This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft File: W0lMbhb0nQi-dhyowOqnEihy-oI.mft (raw, json) Hash identifier: n9dMukSjL2uh0Yh6Dz68l1LnnW+DsZBtciCBZQLxc/4= Subject key identifier: 2D:00:94:CB:90:78:FD:3C:15:70:FE:A4:90:CA:7A:FB:38:16:5D:52 Authority key identifier: 5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82 Certificate issuer: /CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82 Certificate serial: 019B38D7F07227553694527A6211A055AE46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 23:00:34 +0000 Manifest this update: Fri 19 Dec 2025 23:00:34 +0000 Manifest next update: Sat 20 Dec 2025 23:00:34 +0000 Files and hashes: 1: TJ2hwoBGgOzkeWhqHN6Mxx7QhtA.roa (hash: 3R7yJP25UZbo9ce0Ffrs5KJBp9yypSbTdrsjbTzVD5w=) 2: W0lMbhb0nQi-dhyowOqnEihy-oI.crl (hash: tj9PTTALY0ZotymD05xnI4K6xZnMnW+FZ5PnMGPdGkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d7:f0:72:27:55:36:94:52:7a:62:11:a0:55:ae:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82 Validity Not Before: Dec 19 23:00:34 2025 GMT Not After : Dec 20 23:00:34 2025 GMT Subject: CN=2d0094cb9078fd3c1570fea490ca7afb38165d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:66:8e:71:38:f2:95:bd:6b:5f:50:c6:6e:2d: 4d:e1:36:07:dc:b4:9e:4e:eb:3b:4a:34:05:55:4b: f0:f8:b5:ce:36:fc:24:3c:98:13:0e:ca:03:4e:9c: 3d:5f:ab:42:11:94:78:70:7c:82:be:8f:e5:bd:f1: d4:93:be:e2:ef:58:c6:f7:b9:77:eb:95:bc:fb:07: 04:57:c2:74:30:a8:7a:62:34:a2:46:2b:76:8d:bf: 82:5b:26:f5:c5:32:f9:fb:60:40:4b:84:d1:8b:a7: 95:fe:93:d8:dd:fb:0c:b9:53:44:5d:54:63:67:bf: 8b:a2:2a:ac:db:a9:ad:06:11:b6:47:eb:30:b6:a4: 7f:8e:31:b5:b2:a3:3f:bd:41:00:7f:0b:11:59:bc: 29:1c:ec:cd:7e:a9:e9:0e:52:f7:73:4e:90:d5:fb: 40:a9:8f:6f:aa:b1:f9:16:8d:1b:51:88:ee:cd:62: 40:91:84:a9:7d:76:81:80:dd:25:22:24:49:3f:5f: 9c:7b:5e:fa:08:f4:e9:fa:47:73:52:d7:fe:37:42: b9:2c:67:8b:ed:2c:15:b7:7d:92:78:27:bd:f1:aa: 93:b1:c6:5f:ca:0f:a5:33:34:ec:c2:6a:69:e5:10: 0b:8b:51:7a:df:5f:ca:f1:f4:89:9b:0d:52:a1:54: 3b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:00:94:CB:90:78:FD:3C:15:70:FE:A4:90:CA:7A:FB:38:16:5D:52 X509v3 Authority Key Identifier: keyid:5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d9:d0:84:dc:dc:d6:05:fc:bc:e2:c0:02:7c:15:a9:b0:47: 0f:ed:fb:67:51:72:9b:91:a8:91:12:07:f5:80:37:32:3c:48: b6:be:87:1f:69:c5:a5:a2:66:f7:cc:a9:fc:49:db:d5:3a:92: d1:b0:78:4e:79:f5:81:75:fe:b7:2a:56:56:dd:2a:18:f1:53: d8:a7:f3:f6:cd:18:3d:e3:c4:79:76:39:85:d3:39:61:79:ee: ad:29:3a:46:80:dd:ce:ee:d5:71:dc:a0:6e:fd:2f:8c:a3:37: db:73:c8:f3:3a:01:15:14:28:2a:25:dd:8e:8d:e5:c1:44:ff: 0e:99:cd:b4:65:d9:87:b4:37:e4:05:ed:cc:b1:88:47:db:da: b4:9c:bb:4b:37:0b:fd:55:d6:19:eb:a2:08:5a:87:1e:8d:9a: e9:e7:8e:6b:b6:f3:97:10:11:f0:31:3f:3d:49:a3:fa:15:32: 55:ab:24:1f:52:3d:40:66:4c:15:0d:ea:d3:7b:5d:77:a1:81: 77:5a:91:b7:40:13:bf:c7:ce:3a:5d:41:f6:85:0c:77:8e:39: 4f:98:47:3f:33:3b:35:f8:92:3b:cf:d5:36:f6:15:75:df:88: 21:a2:89:5c:c2:2b:89:1a:d6:d0:d9:8f:1e:d8:0f:0d:50:a6: db:c0:f9:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs41/ByJ1U2lFJ6YhGgVa5GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNDk0YzZlMTZmNDlkMDhiZTc2MWNhOGMwZWFhNzEyMjg3 MmZhODIwHhcNMjUxMjE5MjMwMDM0WhcNMjUxMjIwMjMwMDM0WjAzMTEwLwYDVQQD EygyZDAwOTRjYjkwNzhmZDNjMTU3MGZlYTQ5MGNhN2FmYjM4MTY1ZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWaOcTjylb1rX1DGbi1N4TYH3LSe Tus7SjQFVUvw+LXONvwkPJgTDsoDTpw9X6tCEZR4cHyCvo/lvfHUk77i71jG97l3 65W8+wcEV8J0MKh6YjSiRit2jb+CWyb1xTL5+2BAS4TRi6eV/pPY3fsMuVNEXVRj Z7+Loiqs26mtBhG2R+swtqR/jjG1sqM/vUEAfwsRWbwpHOzNfqnpDlL3c06Q1ftA qY9vqrH5Fo0bUYjuzWJAkYSpfXaBgN0lIiRJP1+ce176CPTp+kdzUtf+N0K5LGeL 7SwVt32SeCe98aqTscZfyg+lMzTswmpp5RALi1F631/K8fSJmw1SoVQ7PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0AlMuQeP08FXD+pJDKevs4Fl1SMB8GA1UdIwQY MBaAFFtJTG4W9J0IvnYcqMDqpxIocvqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzBsTWJoYjBuUWktZGh5b3dPcW5FaWh5LW9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85MmJjZjQtZDBmMi00ZjllLTg3NGQt YzJjNmY2YTQwOTdmLzEvVzBsTWJoYjBuUWktZGh5b3dPcW5FaWh5LW9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85MmJjZjQtZDBmMi00ZjllLTg3NGQtYzJjNmY2YTQwOTdm LzEvVzBsTWJoYjBuUWktZGh5b3dPcW5FaWh5LW9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdnQhNzc 1gX8vOLAAnwVqbBHD+37Z1Fym5GokRIH9YA3MjxItr6HH2nFpaJm98yp/Enb1TqS 0bB4Tnn1gXX+typWVt0qGPFT2Kfz9s0YPePEeXY5hdM5YXnurSk6RoDdzu7Vcdyg bv0vjKM323PI8zoBFRQoKiXdjo3lwUT/DpnNtGXZh7Q35AXtzLGIR9vatJy7SzcL /VXWGeuiCFqHHo2a6eeOa7bzlxAR8DE/PUmj+hUyVaskH1I9QGZMFQ3q03tdd6GB d1qRt0ATv8fOOl1B9oUMd445T5hHPzM7NfiSO8/VNvYVdd+IIaKJXMIriRrW0NmP HtgPDVCm28D58A== -----END CERTIFICATE-----Generated at Sat Dec 20 02:08:18 2025 by rpki-client