This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft File: w49sR0pKRBSpySd75Naqrivt6ks.mft (raw, json) Hash identifier: QdWDaPeL/EJMZEisSQmIraRL/RPGfCi/Go1vTyYxECY= Subject key identifier: 40:3B:CA:6C:FA:D6:95:75:7D:11:94:0A:1E:68:5B:4A:2E:1B:17:32 Authority key identifier: C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B Certificate issuer: /CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b Certificate serial: 019AF577EE2B15589DCE3830EFFD767BA55C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft Manifest number: 0170 Signing time: Sat 06 Dec 2025 21:01:08 +0000 Manifest this update: Sat 06 Dec 2025 21:01:08 +0000 Manifest next update: Sun 07 Dec 2025 21:01:08 +0000 Files and hashes: 1: w49sR0pKRBSpySd75Naqrivt6ks.crl (hash: irxDsCxa0IkUOO+LMnOYzK5tD1yG482Kry6F1oPLPq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:ee:2b:15:58:9d:ce:38:30:ef:fd:76:7b:a5:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b Validity Not Before: Dec 6 21:01:08 2025 GMT Not After : Dec 7 21:01:08 2025 GMT Subject: CN=403bca6cfad695757d11940a1e685b4a2e1b1732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d6:5c:a2:20:b5:78:6f:3e:f8:ed:6d:44:dd: 03:e3:5f:c9:03:f5:59:85:a7:19:69:41:de:c3:00: 45:46:e0:95:86:8d:ae:5b:02:06:92:f4:61:de:01: cb:d3:5f:b3:c5:26:65:05:c4:82:4a:8f:99:3f:8f: 44:14:2b:c5:5b:d0:d0:19:13:05:28:02:ae:64:5d: 2a:ac:fc:48:9a:e0:a8:e8:88:b8:9f:a9:39:ad:c5: 03:78:78:5d:6a:01:32:ad:f6:10:df:d4:75:bf:d7: 6a:4f:5a:93:ad:56:35:1a:8c:a4:62:78:44:57:ec: 3b:a7:77:9f:13:bd:c0:0b:d3:f1:44:be:9c:b1:70: 98:6f:a9:c2:a3:eb:f6:35:9b:89:f0:d0:19:76:d5: e2:bc:03:bb:2b:af:bc:c9:81:2b:09:34:c8:7b:cc: 3b:ac:2b:94:69:57:2e:46:9a:ff:f5:a9:e6:50:62: b4:e7:26:05:c0:1d:1b:6f:13:45:86:00:31:a6:23: 20:f8:49:e8:89:0a:20:bf:9e:d3:cc:dd:e5:fe:04: ee:f7:a0:98:ee:9f:72:f4:ca:ff:11:03:62:7b:9d: df:33:8f:de:dc:1f:ab:ba:e8:04:6f:21:53:f3:71: 82:ee:4b:6d:00:80:db:9e:03:57:62:86:5e:90:a7: 5d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3B:CA:6C:FA:D6:95:75:7D:11:94:0A:1E:68:5B:4A:2E:1B:17:32 X509v3 Authority Key Identifier: keyid:C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:4f:ef:37:96:a6:a6:ec:a5:9d:3a:06:b9:7f:e5:07:72:b0: 73:b6:89:02:9f:83:87:39:5b:d7:80:84:a1:5a:3a:56:a7:63: 02:0c:11:93:04:82:92:ab:6f:77:49:e2:40:18:cb:9a:4c:68: ae:36:1c:16:17:5f:51:57:82:2d:ba:13:a2:a0:96:3c:1c:ef: 76:8b:6b:03:6e:87:52:15:1f:80:7f:79:29:d4:61:a1:51:a4: c7:2b:2d:10:5a:d4:b3:89:b4:6c:66:7d:08:bd:f2:73:69:18: 12:7b:01:83:71:80:9b:9d:5f:a6:b6:ec:40:3f:2e:19:55:a4: 13:98:79:65:94:76:68:d2:99:96:ba:77:61:49:63:bf:68:95: ad:bd:a1:e1:c5:19:03:2a:b5:96:ed:77:a2:24:18:e7:95:dc: e2:da:74:8c:18:12:c7:fb:db:41:7d:67:ae:ca:28:f4:5c:d3: 3e:51:51:d8:4b:1f:ed:75:cf:0c:e5:05:58:63:37:76:34:c6: a1:45:c9:84:17:bb:76:43:88:5f:b5:13:f5:91:e0:30:9d:c5: a8:b5:83:08:66:4f:e3:59:81:e8:dd:c3:73:a5:23:56:0d:aa: 3f:d0:08:0c:83:2b:83:5f:09:d2:42:7e:43:c3:e8:d5:d7:2e: 43:c1:58:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d+4rFVidzjgw7/12e6VcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOGY2YzQ3NGE0YTQ0MTRhOWM5Mjc3YmU0ZDZhYWFlMmJl ZGVhNGIwHhcNMjUxMjA2MjEwMTA4WhcNMjUxMjA3MjEwMTA4WjAzMTEwLwYDVQQD Eyg0MDNiY2E2Y2ZhZDY5NTc1N2QxMTk0MGExZTY4NWI0YTJlMWIxNzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNZcoiC1eG8++O1tRN0D41/JA/VZ hacZaUHewwBFRuCVho2uWwIGkvRh3gHL01+zxSZlBcSCSo+ZP49EFCvFW9DQGRMF KAKuZF0qrPxImuCo6Ii4n6k5rcUDeHhdagEyrfYQ39R1v9dqT1qTrVY1GoykYnhE V+w7p3efE73AC9PxRL6csXCYb6nCo+v2NZuJ8NAZdtXivAO7K6+8yYErCTTIe8w7 rCuUaVcuRpr/9anmUGK05yYFwB0bbxNFhgAxpiMg+EnoiQogv57TzN3l/gTu96CY 7p9y9Mr/EQNie53fM4/e3B+ruugEbyFT83GC7kttAIDbngNXYoZekKddtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEA7ymz61pV1fRGUCh5oW0ouGxcyMB8GA1UdIwQY MBaAFMOPbEdKSkQUqckne+TWqq4r7epLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzQ5c1IwcEtSQlNweVNkNzVOYXFyaXZ0NmtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84ZDk5YzUtYjdjOC00ODk1LWFmMTgt YWU4NDAwMjhmNmIxLzEvdzQ5c1IwcEtSQlNweVNkNzVOYXFyaXZ0NmtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC84ZDk5YzUtYjdjOC00ODk1LWFmMTgtYWU4NDAwMjhmNmIx LzEvdzQ5c1IwcEtSQlNweVNkNzVOYXFyaXZ0NmtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQk/vN5am puylnToGuX/lB3Kwc7aJAp+Dhzlb14CEoVo6VqdjAgwRkwSCkqtvd0niQBjLmkxo rjYcFhdfUVeCLboToqCWPBzvdotrA26HUhUfgH95KdRhoVGkxystEFrUs4m0bGZ9 CL3yc2kYEnsBg3GAm51fprbsQD8uGVWkE5h5ZZR2aNKZlrp3YUljv2iVrb2h4cUZ Ayq1lu13oiQY55Xc4tp0jBgSx/vbQX1nrsoo9FzTPlFR2Esf7XXPDOUFWGM3djTG oUXJhBe7dkOIX7UT9ZHgMJ3FqLWDCGZP41mB6N3Dc6UjVg2qP9AIDIMrg18J0kJ+ Q8Po1dcuQ8FYWQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:19:15 2025 by rpki-client