This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft File: wSgWX47uGF-q-aozh19O5BKxD4w.mft (raw, json) Hash identifier: cMQGKI5QET9edtfncSKTzAaxLiOKEImaqCZIVLYTmmA= Subject key identifier: 63:BD:EC:70:3F:8B:63:D5:67:23:47:18:15:D1:B8:89:FD:3D:AC:E3 Authority key identifier: C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C Certificate issuer: /CN=c128165f8eee185faaf9aa33875f4ee412b10f8c Certificate serial: 019AF50A4A53890FC91AC2F775E97391BA06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft Manifest number: 115D Signing time: Sat 06 Dec 2025 19:01:23 +0000 Manifest this update: Sat 06 Dec 2025 19:01:23 +0000 Manifest next update: Sun 07 Dec 2025 19:01:23 +0000 Files and hashes: 1: IGaAmqWaXDC8Jd-8Qa85p2QBKSs.roa (hash: m3bXj57F8BUs8aS9v6HaMmQ2fB5Rx7CSbbCBnNNdBUY=) 2: wSgWX47uGF-q-aozh19O5BKxD4w.crl (hash: Qe6zPas4cI/jzlv489mxPLSMUakumK3m0IYiVUvhWTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:4a:53:89:0f:c9:1a:c2:f7:75:e9:73:91:ba:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c128165f8eee185faaf9aa33875f4ee412b10f8c Validity Not Before: Dec 6 19:01:23 2025 GMT Not After : Dec 7 19:01:23 2025 GMT Subject: CN=63bdec703f8b63d56723471815d1b889fd3dace3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:43:dd:9c:80:20:60:1c:92:31:99:fa:a2:b9: 57:df:2b:84:70:aa:0e:c3:29:8f:dc:56:2e:ca:aa: 76:6d:39:98:a2:c2:0c:d1:14:82:72:e3:4a:dd:a0: 94:ce:c2:72:3e:4c:2a:a6:36:d5:79:6f:b4:68:87: 48:98:3c:21:35:32:64:02:6d:27:e3:49:9a:09:ea: b4:76:0d:c8:58:2a:ac:1f:20:4f:c3:8a:31:76:f0: 57:b3:c1:9e:90:91:8f:62:04:90:1a:81:df:c2:0e: 20:ba:ea:21:7f:6c:c8:3c:11:80:ff:b5:69:68:a7: 0b:a9:7b:32:93:d3:dd:c6:af:b4:47:19:52:ef:31: be:b7:22:ee:34:df:8b:e6:df:70:af:a3:a5:ca:40: 01:2c:c1:52:fd:0c:cb:66:66:9b:5f:f7:f0:1a:13: 9b:e2:66:9f:fc:dc:be:e3:26:9f:db:85:7b:3f:47: 9f:83:b4:65:d6:52:2d:46:ce:3d:d9:92:df:97:f6: 2a:29:2b:e7:51:39:be:cb:75:8e:b3:1e:a1:d6:99: 39:77:12:d2:6d:b5:c1:16:6e:63:9e:ea:2f:f8:d7: 48:7c:2c:a1:11:05:51:b6:5e:2e:ae:45:54:4a:4f: a3:01:6a:e0:e0:f6:fc:90:31:cd:67:63:86:5c:0a: 1c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BD:EC:70:3F:8B:63:D5:67:23:47:18:15:D1:B8:89:FD:3D:AC:E3 X509v3 Authority Key Identifier: keyid:C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:85:b0:8a:c3:a0:c7:01:b4:bb:13:cb:4a:b1:d9:36:75:76: 6d:57:12:b9:54:5a:00:95:83:43:c5:0b:90:85:b1:fb:fe:1f: 