This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft File: wHCBpvcho3qeHXmTFbs-onWLiHc.mft (raw, json) Hash identifier: 2RvCS+hFJdvxfpZLKP/GD90WTzFAxUQ+YRPyEfed8+0= Subject key identifier: 5F:68:AC:28:82:C1:4A:DE:89:22:28:C5:E2:A7:02:11:39:F3:D4:9A Authority key identifier: C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77 Certificate issuer: /CN=c07081a6f721a37a9e1d799315bb3ea2758b8877 Certificate serial: 019B53059DE16F5135840C301C9023863A5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft Manifest number: 06E8 Signing time: Thu 25 Dec 2025 01:00:35 +0000 Manifest this update: Thu 25 Dec 2025 01:00:35 +0000 Manifest next update: Fri 26 Dec 2025 01:00:35 +0000 Files and hashes: 1: iBvouIeGNb-tETlrG7R7kd8KLJk.roa (hash: ZFh8TKmia8sW44WOw2BVZ15xBNpA9QpJzWskGjFsYMo=) 2: wHCBpvcho3qeHXmTFbs-onWLiHc.crl (hash: rblv/6z/Ht476a2LBDX26ME+SUlzfXdvABs0pM67RVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:05:9d:e1:6f:51:35:84:0c:30:1c:90:23:86:3a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c07081a6f721a37a9e1d799315bb3ea2758b8877 Validity Not Before: Dec 25 01:00:35 2025 GMT Not After : Dec 26 01:00:35 2025 GMT Subject: CN=5f68ac2882c14ade892228c5e2a7021139f3d49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0e:b6:7e:aa:e4:d8:4d:ec:b8:19:2e:8c:dd: a8:de:53:2a:4b:34:09:ee:c1:dc:61:4b:43:7d:5f: 1f:09:fe:c5:7e:c0:a9:2a:5e:a1:9a:46:02:dd:43: 8f:9f:78:44:c0:cf:44:7a:76:b8:62:85:83:ab:cd: b3:49:c8:d3:4c:c9:26:13:2b:fe:20:ee:e4:09:0c: 30:0a:1f:de:ef:af:b5:80:69:b7:03:65:17:c5:d0: 18:ea:be:e9:67:2f:74:88:7d:35:b1:db:39:69:bb: b5:4f:b4:34:b3:75:49:66:39:06:b7:fd:36:68:6b: 3b:af:e1:f5:6f:6f:f0:25:7f:c1:cf:ec:ee:e3:48: 53:94:2b:e8:6c:29:49:32:58:b6:9e:2e:7a:5f:3a: 23:2d:f0:a9:dd:f3:11:4e:2d:eb:7a:db:c1:95:bf: 7f:60:57:5e:92:33:b3:f9:54:8c:5d:5c:ad:0a:66: d0:2a:3f:8b:27:e2:07:94:26:a7:10:bc:ea:0d:8d: cf:6f:2c:44:f3:6d:67:79:b9:57:d0:34:fb:2c:c2: 48:14:e4:3e:c8:7a:d1:f5:1a:5e:5a:36:25:8e:18: 84:fa:ca:cd:bf:34:bd:75:37:ac:07:bb:86:9e:34: 8a:28:6f:6b:e4:c9:eb:af:c3:d2:e6:8d:7c:86:82: 90:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:68:AC:28:82:C1:4A:DE:89:22:28:C5:E2:A7:02:11:39:F3:D4:9A X509v3 Authority Key Identifier: keyid:C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:90:d0:8d:2a:7d:bb:b6:57:73:da:5e:f9:49:ad:3e:1c:43: 89:b9:da:64:38:b3:76:16:41:da:44:4f:d0:1a:7e:34:b7:65: 