This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft File: xWwoao20vSFr9kx1szhRsARaF18.mft (raw, json) Hash identifier: uo00i17wNHlgL8dzgJ9TORy5OyWi2XA8WNh25E8aINU= Subject key identifier: 00:33:93:3B:A3:8D:E6:F2:08:3C:56:E2:C1:B0:91:3E:48:AE:C2:5D Authority key identifier: C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F Certificate issuer: /CN=c56c286a8db4bd216bf64c75b33851b0045a175f Certificate serial: 019B3DC7F46E536CEC0597A5B02F8BE5B9EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft Manifest number: 0BEC Signing time: Sat 20 Dec 2025 22:01:12 +0000 Manifest this update: Sat 20 Dec 2025 22:01:12 +0000 Manifest next update: Sun 21 Dec 2025 22:01:12 +0000 Files and hashes: 1: wOQLTyNlgBk7kHZo7q30HbmjjsY.roa (hash: O4xN+z+lCTMoO1c7Ks6bcLVzrUBSXozi3e98+4QxAps=) 2: xWwoao20vSFr9kx1szhRsARaF18.crl (hash: OIN2pbdvs2AVeGVPOvKsxA5LpbPOc2+41sbjjPyvPqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:f4:6e:53:6c:ec:05:97:a5:b0:2f:8b:e5:b9:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c56c286a8db4bd216bf64c75b33851b0045a175f Validity Not Before: Dec 20 22:01:12 2025 GMT Not After : Dec 21 22:01:12 2025 GMT Subject: CN=0033933ba38de6f2083c56e2c1b0913e48aec25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:de:ce:1f:c1:23:77:f9:d6:7e:7c:4c:5b:d9: d1:32:6e:52:b1:c9:72:b5:7c:84:2e:7f:9e:f0:a3: 2d:9a:4d:a7:c8:e2:8d:b9:5d:e3:9c:77:64:7f:ae: 3d:82:5c:2a:4b:c2:fd:bb:e8:2e:a3:e1:cc:3b:16: d5:a8:7e:9a:08:44:21:86:ff:ea:d0:e2:0a:83:90: 04:79:03:ab:61:5a:38:3e:04:90:5a:73:a5:f9:69: fe:36:2f:6f:a8:66:90:3c:71:80:91:fe:63:38:03: cf:fb:1f:84:5d:38:1a:46:fc:4a:b5:0e:6b:f2:74: cd:9b:f2:6d:ce:b7:ee:1e:c0:5c:13:66:99:2c:52: 9e:a4:2b:17:a7:15:23:c3:f0:18:7e:74:46:c8:a9: 79:11:40:42:55:f3:41:f9:20:b9:13:bf:09:71:bd: ab:ae:d6:76:b5:c9:65:2c:69:d6:d4:16:8c:5c:33: d6:c4:89:76:5c:59:af:8a:4d:d7:1e:49:c9:f0:02: cc:71:59:b9:b8:a5:bc:6a:47:a4:b8:c6:10:b2:27: 52:94:72:85:7e:e0:3f:fc:f5:d8:f9:8b:24:fd:90: 7b:9a:1f:d8:8a:c2:81:6a:9c:7d:b0:6b:de:2c:81: 47:13:24:62:2d:65:bc:72:8f:8a:1f:6b:70:38:4e: 72:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:33:93:3B:A3:8D:E6:F2:08:3C:56:E2:C1:B0:91:3E:48:AE:C2:5D X509v3 Authority Key Identifier: keyid:C5:6C:28:6A:8D:B4:BD:21:6B:F6:4C:75:B3:38:51:B0:04:5A:17:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWwoao20vSFr9kx1szhRsARaF18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9c0913-0301-4ad4-b939-81349b02a2d9/1/xWwoao20vSFr9kx1szhRsARaF18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:96:b3:d8:53:67:b8:d0:2e:42:3d:0a:d0:d4:8f:71:8b:a4: 