This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft File: w_sAsiDqeEoEaDBU_L9OS0ietCA.mft (raw, json) Hash identifier: wGYvtgW32e6ocq7WEjS1IkoT62fnclPGwqwby6RKPsc= Subject key identifier: A5:51:F6:D2:9F:07:37:C5:9B:6B:84:60:5E:EA:01:AF:CD:3E:0C:34 Authority key identifier: C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20 Certificate issuer: /CN=c3fb00b220ea784a04683054fcbf4e4b489eb420 Certificate serial: 019B4A710B6EF77F0B47FE1135EADC55EAD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft Manifest number: 0B4E Signing time: Tue 23 Dec 2025 09:01:20 +0000 Manifest this update: Tue 23 Dec 2025 09:01:20 +0000 Manifest next update: Wed 24 Dec 2025 09:01:20 +0000 Files and hashes: 1: JXn11nJ90d5TiYF9GBYXGMgzBVU.roa (hash: xKanBKZfDLhsfcdAIiMFoN3EiNJRNn6FGvW7wSns+Xk=) 2: w_sAsiDqeEoEaDBU_L9OS0ietCA.crl (hash: IQupijHhsIZzdLGcUWnV9FFLxLbG1i4eTJpLgupx72o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:0b:6e:f7:7f:0b:47:fe:11:35:ea:dc:55:ea:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3fb00b220ea784a04683054fcbf4e4b489eb420 Validity Not Before: Dec 23 09:01:20 2025 GMT Not After : Dec 24 09:01:20 2025 GMT Subject: CN=a551f6d29f0737c59b6b84605eea01afcd3e0c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:68:e1:31:64:e2:b0:ea:9b:14:41:85:d0:b8: 37:62:cc:9f:84:a4:7a:21:d9:e2:5c:2f:75:d3:a4: d4:6f:f7:97:c1:54:04:65:32:71:aa:41:de:81:0d: 01:47:e9:10:ee:22:da:5f:20:8a:83:98:79:9c:01: 3a:55:37:1b:c1:45:06:8f:0f:93:01:80:f9:97:56: 8a:97:c0:19:69:4f:a1:95:ee:fd:a7:e3:7e:90:0c: ac:57:83:78:e0:a7:a4:ac:d0:ab:f2:b0:b9:d1:bb: f2:59:cd:30:6e:ed:6c:99:f1:3e:d0:89:df:72:aa: a5:58:00:df:cb:8f:8f:80:e4:f0:e9:fe:c9:ff:d8: 06:28:bd:73:b2:89:de:9e:21:a5:d5:fe:76:0e:85: fa:9b:53:ae:94:5b:d1:8e:a4:d9:d1:2a:5a:f8:97: c7:db:af:19:ff:04:3d:5b:3c:28:9c:0a:c6:e5:7f: d7:51:af:6c:22:89:39:3c:5c:4a:b6:d6:f1:dd:bd: 6f:9b:c5:95:0e:c4:54:59:a6:0c:24:89:98:5a:3a: 0b:ff:a8:6c:fb:42:d5:53:d6:22:aa:2b:50:f0:d0: 87:13:fc:7b:78:f6:60:96:a8:fc:a0:14:e5:d0:37: 59:fb:80:a5:11:54:56:f9:23:35:14:f0:ac:70:cc: 75:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:51:F6:D2:9F:07:37:C5:9B:6B:84:60:5E:EA:01:AF:CD:3E:0C:34 X509v3 Authority Key Identifier: keyid:C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:94:5e:e8:f5:89:cb:d2:da:24:10:c1:02:55:a5:36:36:6d: ec:8d:ae:03:37:e6:be:15:15:05:82:b9:a0:72:6b:13:c2:87: 