This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft File: we7iyrhrXuQPwncMqMtcUMYrdVs.mft (raw, json) Hash identifier: ceVc0QJjjz5eROJH3shaHqANlpKSlfYyotmfMMn7wDc= Subject key identifier: A1:AF:2E:9F:98:26:A1:E9:C6:C5:5F:18:AD:40:76:07:D0:82:A2:AA Authority key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B Certificate issuer: /CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b Certificate serial: 019AF16451C2B5D164D4206C0E7F345BC79C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft Manifest number: 13DB Signing time: Sat 06 Dec 2025 02:01:14 +0000 Manifest this update: Sat 06 Dec 2025 02:01:14 +0000 Manifest next update: Sun 07 Dec 2025 02:01:14 +0000 Files and hashes: 1: C82fBmTW8-iwXu5pgvR1VTX1CPI.roa (hash: VxKUMucn3gu4aXap48afqVYi1a/XU7LxwPuTbOudfsE=) 2: we7iyrhrXuQPwncMqMtcUMYrdVs.crl (hash: XKnWtr9Vf0IypT5+WSbu0Q/T9IqkxUgSE4rfS8whoOE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:51:c2:b5:d1:64:d4:20:6c:0e:7f:34:5b:c7:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b Validity Not Before: Dec 6 02:01:14 2025 GMT Not After : Dec 7 02:01:14 2025 GMT Subject: CN=a1af2e9f9826a1e9c6c55f18ad407607d082a2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4c:05:23:69:2f:b5:e9:92:71:6f:f1:ee:51: 0a:33:58:88:41:6f:3c:81:ee:2d:0a:b8:c2:c0:dd: 77:8c:d8:17:ce:6d:a3:bb:05:b6:28:81:35:b2:fc: 55:a5:ed:08:0b:50:7a:5b:0f:97:92:e7:31:5e:0f: 27:22:3c:d8:09:84:ca:c3:24:94:e7:69:0a:39:98: e3:94:a0:6c:9b:fe:a9:a4:45:9f:c8:81:e8:26:bc: 7b:8d:2b:59:86:a7:df:2e:63:8f:91:9c:ff:fb:78: 12:55:68:6a:69:8d:8d:b2:d0:48:c1:ea:8a:b6:77: 4d:62:fa:d0:8b:6b:9d:8e:98:0b:7b:ca:b3:06:fc: 7a:a7:5b:67:19:07:ad:13:c0:d1:9e:9c:b2:90:f4: 41:b8:03:66:79:34:f2:94:99:b7:35:ec:61:f2:65: 62:47:3c:df:ea:f4:6a:5a:e6:62:b0:89:bf:19:72: d9:12:f8:48:8a:0b:c4:00:28:1a:31:a5:ad:6e:8f: f0:d7:e2:ce:55:4e:68:6c:fb:e6:b1:97:84:44:6b: ee:8f:c8:47:77:2f:cf:a9:e7:90:84:f7:00:12:af: b4:0b:ee:20:4a:c4:9d:df:74:99:30:69:c3:7e:8f: e0:0b:c3:58:eb:99:4a:10:de:61:5a:ee:6e:e4:fe: e3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AF:2E:9F:98:26:A1:E9:C6:C5:5F:18:AD:40:76:07:D0:82:A2:AA X509v3 Authority Key Identifier: keyid:C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:af:4a:ad:45:66:b7:21:d4:17:70:f1:c6:0d:6f:cb:c1:c7: 5b:30:fa:70:6c:6e:46:6f:44:c2:6b:dd:17:45:86:54:75:2c: 