This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft File: wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft (raw, json) Hash identifier: RvTkQ/a0Hb++IxSiY1XonQO2G3dE6wc0/t2ufSKS3Jk= Subject key identifier: 67:C3:69:3F:1F:95:F2:BD:86:BB:07:D2:20:B4:00:30:10:1E:2F:8B Authority key identifier: C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE Certificate issuer: /CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae Certificate serial: 019B3F47DE8226B0661BA9FBC929E56FB25E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft Manifest number: 0C4B Signing time: Sun 21 Dec 2025 05:00:33 +0000 Manifest this update: Sun 21 Dec 2025 05:00:33 +0000 Manifest next update: Mon 22 Dec 2025 05:00:33 +0000 Files and hashes: 1: 6qgSMfZ3_YfeL-wTXFWx5LVQFts.roa (hash: avRjJs3tQZCWYxxzrvKfKWMx6I1KbzcTNaTHuCyd7uA=) 2: wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl (hash: kLekmR7AUbNRPKT6dAjjI/DVhiuQ1r+9oZnz9aRxYZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:47:de:82:26:b0:66:1b:a9:fb:c9:29:e5:6f:b2:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae Validity Not Before: Dec 21 05:00:33 2025 GMT Not After : Dec 22 05:00:33 2025 GMT Subject: CN=67c3693f1f95f2bd86bb07d220b40030101e2f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9b:53:6c:98:9d:b6:f8:7d:21:ce:9c:1a:db: e4:4e:27:bc:81:3e:1b:9c:88:e3:ce:12:7f:bd:a6: 07:4a:16:bc:e1:96:5e:96:0e:e1:23:89:d7:ff:6d: d2:41:37:de:b7:02:6f:5d:10:9a:1f:9e:18:90:80: 7f:f3:21:da:5c:75:ce:45:29:a8:d3:8d:aa:bf:65: 6c:8a:c4:7c:1b:fe:b2:45:93:44:2e:86:6e:a8:9d: b1:3a:1d:dd:c0:69:e0:6d:49:22:87:dd:c0:d8:77: 58:fb:59:bd:22:f5:5d:87:64:79:b2:9e:40:4d:45: 7a:e3:59:88:1c:75:c9:c8:78:dc:dc:47:00:5b:4b: d1:39:cc:cd:fe:d4:74:bb:1b:65:5a:18:ef:3d:81: fd:8d:d7:80:54:c1:f3:52:a8:d2:3c:2d:7f:0d:c6: ad:b2:fc:6b:73:fe:03:a7:d0:88:cd:70:09:c7:38: 80:95:44:1c:30:10:60:70:4e:39:46:7a:cb:3f:9a: 26:e1:69:74:3c:82:f5:63:00:9f:8b:9d:5a:e3:e6: e9:84:d9:be:fc:a3:c8:9b:0f:b9:f0:4d:ef:4f:84: cd:ee:c2:75:20:3b:b2:2a:f1:9a:52:95:d7:2f:27: b3:50:e9:18:05:9d:50:df:f8:6e:26:29:82:57:2a: 99:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C3:69:3F:1F:95:F2:BD:86:BB:07:D2:20:B4:00:30:10:1E:2F:8B X509v3 Authority Key Identifier: keyid:C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:b8:d1:77:80:37:41:ff:1f:90:b5:2c:56:2d:5e:a5:2b:71: 7d:05:54:26:dc:e9:5f:bc:bd:33:9f:f0:19:db:5b:20:ea:3c: 