This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft File: w8zhZV8_ceTv_qTec6GuyCKCnWE.mft (raw, json) Hash identifier: QbKdBzrSf6L6XvcReYDnHp7AHIN8f1Rmld70i3ymZPk= Subject key identifier: F6:AA:0F:44:62:15:0B:46:DF:0C:6B:15:8E:A3:BD:E2:A1:4C:88:76 Authority key identifier: C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61 Certificate issuer: /CN=c3cce1655f3f71e4effea4de73a1aec822829d61 Certificate serial: 019B40C91961F7DC1FED63DBB8CF99F6A47F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft Manifest number: 0332 Signing time: Sun 21 Dec 2025 12:01:19 +0000 Manifest this update: Sun 21 Dec 2025 12:01:19 +0000 Manifest next update: Mon 22 Dec 2025 12:01:19 +0000 Files and hashes: 1: qel6ufOI0K0P6RzF02UdBRZmZOs.roa (hash: 0w6Fd2wQlTNYoLFBh1jxH0G1R4nWQ+6pOgjLnjgYDIc=) 2: w8zhZV8_ceTv_qTec6GuyCKCnWE.crl (hash: n0xQWpeuMZrmznw8ZUFaIMBpbAsk7nMRZzX9sSIyy/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:19:61:f7:dc:1f:ed:63:db:b8:cf:99:f6:a4:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3cce1655f3f71e4effea4de73a1aec822829d61 Validity Not Before: Dec 21 12:01:19 2025 GMT Not After : Dec 22 12:01:19 2025 GMT Subject: CN=f6aa0f4462150b46df0c6b158ea3bde2a14c8876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a1:b4:25:47:24:cb:71:5d:84:3a:44:88:03: 47:48:9a:03:55:66:5c:25:27:21:f3:f6:03:b7:a0: 4e:57:29:4d:1f:b0:dc:8f:46:e1:5e:22:54:91:a3: b3:1f:41:01:f5:b2:82:aa:26:87:14:4b:19:c8:d1: fd:ad:42:77:5a:82:f6:fa:aa:3a:dc:f6:53:c9:de: 1c:7b:a3:08:3e:e3:02:d4:c5:fc:1a:52:7d:81:61: bc:81:b9:0c:8d:fd:02:8a:08:68:4f:bb:77:ae:ee: 71:bb:39:2f:b1:e6:6c:26:a8:53:f7:b4:1d:fe:fc: 9f:47:28:23:7c:b0:d9:27:38:bb:3e:76:f5:f6:d9: 1a:ed:2a:8e:8c:ad:4e:2c:81:f0:3f:3b:39:d2:60: eb:74:ae:66:01:5d:40:8e:04:ce:0a:d9:72:34:c7: 9c:92:af:32:92:2b:de:17:1e:2d:94:cc:bd:fa:4e: de:56:31:41:60:73:b6:9b:59:80:96:b3:e3:bc:85: 90:e2:cc:49:56:ab:cb:5b:48:c9:3b:a1:02:39:7b: 42:29:13:c5:14:42:76:e3:83:5c:eb:a9:68:25:ae: 47:f3:c5:e7:59:61:15:99:61:50:01:de:ba:74:d2: 80:7b:d5:94:00:ff:8b:37:0e:05:50:f2:25:1e:75: 92:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AA:0F:44:62:15:0B:46:DF:0C:6B:15:8E:A3:BD:E2:A1:4C:88:76 X509v3 Authority Key Identifier: keyid:C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:28:fd:33:3c:61:1e:5a:b3:3e:65:fd:8c:c4:bb:e1:d7:8e: 69:dc:e2:43:29:45:d7:98:e4:18:b6:ab:99:9a:bc:ba:3b:10: 