This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft File: wKatm4cwm9AHnPowXUhhP4fEcNg.mft (raw, json) Hash identifier: 6d/lygMhLMdrbgQVfZFTyh0bkxtQG+iPJDsBTZWCh74= Subject key identifier: 0F:8B:7F:11:7B:FB:96:A6:7F:92:1C:6F:97:61:5F:28:45:C0:4F:D5 Authority key identifier: C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8 Certificate issuer: /CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8 Certificate serial: 019AF1D1EA631C347902C4EAF9D4578437BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 04:00:57 +0000 Manifest this update: Sat 06 Dec 2025 04:00:57 +0000 Manifest next update: Sun 07 Dec 2025 04:00:57 +0000 Files and hashes: 1: fpbdoc2TI64xJycuwiFh9Gomr6A.roa (hash: cljwIs+0uajrjK0gVgOImyvI4O/zMxkT1vLqnWwJwe0=) 2: wKatm4cwm9AHnPowXUhhP4fEcNg.crl (hash: foKyW7a97EhVxCkm2fs0LAwsavW4umy2kzlTL/1495A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ea:63:1c:34:79:02:c4:ea:f9:d4:57:84:37:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8 Validity Not Before: Dec 6 04:00:57 2025 GMT Not After : Dec 7 04:00:57 2025 GMT Subject: CN=0f8b7f117bfb96a67f921c6f97615f2845c04fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e3:45:7b:cb:a1:b5:3a:9e:19:ec:62:b1:c5: 2b:42:9c:0c:24:0c:6d:4b:af:d3:76:93:91:19:df: 37:6e:53:f9:4e:38:70:1c:66:ba:d3:30:63:0e:10: 53:bd:c3:d0:b4:4d:56:a5:7e:71:bc:05:f6:2b:0f: cc:aa:ba:21:c5:80:77:1e:9b:06:40:7f:fd:f1:98: d3:ba:7d:f3:ec:b9:64:a4:03:4b:11:0a:09:e1:40: ec:c0:2d:92:64:5b:5a:60:c5:df:e0:a5:eb:0f:d8: 59:8d:4a:df:cc:bc:61:14:7f:1b:4f:88:fb:54:94: ef:61:ec:2a:a4:e9:c1:d9:46:ca:49:a5:97:bd:c5: 6e:11:7e:76:b5:71:b6:f1:ef:6f:9e:7f:52:99:eb: 0c:ef:c2:48:7a:90:b6:ec:d3:49:5e:c2:96:96:9d: 4e:9c:86:7f:8e:03:66:db:e9:97:56:e9:d1:cc:68: fc:09:ff:45:c8:be:ef:c0:de:22:c4:5a:9d:b7:bb: 39:9a:38:8e:1b:ef:d7:76:55:80:c1:48:ab:b5:67: f1:95:e5:4c:3d:ea:15:84:65:47:b5:40:48:28:6e: 34:19:bb:5c:d5:24:d6:3c:51:43:81:f8:f8:d2:b2: b8:48:01:a8:21:d1:61:df:d5:04:63:21:96:b9:c9: 66:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8B:7F:11:7B:FB:96:A6:7F:92:1C:6F:97:61:5F:28:45:C0:4F:D5 X509v3 Authority Key Identifier: keyid:C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:f8:0c:a0:d4:a3:ca:7e:ad:c3:de:5e:3d:77:9c:a6:39:e5: 1a:6e:ab:37:ea:a8:c5:ad:0b:45:5d:d7:4d:95:1e:9d:d4:5f: 51:d7:ce:2d:2b:a5:75:bd:db:1c:90:25:8d:18:a4:f2:f8:4b: 