d:af:92:ad:19:49:9d: d8:00:38:27:ad:ef:03:ca:1b:5c:20:94:4a:6d:9a: d6:d5:2e:af:80:91:7e:53:dc:b6:8f:86:9c:e7:a5: c9:f6:e7:37:fb:af:ca:10:bd:44:00:a0:17:e9:61: 8c:77:de:76:4a:2b:e3:33:66:58:f5:3c:e6:e2:b8: 05:ab:0b:17:ff:e5:83:2f:ce:eb:09:da:90:6b:a9: 58:fb:40:8e:c8:c6:da:78:0f:23:0b:89:99:ed:81: cc:fe:7c:48:27:d8:cf:ad:e9:80:e0:1f:68:5a:df: 97:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B0:17:EF:CA:AE:C1:DE:98:3B:EE:02:39:6B:0C:F9:16:11:BC:83 X509v3 Authority Key Identifier: keyid:C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:f3:2e:2a:2b:2c:04:9d:24:2c:d0:42:18:01:3d:a6:f6:42: fc:d4:dd:d6:94:35:ce:84:b5:d6:ea:f3:85:f1:2a:46:65:10: 67:5d:de:ca:f5:99:88:23:91:b4:d8:4b:9d:10:db:90:13:b9: 32:6c:44:87:e1:b1:9e:c2:fc:00:fb:a7:65:5b:25:db:f2:24: 49:19:77:c1:b4:1d:09:fc:f3:2b:68:b1:77:4b:8e:c6:3b:f5: ed:40:ef:e2:f9:52:55:31:8f:52:73:4e:22:9c:d8:c3:62:4d: b7:f0:20:3c:b3:a1:6b:66:e0:e7:45:f3:e1:4f:8d:1b:8d:1f: 07:14:82:75:27:2e:98:11:16:3b:17:98:3b:63:8c:8d:0a:c6: 65:a5:b7:84:ea:0f:8f:87:1f:8c:93:39:2f:da:8f:a7:c3:2d: 3f:47:d5:a3:49:98:ef:aa:4a:a8:ae:57:68:29:de:ee:13:d1: d7:37:13:bc:c7:67:f9:e5:a2:d3:a3:40:5b:26:84:6a:ee:dd: b0:c9:33:78:ba:dc:2c:74:6e:6f:02:13:62:a2:8b:a1:61:9e: 3c:45:30:56:6f:3a:3f:54:6a:98:1c:69:ec:76:42:96:88:b6: c6:ac:01:b3:6f:79:02:0e:6d:b8:85:03:1d:f2:20:4a:b9:75: 4a:c4:23:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd4JMfgX97vlV7b4Gg7NPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDFjNWJjMDkxNWEyZjdjYjE2NWIwYjdkNzEzMjEyZmE1 NzMzMmQwHhcNMjUxMjI2MDcwMjQyWhcNMjUxMjI3MDcwMjQyWjAzMTEwLwYDVQQD EyhhY2IwMTdlZmNhYWVjMWRlOTgzYmVlMDIzOTZiMGNmOTE2MTFiYzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1Q2Su/0Mucpz/IJtl5hkkx27V6n ggtjsy2jVRs98TTG1d6T1tJxRIYCd3SgabB7bItbBAYBTi50Uw9w5QJp3iY0LLyq GSx7WQXj+a40hsTTDIR2sIzMpJUdEWKgX8suTtRxFvfXnSbYsy+DwErtGbTG6MFP uURn7oXasY61vwjdU7YNdy/Iaj6D0B4tCZ2vkq0ZSZ3YADgnre8DyhtcIJRKbZrW 1S6vgJF+U9y2j4ac56XJ9uc3+6/KEL1EAKAX6WGMd952SivjM2ZY9Tzm4rgFqwsX /+WDL87rCdqQa6lY+0COyMbaeA8jC4mZ7YHM/nxIJ9jPremA4B9oWt+XFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKywF+/KrsHemDvuAjlrDPkWEbyDMB8GA1UdIwQY MBaAFMEBxbwJFaL3yxZbC31xMhL6VzMtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FIRnZBa1ZvdmZMRmxzTGZYRXlFdnBYTXkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jZmNkZTAtOWFhMy00YzJkLWI4Zjct OTI4ZDkxNzkxOTA3LzEvd1FIRnZBa1ZvdmZMRmxzTGZYRXlFdnBYTXkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jZmNkZTAtOWFhMy00YzJkLWI4ZjctOTI4ZDkxNzkxOTA3 LzEvd1FIRnZBa1ZvdmZMRmxzTGZYRXlFdnBYTXkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACPMuKiss BJ0kLNBCGAE9pvZC/NTd1pQ1zoS11urzhfEqRmUQZ13eyvWZiCORtNhLnRDbkBO5 MmxEh+GxnsL8APunZVsl2/IkSRl3wbQdCfzzK2ixd0uOxjv17UDv4vlSVTGPUnNO IpzYw2JNt/AgPLOha2bg50Xz4U+NG40fBxSCdScumBEWOxeYO2OMjQrGZaW3hOoP j4cfjJM5L9qPp8MtP0fVo0mY76pKqK5XaCne7hPR1zcTvMdn+eWi06NAWyaEau7d sMkzeLrcLHRubwITYqKLoWGePEUwVm86P1RqmBxp7HZCloi2xqwBs295Ag5tuIUD HfIgSrl1SsQjYQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:41 2025 by rpki-client