This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft File: wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft (raw, json) Hash identifier: 3ezyFdrKszD+Euh4jf3YjM1M193rmWG9UGlqVB8osJI= Subject key identifier: 6E:F8:A0:F8:A8:94:49:4D:03:B3:CE:B1:86:B7:1A:97:F5:A7:39:9E Authority key identifier: C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0 Certificate issuer: /CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0 Certificate serial: 019AF31B2FE297F87607C0241DFE66DE9FF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft Manifest number: 08FB Signing time: Sat 06 Dec 2025 10:00:36 +0000 Manifest this update: Sat 06 Dec 2025 10:00:36 +0000 Manifest next update: Sun 07 Dec 2025 10:00:36 +0000 Files and hashes: 1: 1cyPcd2Vnsepj_sQsmBQuIKwJG4.roa (hash: T6hhaFtSwM402ZP8Qb9OKu3BkFQRH+gZ6KFIIvNDI0M=) 2: wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl (hash: h341zfScF6ICTIkirM+RwOYsK8HCFPpmNZS4XDnCJyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:2f:e2:97:f8:76:07:c0:24:1d:fe:66:de:9f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0 Validity Not Before: Dec 6 10:00:36 2025 GMT Not After : Dec 7 10:00:36 2025 GMT Subject: CN=6ef8a0f8a894494d03b3ceb186b71a97f5a7399e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:32:69:3c:a1:a2:df:43:11:7e:5b:64:27:bc: b6:5e:63:d5:00:f5:cb:72:50:7d:b2:d6:64:1d:5f: f2:e0:29:21:a5:fe:7d:8e:0d:5e:25:f3:06:d6:94: 63:ed:f9:c3:29:55:88:77:00:d7:86:39:53:c7:b2: 51:09:d3:ea:ad:e2:79:91:3d:3e:d3:23:78:eb:1c: d7:da:d6:26:ca:7e:79:52:1c:a8:fa:87:30:1b:87: 42:ff:4f:56:a7:27:ce:5f:c1:9d:0d:d3:49:cd:ca: bb:3a:24:28:29:66:9d:07:42:6e:a0:f5:9f:71:71: 59:fc:c4:3f:ba:1f:2a:32:62:61:7f:0b:f4:f3:fb: db:26:e4:c3:10:e6:2b:e7:1e:a1:ee:86:8b:b1:b5: c4:cb:9e:7e:26:a4:e3:f5:72:36:7c:b0:ad:bd:e4: 0e:e1:94:dd:bc:12:37:b9:de:17:cd:b1:8a:66:de: c7:0f:00:7b:9e:fa:96:4c:ef:6b:69:87:81:17:9c: b1:dd:72:1a:c0:38:cd:ac:e2:78:4d:f0:af:62:1f: d7:1a:fc:b7:c1:05:ee:73:8a:b4:da:cb:66:68:37: 6e:1b:5b:c9:71:66:28:8c:56:36:c7:09:2b:0d:14: 2b:ca:40:74:6c:c1:f8:80:c4:8e:08:9d:84:e0:2f: ee:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F8:A0:F8:A8:94:49:4D:03:B3:CE:B1:86:B7:1A:97:F5:A7:39:9E X509v3 Authority Key Identifier: keyid:C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:21:72:14:1d:2b:ca:7b:0d:63:4e:c5:2d:b3:39:06:dc:be: 2d:3c:ce:7e:fc:60:db:69:8c:a5:d4:65:3e:6d:89:1f:79:1d: e0:e9:bc:ed:fa:43:3d:b6:73:62:11:3e:6c:d4:b5:d2:18:86: f9:cb:e8:85:af:ff:3e:2e:27:1b:44:05:0d:a6:3f:03:72:7c: d2:e9:f6:3b:e3:9b:cb:4b:67:d5:b4:72:09:f1:27:87:eb:a3: 17:5e:4d:cf:c9:9e:79:09:4b:aa:be:bb:dc:f5:27:4f:a8:91: f8:f6:35:cd:f3:42:28:8c:b2:9d:d5:ec:f5:17:f0:72:1c:5d: d7:c2:2e:c4:fc:cf:16:33:8a:0c:82:44:db:55:e7:fd:a0:83: b1:73:f1:48:07:73:ce:ae:d9:4f:6c:ac:e4:08:d6:fa:4a:ff: e0:0e:9e:e6:3d:cf:b9:10:cc:a4:4e:8a:e1:52:be:50:c2:df: f5:52:43:3a:58:3d:9f:0b:3b:58:fe:81:d6:e6:0e:3e:7d:35: 49:26:0e:84:25:d4:90:cb:97:4e:36:f7:e7:28:3b:e7:8c:c8: 46:ef:78:6f:64:ec:0c:7c:2a:89:11:c5:93:10:3e:83:26:92: 5f:a9:d9:42:63:48:6a:1e:0f:55:1d:4c:c8:fe:09:2f:2e:db: 8c:bc:13:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGy/il/h2B8AkHf5m3p/yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZDRjZThlMzNmNzA4NGIwOGM0NWFhMTc3ZjJlMzNmNjkw ODE3YTAwHhcNMjUxMjA2MTAwMDM2WhcNMjUxMjA3MTAwMDM2WjAzMTEwLwYDVQQD Eyg2ZWY4YTBmOGE4OTQ0OTRkMDNiM2NlYjE4NmI3MWE5N2Y1YTczOTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjJpPKGi30MRfltkJ7y2XmPVAPXL clB9stZkHV/y4Ckhpf59jg1eJfMG1pRj7fnDKVWIdwDXhjlTx7JRCdPqreJ5kT0+ 0yN46xzX2tYmyn55Uhyo+ocwG4dC/09WpyfOX8GdDdNJzcq7OiQoKWadB0JuoPWf cXFZ/MQ/uh8qMmJhfwv08/vbJuTDEOYr5x6h7oaLsbXEy55+JqTj9XI2fLCtveQO 4ZTdvBI3ud4XzbGKZt7HDwB7nvqWTO9raYeBF5yx3XIawDjNrOJ4TfCvYh/XGvy3 wQXuc4q02stmaDduG1vJcWYojFY2xwkrDRQrykB0bMH4gMSOCJ2E4C/u4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG74oPiolElNA7POsYa3Gpf1pzmeMB8GA1UdIwQY MBaAFMHUzo4z9whLCMRaoXfy4z9pCBegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kMTk3ZDMtNTNjNS00ZWQxLTk4NzMt YzQ1YjI4YWFiYzFhLzEvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9kMTk3ZDMtNTNjNS00ZWQxLTk4NzMtYzQ1YjI4YWFiYzFh LzEvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYiFyFB0r ynsNY07FLbM5Bty+LTzOfvxg22mMpdRlPm2JH3kd4Om87fpDPbZzYhE+bNS10hiG +cvoha//Pi4nG0QFDaY/A3J80un2O+Oby0tn1bRyCfEnh+ujF15Nz8meeQlLqr67 3PUnT6iR+PY1zfNCKIyyndXs9Rfwchxd18IuxPzPFjOKDIJE21Xn/aCDsXPxSAdz zq7ZT2ys5AjW+kr/4A6e5j3PuRDMpE6K4VK+UMLf9VJDOlg9nws7WP6B1uYOPn01 SSYOhCXUkMuXTjb35yg754zIRu94b2TsDHwqiRHFkxA+gyaSX6nZQmNIah4PVR1M yP4JLy7bjLwTIA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:36:34 2025 by rpki-client