26:21:72:06:81:41:25:dc:2d:f1:90:2f:d0:50:f7:7d:2c:6e: 10:63:d4:7c:f8:b9:6b:69:dd:22:38:29:92:cc:ee:05:03:20: fe:c7:78:67:cf:06:fa:69:54:ab:3b:a6:89:5e:bb:dd:1e:93: b1:3e:fe:10:eb:26:49:45:a9:2a:a6:86:a4:b1:75:50:4a:b9: 06:d8:90:88:be:9d:3c:63:8b:3e:b5:9a:74:0f:cc:99:a6:fd: 30:32:26:6e:1d:dd:07:3e:ef:a7:05:1e:b8:50:82:43:8d:10: 01:15:b2:f9:c6:6f:02:ef:b0:b2:6e:ac:00:74:7b:d7:e7:21: 4d:f6:93:5d:4b:99:46:73:c6:bc:dd:4f:07:b3:58:00:d1:c7: 14:56:4f:ca:ba:fe:95:39:29:8f:17:d3:1b:bd:38:39:32:ad: e3:ca:28:53:6c:6e:3b:54:85:d1:bc:32:d3:da:77:8d:73:a8: 04:33:0a:80:68:71:e0:d8:7c:ed:87:40:46:40:7b:54:64:6f: 96:25:4d:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0epjHDR5AsTq+dRXhDe+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYTZhZDliODczMDliZDAwNzljZmEzMDVkNDg2MTNmODdj NDcwZDgwHhcNMjUxMjA2MDQwMDU3WhcNMjUxMjA3MDQwMDU3WjAzMTEwLwYDVQQD EygwZjhiN2YxMTdiZmI5NmE2N2Y5MjFjNmY5NzYxNWYyODQ1YzA0ZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeNFe8uhtTqeGexiscUrQpwMJAxt S6/TdpORGd83blP5TjhwHGa60zBjDhBTvcPQtE1WpX5xvAX2Kw/MqrohxYB3HpsG QH/98ZjTun3z7LlkpANLEQoJ4UDswC2SZFtaYMXf4KXrD9hZjUrfzLxhFH8bT4j7 VJTvYewqpOnB2UbKSaWXvcVuEX52tXG28e9vnn9SmesM78JIepC27NNJXsKWlp1O nIZ/jgNm2+mXVunRzGj8Cf9FyL7vwN4ixFqdt7s5mjiOG+/XdlWAwUirtWfxleVM PeoVhGVHtUBIKG40Gbtc1STWPFFDgfj40rK4SAGoIdFh39UEYyGWuclmIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+LfxF7+5amf5Icb5dhXyhFwE/VMB8GA1UdIwQY MBaAFMCmrZuHMJvQB5z6MF1IYT+HxHDYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0thdG00Y3dtOUFIblBvd1hVaGhQNGZFY05nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9mY2M3MGUtZTRhNS00YjE5LWFiNGYt NzAxMjdiNDliMzIzLzEvd0thdG00Y3dtOUFIblBvd1hVaGhQNGZFY05nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9mY2M3MGUtZTRhNS00YjE5LWFiNGYtNzAxMjdiNDliMzIz LzEvd0thdG00Y3dtOUFIblBvd1hVaGhQNGZFY05nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvgMoNSj yn6tw95ePXecpjnlGm6rN+qoxa0LRV3XTZUendRfUdfOLSuldb3bHJAljRik8vhL JiFyBoFBJdwt8ZAv0FD3fSxuEGPUfPi5a2ndIjgpkszuBQMg/sd4Z88G+mlUqzum iV673R6TsT7+EOsmSUWpKqaGpLF1UEq5BtiQiL6dPGOLPrWadA/Mmab9MDImbh3d Bz7vpwUeuFCCQ40QARWy+cZvAu+wsm6sAHR71+chTfaTXUuZRnPGvN1PB7NYANHH FFZPyrr+lTkpjxfTG704OTKt48ooU2xuO1SF0bwy09p3jXOoBDMKgGhx4Nh87YdA RkB7VGRvliVN2A== -----END CERTIFICATE-----Generated at Sat Dec 6 14:39:04 2025 by rpki-client