17:48:e4:7c:87:e9:12:dc:ba:3a:1a:01:46:34:2a:ff:db:46: 1c:ed:80:cb:a3:c1:e4:8a:a4:e8:15:81:37:1d:a1:10:31:f7: c7:2a:62:b4:d4:96:88:01:25:ee:de:4f:ae:9b:6c:85:04:b6: 25:4c:de:42:b8:23:f2:35:ae:81:10:26:4f:85:db:5e:c6:13: fa:e9:08:64:9c:2e:03:b3:41:1f:3c:5b:24:43:e0:89:d0:3b: 52:a0:db:2c:f7:c8:1f:d6:a2:9e:99:c1:2b:5e:85:91:e2:15: 4e:c3:7c:c8:0b:c5:f3:b7:64:a6:71:63:07:3b:5c:0e:92:94: c4:36:ec:99:fa:99:98:68:e9:c9:2b:d4:28:a7:c9:0c:89:18: 38:54:76:ec:f6:27:0b:8d:99:90:1b:06:12:ce:d7:bb:01:38: 49:02:52:e7:b2:6d:d3:15:9c:2b:97:b7:c6:93:ea:07:f1:dd: ab:80:9b:cb:7a:ee:8a:8b:a1:3a:4f:04:14:cb:e4:47:5f:05: d0:08:9c:05:95:e2:ff:55:b8:ef:30:a1:80:5a:a0:4e:9c:49: 45:cb:77:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/R96CJrBmG6n7ySnlb7JeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwY2FjOGQ1MjRhNWZlYzdmYzgzYTIzODMwZmJmOTIyNmE3 NjAxYWUwHhcNMjUxMjIxMDUwMDMzWhcNMjUxMjIyMDUwMDMzWjAzMTEwLwYDVQQD Eyg2N2MzNjkzZjFmOTVmMmJkODZiYjA3ZDIyMGI0MDAzMDEwMWUyZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZtTbJidtvh9Ic6cGtvkTie8gT4b nIjjzhJ/vaYHSha84ZZelg7hI4nX/23SQTfetwJvXRCaH54YkIB/8yHaXHXORSmo 042qv2VsisR8G/6yRZNELoZuqJ2xOh3dwGngbUkih93A2HdY+1m9IvVdh2R5sp5A TUV641mIHHXJyHjc3EcAW0vROczN/tR0uxtlWhjvPYH9jdeAVMHzUqjSPC1/Dcat svxrc/4Dp9CIzXAJxziAlUQcMBBgcE45RnrLP5om4Wl0PIL1YwCfi51a4+bphNm+ /KPImw+58E3vT4TN7sJ1IDuyKvGaUpXXLyezUOkYBZ1Q3/huJimCVyqZFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfDaT8flfK9hrsH0iC0ADAQHi+LMB8GA1UdIwQY MBaAFMDKyNUkpf7H/IOiODD7+SJqdgGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd01ySTFTU2xfc2Y4ZzZJNE1QdjVJbXAyQWE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85ZjViODEtYWU0ZC00NmE0LWJiODIt NzY1NWM4OWYxNGQ2LzEvd01ySTFTU2xfc2Y4ZzZJNE1QdjVJbXAyQWE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85ZjViODEtYWU0ZC00NmE0LWJiODItNzY1NWM4OWYxNGQ2 LzEvd01ySTFTU2xfc2Y4ZzZJNE1QdjVJbXAyQWE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAubjRd4A3 Qf8fkLUsVi1epStxfQVUJtzpX7y9M5/wGdtbIOo8F0jkfIfpEty6OhoBRjQq/9tG HO2Ay6PB5Iqk6BWBNx2hEDH3xypitNSWiAEl7t5PrptshQS2JUzeQrgj8jWugRAm T4XbXsYT+ukIZJwuA7NBHzxbJEPgidA7UqDbLPfIH9ainpnBK16FkeIVTsN8yAvF 87dkpnFjBztcDpKUxDbsmfqZmGjpySvUKKfJDIkYOFR27PYnC42ZkBsGEs7XuwE4 SQJS57Jt0xWcK5e3xpPqB/Hdq4Cby3ruiouhOk8EFMvkR18F0AicBZXi/1W47zCh gFqgTpxJRct3pQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:44:57 2025 by rpki-client