This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft File: v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft (raw, json) Hash identifier: eaO65OwKr2T7wVutWQBEtsR6+UGH7cBLTaJaSXSgdIY= Subject key identifier: 3B:BE:0D:5B:24:0E:0B:B7:ED:D7:C9:3F:8F:35:21:F9:9D:D5:DF:40 Authority key identifier: BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3 Certificate issuer: /CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3 Certificate serial: 019B3FB6061C800A828A9D895CB8F694F2CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft Manifest number: 0EE5 Signing time: Sun 21 Dec 2025 07:00:52 +0000 Manifest this update: Sun 21 Dec 2025 07:00:52 +0000 Manifest next update: Mon 22 Dec 2025 07:00:52 +0000 Files and hashes: 1: Fuwpc4A-TRfgVPSV8ewciJSWczY.roa (hash: Y0uk9yq3kYnde4ofaqo2ePCwnF8vYGybwjzGM4J+Glo=) 2: v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl (hash: aLjy5cdwHZdiPybUTo8asUnayf6gd4wGmV930dcRCjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:06:1c:80:0a:82:8a:9d:89:5c:b8:f6:94:f2:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3 Validity Not Before: Dec 21 07:00:52 2025 GMT Not After : Dec 22 07:00:52 2025 GMT Subject: CN=3bbe0d5b240e0bb7edd7c93f8f3521f99dd5df40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:85:5c:73:5b:0d:1b:b6:5d:07:80:52:b9:ca: 8f:47:26:bb:79:56:75:99:83:71:92:e4:fc:36:a4: ae:aa:4a:b1:96:7d:6d:30:f5:1c:a1:66:b4:75:02: 98:e3:89:a8:8c:c2:23:b2:98:4d:79:3c:23:17:56: d8:23:ec:24:a5:95:f7:66:5b:bc:ea:d6:f0:60:24: d0:8f:cb:23:9a:16:4d:a4:2c:66:95:57:fc:70:77: a5:93:bd:e3:80:ec:0d:f0:2b:e5:bf:50:fa:03:8f: 94:3b:06:34:3f:5d:b3:57:07:4f:3a:3c:22:62:aa: 20:10:4c:79:7f:e2:ef:6e:f5:db:b1:82:b4:25:8e: 8e:34:19:68:7c:98:db:63:77:9a:f9:9f:ae:f3:e4: 7b:1b:87:df:ca:49:77:ed:c5:1f:33:51:f4:32:78: 2b:12:5f:77:36:71:a3:22:8b:61:62:41:90:de:4f: ea:c5:c9:b7:37:34:fd:ab:82:24:bd:ab:2c:0a:7d: a0:df:97:a0:50:37:ed:d7:68:6c:80:3a:25:6e:00: aa:41:67:d4:c6:60:3b:84:4e:42:0c:e2:f5:ba:93: 29:77:0b:5a:1b:27:12:d4:1e:c5:e1:f8:81:56:1e: 7b:42:41:0a:74:1d:c3:cf:f0:7f:8b:78:f2:08:b9: 6f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BE:0D:5B:24:0E:0B:B7:ED:D7:C9:3F:8F:35:21:F9:9D:D5:DF:40 X509v3 Authority Key Identifier: keyid:BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:5f:e3:cb:68:25:d0:a0:d8:23:1e:39:11:5a:ba:c0:13:28: fd:62:06:63:e8:c7:31:b9:ea:a6:18:13:ab:b6:5a:20:15:db: 