This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft File: wTyftZyZzftKbYQpzYNwWQYBKxE.mft (raw, json) Hash identifier: J2pongQkEK/QBPVoX+hQZOKsmEzmyp+53+EMLlPiRYY= Subject key identifier: 88:5A:B9:B7:36:D1:3D:C6:6C:BF:90:95:68:7D:20:51:38:AC:4A:BD Authority key identifier: C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11 Certificate issuer: /CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11 Certificate serial: 019B54F430051143652223817FE98F297D9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft Manifest number: 150A Signing time: Thu 25 Dec 2025 10:00:47 +0000 Manifest this update: Thu 25 Dec 2025 10:00:47 +0000 Manifest next update: Fri 26 Dec 2025 10:00:47 +0000 Files and hashes: 1: 6WdR5ALUcJI-sJuaADDlA6E9Y0A.asa (hash: VJWjlwq1JUBaxiGK+9yYjlSpnVeoc6WMAIqDzfDLC38=) 2: wTyftZyZzftKbYQpzYNwWQYBKxE.crl (hash: 5LNFRUW+ne3xRJYwrxCZtzmAabG+53XKGaF5Z2fS2Rw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:f4:30:05:11:43:65:22:23:81:7f:e9:8f:29:7d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11 Validity Not Before: Dec 25 10:00:47 2025 GMT Not After : Dec 26 10:00:47 2025 GMT Subject: CN=885ab9b736d13dc66cbf9095687d205138ac4abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:32:bc:b5:95:e4:4d:1b:d8:21:a7:f8:71:8d: 1c:a6:a3:aa:8c:b1:5c:5c:ba:80:06:99:03:07:64: 57:f4:99:6c:c7:2f:c0:21:eb:70:a0:91:c5:0f:9b: d3:be:16:aa:3c:e2:07:10:6b:77:47:c5:ba:6f:cb: f6:b9:a5:37:00:a3:b6:49:72:21:28:39:c8:15:6c: 71:8c:4b:af:81:8a:b1:5e:21:11:03:b2:d8:ee:9f: a3:00:40:7d:72:3c:ec:3b:7b:45:71:1d:eb:33:21: e4:2b:ab:ca:2c:f6:35:4f:33:70:9a:53:19:99:d1: 01:32:1d:ec:d9:3c:89:6a:7c:d1:17:d9:3f:6e:9c: fa:a2:de:60:9f:8e:f4:69:0d:cb:85:9b:d7:4d:ba: 01:37:cd:0b:ce:18:0e:f7:22:20:6b:e7:d6:71:a1: 21:3f:71:1a:4d:66:98:d2:23:fa:1e:70:8c:54:a8: 50:b7:cf:f5:f0:7a:94:39:68:e6:38:6f:4d:86:ec: d7:ba:bf:9a:5e:ab:ee:8a:87:dd:8e:5f:0a:ab:4c: c0:ed:9d:de:05:46:96:20:24:1a:7f:2d:7a:46:d3: c2:7a:25:fc:ac:4f:f9:80:8c:3d:d3:95:77:b2:d4: ee:00:37:24:39:a0:b9:42:63:44:65:50:a0:be:23: e8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5A:B9:B7:36:D1:3D:C6:6C:BF:90:95:68:7D:20:51:38:AC:4A:BD X509v3 Authority Key Identifier: keyid:C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:3c:c2:6d:ae:ee:32:57:be:43:95:99:f3:7e:d9:9e:61:cd: 45:76:e6:0f:52:a5:48:66:1a:72:d1:5c:87:d4:dd:f2:0f:36: 