This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft File: _caA7hsnw6bwcBPI_CXr_wxn-50.mft (raw, json) Hash identifier: FaY6MsgxN0MQxi5Mk8yaaMiSzVOgnP4yOedyk5UHiog= Subject key identifier: 6C:9F:82:BE:10:66:0C:15:D3:A3:62:51:6A:5D:48:C3:B8:32:18:02 Authority key identifier: FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D Certificate issuer: /CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d Certificate serial: 019B3569DE9651E3BE20C78570094428C3F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft Manifest number: 0E65 Signing time: Fri 19 Dec 2025 07:01:29 +0000 Manifest this update: Fri 19 Dec 2025 07:01:29 +0000 Manifest next update: Sat 20 Dec 2025 07:01:29 +0000 Files and hashes: 1: H5zExKsN_X1SPJQSwEakZzqeC2I.roa (hash: FjXiEi3V3MLLSMvrOdppNODHARmQ2b/yPySFztutI1Q=) 2: _caA7hsnw6bwcBPI_CXr_wxn-50.crl (hash: JFTVQx/bPjdlurzZsuflxEZhidJUaiT25/LWInW25i4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:de:96:51:e3:be:20:c7:85:70:09:44:28:c3:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d Validity Not Before: Dec 19 07:01:29 2025 GMT Not After : Dec 20 07:01:29 2025 GMT Subject: CN=6c9f82be10660c15d3a362516a5d48c3b8321802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:43:4a:37:ea:c0:5a:59:32:b2:09:b4:10:4a: 95:ac:ba:e1:73:cd:b4:cf:7f:ca:21:9c:f6:95:80: fe:55:ce:ba:a0:9d:f9:de:3d:2b:bb:09:c9:fc:02: cc:56:e3:e3:ea:a9:8f:14:48:9a:23:cb:11:01:3d: b7:58:35:64:a5:0e:90:e3:13:41:24:a3:7c:e0:d0: 59:14:4f:e2:82:39:9b:87:98:f0:3e:41:f7:54:c9: 1a:d0:b3:71:c6:d0:e5:4c:84:24:80:60:d5:95:b9: cc:93:cc:6f:13:64:d6:ea:2b:80:33:f3:a9:9b:5b: 4d:0f:d7:56:e2:5f:fd:dd:07:06:fb:4a:21:87:d9: b2:56:e9:56:c9:1a:c9:cb:5d:f3:10:e5:c8:7a:72: ac:8e:5f:47:ac:45:0e:72:4e:30:88:84:e0:81:39: 50:a4:04:d2:62:55:c4:41:aa:2b:54:68:54:77:12: 87:39:7a:8e:a5:3b:52:d7:e7:6e:32:17:be:6e:48: f4:72:57:11:0c:40:33:e6:30:a9:74:b3:86:63:93: 43:5d:63:69:7c:78:a6:16:d0:e4:e9:40:cb:58:4f: cc:15:de:0e:64:44:1b:a6:32:1f:bc:af:2d:d8:22: da:c8:82:92:8e:5e:ba:f6:df:b3:d9:a7:48:94:1d: d2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9F:82:BE:10:66:0C:15:D3:A3:62:51:6A:5D:48:C3:B8:32:18:02 X509v3 Authority Key Identifier: keyid:FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:6f:30:40:63:18:60:1b:64:22:7b:b9:46:9e:52:46:49:73: a5:2a:1e:9f:43:2e:ca:b7:af:65:32:a4:5d:f5:ba:ee:ec:70: 