This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft File: wei4jx4wVzoOIOR51boAtOkYJ7Y.mft (raw, json) Hash identifier: VLrAzdwkLcIiYRib6cTr3vQAPSVQExK0aP48c9XOkVo= Subject key identifier: 5E:F8:35:C3:F9:60:0D:4A:86:AB:8B:5C:CF:E1:C2:A2:1A:74:32:B6 Authority key identifier: C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6 Certificate issuer: /CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6 Certificate serial: 019B3D91304DFF796241EFEC30B5804DEA42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 21:01:23 +0000 Manifest this update: Sat 20 Dec 2025 21:01:23 +0000 Manifest next update: Sun 21 Dec 2025 21:01:23 +0000 Files and hashes: 1: _hY8OE1vA86wyK3ByKxKme_jHPA.roa (hash: 77qfF/YB8xlTjgPPV6F7smZo7NAYUmHDjTAKbxWVa7Q=) 2: wei4jx4wVzoOIOR51boAtOkYJ7Y.crl (hash: qDUXXghdOiaQU3ycVXqWmMo1IwqDFJB3m7eWP4X97C4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:30:4d:ff:79:62:41:ef:ec:30:b5:80:4d:ea:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6 Validity Not Before: Dec 20 21:01:23 2025 GMT Not After : Dec 21 21:01:23 2025 GMT Subject: CN=5ef835c3f9600d4a86ab8b5ccfe1c2a21a7432b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:40:51:e2:03:da:02:db:09:b8:3b:74:14:c8: d1:aa:e1:31:a4:07:ae:3b:d3:4d:40:91:29:8e:44: 3f:d2:8a:de:bd:7a:e6:d5:b1:40:4b:eb:d3:e4:5d: 05:b3:dc:b8:78:e7:1a:83:f2:f3:59:fe:66:6b:ca: 87:ae:44:b0:69:97:56:97:9d:02:b4:28:fe:bf:02: 37:b8:ea:d6:7f:d2:dc:ac:aa:c6:f6:85:d6:e4:74: ed:08:60:1d:be:63:b3:11:b6:cb:bb:14:4e:02:8e: d3:43:ae:5f:0f:54:13:5e:6c:43:e9:f7:8c:99:35: 30:0e:72:05:ef:a7:4a:2d:a8:c8:45:5f:40:41:f7: 5f:4e:01:2f:2a:13:12:1d:17:57:7f:97:4e:7a:56: 6f:aa:9d:a3:f4:22:35:17:2a:55:58:5e:14:6e:1e: cc:2f:7f:25:5f:de:4d:d5:07:61:0c:60:1c:aa:22: 45:54:29:9a:15:58:c7:6b:62:41:fb:11:0c:93:6d: 8a:f2:da:b4:46:4f:62:87:9c:c0:93:74:e2:15:be: 91:c3:6a:43:ae:45:b3:0d:d7:df:f5:a5:e5:3a:90: 81:4e:aa:cb:be:2d:d5:70:f5:a4:13:09:a4:2b:0a: 78:8d:20:e9:ab:97:61:83:67:5b:3d:5a:e2:4b:b9: 8c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F8:35:C3:F9:60:0D:4A:86:AB:8B:5C:CF:E1:C2:A2:1A:74:32:B6 X509v3 Authority Key Identifier: keyid:C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:73:12:ce:fe:8c:6d:7d:a6:26:cd:7c:23:12:9c:59:20:7f: 21:ca:a4:d1:18:4f:2e:20:b0:fa:86:fe:06:31:94:86:e5:43: b8:eb:ee:8c:3b:85:d4:69:a2:46:1d:5f:e7:c3:04:e9:da:b9: 