14:5f:02:b5:ea:20:20:55:a7:52:b0:0e:3a:6a:ea:49:a2:1f: e0:5f:61:ee:c6:e2:e3:05:97:91:a0:37:a6:a1:0b:51:27:d8: 96:20:b0:a9:a6:5d:b1:dd:29:e7:ed:a7:59:a5:a9:0b:ff:52: e8:8b:47:82:49:93:4e:a3:b8:81:d7:91:27:2e:08:ff:fa:8a: 90:e5:c0:b7:db:4a:a8:52:6e:07:db:da:12:bf:8a:88:1a:8f: 2c:67:16:45:44:60:87:47:f5:fe:99:cb:91:54:d1:8c:cf:99: 82:3f:fc:b3:e2:76:42:ac:86:a3:3e:66:ff:c0:86:54:5c:60: d1:94:e8:33:28:80:1f:82:06:81:72:66:c4:25:af:a2:1a:e5: 74:d2:0a:6c:80:f5:da:8c:ee:7a:f7:97:16:47:f0:62:5e:d3: d6:25:67:18:8b:de:dd:8c:ac:12:51:d8:dc:f7:8f:a6:04:88: a9:b4:97:e2:c9:31:ad:b8:2c:2f:e2:a6:3a:56:c3:65:53:60: f0:13:71:2d:95:bb:66:d7:e3:4d:ef:bf:37:73:d9:57:c9:aa: 30:d7:d2:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcQtu938LR/4RNercVerXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZmIwMGIyMjBlYTc4NGEwNDY4MzA1NGZjYmY0ZTRiNDg5 ZWI0MjAwHhcNMjUxMjIzMDkwMTIwWhcNMjUxMjI0MDkwMTIwWjAzMTEwLwYDVQQD EyhhNTUxZjZkMjlmMDczN2M1OWI2Yjg0NjA1ZWVhMDFhZmNkM2UwYzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGjhMWTisOqbFEGF0Lg3YsyfhKR6 IdniXC9106TUb/eXwVQEZTJxqkHegQ0BR+kQ7iLaXyCKg5h5nAE6VTcbwUUGjw+T AYD5l1aKl8AZaU+hle79p+N+kAysV4N44KekrNCr8rC50bvyWc0wbu1smfE+0Inf cqqlWADfy4+PgOTw6f7J/9gGKL1zsoneniGl1f52DoX6m1OulFvRjqTZ0Spa+JfH 268Z/wQ9WzwonArG5X/XUa9sIok5PFxKttbx3b1vm8WVDsRUWaYMJImYWjoL/6hs +0LVU9YiqitQ8NCHE/x7ePZglqj8oBTl0DdZ+4ClEVRW+SM1FPCscMx1GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVR9tKfBzfFm2uEYF7qAa/NPgw0MB8GA1UdIwQY MBaAFMP7ALIg6nhKBGgwVPy/TktInrQgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd19zQXNpRHFlRW9FYURCVV9MOU9TMGlldENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yMTAyMTEtZmZlYS00N2VlLTg5YmEt NmNjY2JhOTk3NGVjLzEvd19zQXNpRHFlRW9FYURCVV9MOU9TMGlldENBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8yMTAyMTEtZmZlYS00N2VlLTg5YmEtNmNjY2JhOTk3NGVj LzEvd19zQXNpRHFlRW9FYURCVV9MOU9TMGlldENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZRe6PWJ y9LaJBDBAlWlNjZt7I2uAzfmvhUVBYK5oHJrE8KHFF8CteogIFWnUrAOOmrqSaIf 4F9h7sbi4wWXkaA3pqELUSfYliCwqaZdsd0p5+2nWaWpC/9S6ItHgkmTTqO4gdeR Jy4I//qKkOXAt9tKqFJuB9vaEr+KiBqPLGcWRURgh0f1/pnLkVTRjM+Zgj/8s+J2 QqyGoz5m/8CGVFxg0ZToMyiAH4IGgXJmxCWvohrldNIKbID12ozueveXFkfwYl7T 1iVnGIve3YysElHY3PePpgSIqbSX4skxrbgsL+KmOlbDZVNg8BNxLZW7ZtfjTe+/ N3PZV8mqMNfSxg== -----END CERTIFICATE-----Generated at Tue Dec 23 18:51:40 2025 by rpki-client