18:8b:ce:f5:a0:0a:b0:8a:73:f6:cc:05:71:ce:2f:10:9a:c2: 25:b7:c1:f3:17:89:54:b6:fe:e0:68:a5:4b:a5:ac:a7:f1:ed: a1:f6:2a:4e:2f:10:d9:ce:0e:cf:e5:b3:8a:f3:d7:50:a4:8d: b4:6a:63:69:07:fe:59:16:8a:a7:e6:76:67:e2:86:00:b5:c6: 69:11:e6:b7:87:3c:42:98:4c:0b:ea:ec:1c:a5:9b:a7:67:e3: 58:30:3e:c3:37:9c:07:bd:f4:82:7a:22:22:fc:dd:b2:cb:e5: 3c:45:3b:65:1e:57:51:4d:37:4c:57:d6:b9:94:92:66:36:56: 1b:e2:be:c6:9d:be:d2:63:f5:f0:04:1d:6a:46:9c:7b:13:af: 4f:54:25:4d:fb:c1:0b:f3:6d:eb:93:01:de:01:c0:d6:1f:5a: 04:ca:0a:9a:17:3d:ec:24:09:45:db:98:45:36:fe:ac:82:b4: e9:61:56:52:54:a5:2f:93:b6:fe:ce:9b:c9:2a:bc:9a:be:7a: 4a:d1:f6:9f:36:2e:f9:db:e9:c8:d4:ab:fd:a3:16:ac:5e:50: f1:f5:2f:74:d8:4f:15:17:0c:82:73:a1:b8:4b:ab:49:6b:35: 43:e8:ae:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x/RuU2zsBZelsC+L5bnrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NmMyODZhOGRiNGJkMjE2YmY2NGM3NWIzMzg1MWIwMDQ1 YTE3NWYwHhcNMjUxMjIwMjIwMTEyWhcNMjUxMjIxMjIwMTEyWjAzMTEwLwYDVQQD EygwMDMzOTMzYmEzOGRlNmYyMDgzYzU2ZTJjMWIwOTEzZTQ4YWVjMjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2t7OH8Ejd/nWfnxMW9nRMm5Sscly tXyELn+e8KMtmk2nyOKNuV3jnHdkf649glwqS8L9u+guo+HMOxbVqH6aCEQhhv/q 0OIKg5AEeQOrYVo4PgSQWnOl+Wn+Ni9vqGaQPHGAkf5jOAPP+x+EXTgaRvxKtQ5r 8nTNm/JtzrfuHsBcE2aZLFKepCsXpxUjw/AYfnRGyKl5EUBCVfNB+SC5E78Jcb2r rtZ2tcllLGnW1BaMXDPWxIl2XFmvik3XHknJ8ALMcVm5uKW8akekuMYQsidSlHKF fuA//PXY+Ysk/ZB7mh/YisKBapx9sGveLIFHEyRiLWW8co+KH2twOE5yOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAzkzujjebyCDxW4sGwkT5IrsJdMB8GA1UdIwQY MBaAFMVsKGqNtL0ha/ZMdbM4UbAEWhdfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFd3b2FvMjB2U0ZyOWt4MXN6aFJzQVJhRjE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85YzA5MTMtMDMwMS00YWQ0LWI5Mzkt ODEzNDliMDJhMmQ5LzEveFd3b2FvMjB2U0ZyOWt4MXN6aFJzQVJhRjE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC85YzA5MTMtMDMwMS00YWQ0LWI5MzktODEzNDliMDJhMmQ5 LzEveFd3b2FvMjB2U0ZyOWt4MXN6aFJzQVJhRjE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApaz2FNn uNAuQj0K0NSPcYukGIvO9aAKsIpz9swFcc4vEJrCJbfB8xeJVLb+4GilS6Wsp/Ht ofYqTi8Q2c4Oz+WzivPXUKSNtGpjaQf+WRaKp+Z2Z+KGALXGaRHmt4c8QphMC+rs HKWbp2fjWDA+wzecB730gnoiIvzdssvlPEU7ZR5XUU03TFfWuZSSZjZWG+K+xp2+ 0mP18AQdakacexOvT1QlTfvBC/Nt65MB3gHA1h9aBMoKmhc97CQJRduYRTb+rIK0 6WFWUlSlL5O2/s6bySq8mr56StH2nzYu+dvpyNSr/aMWrF5Q8fUvdNhPFRcMgnOh uEurSWs1Q+iuog== -----END CERTIFICATE-----Generated at Sun Dec 21 00:55:46 2025 by rpki-client