8f:f3:a2:17:be:fd:24:a3:69:50:cd:18:5d:4d:99:02:0a:ba: 23:39:77:a5:77:69:00:fc:78:37:56:a7:be:a0:c2:9e:ae:7a: 9f:c9:2d:85:0d:19:be:c5:5d:26:5c:16:62:af:46:c4:79:e5: 44:7c:3e:f5:b3:3c:12:9a:3e:09:0d:b2:19:99:27:98:c7:30: bc:f1:9c:e7:4f:45:d5:64:59:00:32:3b:f8:c1:e3:c6:c9:5d: b3:2a:cb:12:ec:79:8e:f4:f0:87:82:08:7f:3d:62:0e:4c:b7: f1:f7:6f:98:55:c1:61:21:2a:7b:00:7e:0d:39:95:01:4e:09: 53:e6:b2:15:31:88:14:0f:d7:74:6f:c0:da:50:4b:94:43:03: 9e:04:e4:c4:b6:fe:d2:42:4c:7b:10:c5:5c:65:fc:2c:97:70: 88:b4:36:60:15:d4:20:14:12:72:dc:08:7a:09:54:25:3e:ed: 5b:52:a7:55:70:79:9a:f2:1e:3a:55:e3:4f:15:9d:5c:04:db: 7d:1d:88:ba:68:8b:f8:78:15:2d:36:ef:0b:71:1e:b8:df:dc: 2c:1b:5f:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CkpTiQ/JGsL3delzkboGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMjgxNjVmOGVlZTE4NWZhYWY5YWEzMzg3NWY0ZWU0MTJi MTBmOGMwHhcNMjUxMjA2MTkwMTIzWhcNMjUxMjA3MTkwMTIzWjAzMTEwLwYDVQQD Eyg2M2JkZWM3MDNmOGI2M2Q1NjcyMzQ3MTgxNWQxYjg4OWZkM2RhY2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUPdnIAgYBySMZn6orlX3yuEcKoO wymP3FYuyqp2bTmYosIM0RSCcuNK3aCUzsJyPkwqpjbVeW+0aIdImDwhNTJkAm0n 40maCeq0dg3IWCqsHyBPw4oxdvBXs8GekJGPYgSQGoHfwg4guuohf2zIPBGA/7Vp aKcLqXsyk9Pdxq+0RxlS7zG+tyLuNN+L5t9wr6OlykABLMFS/QzLZmabX/fwGhOb 4maf/Ny+4yaf24V7P0efg7Rl1lItRs492ZLfl/YqKSvnUTm+y3WOsx6h1pk5dxLS bbXBFm5jnuov+NdIfCyhEQVRtl4urkVUSk+jAWrg4Pb8kDHNZ2OGXAocnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGO97HA/i2PVZyNHGBXRuIn9PazjMB8GA1UdIwQY MBaAFMEoFl+O7hhfqvmqM4dfTuQSsQ+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NnV1g0N3VHRi1xLWFvemgxOU81Qkt4RDR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hM2I4Y2QtNTZmYS00M2ExLThkYzEt MmU1YWY1YjY4NzgxLzEvd1NnV1g0N3VHRi1xLWFvemgxOU81Qkt4RDR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9hM2I4Y2QtNTZmYS00M2ExLThkYzEtMmU1YWY1YjY4Nzgx LzEvd1NnV1g0N3VHRi1xLWFvemgxOU81Qkt4RDR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARYWwisOg xwG0uxPLSrHZNnV2bVcSuVRaAJWDQ8ULkIWx+/4fj/OiF779JKNpUM0YXU2ZAgq6 Izl3pXdpAPx4N1anvqDCnq56n8kthQ0ZvsVdJlwWYq9GxHnlRHw+9bM8Epo+CQ2y GZknmMcwvPGc509F1WRZADI7+MHjxsldsyrLEux5jvTwh4IIfz1iDky38fdvmFXB YSEqewB+DTmVAU4JU+ayFTGIFA/XdG/A2lBLlEMDngTkxLb+0kJMexDFXGX8LJdw iLQ2YBXUIBQSctwIeglUJT7tW1KnVXB5mvIeOlXjTxWdXATbfR2IumiL+HgVLTbv C3EeuN/cLBtfZg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:14:01 2025 by rpki-client