This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft File: ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft (raw, json) Hash identifier: yTNz3At54g9MxvNQVN/fUJmjwyVIOvYVhv66QIlW1V8= Subject key identifier: E7:2D:51:7F:40:D0:7D:E7:45:82:9E:5A:BF:82:D1:17:CA:F6:5C:61 Authority key identifier: C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB Certificate issuer: /CN=c2ce0814167eaa8189fd84d390270eadf29482cb Certificate serial: 019B0FA5E87810455B5ECD7D3C6F7DFD7845 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft Manifest number: 0BF1 Signing time: Thu 11 Dec 2025 23:01:29 +0000 Manifest this update: Thu 11 Dec 2025 23:01:29 +0000 Manifest next update: Fri 12 Dec 2025 23:01:29 +0000 Files and hashes: 1: R1gidcfPTDL9l_CbPS671EyX5iY.roa (hash: c4a4L7/lsOBY0SjW+Je19dj12ru5NWUKEP164tb+S4Q=) 2: Re7xjUICEpcefdPF_f0YtM8qXn4.roa (hash: ekIH5kxgf0bGVz6q5zIjK4NfDPuAaNIY8i0OtjeIH9w=) 3: f7Zg_MmXx6IJnLloz3q786pe2i4.roa (hash: mDHnzXpmbP7OAduSpZ+5VZ3yHq/l9M3cROQgCCtCtyw=) 4: ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl (hash: r+/vcZwKjNPCw9SYqaptu0TCj/R6JCSmb3te1DsQC+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:e8:78:10:45:5b:5e:cd:7d:3c:6f:7d:fd:78:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ce0814167eaa8189fd84d390270eadf29482cb Validity Not Before: Dec 11 23:01:29 2025 GMT Not After : Dec 12 23:01:29 2025 GMT Subject: CN=e72d517f40d07de745829e5abf82d117caf65c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:39:48:56:02:54:b5:79:10:1f:81:b0:97:fa: 9b:53:ce:7f:32:7a:cb:d8:a2:e7:f7:91:19:f0:b7: 78:87:84:bf:ce:46:3b:95:f4:10:ac:33:d6:76:21: ed:1b:0a:72:5f:32:80:86:3a:d4:dc:ac:a3:22:3c: 84:d8:6d:f0:58:6e:8e:7d:7c:c5:2a:cd:83:1e:78: 83:d5:25:5c:cc:31:c0:59:74:74:20:56:92:49:15: ac:8c:30:4d:50:6d:7c:bd:f3:e4:fb:41:fb:66:50: df:e1:06:51:66:fe:af:fb:99:6b:0d:93:b7:4c:5a: 5e:aa:eb:e8:03:3b:d9:8d:52:48:a4:73:8d:16:97: c6:bf:d0:6a:a2:85:54:cc:53:54:c2:c2:2e:9d:37: 7a:1d:77:a3:a0:8b:05:24:a7:80:e8:ea:7a:54:d3: c0:40:7b:eb:71:f6:e5:f6:9c:80:d1:74:6b:69:13: 41:91:72:50:d2:a5:c3:63:fa:3b:85:65:08:68:16: 73:4d:a0:32:90:68:f4:b3:61:41:0a:04:2e:f9:a6: 9c:40:39:61:b3:c2:e3:36:98:64:5d:b1:2f:9c:4b: 78:3e:7e:50:f9:7d:27:88:37:cc:94:63:91:e5:21: 28:20:ba:3b:f6:a0:60:ab:4e:9c:2d:22:0b:35:c6: 02:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:2D:51:7F:40:D0:7D:E7:45:82:9E:5A:BF:82:D1:17:CA:F6:5C:61 X509v3 Authority Key Identifier: