This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft File: W8mmyFynpWV7noroCGXRLvgWagM.mft (raw, json) Hash identifier: Ej7O/x9AE+XR0zJQt+lAVJaF8avP6Rw+1+X6A7r9BOQ= Subject key identifier: 2B:C9:68:26:C5:43:43:67:18:DF:F6:0C:51:AF:D7:C7:C2:04:FC:23 Authority key identifier: 5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03 Certificate issuer: /CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03 Certificate serial: 019AF5AF28D3B13CD0A62E95A58D493976FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft Manifest number: 0DAA Signing time: Sat 06 Dec 2025 22:01:28 +0000 Manifest this update: Sat 06 Dec 2025 22:01:28 +0000 Manifest next update: Sun 07 Dec 2025 22:01:28 +0000 Files and hashes: 1: DkAig3sreL5BEr4m7B4017Dqunc.roa (hash: os6hbiNRGL8Q/b1fbO8kbiQWOa/7AJzjZXaqV/37DEw=) 2: W8mmyFynpWV7noroCGXRLvgWagM.crl (hash: rVn2y0Gcnx0m3b0gUBBY32YnrXt4Yq9/sssOug/QCig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:28:d3:b1:3c:d0:a6:2e:95:a5:8d:49:39:76:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03 Validity Not Before: Dec 6 22:01:28 2025 GMT Not After : Dec 7 22:01:28 2025 GMT Subject: CN=2bc96826c543436718dff60c51afd7c7c204fc23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:48:0a:66:65:90:81:80:72:4f:73:db:41:61: 7d:5e:d9:e9:4f:5d:7a:04:3c:a9:e1:4e:90:54:b3: 67:3a:b8:1f:06:b4:f2:50:93:2d:c5:56:41:23:b7: 8e:16:29:fe:d1:9d:b3:d0:ad:a9:c1:9c:71:25:25: c5:27:97:14:ac:81:a7:19:33:ab:fb:27:bb:32:df: 74:c8:1c:3d:29:30:5e:12:1c:ba:c5:81:38:31:42: fd:c7:82:fb:f8:18:28:d5:2a:69:06:eb:0f:b1:44: d4:89:25:c7:fd:6f:49:88:cd:27:7f:43:b7:fb:85: e4:3e:86:08:73:8a:8c:75:b6:a1:f2:a7:f1:22:46: f5:b1:c4:35:42:78:28:3f:72:96:26:7e:44:c6:c0: a1:0c:a0:1e:25:27:44:a8:8e:b9:68:09:94:af:b1: 42:8d:60:f5:c4:88:c4:03:09:3a:79:cf:61:18:dc: 3b:5c:49:9d:7d:8e:bb:0e:50:01:d5:c9:ba:52:16: 19:ee:2c:63:e9:cd:1e:a4:dd:bf:af:ab:94:a3:fa: cf:97:a1:80:e4:96:61:93:be:26:64:bb:77:72:25: 5e:57:51:1f:75:9c:b3:8a:d1:2f:08:24:c3:ba:d1: 17:96:55:71:d4:b6:f7:e0:82:76:fd:6f:df:1a:fb: 1f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C9:68:26:C5:43:43:67:18:DF:F6:0C:51:AF:D7:C7:C2:04:FC:23 X509v3 Authority Key Identifier: keyid:5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:55:8a:0c:f9:d4:0a:aa:20:d8:dd:09:6e:97:53:3f:30:2e: 62:a5:26:a7:cc:1a:d2:1c:9b:f9:a3:16:9d:4e:ef:24:0b:b2: 