This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft File: wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft (raw, json) Hash identifier: OHbv0EM+esOZ0yTb2ZPSwOKZQLt7JdDrgI2+HflAjBM= Subject key identifier: BC:F3:78:5D:CB:6F:FE:7D:E8:01:00:41:C5:50:81:C5:0E:7F:C6:FD Authority key identifier: C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC Certificate issuer: /CN=c0debc8850b690f1232796911bfe3c4c9aa867dc Certificate serial: 019AF3F75FCBEAA76E5156BC894E1E2BA148 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft Manifest number: 0468 Signing time: Sat 06 Dec 2025 14:01:06 +0000 Manifest this update: Sat 06 Dec 2025 14:01:06 +0000 Manifest next update: Sun 07 Dec 2025 14:01:06 +0000 Files and hashes: 1: L4zdfpQTMapiD2xjjc9b_8rVphY.roa (hash: X4ulaYGn7ALPkkvP3AdThxBx//teLK+YYJfbh5wE5to=) 2: wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl (hash: wwYpUVD5islLwsUACknu0+14LCoEuDiwCGV7+bvEOAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:5f:cb:ea:a7:6e:51:56:bc:89:4e:1e:2b:a1:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0debc8850b690f1232796911bfe3c4c9aa867dc Validity Not Before: Dec 6 14:01:06 2025 GMT Not After : Dec 7 14:01:06 2025 GMT Subject: CN=bcf3785dcb6ffe7de8010041c55081c50e7fc6fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:70:8e:e7:64:78:be:c3:dc:fd:10:37:c5:cd: af:d0:0d:3b:03:0d:cc:5f:9a:58:2f:58:28:53:e2: 05:4e:88:5e:ed:95:14:8e:f1:54:b0:d5:29:f3:c4: bc:ef:69:73:c6:cd:57:2b:33:dd:15:a8:fe:b7:8c: f3:57:c9:f9:af:43:34:c8:b7:2f:98:8f:c2:9e:d0: c0:31:4c:60:a9:1f:e8:ee:91:42:35:4a:0a:9e:15: 97:80:a0:ea:e5:03:d4:ad:52:07:30:6f:a7:78:9f: de:1f:fd:4c:a8:de:dc:59:0d:68:2a:06:13:8a:15: 9a:e8:6c:ae:13:e0:93:ee:d5:a2:db:8f:19:00:23: cc:03:89:b3:95:4c:75:85:f8:8e:bd:b6:39:81:35: fb:6a:4b:93:cf:a9:25:d6:4d:79:3e:ea:e6:2a:3f: 72:f7:ff:dd:c7:4d:2c:5d:8c:2c:f4:20:d7:05:ff: d0:e3:39:f0:66:2c:e8:65:bb:dd:62:25:44:4a:9a: 14:33:12:f9:3e:9b:9a:a6:1d:bd:ac:84:07:90:7e: cf:4e:92:b6:12:f7:01:4b:57:25:17:13:a7:37:d5: 34:bd:55:7a:8f:80:85:5e:37:c3:22:93:28:fb:98: ee:62:31:ad:1c:0e:2e:24:0e:5c:3b:de:53:ba:f9: d3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F3:78:5D:CB:6F:FE:7D:E8:01:00:41:C5:50:81:C5:0E:7F:C6:FD X509v3 Authority Key Identifier: keyid:C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f6:09:25:58:f3:92:35:78:26:e1:a1:26:00:dc:00:77:1e: ed:88:3b:fe:88:0d:86:b2:9e:c2:28:10:7f:9a:4e:40:83:fa: 68:63:c8:22:0b:de:26:03:f3:92:65:d0:fb:33:29:0d:41:4c: df:82:c8:91:84:bb:69:b9:5b:b3:f7:cd:84:c0:2e:fe:d0:91: 45:51:b0:22:57:f8:8e:aa:d4:1d:9b:e0:a8:4b:10:30:f9:ed: b8:4a:0a:8c:d3:9c:89:4b:11:43:2d:f2:ba:13:01:00:1a:8e: 42:d4:ee:77:4d:cf:44:39:91:0b:e3:1e:a4:fe:34:36:cd:8e: 6c:86:84:ac:98:f1:4b:47:99:9c:59:f8:2e:bd:bb:9e:a4:1c: 6a:15:f9:7a:86:29:9a:75:a0:c0:82:d4:76:46:10:58:5e:d3: 30:bd:60:d5:db:32:6f:36:4a:67:e5:b8:dc:59:2e:a5:99:32: 3d:04:a7:f2:f6:da:89:e4:0a:b4:31:ed:c3:ed:bd:84:b3:f3: 94:9d:6f:8c:32:a0:7a:66:d2:d5:ac:a5:fc:aa:6e:7d:9b:60: 82:3d:14:fa:8b:73:f9:02:a9:c6:f2:41:3c:9c:c6:8c:67:28: b2:af:e5:b4:c1:05:1a:69:99:89:ed:89:8d:5e:f0:c6:fe:a0: 01:8b:36:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz91/L6qduUVa8iU4eK6FIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZGViYzg4NTBiNjkwZjEyMzI3OTY5MTFiZmUzYzRjOWFh ODY3ZGMwHhcNMjUxMjA2MTQwMTA2WhcNMjUxMjA3MTQwMTA2WjAzMTEwLwYDVQQD EyhiY2YzNzg1ZGNiNmZmZTdkZTgwMTAwNDFjNTUwODFjNTBlN2ZjNmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXCO52R4vsPc/RA3xc2v0A07Aw3M X5pYL1goU+IFTohe7ZUUjvFUsNUp88S872lzxs1XKzPdFaj+t4zzV8n5r0M0yLcv mI/CntDAMUxgqR/o7pFCNUoKnhWXgKDq5QPUrVIHMG+neJ/eH/1MqN7cWQ1oKgYT ihWa6GyuE+CT7tWi248ZACPMA4mzlUx1hfiOvbY5gTX7akuTz6kl1k15PurmKj9y 9//dx00sXYws9CDXBf/Q4znwZizoZbvdYiVESpoUMxL5Ppuaph29rIQHkH7PTpK2 EvcBS1clFxOnN9U0vVV6j4CFXjfDIpMo+5juYjGtHA4uJA5cO95TuvnTeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzzeF3Lb/596AEAQcVQgcUOf8b9MB8GA1UdIwQY MBaAFMDevIhQtpDxIyeWkRv+PEyaqGfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd042OGlGQzJrUEVqSjVhUkdfNDhUSnFvWjl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lM2NhNzEtMzZmMC00YzUyLWJjMDEt YzZhYzRkZDdjOGU0LzEvd042OGlGQzJrUEVqSjVhUkdfNDhUSnFvWjl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9lM2NhNzEtMzZmMC00YzUyLWJjMDEtYzZhYzRkZDdjOGU0 LzEvd042OGlGQzJrUEVqSjVhUkdfNDhUSnFvWjl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/YJJVjz kjV4JuGhJgDcAHce7Yg7/ogNhrKewigQf5pOQIP6aGPIIgveJgPzkmXQ+zMpDUFM 34LIkYS7ablbs/fNhMAu/tCRRVGwIlf4jqrUHZvgqEsQMPntuEoKjNOciUsRQy3y uhMBABqOQtTud03PRDmRC+MepP40Ns2ObIaErJjxS0eZnFn4Lr27nqQcahX5eoYp mnWgwILUdkYQWF7TML1g1dsybzZKZ+W43FkupZkyPQSn8vbaieQKtDHtw+29hLPz lJ1vjDKgembS1ayl/KpufZtggj0U+otz+QKpxvJBPJzGjGcosq/ltMEFGmmZie2J jV7wxv6gAYs2EQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:23:18 2025 by rpki-client