This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft File: we7iyrhrXuQPwncMqMtcUMYrdVs.mft (raw, json) Hash identifier: b4pWHWhazyI9LCrj/SqOofeS2+hzMuNXA6TwE6/O7zQ= Subject key identifier: BA:B8:7C:AC:42:BB:75:E4:7B:79:15:E3:70:B1:A2:7B:0E:38:E3:3B Authority key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B Certificate issuer: /CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b Certificate serial: 019B3EA37988D251415E4CCF33059718F57B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft Manifest number: 1403 Signing time: Sun 21 Dec 2025 02:00:59 +0000 Manifest this update: Sun 21 Dec 2025 02:00:59 +0000 Manifest next update: Mon 22 Dec 2025 02:00:59 +0000 Files and hashes: 1: C82fBmTW8-iwXu5pgvR1VTX1CPI.roa (hash: VxKUMucn3gu4aXap48afqVYi1a/XU7LxwPuTbOudfsE=) 2: we7iyrhrXuQPwncMqMtcUMYrdVs.crl (hash: 8dYcf+z3lcU9/m/rjteyZV7AsM6F9Kyym1FVlLiF6TU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:79:88:d2:51:41:5e:4c:cf:33:05:97:18:f5:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b Validity Not Before: Dec 21 02:00:59 2025 GMT Not After : Dec 22 02:00:59 2025 GMT Subject: CN=bab87cac42bb75e47b7915e370b1a27b0e38e33b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fa:cc:1b:bd:94:08:47:16:bc:cb:3b:55:4b: ad:cf:f3:07:3d:4b:f7:dd:a6:61:ed:7f:5b:fd:39: 9d:fa:11:98:28:ea:1c:6b:90:c7:fa:02:45:6e:ac: 91:7f:92:2e:46:bd:3e:1f:02:fe:03:ac:df:97:e5: f2:07:0b:2e:2f:02:4a:51:89:8a:2f:c6:1d:55:e2: 30:68:05:45:67:89:d0:d9:70:72:df:aa:6f:10:33: 0d:e3:67:7b:96:63:78:b4:98:77:7a:88:3b:a3:7d: ab:c1:f3:ae:07:cd:d0:f2:1b:43:d0:b4:c7:77:f2: 20:47:da:16:aa:26:9e:11:0a:aa:86:82:b8:0f:3c: bd:7e:e6:da:f4:37:f2:92:f9:2e:49:7d:e2:c5:38: f9:16:b2:a2:b6:7e:34:5b:64:a7:25:8a:24:2f:4d: bd:eb:db:6d:4c:44:e6:7a:7a:69:94:7e:84:17:eb: f3:32:d0:8a:57:82:3f:90:ce:70:de:82:03:0c:9a: 8c:f0:5c:03:1a:b3:ef:be:1d:68:97:74:a0:7c:a8: 14:7f:b2:8d:4b:f2:c9:6e:c9:bc:63:a1:0e:2d:ea: 17:be:25:42:62:f4:db:f2:fa:67:65:cb:61:13:e8: 11:d3:ea:c9:29:31:e4:7e:b9:b1:06:13:f1:4c:7d: e2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B8:7C:AC:42:BB:75:E4:7B:79:15:E3:70:B1:A2:7B:0E:38:E3:3B X509v3 Authority Key Identifier: keyid:C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:16:da:b5:2b:db:03:fe:c0:01:50:94:32:93:2a:59:49:6a: ab:e7:85:e6:d7:a8:e6:a3:57:f8:01:f3:91:1a:bb:99:a6:8d: 