This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft File: ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft (raw, json) Hash identifier: 4eVxgclTK4/74qJY7a5YyFrOsUgFiP8GeC9YghuDbhY= Subject key identifier: 9E:CB:4E:96:EB:17:D0:77:6D:D2:92:9C:D6:40:20:78:AF:D8:81:2D Authority key identifier: C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17 Certificate issuer: /CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917 Certificate serial: 019B3C7EF105FE486DBEE907BF98AF2B4933 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft Manifest number: 120C Signing time: Sat 20 Dec 2025 16:01:50 +0000 Manifest this update: Sat 20 Dec 2025 16:01:50 +0000 Manifest next update: Sun 21 Dec 2025 16:01:50 +0000 Files and hashes: 1: bXwup2eDRWJRx9GTrYPVFoErhfk.roa (hash: UbhOIugJ4oofUAz2tZciGbACV9Kgx7pGWE+kfVDs8E8=) 2: ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl (hash: eeNmOJ64UjS7YKUCT9ucxidd9AGFgrckb6V89Cco3kc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:f1:05:fe:48:6d:be:e9:07:bf:98:af:2b:49:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917 Validity Not Before: Dec 20 16:01:50 2025 GMT Not After : Dec 21 16:01:50 2025 GMT Subject: CN=9ecb4e96eb17d0776dd2929cd6402078afd8812d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e6:13:bf:2f:99:5d:34:3d:d1:72:7d:01:dd: e5:69:8d:8b:54:d9:83:9a:5b:a2:1a:15:c2:d2:11: 0b:74:f4:68:ff:16:4d:1c:e0:a4:71:c8:ae:dc:7c: b8:b6:fb:6e:50:06:95:2b:97:14:d9:0c:32:db:80: fe:ed:a4:a6:01:0e:4b:7c:2c:a9:a3:5d:2b:51:6e: bc:16:5e:11:58:d0:4b:14:be:2f:68:c4:ed:96:bf: d1:e9:de:10:94:aa:c7:b9:e0:83:cc:9c:2d:2c:82: 2f:85:de:19:35:08:de:d6:ee:d2:68:f4:de:40:ce: a7:4e:ac:33:a1:7f:79:90:ca:99:b2:ef:0e:04:58: 15:1c:d8:65:05:aa:96:f7:3a:4b:0b:cb:0c:2e:7e: cb:0b:c1:41:f6:bf:72:2f:96:72:dd:dd:c7:1b:b2: 35:3a:43:4f:94:0d:fb:96:fd:9e:b8:5f:eb:38:3f: bc:77:d2:01:f2:08:1a:ce:a9:86:b9:95:a8:ea:b5: 60:06:ed:75:7e:01:65:5b:77:f7:ca:2e:c7:99:f7: 6a:0e:03:c6:09:70:cb:bc:45:e1:9b:08:86:1e:a4: 13:b6:4d:27:73:88:f7:3c:a3:f5:bc:b4:ca:2d:fc: 77:aa:b9:3c:07:68:a0:13:22:e7:c5:97:27:b1:ce: 4b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CB:4E:96:EB:17:D0:77:6D:D2:92:9C:D6:40:20:78:AF:D8:81:2D X509v3 Authority Key Identifier: keyid:C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:04:56:7f:70:a1:7a:1b:cb:2e:b8:ca:0f:96:06:65:9b:75: 5a:f4:da:12:28:bf:bc:cf:3a:f2:c5:5f:de:c0:e8:0e:81:f9: 