This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft File: pW4itGIL0EL3OiqWIfDJJH1RJIo.mft (raw, json) Hash identifier: RfmVbwX8eliwz/9i6563xvOT1YMHk23vempfVL6XIWs= Subject key identifier: 47:A6:C8:99:8B:FE:0F:B0:7A:27:4C:E5:2C:21:7E:85:C0:B5:F1:AC Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A Certificate issuer: /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a Certificate serial: 019B4A03F5CF52C0752C01A686D8156A84C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft Manifest number: 01B2 Signing time: Tue 23 Dec 2025 07:02:12 +0000 Manifest this update: Tue 23 Dec 2025 07:02:12 +0000 Manifest next update: Wed 24 Dec 2025 07:02:12 +0000 Files and hashes: 1: nzgTTwbAHjDz2-zsShiAXUCqJOU.roa (hash: GBnP7tc+zXd9JtLmcvpJOSz2ArIIJJ/9cimz8hGmRDA=) 2: pW4itGIL0EL3OiqWIfDJJH1RJIo.crl (hash: lLqUaboD/+6cuLrab+qwErquUs2y/rBSaXzFKuD6fkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:f5:cf:52:c0:75:2c:01:a6:86:d8:15:6a:84:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a Validity Not Before: Dec 23 07:02:12 2025 GMT Not After : Dec 24 07:02:12 2025 GMT Subject: CN=47a6c8998bfe0fb07a274ce52c217e85c0b5f1ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5e:08:d7:d2:8d:a3:1e:8d:da:b4:0e:06:02: c1:ed:f8:37:c6:89:7b:85:f2:4b:ae:3b:f2:8e:07: f9:64:e2:aa:d0:e9:79:f2:13:df:6a:2f:95:ab:19: 2e:f4:53:3e:5b:0a:9f:c6:d7:de:40:16:1f:cf:d2: b1:dd:1d:26:e9:d3:e3:4d:da:35:f8:5c:9d:c9:7a: 5f:31:fc:79:06:16:46:4a:2d:db:c3:b4:49:ab:d2: 6d:30:29:66:50:b6:dd:6d:f9:45:4a:e4:fc:4d:68: 4c:fd:a7:d5:84:30:b1:78:13:b7:b2:18:28:c9:b5: b6:c9:cd:fd:84:13:f1:a5:2d:09:a6:06:21:ba:48: 80:ad:72:33:3f:9d:9f:25:71:9e:e1:07:7d:e2:4d: bf:7d:57:2a:87:9a:e6:64:4d:4a:8c:b0:16:a3:9d: 5e:97:88:b9:d1:34:3c:fd:08:ec:76:63:35:dc:31: 44:25:ac:3c:f7:ac:a8:61:4a:b9:c3:9c:e6:c4:e6: 20:ae:4d:b2:c6:3e:35:ec:1a:16:e8:19:8d:69:e0: 81:3c:b2:20:86:86:70:5e:03:9a:fb:8d:34:fa:ca: a3:ff:48:8a:a6:2b:7a:7c:b0:95:a1:81:44:bf:3e: a4:bc:bd:2f:2b:9c:45:1d:c2:e9:93:2f:a1:91:74: f6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A6:C8:99:8B:FE:0F:B0:7A:27:4C:E5:2C:21:7E:85:C0:B5:F1:AC X509v3 Authority Key Identifier: keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:61:e0:74:c7:20:0e:12:32:63:2d:c0:c8:22:a0:c8:c3:6f: 80:f1:2d:7f:d8:ff:bc:30:d5:70:d0:7e:a1:17:30:f5:b0:a4: 