85:c3:b4:7b:0a:0b:e6:88:5d:ae:e1:c8:d8:e4:02:da:a2:09: ce:6c:24:b9:2b:07:5a:fd:db:de:6f:a0:f5:dc:a6:18:ce:7f: fb:29:20:cf:8d:19:e6:07:61:47:78:f8:3f:d7:5c:58:3d:07: 9e:c7:24:c1:21:1e:56:eb:61:44:94:0b:b1:71:b7:c5:7b:5d: 85:0f:d1:d4:59:d4:ce:60:f6:a2:cd:24:61:29:32:e9:74:8d: 53:49:22:62:e0:7f:d2:a4:34:85:69:82:ed:19:69:48:42:30: af:21:cc:51:81:ca:2a:9e:f5:35:98:49:24:15:66:29:f3:01: c7:05:6d:2b:69:84:6f:5c:a8:32:90:47:81:2e:68:15:7f:fd: 8d:18:e8:f1:ff:68:b2:c1:94:04:51:0a:4c:e5:cd:aa:db:0c: 76:5c:b4:2a:33:8e:29:b0:02:9a:11:da:ab:a8:f3:54:93:ea: 90:14:bc:98:02:fb:2d:2c:f3:4d:16:de:fa:3a:6a:c5:04:93: 73:f5:f3:90:3f:0c:42:3e:a9:ca:fa:c2:4d:81:d4:dd:af:02: d2:07:62:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o3mI0lFBXkzPMwWXGPV7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZWVlMmNhYjg2YjVlZTQwZmMyNzcwY2E4Y2I1YzUwYzYy Yjc1NWIwHhcNMjUxMjIxMDIwMDU5WhcNMjUxMjIyMDIwMDU5WjAzMTEwLwYDVQQD EyhiYWI4N2NhYzQyYmI3NWU0N2I3OTE1ZTM3MGIxYTI3YjBlMzhlMzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfrMG72UCEcWvMs7VUutz/MHPUv3 3aZh7X9b/Tmd+hGYKOoca5DH+gJFbqyRf5IuRr0+HwL+A6zfl+XyBwsuLwJKUYmK L8YdVeIwaAVFZ4nQ2XBy36pvEDMN42d7lmN4tJh3eog7o32rwfOuB83Q8htD0LTH d/IgR9oWqiaeEQqqhoK4Dzy9fuba9DfykvkuSX3ixTj5FrKitn40W2SnJYokL029 69ttTETmenpplH6EF+vzMtCKV4I/kM5w3oIDDJqM8FwDGrPvvh1ol3SgfKgUf7KN S/LJbsm8Y6EOLeoXviVCYvTb8vpnZcthE+gR0+rJKTHkfrmxBhPxTH3itwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLq4fKxCu3Xke3kV43CxonsOOOM7MB8GA1UdIwQY MBaAFMHu4sq4a17kD8J3DKjLXFDGK3VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2U3aXlyaHJYdVFQd25jTXFNdGNVTVlyZFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82MWYzZDgtMWEyNC00NDZmLWEyYjIt MGQwNzY1MmU0Y2FiLzEvd2U3aXlyaHJYdVFQd25jTXFNdGNVTVlyZFZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny82MWYzZDgtMWEyNC00NDZmLWEyYjItMGQwNzY1MmU0Y2Fi LzEvd2U3aXlyaHJYdVFQd25jTXFNdGNVTVlyZFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRbatSvb A/7AAVCUMpMqWUlqq+eF5teo5qNX+AHzkRq7maaNhcO0ewoL5ohdruHI2OQC2qIJ zmwkuSsHWv3b3m+g9dymGM5/+ykgz40Z5gdhR3j4P9dcWD0HnsckwSEeVuthRJQL sXG3xXtdhQ/R1FnUzmD2os0kYSky6XSNU0kiYuB/0qQ0hWmC7RlpSEIwryHMUYHK Kp71NZhJJBVmKfMBxwVtK2mEb1yoMpBHgS5oFX/9jRjo8f9ossGUBFEKTOXNqtsM dly0KjOOKbACmhHaq6jzVJPqkBS8mAL7LSzzTRbe+jpqxQSTc/XzkD8MQj6pyvrC TYHU3a8C0gdiaA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:51:40 2025 by rpki-client