keyid:C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:dd:34:7a:58:22:de:a5:9b:6a:5a:64:eb:e9:5b:ff:80:25: 33:7f:bd:ee:29:a7:3e:91:d4:18:0f:2d:67:7b:70:52:53:46: f4:02:3b:66:b5:cb:a1:ed:d9:df:5a:fd:b9:c4:48:ed:e4:4c: 37:d6:6b:57:10:4d:90:8f:85:e5:2a:45:3c:b0:0c:59:05:a4: 38:3a:f0:5f:2d:7d:f5:9b:69:d5:40:e7:d5:90:40:7b:66:25: 30:5d:6e:b4:b8:49:f4:40:31:6b:e8:c4:63:a4:6f:9f:56:be: 47:3e:73:ab:81:96:89:74:3b:3c:c7:d4:73:5e:26:0b:dd:ca: 37:66:2c:7d:93:6f:4f:b5:7a:9f:58:c6:75:21:c4:9b:9f:92: e9:dc:9e:80:bc:ec:9e:0f:fe:eb:ff:99:52:05:96:87:95:2a: 44:4e:7a:9b:49:73:df:c3:0a:77:87:cb:69:70:7b:6b:a9:56: b2:46:4e:de:1c:f1:56:30:02:a7:49:9b:dc:74:49:e5:bb:32: af:2a:15:3b:5a:39:09:53:89:2a:3f:d3:7f:6b:b3:dc:1c:39: 95:a2:2d:4d:e3:d3:e2:91:07:24:3a:32:e7:c8:1a:e9:7a:5b: 1a:82:2b:64:07:75:93:96:76:a3:46:04:e3:3f:a1:af:3b:0b: a3:09:b3:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpeh4EEVbXs19PG99/XhFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyY2UwODE0MTY3ZWFhODE4OWZkODRkMzkwMjcwZWFkZjI5 NDgyY2IwHhcNMjUxMjExMjMwMTI5WhcNMjUxMjEyMjMwMTI5WjAzMTEwLwYDVQQD EyhlNzJkNTE3ZjQwZDA3ZGU3NDU4MjllNWFiZjgyZDExN2NhZjY1YzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjlIVgJUtXkQH4Gwl/qbU85/MnrL 2KLn95EZ8Ld4h4S/zkY7lfQQrDPWdiHtGwpyXzKAhjrU3KyjIjyE2G3wWG6OfXzF Ks2DHniD1SVczDHAWXR0IFaSSRWsjDBNUG18vfPk+0H7ZlDf4QZRZv6v+5lrDZO3 TFpequvoAzvZjVJIpHONFpfGv9BqooVUzFNUwsIunTd6HXejoIsFJKeA6Op6VNPA QHvrcfbl9pyA0XRraRNBkXJQ0qXDY/o7hWUIaBZzTaAykGj0s2FBCgQu+aacQDlh s8LjNphkXbEvnEt4Pn5Q+X0niDfMlGOR5SEoILo79qBgq06cLSILNcYCgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOctUX9A0H3nRYKeWr+C0RfK9lxhMB8GA1UdIwQY MBaAFMLOCBQWfqqBif2E05AnDq3ylILLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3M0SUZCWi1xb0dKX1lUVGtDY09yZktVZ3NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lOTVlNzktMjcwMi00MGUwLTliOGEt ZTc3MTdiMjg3MDY2LzEvd3M0SUZCWi1xb0dKX1lUVGtDY09yZktVZ3NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lOTVlNzktMjcwMi00MGUwLTliOGEtZTc3MTdiMjg3MDY2 LzEvd3M0SUZCWi1xb0dKX1lUVGtDY09yZktVZ3NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyN00elgi 3qWbalpk6+lb/4AlM3+97imnPpHUGA8tZ3twUlNG9AI7ZrXLoe3Z31r9ucRI7eRM N9ZrVxBNkI+F5SpFPLAMWQWkODrwXy199Ztp1UDn1ZBAe2YlMF1utLhJ9EAxa+jE Y6Rvn1a+Rz5zq4GWiXQ7PMfUc14mC93KN2YsfZNvT7V6n1jGdSHEm5+S6dyegLzs ng/+6/+ZUgWWh5UqRE56m0lz38MKd4fLaXB7a6lWskZO3hzxVjACp0mb3HRJ5bsy ryoVO1o5CVOJKj/Tf2uz3Bw5laItTePT4pEHJDoy58ga6XpbGoIrZAd1k5Z2o0YE 4z+hrzsLowmzgg== -----END CERTIFICATE-----Generated at Fri Dec 12 01:32:15 2025 by rpki-client