4c:8c:6f:3e:e7:38:16:16:00:cf:21:f8:a4:cb:8e:dd:05:f7: f8:ab:d0:20:e7:30:82:6a:77:63:35:95:35:04:99:56:10:a1: e4:d7:06:9b:6f:80:af:24:04:a5:34:49:cb:a7:1b:d9:c3:78: d3:1d:5a:7e:fb:76:8e:7c:2d:b3:f2:9f:13:20:04:4c:06:3f: ce:f9:0a:f1:c7:c4:b3:83:fe:7f:4d:3a:cf:f6:c2:8a:73:83: 77:1c:e8:4c:8d:02:fd:d0:66:22:47:4d:18:82:15:00:28:d5: 48:ff:59:f8:48:4f:9a:42:8f:c0:ad:c2:23:f8:9e:3d:b3:fd: 3c:dd:15:85:bc:e7:f3:f7:b5:5b:92:e8:74:8c:23:33:91:ea: 0e:24:4d:e1:a9:58:93:ba:36:7f:a4:9e:18:fa:7d:44:95:81: 28:8c:0c:15:df:29:4e:97:5f:41:e6:77:dd:87:69:96:ba:f0: 58:2b:b0:6a:b4:6d:10:27:9a:98:82:db:25:91:1c:76:23:58: ef:d6:cb:d6:9c:fe:fe:a7:4f:f5:fc:74:30:d1:71:bc:d3:d3: 5d:4a:df:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA/XPUsB1LAGmhtgVaoTEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NmUyMmI0NjIwYmQwNDJmNzNhMmE5NjIxZjBjOTI0N2Q1 MTI0OGEwHhcNMjUxMjIzMDcwMjEyWhcNMjUxMjI0MDcwMjEyWjAzMTEwLwYDVQQD Eyg0N2E2Yzg5OThiZmUwZmIwN2EyNzRjZTUyYzIxN2U4NWMwYjVmMWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp14I19KNox6N2rQOBgLB7fg3xol7 hfJLrjvyjgf5ZOKq0Ol58hPfai+Vqxku9FM+WwqfxtfeQBYfz9Kx3R0m6dPjTdo1 +FydyXpfMfx5BhZGSi3bw7RJq9JtMClmULbdbflFSuT8TWhM/afVhDCxeBO3shgo ybW2yc39hBPxpS0JpgYhukiArXIzP52fJXGe4Qd94k2/fVcqh5rmZE1KjLAWo51e l4i50TQ8/QjsdmM13DFEJaw896yoYUq5w5zmxOYgrk2yxj417BoW6BmNaeCBPLIg hoZwXgOa+400+sqj/0iKpit6fLCVoYFEvz6kvL0vK5xFHcLpky+hkXT24wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEemyJmL/g+weidM5SwhfoXAtfGsMB8GA1UdIwQY MBaAFKVuIrRiC9BC9zoqliHwySR9USSKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFc0aXRHSUwwRUwzT2lxV0lmREpKSDFSSklvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iNzgxOGQtMzI5OC00MDY5LTgyOTAt YzZlMWNmZDYwNjYxLzEvcFc0aXRHSUwwRUwzT2lxV0lmREpKSDFSSklvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9iNzgxOGQtMzI5OC00MDY5LTgyOTAtYzZlMWNmZDYwNjYx LzEvcFc0aXRHSUwwRUwzT2lxV0lmREpKSDFSSklvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmHgdMcg DhIyYy3AyCKgyMNvgPEtf9j/vDDVcNB+oRcw9bCkTIxvPuc4FhYAzyH4pMuO3QX3 +KvQIOcwgmp3YzWVNQSZVhCh5NcGm2+AryQEpTRJy6cb2cN40x1afvt2jnwts/Kf EyAETAY/zvkK8cfEs4P+f006z/bCinODdxzoTI0C/dBmIkdNGIIVACjVSP9Z+EhP mkKPwK3CI/iePbP9PN0Vhbzn8/e1W5LodIwjM5HqDiRN4alYk7o2f6SeGPp9RJWB KIwMFd8pTpdfQeZ33YdplrrwWCuwarRtECeamILbJZEcdiNY79bL1pz+/qdP9fx0 MNFxvNPTXUrffQ== -----END CERTIFICATE-----Generated at Tue Dec 23 09:23:24 2025 by rpki-client