87:71:c0:04:24:a7:bc:6a:f9:d3:02:e4:30:9c:ea:3d:1c:19: 49:f7:92:16:9f:8b:86:05:f6:e5:4d:37:95:0c:bb:5f:b4:df: 42:88:3c:f9:e9:2d:90:64:0c:32:29:22:ce:0a:60:d7:10:a1: 96:84:d7:e6:83:73:38:e9:e0:d8:55:cd:c7:c0:b4:23:71:3a: 03:99:8c:42:34:26:02:11:f7:14:a5:31:8c:96:89:35:69:9d: fe:7f:6b:3d:a6:fa:0f:80:ac:d0:d7:15:9b:d3:bd:60:c3:25: c7:f1:4d:bd:7a:a3:54:59:80:fa:72:bb:27:14:f6:01:9a:95: 44:fa:b8:fc:20:22:85:2f:d1:ed:51:aa:97:95:98:ba:ae:42: 94:33:a2:e5:d2:7e:93:3f:ab:5b:2b:26:b0:f0:7a:77:be:e9: 46:89:46:be:e3:96:82:74:dd:08:1c:18:84:15:76:de:27:9f: 74:29:08:ae:66:dc:7e:08:84:46:33:43:d2:aa:71:01:0d:aa: 69:91:d3:5b:23:0f:c7:55:16:b0:f5:57:8f:9c:46:20:09:d8: 46:6b:0e:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ryjTsTzQpi6VpY1JOXb/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViYzlhNmM4NWNhN2E1NjU3YjllOGFlODA4NjVkMTJlZjgx NjZhMDMwHhcNMjUxMjA2MjIwMTI4WhcNMjUxMjA3MjIwMTI4WjAzMTEwLwYDVQQD EygyYmM5NjgyNmM1NDM0MzY3MThkZmY2MGM1MWFmZDdjN2MyMDRmYzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40gKZmWQgYByT3PbQWF9XtnpT116 BDyp4U6QVLNnOrgfBrTyUJMtxVZBI7eOFin+0Z2z0K2pwZxxJSXFJ5cUrIGnGTOr +ye7Mt90yBw9KTBeEhy6xYE4MUL9x4L7+Bgo1SppBusPsUTUiSXH/W9JiM0nf0O3 +4XkPoYIc4qMdbah8qfxIkb1scQ1QngoP3KWJn5ExsChDKAeJSdEqI65aAmUr7FC jWD1xIjEAwk6ec9hGNw7XEmdfY67DlAB1cm6UhYZ7ixj6c0epN2/r6uUo/rPl6GA 5JZhk74mZLt3ciVeV1EfdZyzitEvCCTDutEXllVx1Lb34IJ2/W/fGvsfBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvJaCbFQ0NnGN/2DFGv18fCBPwjMB8GA1UdIwQY MBaAFFvJpshcp6Vle56K6Ahl0S74FmoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzhtbXlGeW5wV1Y3bm9yb0NHWFJMdmdXYWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS82NTU1ZTMtODJmNi00NmNhLWExNzAt NDhmNzdlZTg1YWI5LzEvVzhtbXlGeW5wV1Y3bm9yb0NHWFJMdmdXYWdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS82NTU1ZTMtODJmNi00NmNhLWExNzAtNDhmNzdlZTg1YWI5 LzEvVzhtbXlGeW5wV1Y3bm9yb0NHWFJMdmdXYWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1WKDPnU Cqog2N0JbpdTPzAuYqUmp8wa0hyb+aMWnU7vJAuyh3HABCSnvGr50wLkMJzqPRwZ SfeSFp+LhgX25U03lQy7X7TfQog8+ektkGQMMikizgpg1xChloTX5oNzOOng2FXN x8C0I3E6A5mMQjQmAhH3FKUxjJaJNWmd/n9rPab6D4Cs0NcVm9O9YMMlx/FNvXqj VFmA+nK7JxT2AZqVRPq4/CAihS/R7VGql5WYuq5ClDOi5dJ+kz+rWysmsPB6d77p RolGvuOWgnTdCBwYhBV23iefdCkIrmbcfgiERjND0qpxAQ2qaZHTWyMPx1UWsPVX j5xGIAnYRmsOOg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:44:51 2025 by rpki-client