This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft File: wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft (raw, json) Hash identifier: vR+Ria4BLaQelNgYQ8SPVn7i+mHEJaKQiNUbz53vAMU= Subject key identifier: E8:DA:C2:47:44:8A:93:19:6E:5B:FE:D9:A3:52:97:F4:59:AF:26:0B Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9 Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9 Certificate serial: 019B75FF41A270B08D87968B1D34BF93EE95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft Manifest number: 17AE Signing time: Wed 31 Dec 2025 20:00:21 +0000 Manifest this update: Wed 31 Dec 2025 20:00:21 +0000 Manifest next update: Thu 01 Jan 2026 20:00:21 +0000 Files and hashes: 1: G0mfJKH5XthYEp56dZd7amNIFIg.roa (hash: ZdlmpS8KB0XJ2RMI8I0V6gnsbS1MxMfFNBLIs6WQ0tQ=) 2: J3tQAc-R4PT9iUkojothol4LOyU.roa (hash: 3yeSEY7/c0NLf9TAv7WKIHKi3Ggm4vF4/G3CEy8wx+U=) 3: SjT04nA7qX_MCmXA-4Xf2qOOvyk.roa (hash: hyMLCE9dKw6nHLTE5zUsN701ouIzmTXWz2+LUwVBqEU=) 4: mgF34y33vscxiS4stuO3BYu8JlE.roa (hash: G0qOZyPDZdpreKkYGFQ+RFa5w/ELVkiOatwZcMI9hrQ=) 5: wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl (hash: LFrrz3YxGOY9Ylbgu7M4lb8Me3eeWlSzvRwrrVakYjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:ff:41:a2:70:b0:8d:87:96:8b:1d:34:bf:93:ee:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9 Validity Not Before: Dec 31 20:00:21 2025 GMT Not After : Jan 1 20:00:21 2026 GMT Subject: CN=e8dac247448a93196e5bfed9a35297f459af260b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:80:d3:15:b2:29:c2:8b:d6:ec:c8:b5:6b:32: 28:82:f3:e2:83:cd:f8:22:eb:51:16:b6:0d:2b:5e: 9a:f4:28:18:ad:39:6d:d3:96:8c:f3:e8:ea:8a:64: 26:a2:43:89:d4:05:7f:dd:6b:f8:dd:66:1d:13:dd: ec:ae:f2:59:89:7d:dd:39:7c:6a:75:92:4f:5d:6f: fc:ed:51:11:2a:2c:45:57:da:2a:5b:f3:4b:e9:ff: bf:a4:26:ac:d5:6f:11:84:5d:c1:ca:b8:4d:d6:d6: 86:f4:b4:9a:10:86:c9:e1:0b:3f:a1:04:67:1d:66: e8:a1:0e:cc:f1:7b:03:97:a0:11:cc:fb:b4:aa:59: 0e:48:67:90:d8:bb:06:a1:3f:6a:ad:fd:bf:82:a3: 11:4e:df:19:a6:f4:9a:b3:7a:40:22:f7:6c:d5:f6: 53:06:32:09:5b:8b:ea:ef:f2:3b:3f:9e:83:f8:00: 64:6a:11:2f:20:eb:bc:17:69:c1:ee:b0:e6:49:59: fc:2f:d0:61:c2:3f:95:73:85:cf:e4:e4:fc:f0:a6: 96:94:00:a1:88:3d:b4:c8:43:3d:14:7f:40:74:4c: 8e:c5:fb:4d:77:9b:f1:5b:83:5b:3c:fa:d3:49:47: bb:6f:a9:fd:d2:fd:fb:83:3c:c5:e4:f1:36:3d:17: f6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DA:C2:47:44:8A:93:19:6E:5B:FE:D9:A3:52:97:F4:59:AF:26:0B