This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft File: W-oEa0mXgK7H1hgtLVanXrCJaM0.mft (raw, json) Hash identifier: byM13nbr4jVBRQDw2LMONaSH9KKsmb0+io7yxYcu3bo= Subject key identifier: 4D:08:98:3D:B2:50:56:CE:11:5E:5B:14:40:F3:06:D4:D3:9F:C4:60 Authority key identifier: 5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD Certificate issuer: /CN=5bea046b499780aec7d6182d2d56a75eb08968cd Certificate serial: 019B3EA3A7B251E97612EC3FF6FCC2C14FA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft Manifest number: 1673 Signing time: Sun 21 Dec 2025 02:01:11 +0000 Manifest this update: Sun 21 Dec 2025 02:01:11 +0000 Manifest next update: Mon 22 Dec 2025 02:01:11 +0000 Files and hashes: 1: QaaRy7ABeU9cSPshLT6zQgCy8vY.roa (hash: ClDKSK21Vz9twjL4L21G/7TWYD2/1/Ma/Dt0uF8yRp0=) 2: W-oEa0mXgK7H1hgtLVanXrCJaM0.crl (hash: PjwlsqX6iOCG0VTOQ/ubzAHY2NKriEeztMTsH9iM6t0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:a7:b2:51:e9:76:12:ec:3f:f6:fc:c2:c1:4f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bea046b499780aec7d6182d2d56a75eb08968cd Validity Not Before: Dec 21 02:01:11 2025 GMT Not After : Dec 22 02:01:11 2025 GMT Subject: CN=4d08983db25056ce115e5b1440f306d4d39fc460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f5:2e:11:d0:f9:d6:30:e8:cf:48:0f:55:21: 26:0c:bd:94:07:ee:54:91:92:54:f0:75:12:18:f8: bf:73:9a:77:d1:d5:a8:57:87:56:52:48:68:ed:b9: d4:f4:5a:98:2a:e2:96:f3:2f:df:45:83:28:98:e2: 02:aa:13:de:6b:59:3f:fc:bf:dd:51:09:de:1e:16: 3c:8e:ca:e4:0c:07:f7:75:de:ce:9f:a8:12:92:e6: 25:ca:2f:75:f9:13:e1:39:d3:a6:0f:f6:f5:81:4b: bc:91:22:19:76:27:ef:02:44:0f:83:c0:27:83:b3: f4:88:d6:26:e6:82:70:1d:63:5b:2f:ea:45:db:f7: 14:0b:93:a6:01:45:48:be:61:98:23:82:3f:7c:59: e0:21:c7:d4:ce:df:ff:e4:1f:0d:52:bd:86:8a:15: f6:35:89:58:9b:49:78:80:5f:9b:71:10:20:44:ee: 7f:3e:03:71:44:81:e1:cc:ce:88:1a:23:b9:64:3e: 2f:ae:1e:21:21:9b:e3:57:a2:88:38:74:5e:4e:bf: 31:45:4c:ba:de:21:30:fe:e0:90:c8:86:e2:8b:94: 37:1e:4c:67:48:46:b9:a7:2e:4f:a9:00:ce:b4:2e: 5d:ee:64:a5:89:9c:c2:20:95:53:95:a7:67:ac:1c: 1c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:08:98:3D:B2:50:56:CE:11:5E:5B:14:40:F3:06:D4:D3:9F:C4:60 X509v3 Authority Key Identifier: keyid:5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:af:3a:56:76:e3:67:ee:e7:07:db:ee:36:46:25:33:70:56: 2c:50:ff:71:58:21:19:7f:ad:f8:2f:0e:06:f3:4d:fd:ed:ba: d3:88:32:1d:4a:f7:5a:b8:51:a2:e5:c7:35:96:ac:24:14:a2: 27:9e:d0:22:31:b9:68:9e:f7:83:23:e0:b2:01:f2:ff:3b:19: 8d:03:87:1c:df:a5:4f:80:c5:e7:da:38:22:5c:99:ea:45:12: b6:55:06:0f:b5:9e:af:f7:3f:63:1d:6c:86:ce:bb:c5:a1:c9: 45:94:93:2f:db:98:ce:28:28:db:6b:d4:11:8d:b4:62:11:65: cc:a7:10:d0:23:5f:18:66:03:2c:58:90:52:b0:32:18:e2:01: 08:c1:0a:ce:71:4b:70:59:8a:a8:b4:21:78:c3:fd:b8:b8:f3: a4:e3:30:a9:86:b1:90:02:81:0c:81:f4:9b:09:f7:b9:6e:8a: 1c:49:73:26:83:94:5e:bc:c7:63:3b:7b:c0:66:a1:d5:50:85: 10:ca:70:33:2b:19:5c:27:53:aa:79:ea:59:f7:6b:c1:9d:fa: f8:03:71:d1:4e:06:8c:54:2b:c5:dd:7f:35:c0:e9:77:5c:c3: 28:60:74:df:af:1c:30:ce:fb:50:94:1f:70:e9:63:0c:65:b9: 94:7e:7f:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o6eyUel2Euw/9vzCwU+gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZWEwNDZiNDk5NzgwYWVjN2Q2MTgyZDJkNTZhNzVlYjA4 OTY4Y2QwHhcNMjUxMjIxMDIwMTExWhcNMjUxMjIyMDIwMTExWjAzMTEwLwYDVQQD Eyg0ZDA4OTgzZGIyNTA1NmNlMTE1ZTViMTQ0MGYzMDZkNGQzOWZjNDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fUuEdD51jDoz0gPVSEmDL2UB+5U kZJU8HUSGPi/c5p30dWoV4dWUkho7bnU9FqYKuKW8y/fRYMomOICqhPea1k//L/d UQneHhY8jsrkDAf3dd7On6gSkuYlyi91+RPhOdOmD/b1gUu8kSIZdifvAkQPg8An g7P0iNYm5oJwHWNbL+pF2/cUC5OmAUVIvmGYI4I/fFngIcfUzt//5B8NUr2GihX2 NYlYm0l4gF+bcRAgRO5/PgNxRIHhzM6IGiO5ZD4vrh4hIZvjV6KIOHReTr8xRUy6 3iEw/uCQyIbii5Q3HkxnSEa5py5PqQDOtC5d7mSliZzCIJVTladnrBwcMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0ImD2yUFbOEV5bFEDzBtTTn8RgMB8GA1UdIwQY MBaAFFvqBGtJl4Cux9YYLS1Wp16wiWjNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVy1vRWEwbVhnSzdIMWhndExWYW5YckNKYU0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hYzRjMmQtOGFiMS00ZTAxLWI2YjEt Mjk2MDIyMTVhZGQwLzEvVy1vRWEwbVhnSzdIMWhndExWYW5YckNKYU0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9hYzRjMmQtOGFiMS00ZTAxLWI2YjEtMjk2MDIyMTVhZGQw LzEvVy1vRWEwbVhnSzdIMWhndExWYW5YckNKYU0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAK86Vnbj Z+7nB9vuNkYlM3BWLFD/cVghGX+t+C8OBvNN/e2604gyHUr3WrhRouXHNZasJBSi J57QIjG5aJ73gyPgsgHy/zsZjQOHHN+lT4DF59o4IlyZ6kUStlUGD7Wer/c/Yx1s hs67xaHJRZSTL9uYzigo22vUEY20YhFlzKcQ0CNfGGYDLFiQUrAyGOIBCMEKznFL cFmKqLQheMP9uLjzpOMwqYaxkAKBDIH0mwn3uW6KHElzJoOUXrzHYzt7wGah1VCF EMpwMysZXCdTqnnqWfdrwZ36+ANx0U4GjFQrxd1/NcDpd1zDKGB0368cMM77UJQf cOljDGW5lH5/Rg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:55:28 2025 by rpki-client