87:6c:b5:f2:ad:c0:ec:2d:df:64:bd:10:0f:0f:f5:00:49:5e: dd:36:98:84:0f:c4:0a:7d:8d:3f:56:5c:91:90:2d:75:37:53: f8:c8:fd:ea:6f:a7:e4:27:0d:d4:09:06:43:11:f8:dc:13:be: 50:a6:fd:30:bb:09:51:8a:5c:85:94:61:df:c8:7f:e9:27:29: 54:d9:ee:0b:8a:73:b4:23:b1:54:1a:87:94:8a:59:d3:82:7c: 6f:2c:ab:f4:f8:e4:63:2d:da:a8:58:28:e5:c2:e2:24:18:f4: 44:38:6c:32:f7:30:d8:53:e3:5d:ca:2f:05:7d:97:cd:8c:67: 07:d3:68:ce:ad:d3:34:56:73:a3:7b:cd:a9:3f:35:2c:03:ec: c9:5f:29:d2:2d:21:d6:45:bd:c8:0a:c4:d9:7a:4a:48:aa:77: 58:c7:59:1f:5b:d2:c0:98:e2:06:31:74:29:1e:f1:0f:7f:09: 6e:37:ed:72:a2:78:02:7d:a1:da:42:ac:39:b4:5a:97:84:4b: 77:25:88:80:48:fb:50:fe:1b:49:56:1f:bb:98:b1:bb:f9:63: 51:e5:bc:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyRlh99wf7WPbuM+Z9qR/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzY2NlMTY1NWYzZjcxZTRlZmZlYTRkZTczYTFhZWM4MjI4 MjlkNjEwHhcNMjUxMjIxMTIwMTE5WhcNMjUxMjIyMTIwMTE5WjAzMTEwLwYDVQQD EyhmNmFhMGY0NDYyMTUwYjQ2ZGYwYzZiMTU4ZWEzYmRlMmExNGM4ODc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqG0JUcky3FdhDpEiANHSJoDVWZc JSch8/YDt6BOVylNH7Dcj0bhXiJUkaOzH0EB9bKCqiaHFEsZyNH9rUJ3WoL2+qo6 3PZTyd4ce6MIPuMC1MX8GlJ9gWG8gbkMjf0CighoT7t3ru5xuzkvseZsJqhT97Qd /vyfRygjfLDZJzi7Pnb19tka7SqOjK1OLIHwPzs50mDrdK5mAV1AjgTOCtlyNMec kq8ykiveFx4tlMy9+k7eVjFBYHO2m1mAlrPjvIWQ4sxJVqvLW0jJO6ECOXtCKRPF FEJ244Nc66loJa5H88XnWWEVmWFQAd66dNKAe9WUAP+LNw4FUPIlHnWSIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPaqD0RiFQtG3wxrFY6jveKhTIh2MB8GA1UdIwQY MBaAFMPM4WVfP3Hk7/6k3nOhrsgigp1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzh6aFpWOF9jZVR2X3FUZWM2R3V5Q0tDbldFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9jNTgwZjYtZjBhNi00Yzg1LWI3ZDMt ZDEwYmViZWEzN2QwLzEvdzh6aFpWOF9jZVR2X3FUZWM2R3V5Q0tDbldFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9jNTgwZjYtZjBhNi00Yzg1LWI3ZDMtZDEwYmViZWEzN2Qw LzEvdzh6aFpWOF9jZVR2X3FUZWM2R3V5Q0tDbldFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyj9Mzxh HlqzPmX9jMS74deOadziQylF15jkGLarmZq8ujsQh2y18q3A7C3fZL0QDw/1AEle 3TaYhA/ECn2NP1ZckZAtdTdT+Mj96m+n5CcN1AkGQxH43BO+UKb9MLsJUYpchZRh 38h/6ScpVNnuC4pztCOxVBqHlIpZ04J8byyr9PjkYy3aqFgo5cLiJBj0RDhsMvcw 2FPjXcovBX2XzYxnB9Nozq3TNFZzo3vNqT81LAPsyV8p0i0h1kW9yArE2XpKSKp3 WMdZH1vSwJjiBjF0KR7xD38JbjftcqJ4An2h2kKsObRal4RLdyWIgEj7UP4bSVYf u5ixu/ljUeW8EA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:48:39 2025 by rpki-client