97:dd:7d:a7:77:d0:67:75:6d:a7:5d:44:b2:b7:5c:ed:db:5d: 38:a0:28:c4:bc:43:1d:77:d1:ef:1e:cd:8e:c5:e1:d3:3c:db: b9:9a:0a:d8:0d:42:d4:b8:a0:90:d0:9d:06:82:e4:f8:50:e7: ce:42:6f:bc:38:ab:48:b7:c8:3a:54:75:68:3d:df:e3:4a:c1: 78:9e:35:5d:3d:5a:94:9a:f8:21:55:fd:0a:b4:99:69:16:05: 6f:6d:32:e0:cc:60:f1:06:27:3b:71:57:a4:57:7b:3b:5b:2a: 93:82:45:cf:81:01:7e:07:89:77:7e:97:ac:ea:c0:26:0c:22: f8:db:fb:a4:82:12:16:b7:61:f1:bb:17:16:92:a1:0d:b2:e2: 9d:f0:0e:5c:a4:80:45:d9:31:ae:6c:c7:92:bc:fc:c0:9e:03: 34:9a:43:eb:50:31:44:00:07:f9:cc:9f:7f:84:8e:cb:10:c0: 7f:b3:27:8d:da:40:af:c9:ed:5b:bb:09:f3:90:11:f6:1e:36: b3:86:73:e2:b7:f9:89:ce:a6:1a:5c:dd:fa:82:61:66:36:f9: eb:f3:92:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fvEF/khtvukHv5ivK0kzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyY2U1OWQxYWY4MzBjOTRiYThlYTExY2Y4ZmVjNmRkOWMw M2I5MTcwHhcNMjUxMjIwMTYwMTUwWhcNMjUxMjIxMTYwMTUwWjAzMTEwLwYDVQQD Eyg5ZWNiNGU5NmViMTdkMDc3NmRkMjkyOWNkNjQwMjA3OGFmZDg4MTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+YTvy+ZXTQ90XJ9Ad3laY2LVNmD mluiGhXC0hELdPRo/xZNHOCkcciu3Hy4tvtuUAaVK5cU2Qwy24D+7aSmAQ5LfCyp o10rUW68Fl4RWNBLFL4vaMTtlr/R6d4QlKrHueCDzJwtLIIvhd4ZNQje1u7SaPTe QM6nTqwzoX95kMqZsu8OBFgVHNhlBaqW9zpLC8sMLn7LC8FB9r9yL5Zy3d3HG7I1 OkNPlA37lv2euF/rOD+8d9IB8ggazqmGuZWo6rVgBu11fgFlW3f3yi7HmfdqDgPG CXDLvEXhmwiGHqQTtk0nc4j3PKP1vLTKLfx3qrk8B2igEyLnxZcnsc5LvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7LTpbrF9B3bdKSnNZAIHiv2IEtMB8GA1UdIwQY MBaAFMLOWdGvgwyUuo6hHPj+xt2cA7kXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3M1WjBhLURESlM2anFFYy1QN0czWndEdVJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi80NDIyMmUtNTY4ZS00YzQzLThkYzgt YTU0YmJjMzRjY2U5LzEvd3M1WjBhLURESlM2anFFYy1QN0czWndEdVJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi80NDIyMmUtNTY4ZS00YzQzLThkYzgtYTU0YmJjMzRjY2U5 LzEvd3M1WjBhLURESlM2anFFYy1QN0czWndEdVJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwRWf3Ch ehvLLrjKD5YGZZt1WvTaEii/vM868sVf3sDoDoH5l919p3fQZ3Vtp11Esrdc7dtd OKAoxLxDHXfR7x7NjsXh0zzbuZoK2A1C1LigkNCdBoLk+FDnzkJvvDirSLfIOlR1 aD3f40rBeJ41XT1alJr4IVX9CrSZaRYFb20y4Mxg8QYnO3FXpFd7O1sqk4JFz4EB fgeJd36XrOrAJgwi+Nv7pIISFrdh8bsXFpKhDbLinfAOXKSARdkxrmzHkrz8wJ4D NJpD61AxRAAH+cyff4SOyxDAf7MnjdpAr8ntW7sJ85AR9h42s4Zz4rf5ic6mGlzd +oJhZjb56/OS5A== -----END CERTIFICATE-----Generated at Sat Dec 20 18:54:06 2025 by rpki-client