43:5b:52:59:f7:45:cb:d6:40:de:ae:ce:13:ff:34:0b:ac:04: e2:77:d3:70:43:9c:77:1d:8b:b2:7b:7a:b1:4a:18:2e:37:b9: 3c:af:1f:49:b1:01:2e:28:6c:d1:81:50:b5:db:04:c5:d9:12: bc:79:1e:b8:f8:d7:98:6c:67:89:08:19:60:2a:a0:f4:41:ea: 05:c9:dd:b4:4e:fb:e8:0a:46:b8:a7:16:4f:ee:03:6a:05:d4: d2:cb:b0:26:8e:a6:a3:a0:06:3b:b9:6d:ad:c0:fc:0a:fe:5e: 33:65:fa:fa:cf:92:58:1d:54:78:14:59:06:9b:90:9e:14:22: 8d:9d:1d:c9:04:6f:c7:37:fc:e7:e1:5d:7a:64:53:92:ed:4c: 96:40:b3:3c:77:fc:7d:54:b7:41:64:2e:7a:4d:6b:7d:52:85: ab:15:65:34:d8:e0:41:9e:8c:6f:a5:95:2a:b3:02:68:c2:2e: 2b:9d:c5:e2:fa:d9:9e:4d:cd:ae:6a:dd:8e:f9:37:37:37:ec: 0e:ea:e3:35:41:bf:2e:3f:76:d1:29:82:68:ec:8f:82:31:38: 10:b1:da:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tgYcgAqCip2JXLj2lPLKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNTU5OWMyNjc1NWY0YTRkNGY1NDBlMmZmZDdiNzRhMzkw NTNkYTMwHhcNMjUxMjIxMDcwMDUyWhcNMjUxMjIyMDcwMDUyWjAzMTEwLwYDVQQD EygzYmJlMGQ1YjI0MGUwYmI3ZWRkN2M5M2Y4ZjM1MjFmOTlkZDVkZjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoVcc1sNG7ZdB4BSucqPRya7eVZ1 mYNxkuT8NqSuqkqxln1tMPUcoWa0dQKY44mojMIjsphNeTwjF1bYI+wkpZX3Zlu8 6tbwYCTQj8sjmhZNpCxmlVf8cHelk73jgOwN8Cvlv1D6A4+UOwY0P12zVwdPOjwi YqogEEx5f+LvbvXbsYK0JY6ONBlofJjbY3ea+Z+u8+R7G4ffykl37cUfM1H0Mngr El93NnGjIothYkGQ3k/qxcm3NzT9q4IkvassCn2g35egUDft12hsgDolbgCqQWfU xmA7hE5CDOL1upMpdwtaGycS1B7F4fiBVh57QkEKdB3Dz/B/i3jyCLlvnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDu+DVskDgu37dfJP481Ifmd1d9AMB8GA1UdIwQY MBaAFL9VmcJnVfSk1PVA4v/Xt0o5BT2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjFXWndtZFY5S1RVOVVEaV85ZTNTamtGUGFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8xMDE2OTYtODNkZC00MzZmLWI0N2Mt M2UxYjg0MzJmYzcwLzEvdjFXWndtZFY5S1RVOVVEaV85ZTNTamtGUGFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8xMDE2OTYtODNkZC00MzZmLWI0N2MtM2UxYjg0MzJmYzcw LzEvdjFXWndtZFY5S1RVOVVEaV85ZTNTamtGUGFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJV/jy2gl 0KDYIx45EVq6wBMo/WIGY+jHMbnqphgTq7ZaIBXbQ1tSWfdFy9ZA3q7OE/80C6wE 4nfTcEOcdx2Lsnt6sUoYLje5PK8fSbEBLihs0YFQtdsExdkSvHkeuPjXmGxniQgZ YCqg9EHqBcndtE776ApGuKcWT+4DagXU0suwJo6mo6AGO7ltrcD8Cv5eM2X6+s+S WB1UeBRZBpuQnhQijZ0dyQRvxzf85+FdemRTku1MlkCzPHf8fVS3QWQuek1rfVKF qxVlNNjgQZ6Mb6WVKrMCaMIuK53F4vrZnk3Nrmrdjvk3NzfsDurjNUG/Lj920SmC aOyPgjE4ELHazw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:33:51 2025 by rpki-client