02:5d:1a:3f:b2:09:05:6c:7d:b9:2a:7c:93:fb:88:ff:58:eb: 1f:ec:dd:e4:70:77:e9:06:82:a5:ef:e9:94:20:5f:21:33:9e: 0e:56:e7:6e:83:d4:68:28:16:11:1b:53:9e:1c:64:2a:8f:8e: d7:1a:15:84:d8:63:39:51:36:0c:92:73:83:5e:5e:4c:7d:8f: 3f:c7:84:85:8f:94:1e:62:2b:55:e2:f6:35:38:09:54:18:23: b0:69:5e:20:f3:1c:74:30:fe:7a:93:a8:58:88:99:88:4d:d9: bb:3f:21:0b:7a:e8:69:f8:03:53:52:7d:87:1b:a7:89:cb:bb: 0c:62:f8:78:0a:47:d2:59:d1:77:72:4d:78:9c:04:90:2b:e3: 05:c6:44:ec:25:77:dd:c7:b9:44:45:96:a9:18:f5:b1:60:5b: 67:67:b9:b0:7c:02:b4:73:a7:9f:67:32:a4:0e:90:57:bd:f8: ae:7a:91:68:48:79:cf:59:e9:99:7e:47:f4:02:48:de:cf:56: 9d:b3:c0:b6:bb:a3:e3:0b:4c:78:ef:24:b7:f8:90:28:34:d4: 91:98:3e:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtU9DAFEUNlIiOBf+mPKX2aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxM2M5ZmI1OWM5OWNkZmI0YTZkODQyOWNkODM3MDU5MDYw MTJiMTEwHhcNMjUxMjI1MTAwMDQ3WhcNMjUxMjI2MTAwMDQ3WjAzMTEwLwYDVQQD Eyg4ODVhYjliNzM2ZDEzZGM2NmNiZjkwOTU2ODdkMjA1MTM4YWM0YWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDK8tZXkTRvYIaf4cY0cpqOqjLFc XLqABpkDB2RX9Jlsxy/AIetwoJHFD5vTvhaqPOIHEGt3R8W6b8v2uaU3AKO2SXIh KDnIFWxxjEuvgYqxXiERA7LY7p+jAEB9cjzsO3tFcR3rMyHkK6vKLPY1TzNwmlMZ mdEBMh3s2TyJanzRF9k/bpz6ot5gn470aQ3LhZvXTboBN80LzhgO9yIga+fWcaEh P3EaTWaY0iP6HnCMVKhQt8/18HqUOWjmOG9NhuzXur+aXqvuiofdjl8Kq0zA7Z3e BUaWICQafy16RtPCeiX8rE/5gIw905V3stTuADckOaC5QmNEZVCgviPoAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhaubc20T3GbL+QlWh9IFE4rEq9MB8GA1UdIwQY MBaAFME8n7Wcmc37Sm2EKc2DcFkGASsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1R5ZnRaeVp6ZnRLYllRcHpZTndXUVlCS3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9hNzFkMDYtYjE0MC00Njk1LTg5MWMt YWRlYzA3ZDIyZjQ2LzEvd1R5ZnRaeVp6ZnRLYllRcHpZTndXUVlCS3hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9hNzFkMDYtYjE0MC00Njk1LTg5MWMtYWRlYzA3ZDIyZjQ2 LzEvd1R5ZnRaeVp6ZnRLYllRcHpZTndXUVlCS3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTzCba7u Mle+Q5WZ837ZnmHNRXbmD1KlSGYactFch9Td8g82Al0aP7IJBWx9uSp8k/uI/1jr H+zd5HB36QaCpe/plCBfITOeDlbnboPUaCgWERtTnhxkKo+O1xoVhNhjOVE2DJJz g15eTH2PP8eEhY+UHmIrVeL2NTgJVBgjsGleIPMcdDD+epOoWIiZiE3Zuz8hC3ro afgDU1J9hxunicu7DGL4eApH0lnRd3JNeJwEkCvjBcZE7CV33ce5REWWqRj1sWBb Z2e5sHwCtHOnn2cypA6QV734rnqRaEh5z1npmX5H9AJI3s9WnbPAtruj4wtMeO8k t/iQKDTUkZg+ug== -----END CERTIFICATE-----Generated at Thu Dec 25 12:48:53 2025 by rpki-client