This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft File: pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft (raw, json) Hash identifier: rb3To8E1AjYEzFV2ARbSTw7+B5Hd5jy4/nv5NbT9v8A= Subject key identifier: BF:B9:D5:99:1D:C4:0D:68:D9:97:6A:E9:CF:83:47:1A:ED:45:05:7F Authority key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C Certificate issuer: /CN=a561ccb03741056715a6be4805321662d88e7e7c Certificate serial: 019AF12D342112C6CA65E372B42D9E20AB7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft Manifest number: 098A Signing time: Sat 06 Dec 2025 01:01:02 +0000 Manifest this update: Sat 06 Dec 2025 01:01:02 +0000 Manifest next update: Sun 07 Dec 2025 01:01:02 +0000 Files and hashes: 1: Ht6Wd5Bw2md9CUATtRL2VX-XFlc.roa (hash: 6oTLBNPocrrlaUNBq/IOSo88GlYRhWvOfw5kea2nyRc=) 2: ZrGtCqKCK6D0hI3hPtXzoUeoPWc.roa (hash: 2oHhvMXHLj14EEFTSzUZ5GuRtYtjQRNwBSzyWSxhAWE=) 3: pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl (hash: HiiluGnVr/h8aJlQ7ycl5zMlOu89tB7AsuW3cT6k2rw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:34:21:12:c6:ca:65:e3:72:b4:2d:9e:20:ab:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a561ccb03741056715a6be4805321662d88e7e7c Validity Not Before: Dec 6 01:01:02 2025 GMT Not After : Dec 7 01:01:02 2025 GMT Subject: CN=bfb9d5991dc40d68d9976ae9cf83471aed45057f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:d9:f0:7a:72:f6:df:79:89:db:83:56:ae: 8e:7d:1f:d4:b1:7a:78:93:96:7b:84:cf:4a:0a:ee: 50:b9:3c:2d:09:f2:eb:55:3b:f3:38:9d:90:65:ff: 0a:01:ca:c9:34:d6:31:6a:3c:a9:cd:b4:d8:00:7d: 68:ac:12:66:0a:b2:d9:46:25:a2:5c:f1:9b:ca:5c: 04:d5:7a:57:64:f9:41:2e:1c:29:fd:d4:9d:8a:76: 18:5e:f4:a5:3e:21:bd:8f:da:6d:70:05:e6:ca:58: 95:06:38:df:74:d7:bd:6d:a8:b5:eb:b9:b7:c5:e1: a7:1e:b3:bd:57:6d:70:44:16:aa:00:ee:5f:fb:d0: 9b:a1:7e:8b:f1:da:e6:84:5b:b9:74:83:48:48:b9: 1b:e3:76:9b:84:37:1a:58:80:cf:a5:4c:e6:fb:23: 24:35:fb:f7:ea:66:29:aa:74:f6:b0:e1:5b:59:16: 81:45:2b:ec:55:f9:8a:e0:0e:a2:de:f3:7d:57:e1: 2f:55:1c:19:94:51:87:fa:be:21:54:cb:fd:e8:30: 51:af:97:95:38:43:35:9b:34:53:fd:3b:fd:cd:fa: 76:a9:5c:09:1f:13:b1:cb:ee:5d:55:56:42:75:6a: 0a:0f:bb:d9:a8:03:43:67:92:ef:13:8c:48:4e:9a: 11:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B9:D5:99:1D:C4:0D:68:D9:97:6A:E9:CF:83:47:1A:ED:45:05:7F X509v3 Authority Key Identifier: keyid:A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:d6:f7:ad:37:8d:4b:23:d8:b0:81:e3:7a:ac:f4:ff:77:6a: ff:f4:16:bf:91:e7:1f:fc:a8:6c:89:4c:a1:68:94:6d:bc:ca: d2:b0:06:2a:cf:ec:47:f6:ea:8d:a1:a9:e6:d9:c2:b1:c8:f7: 66:32:2d:2a:d1:19:1e:86:d8:77:f7:bc:db:f3:c0:87:6d:b4: 2b:54:19:6f:07:fb:82:ec:6d:d9:73:17:e6:e4:cb:e0:08:a3: 9a:08:6a:43:1c:45:e8:e0:49:d5:cb:17:95:bf:9d:a5:ac:13: 7f:76:d1:82:1c:09:01:ed:39:a4:d4:61:45:ed:4c:ab:7c:77: 00:83:1b:83:f7:ce:f8:fa:2c:85:1d:fd:71:6b:31:8c:10:5f: 76:90:18:9f:77:b3:60:c1:f0:a8:72:37:8d:6a:d4:79:89:8c: 59:9a:e9:58:40:82:67:a3:cd:cd:69:5a:43:13:ae:66:16:7f: 6c:b3:f5:5d:c0:f8:eb:44:21:69:33:b1:d9:4d:a3:9d:db:eb: 18:e6:0a:6d:fc:9d:81:14:60:7e:15:ee:d3:27:48:8c:8c:f7: a3:9f:b7:81:04:9f:38:14:4f:5f:cb:a0:58:59:13:5b:18:03: 7d:33:e9:97:3e:16:ff:87:11:7c:ee:44:1e:a6:0a:33:d9:34: ec:ef:b2:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTQhEsbKZeNytC2eIKt7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NjFjY2IwMzc0MTA1NjcxNWE2YmU0ODA1MzIxNjYyZDg4 ZTdlN2MwHhcNMjUxMjA2MDEwMTAyWhcNMjUxMjA3MDEwMTAyWjAzMTEwLwYDVQQD EyhiZmI5ZDU5OTFkYzQwZDY4ZDk5NzZhZTljZjgzNDcxYWVkNDUwNTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpnZ8Hpy9t95iduDVq6OfR/UsXp4 k5Z7hM9KCu5QuTwtCfLrVTvzOJ2QZf8KAcrJNNYxajypzbTYAH1orBJmCrLZRiWi XPGbylwE1XpXZPlBLhwp/dSdinYYXvSlPiG9j9ptcAXmyliVBjjfdNe9bai167m3 xeGnHrO9V21wRBaqAO5f+9CboX6L8drmhFu5dINISLkb43abhDcaWIDPpUzm+yMk Nfv36mYpqnT2sOFbWRaBRSvsVfmK4A6i3vN9V+EvVRwZlFGH+r4hVMv96DBRr5eV OEM1mzRT/Tv9zfp2qVwJHxOxy+5dVVZCdWoKD7vZqANDZ5LvE4xITpoR0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+51ZkdxA1o2Zdq6c+DRxrtRQV/MB8GA1UdIwQY MBaAFKVhzLA3QQVnFaa+SAUyFmLYjn58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YmM3ZmEtMDQ2Mi00Y2Y2LTkxODkt YWU0ZTY5ODY2NGYxLzEvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC80YmM3ZmEtMDQ2Mi00Y2Y2LTkxODktYWU0ZTY5ODY2NGYx LzEvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtb3rTeN SyPYsIHjeqz0/3dq//QWv5HnH/yobIlMoWiUbbzK0rAGKs/sR/bqjaGp5tnCscj3 ZjItKtEZHobYd/e82/PAh220K1QZbwf7guxt2XMX5uTL4AijmghqQxxF6OBJ1csX lb+dpawTf3bRghwJAe05pNRhRe1Mq3x3AIMbg/fO+PoshR39cWsxjBBfdpAYn3ez YMHwqHI3jWrUeYmMWZrpWECCZ6PNzWlaQxOuZhZ/bLP1XcD460QhaTOx2U2jndvr GOYKbfydgRRgfhXu0ydIjIz3o5+3gQSfOBRPX8ugWFkTWxgDfTPplz4W/4cRfO5E HqYKM9k07O+yEg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:02 2025 by rpki-client