74:99:8b:7b:46:13:20:4e:81:14:08:1e:78:fd:b7:ea:ee:12: a8:4a:4f:09:62:f4:73:ce:91:97:6a:e8:c9:01:d8:fc:0d:06: 24:11:48:c6:d4:54:8a:f2:b2:72:94:d1:9e:4b:ce:8c:1f:d1: dd:69:c8:a9:69:38:c9:bc:b4:b2:02:5b:db:a2:a9:b7:1a:68: 0c:0d:fd:e3:7f:d4:c9:06:bc:c4:89:64:df:72:a8:30:9b:8e: cd:d7:3f:38:e0:25:46:20:60:6d:e1:b9:b3:aa:77:68:f7:8a: ac:c9:fb:4d:23:4c:55:b6:21:4d:be:ac:8c:34:12:88:fa:3e: 6d:1d:e5:90:00:f9:3d:d6:04:fd:57:f8:99:23:20:0d:84:da: 6d:e6:c7:0a:fa:8e:5c:43:15:d5:0b:f9:bd:1d:eb:4a:25:10: 7d:54:a4:26:40:46:ac:45:fb:dd:75:9c:58:b8:f1:ed:dd:7b: e5:f7:e9:20:a5:af:f6:ac:26:09:49:d2:f9:a2:5d:03:64:2e: 34:53:6a:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kTBN/3liQe/sMLWATepCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZThiODhmMWUzMDU3M2EwZTIwZTQ3OWQ1YmEwMGI0ZTkx ODI3YjYwHhcNMjUxMjIwMjEwMTIzWhcNMjUxMjIxMjEwMTIzWjAzMTEwLwYDVQQD Eyg1ZWY4MzVjM2Y5NjAwZDRhODZhYjhiNWNjZmUxYzJhMjFhNzQzMmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEBR4gPaAtsJuDt0FMjRquExpAeu O9NNQJEpjkQ/0orevXrm1bFAS+vT5F0Fs9y4eOcag/LzWf5ma8qHrkSwaZdWl50C tCj+vwI3uOrWf9LcrKrG9oXW5HTtCGAdvmOzEbbLuxROAo7TQ65fD1QTXmxD6feM mTUwDnIF76dKLajIRV9AQfdfTgEvKhMSHRdXf5dOelZvqp2j9CI1FypVWF4Ubh7M L38lX95N1QdhDGAcqiJFVCmaFVjHa2JB+xEMk22K8tq0Rk9ih5zAk3TiFb6Rw2pD rkWzDdff9aXlOpCBTqrLvi3VcPWkEwmkKwp4jSDpq5dhg2dbPVriS7mMuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF74NcP5YA1KhquLXM/hwqIadDK2MB8GA1UdIwQY MBaAFMHouI8eMFc6DiDkedW6ALTpGCe2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2VpNGp4NHdWem9PSU9SNTFib0F0T2tZSjdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NTcxOTctYzYyOC00OGIxLTk1NmQt ZWZmZTk1NWE1ZDY0LzEvd2VpNGp4NHdWem9PSU9SNTFib0F0T2tZSjdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82NTcxOTctYzYyOC00OGIxLTk1NmQtZWZmZTk1NWE1ZDY0 LzEvd2VpNGp4NHdWem9PSU9SNTFib0F0T2tZSjdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXMSzv6M bX2mJs18IxKcWSB/Icqk0RhPLiCw+ob+BjGUhuVDuOvujDuF1GmiRh1f58ME6dq5 dJmLe0YTIE6BFAgeeP236u4SqEpPCWL0c86Rl2royQHY/A0GJBFIxtRUivKycpTR nkvOjB/R3WnIqWk4yby0sgJb26KptxpoDA3943/UyQa8xIlk33KoMJuOzdc/OOAl RiBgbeG5s6p3aPeKrMn7TSNMVbYhTb6sjDQSiPo+bR3lkAD5PdYE/Vf4mSMgDYTa bebHCvqOXEMV1Qv5vR3rSiUQfVSkJkBGrEX73XWcWLjx7d175ffpIKWv9qwmCUnS +aJdA2QuNFNqMQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:45:37 2025 by rpki-client