This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft File: w98u83AH1U-Gu6J1c9M61pXJ7lw.mft (raw, json) Hash identifier: vEhQbpLVq86ljwsDHjOTRUdGMsRW/9tOwyp7COqpBQQ= Subject key identifier: 05:45:26:93:A4:8E:D1:72:07:A4:C6:1A:F2:79:F0:3C:D3:7E:82:31 Authority key identifier: C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C Certificate issuer: /CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c Certificate serial: 019AF1642D7FE1947AA3EA2F1EC3A0C34EF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft Manifest number: 0C0F Signing time: Sat 06 Dec 2025 02:01:05 +0000 Manifest this update: Sat 06 Dec 2025 02:01:05 +0000 Manifest next update: Sun 07 Dec 2025 02:01:05 +0000 Files and hashes: 1: MSS8bajhBaU5VhOzrfA52HmDj84.roa (hash: YEJDRIIvwqwjWO6NfGeQmsZ7v3rXxoUkegHU1CblIHc=) 2: w98u83AH1U-Gu6J1c9M61pXJ7lw.crl (hash: jvgedh8cebog1KYF2Tc8y3x5NSG17PJgtnHAPjZA8Ns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:2d:7f:e1:94:7a:a3:ea:2f:1e:c3:a0:c3:4e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c Validity Not Before: Dec 6 02:01:05 2025 GMT Not After : Dec 7 02:01:05 2025 GMT Subject: CN=05452693a48ed17207a4c61af279f03cd37e8231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:32:86:ed:44:51:0b:5c:2a:57:3b:df:52:f1: e2:c9:99:02:9d:aa:5e:05:ce:52:ec:20:7d:46:c4: 44:a6:bb:3b:c3:c5:25:61:7c:c3:c6:92:24:f2:38: ef:04:9f:fa:1b:d9:08:06:b5:4f:0c:62:b1:c1:8b: d1:39:47:9b:30:ed:40:fb:7e:3f:ea:a4:f7:ba:2b: c2:93:80:5b:ba:56:60:9c:9d:48:a2:df:e8:ce:2b: cb:54:1f:a8:83:33:ac:72:93:9e:8a:5e:2d:72:d7: 2b:ea:3d:8f:df:cf:82:92:21:c9:95:aa:f5:d7:ea: e7:0a:02:30:26:a1:c0:a5:5b:4c:68:48:50:8b:e1: 46:bc:16:59:51:89:00:55:64:f4:4f:b8:47:5a:e7: e1:cb:49:4e:09:50:a5:42:f2:a8:8e:76:04:a7:bd: 18:ce:16:e5:c3:71:d0:c5:75:ef:11:be:b3:f5:1f: d5:3a:83:15:09:87:31:6f:d1:70:55:9f:d1:23:59: 53:6c:98:74:75:e5:e7:8e:fb:7d:10:d5:ae:98:df: ff:e3:f9:39:eb:5a:93:e4:80:7d:02:fe:48:c1:a9: 3c:d0:79:d1:b4:43:b9:c6:26:8b:cc:a2:1c:14:b9: ce:39:1b:53:b2:63:51:4f:10:a1:5c:34:cb:fa:a9: 93:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:45:26:93:A4:8E:D1:72:07:A4:C6:1A:F2:79:F0:3C:D3:7E:82:31 X509v3 Authority Key Identifier: keyid:C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:9f:8b:46:e9:9e:9f:85:f3:1c:c4:a6:ff:2f:59:87:83:36: e6:fe:9b:7c:e4:22:cf:8f:1e:f5:3b:ee:31:22:56:c9:2a:79: 19:11:00:a5:70:c1:8b:b0:9f:78:72:45:72:ab:90:ed:04:19: d3:c1:95:07:e7:30:2a:1a:19:58:e6:e3:43:11:49:e7:9c:4a: 08:87:31:06:6d:6e:17:76:85:f7:4b:51:48:d8:df:10:8c:af: d1:15:ce:87:1b:f0:64:81:75:f7:b8:40:0b:fe:5e:32:33:3a: 2e:00:8c:96:0c:4e:f8:42:48:16:0c:f0:ca:84:a3:08:c0:78: 83:ad:50:08:ca:81:f2:64:4f:63:6c:9f:7d:72:ca:0e:c9:1b: 79:57:ad:4d:e5:4d:83:e3:aa:de:ac:5e:72:b2:8c:61:b0:68: b0:42:0c:72:45:37:71:35:70:ad:88:d4:93:1b:7c:44:9e:2f: 0d:76:9e:7e:70:14:8f:f0:f0:c2:0d:f8:61:01:8d:e2:25:b8: de:57:80:e3:bf:fa:2a:37:79:a5:93:48:cc:57:75:09:b7:05: e1:9e:b1:0a:82:e3:c3:bf:6b:b8:46:e5:63:e3:af:22:20:b4: 7f:b6:6a:c7:1f:91:03:67:c2:28:11:af:38:e9:6b:8a:34:be: 53:50:1b:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZC1/4ZR6o+ovHsOgw070MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZGYyZWYzNzAwN2Q1NGY4NmJiYTI3NTczZDMzYWQ2OTVj OWVlNWMwHhcNMjUxMjA2MDIwMTA1WhcNMjUxMjA3MDIwMTA1WjAzMTEwLwYDVQQD EygwNTQ1MjY5M2E0OGVkMTcyMDdhNGM2MWFmMjc5ZjAzY2QzN2U4MjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzKG7URRC1wqVzvfUvHiyZkCnape Bc5S7CB9RsREprs7w8UlYXzDxpIk8jjvBJ/6G9kIBrVPDGKxwYvROUebMO1A+34/ 6qT3uivCk4BbulZgnJ1Iot/ozivLVB+ogzOscpOeil4tctcr6j2P38+CkiHJlar1 1+rnCgIwJqHApVtMaEhQi+FGvBZZUYkAVWT0T7hHWufhy0lOCVClQvKojnYEp70Y zhblw3HQxXXvEb6z9R/VOoMVCYcxb9FwVZ/RI1lTbJh0deXnjvt9ENWumN//4/k5 61qT5IB9Av5Iwak80HnRtEO5xiaLzKIcFLnOORtTsmNRTxChXDTL+qmTnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVFJpOkjtFyB6TGGvJ58DzTfoIxMB8GA1UdIwQY MBaAFMPfLvNwB9VPhruidXPTOtaVye5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85YTk3ZjAtNTBiNi00ODQ0LTg5ZDQt MjNhMjc2YTQyOGFiLzEvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi85YTk3ZjAtNTBiNi00ODQ0LTg5ZDQtMjNhMjc2YTQyOGFi LzEvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5+LRume n4XzHMSm/y9Zh4M25v6bfOQiz48e9TvuMSJWySp5GREApXDBi7CfeHJFcquQ7QQZ 08GVB+cwKhoZWObjQxFJ55xKCIcxBm1uF3aF90tRSNjfEIyv0RXOhxvwZIF197hA C/5eMjM6LgCMlgxO+EJIFgzwyoSjCMB4g61QCMqB8mRPY2yffXLKDskbeVetTeVN g+Oq3qxecrKMYbBosEIMckU3cTVwrYjUkxt8RJ4vDXaefnAUj/Dwwg34YQGN4iW4 3leA47/6Kjd5pZNIzFd1CbcF4Z6xCoLjw79ruEblY+OvIiC0f7Zqxx+RA2fCKBGv OOlrijS+U1AbDA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:09 2025 by rpki-client