This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft File: W20XjxOFEwa1Y03xWXFjGfTYJHg.mft (raw, json) Hash identifier: UfL8ugWqT3wgYkBnXAYEabikzxXOXxpPWx8Hc6+oXho= Subject key identifier: 13:C9:DE:13:A0:8E:2B:68:16:3B:AC:7C:4A:5C:C9:E4:CD:F0:3F:66 Authority key identifier: 5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78 Certificate issuer: /CN=5b6d178f13851306b5634df159716319f4d82478 Certificate serial: 019B69569A411691A2743122DD1B33981C99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft Manifest number: 0E3B Signing time: Mon 29 Dec 2025 09:00:41 +0000 Manifest this update: Mon 29 Dec 2025 09:00:41 +0000 Manifest next update: Tue 30 Dec 2025 09:00:41 +0000 Files and hashes: 1: 4Y2Nbo1_a6IBq8Cl0IDfGwKCP_M.roa (hash: 0bsJSEvzwH1XPIlPA10NL/s8qRTvdmZt752O+GQRDjw=) 2: JbhtA2eCB5o0B4iWRnk7e5Qr0PU.roa (hash: s7PVAI8KfOAf0I2ckpID6SmGICLP8CZ7vN/7EsNRqIs=) 3: W20XjxOFEwa1Y03xWXFjGfTYJHg.crl (hash: dpdoN8JrmMSPM9k9qvVauLpEHYca2WBzsVe1zbrvAVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:56:9a:41:16:91:a2:74:31:22:dd:1b:33:98:1c:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b6d178f13851306b5634df159716319f4d82478 Validity Not Before: Dec 29 09:00:41 2025 GMT Not After : Dec 30 09:00:41 2025 GMT Subject: CN=13c9de13a08e2b68163bac7c4a5cc9e4cdf03f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4b:93:16:fd:04:e9:5a:a6:17:aa:44:36:f9: 47:e6:85:3d:67:92:65:7d:54:e4:c0:78:f2:0f:95: 97:8b:e6:3b:72:fd:33:b7:04:7b:5d:b3:59:80:9a: 81:50:25:e4:a9:d6:5a:84:a7:3e:2f:71:de:b4:09: 46:cd:9f:20:08:18:8e:9b:d7:7d:dd:a1:c9:96:26: ef:e3:8e:90:3b:a8:76:3e:17:de:0a:e2:f8:f2:c4: 43:14:d0:29:bc:8b:57:e0:43:6a:d8:ea:48:b6:6a: b2:e2:e8:06:fd:75:cf:54:10:92:26:3f:69:2a:11: 45:e7:10:a2:98:5e:79:33:62:33:bd:16:29:9c:d2: a8:7c:ad:bd:8c:27:2b:10:0d:1e:38:97:1a:2b:31: a3:86:54:f6:6f:50:ec:14:60:06:c6:a7:9c:dc:e5: a3:66:79:47:7d:87:a5:cf:36:ce:4a:c8:4b:64:ab: 6f:2a:bf:c1:9e:a3:8c:0a:4d:77:f2:77:0d:e8:ab: cc:42:a0:4e:db:6f:fc:27:aa:fb:63:4d:71:bb:5f: cd:92:16:4d:28:c3:db:4c:de:cd:60:23:4c:c2:21: df:88:65:de:3e:ba:b8:d8:49:45:7f:f2:aa:61:36: 3a:9d:4f:7d:4e:2d:38:0a:82:6a:5c:69:79:75:c3: 22:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C9:DE:13:A0:8E:2B:68:16:3B:AC:7C:4A:5C:C9:E4:CD:F0:3F:66 X509v3 Authority Key Identifier: keyid:5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:da:6b:a1:b2:e4:a6:88:32:4e:18:68:2c:d4:38:35:59:23: 9d:e0:94:db:2e:00:21:0b:70:8f:a0:5e:af:a9:c5:75:8a:39: 43:48:6e:d0:cc:0c:d2:92:7a:dc:01:b8:31:5b:d3:9f:52:dc: 75:e8:e9:05:e1:aa:93:a8:d9:aa:04:04:9e:77:47:9f:22:75: e3:fb:d2:48:e4:ca:92:27:38:79:f6:ea:89:2b:fb:36:36:db: 82:b3:46:5d:02:bc:05:41:73:9b:60:83:fc:0d:86:d2:4e:53: cc:ff:bd:ab:d4:11:95:7f:70:35:a4:85:b4:e1:79:ea:a0:94: c3:0f:49:f5:06:f5:f3:74:41:38:cb:e6:a6:b7:49:01:99:22: ac:b8:78:d2:1c:8c:46:cd:6e:88:71:42:35:40:72:7e:c4:3d: bd:8e:01:79:44:e2:ff:23:e4:6c:06:28:d4:29:e4:2f:d1:d6: 4f:ce:b2:a0:71:b3:33:fc:ae:db:77:0a:57:63:77:a6:20:e3: d6:42:dc:28:12:e7:97:6e:55:50:19:8c:c4:18:c4:09:e9:9b: 5a:da:4a:ca:04:83:59:56:53:71:9c:4a:ab:02:54:33:30:c4: e7:ee:94:d5:13:0e:c7:f6:d5:8d:af:7d:80:10:bd:91:bf:86: 7e:e2:fd:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpVppBFpGidDEi3RszmByZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNmQxNzhmMTM4NTEzMDZiNTYzNGRmMTU5NzE2MzE5ZjRk ODI0NzgwHhcNMjUxMjI5MDkwMDQxWhcNMjUxMjMwMDkwMDQxWjAzMTEwLwYDVQQD EygxM2M5ZGUxM2EwOGUyYjY4MTYzYmFjN2M0YTVjYzllNGNkZjAzZjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kuTFv0E6VqmF6pENvlH5oU9Z5Jl fVTkwHjyD5WXi+Y7cv0ztwR7XbNZgJqBUCXkqdZahKc+L3HetAlGzZ8gCBiOm9d9 3aHJlibv446QO6h2PhfeCuL48sRDFNApvItX4ENq2OpItmqy4ugG/XXPVBCSJj9p KhFF5xCimF55M2IzvRYpnNKofK29jCcrEA0eOJcaKzGjhlT2b1DsFGAGxqec3OWj ZnlHfYelzzbOSshLZKtvKr/BnqOMCk138ncN6KvMQqBO22/8J6r7Y01xu1/NkhZN KMPbTN7NYCNMwiHfiGXePrq42ElFf/KqYTY6nU99Ti04CoJqXGl5dcMiRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPJ3hOgjitoFjusfEpcyeTN8D9mMB8GA1UdIwQY MBaAFFttF48ThRMGtWNN8VlxYxn02CR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMWM2ZWMtYzI2MC00Y2EyLTg4N2It NGJiOTRjYmMyZTczLzEvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hMWM2ZWMtYzI2MC00Y2EyLTg4N2ItNGJiOTRjYmMyZTcz LzEvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9probLk pogyThhoLNQ4NVkjneCU2y4AIQtwj6Ber6nFdYo5Q0hu0MwM0pJ63AG4MVvTn1Lc dejpBeGqk6jZqgQEnndHnyJ14/vSSOTKkic4efbqiSv7NjbbgrNGXQK8BUFzm2CD /A2G0k5TzP+9q9QRlX9wNaSFtOF56qCUww9J9Qb183RBOMvmprdJAZkirLh40hyM Rs1uiHFCNUByfsQ9vY4BeUTi/yPkbAYo1CnkL9HWT86yoHGzM/yu23cKV2N3piDj 1kLcKBLnl25VUBmMxBjECembWtpKygSDWVZTcZxKqwJUMzDE5+6U1RMOx/bVja99 gBC9kb+GfuL9vg== -----END CERTIFICATE-----Generated at Mon Dec 29 15:14:49 2025 by rpki-client