7b:38:15:87:64:29:e9:0e:09:60:6a:dd:70:95:fd:ae:d1:48: c2:ee:53:9e:e2:e1:7f:58:18:57:2c:14:14:7a:6e:ed:89:37: 21:6d:17:a0:2d:57:38:e0:38:1c:0f:8f:a4:b4:98:a8:d8:c3: b0:79:ea:ef:2f:0c:57:75:f9:8e:cb:bf:b7:92:e8:d2:a1:5c: 1f:32:5e:05:30:70:b1:67:de:7f:f0:f0:cd:ea:ea:53:9a:98: 14:56:5b:cd:68:e0:66:fa:89:59:dd:6c:1e:8d:b1:5e:59:80: 64:08:1d:6c:f8:ea:00:54:84:69:5c:4b:56:6a:c7:d2:ad:48: d6:fc:86:5c:98:8f:0c:aa:9d:7b:cc:a7:9e:f2:12:07:e4:8c: 6e:98:64:d3:71:6a:25:8b:73:03:03:2d:64:fa:ac:f1:b1:0d: 4b:5b:6f:0e:83:5d:55:02:94:1e:a1:84:93:b6:ce:4c:3c:8e: c7:5c:ec:2e:48:68:0d:ee:6d:6a:ac:da:3a:50:f9:d4:3a:80: 71:17:b6:f8:48:86:3b:1f:87:e0:c7:5e:8e:01:04:14:e1:1e: c9:81:c8:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBZ3hb1E1hAwwHJAjhjpdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNzA4MWE2ZjcyMWEzN2E5ZTFkNzk5MzE1YmIzZWEyNzU4 Yjg4NzcwHhcNMjUxMjI1MDEwMDM1WhcNMjUxMjI2MDEwMDM1WjAzMTEwLwYDVQQD Eyg1ZjY4YWMyODgyYzE0YWRlODkyMjI4YzVlMmE3MDIxMTM5ZjNkNDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw62fqrk2E3suBkujN2o3lMqSzQJ 7sHcYUtDfV8fCf7FfsCpKl6hmkYC3UOPn3hEwM9Eena4YoWDq82zScjTTMkmEyv+ IO7kCQwwCh/e76+1gGm3A2UXxdAY6r7pZy90iH01sds5abu1T7Q0s3VJZjkGt/02 aGs7r+H1b2/wJX/Bz+zu40hTlCvobClJMli2ni56XzojLfCp3fMRTi3retvBlb9/ YFdekjOz+VSMXVytCmbQKj+LJ+IHlCanELzqDY3PbyxE821neblX0DT7LMJIFOQ+ yHrR9RpeWjYljhiE+srNvzS9dTesB7uGnjSKKG9r5Mnrr8PS5o18hoKQoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9orCiCwUreiSIoxeKnAhE589SaMB8GA1UdIwQY MBaAFMBwgab3IaN6nh15kxW7PqJ1i4h3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0hDQnB2Y2hvM3FlSFhtVEZicy1vbldMaUhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85YWZkMjMtZDI4MC00OTVjLWIyNTIt ZjYwMDMxN2IxOTc4LzEvd0hDQnB2Y2hvM3FlSFhtVEZicy1vbldMaUhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy85YWZkMjMtZDI4MC00OTVjLWIyNTItZjYwMDMxN2IxOTc4 LzEvd0hDQnB2Y2hvM3FlSFhtVEZicy1vbldMaUhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipDQjSp9 u7ZXc9pe+UmtPhxDibnaZDizdhZB2kRP0Bp+NLdlezgVh2Qp6Q4JYGrdcJX9rtFI wu5TnuLhf1gYVywUFHpu7Yk3IW0XoC1XOOA4HA+PpLSYqNjDsHnq7y8MV3X5jsu/ t5Lo0qFcHzJeBTBwsWfef/DwzerqU5qYFFZbzWjgZvqJWd1sHo2xXlmAZAgdbPjq AFSEaVxLVmrH0q1I1vyGXJiPDKqde8ynnvISB+SMbphk03FqJYtzAwMtZPqs8bEN S1tvDoNdVQKUHqGEk7bOTDyOx1zsLkhoDe5taqzaOlD51DqAcRe2+EiGOx+H4Mde jgEEFOEeyYHI7w== -----END CERTIFICATE-----Generated at Thu Dec 25 07:11:42 2025 by rpki-client