This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft File: w0CU4yNtzRyDURN5Gjgk2ilz35s.mft (raw, json) Hash identifier: MNPOst9uD/YDnUCS5TopRtxweq5SeDA7GaTFuUFE13Q= Subject key identifier: F2:D2:47:B9:12:F3:80:94:48:56:B5:EC:CF:2D:0A:B0:0F:13:1B:93 Authority key identifier: C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B Certificate issuer: /CN=c34094e3236dcd1c835113791a3824da2973df9b Certificate serial: 019B3E355BB3C276905AAC03FF296B872AB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft Manifest number: 0123 Signing time: Sun 21 Dec 2025 00:00:42 +0000 Manifest this update: Sun 21 Dec 2025 00:00:42 +0000 Manifest next update: Mon 22 Dec 2025 00:00:42 +0000 Files and hashes: 1: 4RPSqbfmeC-IC3WR5JrPY-ti6aQ.roa (hash: egyP6+hpVOsfhjTSw14Ho98ZzzCiujpdZ4z2/ZYR+NI=) 2: E1huK4lRaNqnfDwjhKC7S27samY.roa (hash: 5eWDICwAkK513LsxaFUCZCYFQIVOjrg6WQ+rcwXWfbg=) 3: V7FxeBgowMJ9uzRZi_USZCw6XMI.roa (hash: tBwxfUXaS851zDbs0JMu4PFLXBxOjlI4hBYncc4yuPg=) 4: w0CU4yNtzRyDURN5Gjgk2ilz35s.crl (hash: MR2jj9hbDCJ8tcI+FoxNUav8LuhT94zxARLJ4pz4bCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:5b:b3:c2:76:90:5a:ac:03:ff:29:6b:87:2a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c34094e3236dcd1c835113791a3824da2973df9b Validity Not Before: Dec 21 00:00:42 2025 GMT Not After : Dec 22 00:00:42 2025 GMT Subject: CN=f2d247b912f380944856b5eccf2d0ab00f131b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0b:b6:7a:3e:c8:aa:ca:fe:d8:ee:d2:4d:93: 7e:82:75:e6:a3:42:57:cc:c2:9e:35:70:c1:28:24: 97:56:ae:0b:62:50:45:e0:21:7e:2d:91:b8:04:18: b1:f8:70:85:7c:89:f9:29:27:5a:f0:1e:36:98:e2: a2:df:6a:ce:9c:b1:30:01:c9:d3:04:c0:f2:31:3a: 7b:30:0f:fa:8f:22:d1:65:5f:d1:fd:a2:33:33:57: 31:98:2d:10:3d:6d:25:52:2d:8e:bc:1d:61:82:f3: fe:d6:7b:89:37:0b:79:69:0a:7d:30:5a:63:e2:fd: 87:21:1d:22:48:e7:f4:6d:10:06:97:7f:a9:0b:53: 19:f9:f9:44:98:cd:b2:60:96:8d:81:e3:93:72:9e: ba:f2:30:48:56:aa:f5:4d:d7:b4:54:7c:9c:80:d3: a9:50:85:cc:9b:7c:86:90:20:96:03:d8:97:c2:af: 9e:ea:02:e6:22:36:b8:92:47:f3:09:c3:cb:f6:96: 07:8d:2b:42:87:f8:d5:19:b1:db:b6:bc:96:0e:f8: c8:54:80:65:69:68:e4:7d:80:29:b3:ba:d9:0f:30: 67:4c:f1:c3:f0:db:55:0c:2c:9a:bd:54:7f:24:cd: db:e1:b4:6d:e9:e1:f7:2b:1a:82:73:c2:5f:de:22: ca:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D2:47:B9:12:F3:80:94:48:56:B5:EC:CF:2D:0A:B0:0F:13:1B:93 X509v3 Authority Key Identifier: keyid:C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:55:73:38:ce:79:ae:10:47:fe:7a:e0:b0:78:1c:23:4a:e2: d5:58:91:58:a9:96:d7:79:7b:df:95:93:f9:e7:5b:ff:71:23: 7a:9c:9a:af:f9:8f:14:06:9b:c1:21:f8:ae:ce:f0:d8:e7:90: 58:7f:01:f6:aa:1a:e7:d3:f5:e6:1a:28:77:34:39:ac:0f:ca: f9:5c:d6:31:4e:0e:06:d7:a1:e1:28:d5:cc:c8:84:34:1f:be: 05:20:4e:ac:fa:81:68:34:00:12:08:93:b4:a0:10:eb:41:07: 51:69:92:e0:e3:9f:5e:9b:fa:bd:83:7c:39:c8:af:34:3b:af: ab:88:65:dc:25:0d:87:43:b0:89:01:f6:1c:03:f2:d8:97:ad: 1a:37:ee:55:8a:64:4e:eb:60:57:11:21:cb:e8:12:a0:55:6f: 5c:d1:c0:70:15:50:10:bf:d9:54:ae:3c:2d:65:31:7c:9f:6a: 13:aa:2f:51:6f:70:aa:ed:93:ec:95:35:df:b0:35:e6:28:13: 7c:58:2d:7d:c0:13:43:b8:1b:e1:54:56:ac:38:56:08:37:9e: c7:fc:b4:3a:e9:51:2e:86:f1:9c:58:07:d7:a6:73:5a:c4:9a: ba:3a:34:95:b8:56:98:98:21:3a:ab:85:08:87:8b:5d:15:74: ee:5c:68:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NVuzwnaQWqwD/ylrhyq2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNDA5NGUzMjM2ZGNkMWM4MzUxMTM3OTFhMzgyNGRhMjk3 M2RmOWIwHhcNMjUxMjIxMDAwMDQyWhcNMjUxMjIyMDAwMDQyWjAzMTEwLwYDVQQD EyhmMmQyNDdiOTEyZjM4MDk0NDg1NmI1ZWNjZjJkMGFiMDBmMTMxYjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQu2ej7Iqsr+2O7STZN+gnXmo0JX zMKeNXDBKCSXVq4LYlBF4CF+LZG4BBix+HCFfIn5KSda8B42mOKi32rOnLEwAcnT BMDyMTp7MA/6jyLRZV/R/aIzM1cxmC0QPW0lUi2OvB1hgvP+1nuJNwt5aQp9MFpj 4v2HIR0iSOf0bRAGl3+pC1MZ+flEmM2yYJaNgeOTcp668jBIVqr1Tde0VHycgNOp UIXMm3yGkCCWA9iXwq+e6gLmIja4kkfzCcPL9pYHjStCh/jVGbHbtryWDvjIVIBl aWjkfYAps7rZDzBnTPHD8NtVDCyavVR/JM3b4bRt6eH3KxqCc8Jf3iLKBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLSR7kS84CUSFa17M8tCrAPExuTMB8GA1UdIwQY MBaAFMNAlOMjbc0cg1ETeRo4JNopc9+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzBDVTR5TnR6UnlEVVJONUdqZ2syaWx6MzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jZmIyNTEtOTIzZi00MGMxLTk4MzIt ZThhMzlkZDYwODY0LzEvdzBDVTR5TnR6UnlEVVJONUdqZ2syaWx6MzVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9jZmIyNTEtOTIzZi00MGMxLTk4MzItZThhMzlkZDYwODY0 LzEvdzBDVTR5TnR6UnlEVVJONUdqZ2syaWx6MzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1VzOM55 rhBH/nrgsHgcI0ri1ViRWKmW13l735WT+edb/3Ejepyar/mPFAabwSH4rs7w2OeQ WH8B9qoa59P15hoodzQ5rA/K+VzWMU4OBteh4SjVzMiENB++BSBOrPqBaDQAEgiT tKAQ60EHUWmS4OOfXpv6vYN8OcivNDuvq4hl3CUNh0OwiQH2HAPy2JetGjfuVYpk TutgVxEhy+gSoFVvXNHAcBVQEL/ZVK48LWUxfJ9qE6ovUW9wqu2T7JU137A15igT fFgtfcATQ7gb4VRWrDhWCDeex/y0OulRLobxnFgH16ZzWsSaujo0lbhWmJghOquF CIeLXRV07lxoGg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:03:25 2025 by rpki-client