37:7e:ee:bc:ce:77:25:9d:61:80:26:86:c9:34:49:cd:c0:d0: 79:7e:5f:f6:b6:b6:c2:19:18:0d:3c:d9:c1:60:a4:19:0d:d0: 3b:a1:66:52:51:37:44:25:60:dd:1c:54:87:2e:a2:45:73:04: 1d:73:43:5b:85:07:fd:6f:8d:c7:08:b0:71:a9:1e:81:f2:8e: d4:cb:ec:e3:c8:6f:71:5b:85:0c:c1:9b:ce:38:3b:ad:24:cc: 47:84:ce:87:f2:7a:6c:13:18:a8:5e:ec:ab:0b:dc:fe:47:a9: 55:38:57:76:01:cc:48:c4:ed:f0:d9:b8:3d:ea:20:74:45:a9: a7:81:61:fc:27:8c:f2:a0:9a:ca:ef:5c:32:3c:c1:34:df:6b: 37:a7:6f:05:88:20:c9:40:51:d5:3d:38:84:8d:69:1a:76:62: 44:66:00:92:42:89:0f:4e:38:02:86:88:cf:55:b0:7c:a8:4f: 8b:83:16:9d:25:8c:dc:08:a1:43:de:2f:1e:3e:ce:72:90:b8: de:ff:66:a0:17:44:1d:c0:95:99:24:5b:e7:6f:23:5e:fb:43: e3:65:d5:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFHCtdFk1CBsDn80W8ecMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZWVlMmNhYjg2YjVlZTQwZmMyNzcwY2E4Y2I1YzUwYzYy Yjc1NWIwHhcNMjUxMjA2MDIwMTE0WhcNMjUxMjA3MDIwMTE0WjAzMTEwLwYDVQQD EyhhMWFmMmU5Zjk4MjZhMWU5YzZjNTVmMThhZDQwNzYwN2QwODJhMmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskwFI2kvtemScW/x7lEKM1iIQW88 ge4tCrjCwN13jNgXzm2juwW2KIE1svxVpe0IC1B6Ww+XkucxXg8nIjzYCYTKwySU 52kKOZjjlKBsm/6ppEWfyIHoJrx7jStZhqffLmOPkZz/+3gSVWhqaY2NstBIweqK tndNYvrQi2udjpgLe8qzBvx6p1tnGQetE8DRnpyykPRBuANmeTTylJm3Nexh8mVi Rzzf6vRqWuZisIm/GXLZEvhIigvEACgaMaWtbo/w1+LOVU5obPvmsZeERGvuj8hH dy/PqeeQhPcAEq+0C+4gSsSd33SZMGnDfo/gC8NY65lKEN5hWu5u5P7jjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGvLp+YJqHpxsVfGK1AdgfQgqKqMB8GA1UdIwQY MBaAFMHu4sq4a17kD8J3DKjLXFDGK3VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2U3aXlyaHJYdVFQd25jTXFNdGNVTVlyZFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82MWYzZDgtMWEyNC00NDZmLWEyYjIt MGQwNzY1MmU0Y2FiLzEvd2U3aXlyaHJYdVFQd25jTXFNdGNVTVlyZFZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny82MWYzZDgtMWEyNC00NDZmLWEyYjItMGQwNzY1MmU0Y2Fi LzEvd2U3aXlyaHJYdVFQd25jTXFNdGNVTVlyZFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMq9KrUVm tyHUF3Dxxg1vy8HHWzD6cGxuRm9EwmvdF0WGVHUsN37uvM53JZ1hgCaGyTRJzcDQ eX5f9ra2whkYDTzZwWCkGQ3QO6FmUlE3RCVg3RxUhy6iRXMEHXNDW4UH/W+Nxwiw cakegfKO1Mvs48hvcVuFDMGbzjg7rSTMR4TOh/J6bBMYqF7sqwvc/kepVThXdgHM SMTt8Nm4PeogdEWpp4Fh/CeM8qCayu9cMjzBNN9rN6dvBYggyUBR1T04hI1pGnZi RGYAkkKJD044AoaIz1WwfKhPi4MWnSWM3AihQ94vHj7OcpC43v9moBdEHcCVmSRb 528jXvtD42XV5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:27 2025 by rpki-client