X509v3 Authority Key Identifier: keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:fa:71:59:44:0d:67:d8:fa:02:61:e0:2a:08:02:80:c3:c5: 59:5b:2e:c1:94:20:bc:af:42:b4:5b:d1:b4:c4:e9:b2:e8:89: 05:f1:48:56:33:f0:f8:42:72:53:ae:73:05:de:c0:0b:e4:af: 6d:67:15:cf:f8:ae:5e:d0:38:32:d3:a4:75:4f:3c:09:32:4c: 2b:4a:0e:80:75:0c:6d:f6:69:bf:4f:d3:30:6b:16:a8:12:ee: b6:0e:b6:f4:e4:86:53:0a:89:67:d9:cf:1b:72:7f:fd:e5:e8: ee:be:50:68:84:d8:15:96:8b:fc:7b:2d:60:fe:5a:29:a6:cb: ef:ba:4c:03:6f:9a:95:07:a1:1e:12:4f:a6:8f:63:03:49:b8: 8b:35:69:77:55:68:ab:b1:08:ad:dd:18:1c:ce:68:26:a0:6d: ef:1a:3a:0a:d0:d2:c7:97:dd:25:d7:ed:7e:e6:8f:e7:96:99: 05:3f:e5:f4:b8:f6:8f:9d:7d:f5:33:4f:06:5b:07:40:a2:e9: 22:6a:86:5c:52:ed:94:87:15:5d:fd:59:7c:86:47:9a:05:4b: 86:95:c3:56:0e:08:92:f6:c7:bc:b9:21:f6:df:69:b2:9c:f2: 4b:b0:f0:bc:76:9c:18:38:da:f2:03:a5:06:a1:2d:b5:35:e3: f3:69:a1:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1/0GicLCNh5aLHTS/k+6VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMjMzODYxMjA3YTIzMDU2NGVmMzZmMTFlMDE1NzM0NDcz MWUzZjkwHhcNMjUxMjMxMjAwMDIxWhcNMjYwMTAxMjAwMDIxWjAzMTEwLwYDVQQD EyhlOGRhYzI0NzQ0OGE5MzE5NmU1YmZlZDlhMzUyOTdmNDU5YWYyNjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4DTFbIpwovW7Mi1azIogvPig834 IutRFrYNK16a9CgYrTlt05aM8+jqimQmokOJ1AV/3Wv43WYdE93srvJZiX3dOXxq dZJPXW/87VERKixFV9oqW/NL6f+/pCas1W8RhF3ByrhN1taG9LSaEIbJ4Qs/oQRn HWbooQ7M8XsDl6ARzPu0qlkOSGeQ2LsGoT9qrf2/gqMRTt8ZpvSas3pAIvds1fZT BjIJW4vq7/I7P56D+ABkahEvIOu8F2nB7rDmSVn8L9Bhwj+Vc4XP5OT88KaWlACh iD20yEM9FH9AdEyOxftNd5vxW4NbPPrTSUe7b6n90v37gzzF5PE2PRf2TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjawkdEipMZblv+2aNSl/RZryYLMB8GA1UdIwQY MBaAFMEjOGEgeiMFZO828R4BVzRHMeP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTIt MWM3YjJiOTFkMzA4LzEvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTItMWM3YjJiOTFkMzA4 LzEvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfpxWUQN Z9j6AmHgKggCgMPFWVsuwZQgvK9CtFvRtMTpsuiJBfFIVjPw+EJyU65zBd7AC+Sv bWcVz/iuXtA4MtOkdU88CTJMK0oOgHUMbfZpv0/TMGsWqBLutg629OSGUwqJZ9nP G3J//eXo7r5QaITYFZaL/HstYP5aKabL77pMA2+alQehHhJPpo9jA0m4izVpd1Vo q7EIrd0YHM5oJqBt7xo6CtDSx5fdJdftfuaP55aZBT/l9Lj2j5199TNPBlsHQKLp ImqGXFLtlIcVXf1ZfIZHmgVLhpXDVg4IkvbHvLkh9t9pspzyS7DwvHacGDja8gOl BqEttTXj82mhAw== -----END CERTIFICATE-----Generated at Wed Dec 31 21:08:27 2025 by rpki-client