67:42:53:8f:dc:73:92:c9:df:bf:36:f1:64:21:5a:e4:f3:5f: 52:f0:4c:e8:52:ce:21:35:07:0e:18:ca:f3:7d:62:bf:0e:96: 4a:f7:96:93:75:39:a5:02:86:61:b7:67:c0:1a:9c:88:e6:8f: 41:8f:e8:b0:ff:c9:e7:4f:69:fb:f9:a3:36:1e:81:1b:95:56: 47:79:c2:cb:af:ca:ce:4e:5c:a5:20:61:5b:c2:22:6e:67:3f: 15:db:73:db:aa:83:33:36:1b:57:31:3b:f1:7a:a5:e6:62:52: 50:fc:f1:94:ea:cb:e3:e2:ae:f8:21:5e:5f:81:16:b7:da:33: 77:4c:30:c0:5f:e9:5a:4b:34:b0:6a:6f:41:38:c1:44:12:c7: 02:65:8c:af:bc:73:58:9f:75:a8:10:cd:41:97:56:4d:f2:3c: 98:ab:19:da:bd:7d:09:b1:d8:fa:2d:2c:2d:1b:ff:2b:9d:89: 9e:3a:ec:a8:b0:d8:db:67:a4:ce:ce:37:6c:36:11:f9:05:49: b9:97:8a:7a:3e:0f:38:7d:a1:b2:ec:13:c5:0c:c6:7e:e2:9c: 33:f6:26:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1ad6WUeO+IMeFcAlEKMP4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYzY4MGVlMWIyN2MzYTZmMDcwMTNjOGZjMjVlYmZmMGM2 N2ZiOWQwHhcNMjUxMjE5MDcwMTI5WhcNMjUxMjIwMDcwMTI5WjAzMTEwLwYDVQQD Eyg2YzlmODJiZTEwNjYwYzE1ZDNhMzYyNTE2YTVkNDhjM2I4MzIxODAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkNKN+rAWlkysgm0EEqVrLrhc820 z3/KIZz2lYD+Vc66oJ353j0ruwnJ/ALMVuPj6qmPFEiaI8sRAT23WDVkpQ6Q4xNB JKN84NBZFE/igjmbh5jwPkH3VMka0LNxxtDlTIQkgGDVlbnMk8xvE2TW6iuAM/Op m1tND9dW4l/93QcG+0ohh9myVulWyRrJy13zEOXIenKsjl9HrEUOck4wiITggTlQ pATSYlXEQaorVGhUdxKHOXqOpTtS1+duMhe+bkj0clcRDEAz5jCpdLOGY5NDXWNp fHimFtDk6UDLWE/MFd4OZEQbpjIfvK8t2CLayIKSjl669t+z2adIlB3SZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyfgr4QZgwV06NiUWpdSMO4MhgCMB8GA1UdIwQY MBaAFP3GgO4bJ8Om8HATyPwl6/8MZ/udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2NhQTdoc253NmJ3Y0JQSV9DWHJfd3huLTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hMTJlMWMtMWIxMC00OTM4LTk2ZDMt N2JlZDI2NzQzYmNjLzEvX2NhQTdoc253NmJ3Y0JQSV9DWHJfd3huLTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9hMTJlMWMtMWIxMC00OTM4LTk2ZDMtN2JlZDI2NzQzYmNj LzEvX2NhQTdoc253NmJ3Y0JQSV9DWHJfd3huLTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl28wQGMY YBtkInu5Rp5SRklzpSoen0MuyrevZTKkXfW67uxwZ0JTj9xzksnfvzbxZCFa5PNf UvBM6FLOITUHDhjK831ivw6WSveWk3U5pQKGYbdnwBqciOaPQY/osP/J509p+/mj Nh6BG5VWR3nCy6/Kzk5cpSBhW8Iibmc/Fdtz26qDMzYbVzE78Xql5mJSUPzxlOrL 4+Ku+CFeX4EWt9ozd0wwwF/pWks0sGpvQTjBRBLHAmWMr7xzWJ91qBDNQZdWTfI8 mKsZ2r19CbHY+i0sLRv/K52JnjrsqLDY22ekzs43bDYR+QVJuZeKej4POH2hsuwT xQzGfuKcM/YmDA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:49:31 2025 by rpki-client