This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft File: w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft (raw, json) Hash identifier: cQbaJff0iRe0Uh4mxutGjJhnY74TWQDgGb678Sdksms= Subject key identifier: D5:18:98:2B:6C:AA:94:93:0B:4C:0E:D5:B9:27:7B:42:C2:AF:0F:1D Authority key identifier: C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F Certificate issuer: /CN=c385201a33b527c644aad5aecd3782c6a8c2f51f Certificate serial: 019AF2099C3CC899FBC84011739AC7C989BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:47 +0000 Manifest this update: Sat 06 Dec 2025 05:01:47 +0000 Manifest next update: Sun 07 Dec 2025 05:01:47 +0000 Files and hashes: 1: H9QpnLm8fW1NfasYmS-Z-4wW9K0.roa (hash: ZMCXrj27lV/u3oSg3kl26pqz/wenN/+jeAtwxfISyBE=) 2: w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl (hash: alR7CYOBKJLA6EZnRZZLeQPPv3jgkfje1Ar+FjUrNrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9c:3c:c8:99:fb:c8:40:11:73:9a:c7:c9:89:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c385201a33b527c644aad5aecd3782c6a8c2f51f Validity Not Before: Dec 6 05:01:47 2025 GMT Not After : Dec 7 05:01:47 2025 GMT Subject: CN=d518982b6caa94930b4c0ed5b9277b42c2af0f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a3:53:d0:31:ca:9e:f1:01:d4:45:b0:12:c8: 83:26:5a:58:53:bc:ca:12:7f:a5:ab:4e:6e:49:51: dc:05:47:f0:6f:28:a7:24:39:63:8c:44:e6:8e:f5: 18:da:67:db:a1:62:20:d7:5b:4a:57:f4:46:11:81: 33:9d:4f:31:d8:d3:0f:0c:cd:37:63:a8:cb:bb:fd: 79:46:f1:35:21:3c:c9:eb:b0:a9:fd:92:cc:ed:f8: 3b:f8:b8:b7:f2:80:5b:10:72:58:2a:4a:74:a8:c3: 03:da:12:54:97:15:ab:e2:74:15:42:34:66:19:dc: 6e:d6:e4:d1:0d:a4:68:33:e8:8c:a5:59:51:bf:1e: 6f:5b:a3:25:5d:f4:e9:2e:89:f3:06:ba:90:e7:bb: b9:70:72:f7:24:69:5d:0b:04:a9:ee:d0:6c:27:24: 01:8f:7e:5a:8a:60:ad:1d:19:62:5e:a0:6b:0d:1e: f4:50:50:e2:4e:14:2e:65:bf:43:dc:67:6f:e3:0e: a9:9c:4e:bf:d0:77:e3:20:17:cc:cf:48:76:77:ff: 83:46:c8:6e:36:c1:74:ed:66:f3:5e:47:e2:ae:e1: 13:31:48:d4:f8:94:67:24:72:49:7a:84:e9:cc:d8: 4c:f1:b4:9b:90:fb:37:f1:18:f9:f0:a9:7d:56:84: e2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:18:98:2B:6C:AA:94:93:0B:4C:0E:D5:B9:27:7B:42:C2:AF:0F:1D X509v3 Authority Key Identifier: keyid:C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:7c:d0:85:d0:55:43:26:d1:e6:fd:d9:d3:21:30:5c:21:7c: c6:cd:ec:f6:b9:ba:6e:42:5f:84:c8:5e:a7:e9:90:86:09:e0: ca:61:a7:13:41:17:ef:fc:ea:b4:b9:5d:5b:84:e8:ba:97:c8: 5a:38:e0:b9:ed:27:ba:7b:6e:9e:0f:be:d3:c9:10:30:b8:82: 75:e3:6e:58:d6:ea:8b:ac:77:75:9d:00:56:62:20:68:64:21: 5a:3a:f9:d2:81:95:c1:da:75:fe:ba:63:4e:a6:15:14:1e:c5: 64:df:df:88:ff:2b:1a:50:d8:d7:0a:8d:53:55:2f:bb:fe:a5: 89:03:79:13:9e:39:ba:06:49:45:f9:89:61:90:72:91:c3:ea: be:ab:b2:3c:d1:de:82:f3:ea:b9:c4:55:04:e9:c8:21:70:24: ba:be:ab:d2:56:f3:6e:77:b2:d0:8a:67:e5:cd:56:84:65:1d: 1d:8a:bd:ad:d9:20:40:4a:78:d1:59:64:2d:fb:9b:24:23:ed: ec:4c:08:ed:3d:a6:2a:53:67:8d:81:73:02:16:6d:95:57:26: d7:d8:70:17:2d:70:02:e0:a6:cb:29:b6:03:27:2c:3b:de:ba: 7a:66:f6:8f:fd:5e:80:20:79:93:08:d1:ee:34:92:4d:59:42: 7a:05:01:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZw8yJn7yEARc5rHyYm9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzODUyMDFhMzNiNTI3YzY0NGFhZDVhZWNkMzc4MmM2YThj MmY1MWYwHhcNMjUxMjA2MDUwMTQ3WhcNMjUxMjA3MDUwMTQ3WjAzMTEwLwYDVQQD EyhkNTE4OTgyYjZjYWE5NDkzMGI0YzBlZDViOTI3N2I0MmMyYWYwZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqNT0DHKnvEB1EWwEsiDJlpYU7zK En+lq05uSVHcBUfwbyinJDljjETmjvUY2mfboWIg11tKV/RGEYEznU8x2NMPDM03 Y6jLu/15RvE1ITzJ67Cp/ZLM7fg7+Li38oBbEHJYKkp0qMMD2hJUlxWr4nQVQjRm Gdxu1uTRDaRoM+iMpVlRvx5vW6MlXfTpLonzBrqQ57u5cHL3JGldCwSp7tBsJyQB j35aimCtHRliXqBrDR70UFDiThQuZb9D3Gdv4w6pnE6/0HfjIBfMz0h2d/+DRshu NsF07WbzXkfiruETMUjU+JRnJHJJeoTpzNhM8bSbkPs38Rj58Kl9VoTi6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUYmCtsqpSTC0wO1bkne0LCrw8dMB8GA1UdIwQY MBaAFMOFIBoztSfGRKrVrs03gsaowvUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzRVZ0dqTzFKOFpFcXRXdXpUZUN4cWpDOVI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82ZDY2M2EtNDUzOC00Y2JmLWFkMWYt ODU3NTgwZmM2MTY3LzEvdzRVZ0dqTzFKOFpFcXRXdXpUZUN4cWpDOVI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS82ZDY2M2EtNDUzOC00Y2JmLWFkMWYtODU3NTgwZmM2MTY3 LzEvdzRVZ0dqTzFKOFpFcXRXdXpUZUN4cWpDOVI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3zQhdBV QybR5v3Z0yEwXCF8xs3s9rm6bkJfhMhep+mQhgngymGnE0EX7/zqtLldW4ToupfI Wjjgue0nuntung++08kQMLiCdeNuWNbqi6x3dZ0AVmIgaGQhWjr50oGVwdp1/rpj TqYVFB7FZN/fiP8rGlDY1wqNU1Uvu/6liQN5E545ugZJRfmJYZBykcPqvquyPNHe gvPqucRVBOnIIXAkur6r0lbzbney0Ipn5c1WhGUdHYq9rdkgQEp40VlkLfubJCPt 7EwI7T2mKlNnjYFzAhZtlVcm19hwFy1wAuCmyym2AycsO966emb2j/1egCB5kwjR 7jSSTVlCegUB8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:00 2025 by rpki-client