This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft File: mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft (raw, json) Hash identifier: ezLP4cF3jBbzT0aZnYGY6bi9SQ/r0odzbENzwf5YNWk= Subject key identifier: 6F:44:FB:C6:7A:BB:5E:8E:F6:A8:25:06:57:A5:37:90:B2:A7:06:76 Authority key identifier: 99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27 Certificate issuer: /CN=996f903f91a85a60c546ee1141348cc3c8036927 Certificate serial: 019AF23FB1AC9D29401656A9EF6019F38B79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft Manifest number: 13F4 Signing time: Sat 06 Dec 2025 06:00:51 +0000 Manifest this update: Sat 06 Dec 2025 06:00:51 +0000 Manifest next update: Sun 07 Dec 2025 06:00:51 +0000 Files and hashes: 1: mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl (hash: ZfASKXJxtHICznV/YpndQGpNNsNZgGEvsAmCk8g/ssE=) 2: oGPLcgnT5_jMQFeXtQh3bXaXriM.roa (hash: QUvCaj08Q2TK+WnTDqsu5pyPq9XzMOcObz9WAotvcYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b1:ac:9d:29:40:16:56:a9:ef:60:19:f3:8b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=996f903f91a85a60c546ee1141348cc3c8036927 Validity Not Before: Dec 6 06:00:51 2025 GMT Not After : Dec 7 06:00:51 2025 GMT Subject: CN=6f44fbc67abb5e8ef6a8250657a53790b2a70676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:28:5d:98:e1:5b:98:4e:63:77:fd:73:9e: 6e:a0:94:ed:9d:6b:3c:65:b3:d3:f4:49:8f:21:ef: 4f:8e:c0:69:74:c3:41:52:0e:17:a8:22:bc:c7:60: 1f:f5:52:36:e7:23:a8:7a:bc:d6:bb:97:f6:fb:20: 7f:82:d5:03:84:e0:6b:21:b8:dc:e5:27:65:24:e7: af:bc:4a:f7:ad:73:18:4c:6f:91:b9:33:dd:3e:2d: 2d:eb:16:22:2a:d8:57:01:c0:dd:57:e5:4b:cc:25: fd:09:a8:9c:c4:bd:b2:97:a1:31:7c:a3:47:73:93: 12:d9:c3:eb:3d:60:a8:3a:18:6c:94:63:3c:76:fc: 06:ed:30:20:63:33:45:34:ce:2a:ff:46:ff:1d:78: 3f:fb:2a:2f:df:ad:b7:d4:ad:48:1e:a2:38:e7:bc: 7c:dc:72:52:c1:9a:49:f5:ce:48:c4:a3:5d:b5:87: de:1d:47:7c:fa:ef:a9:1a:45:f8:b9:6e:90:3c:34: d1:7d:15:b5:42:c7:91:93:b7:72:f1:d7:cb:b7:60: 33:ad:72:bf:8b:6c:29:20:59:1b:cd:3c:2d:b2:94: aa:2c:f2:74:f2:47:5a:5d:0e:c9:58:87:28:dd:20: 03:60:da:4c:94:3c:34:e6:79:40:71:eb:20:64:94: d9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:44:FB:C6:7A:BB:5E:8E:F6:A8:25:06:57:A5:37:90:B2:A7:06:76 X509v3 Authority Key Identifier: keyid:99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:f7:3e:ad:22:73:9c:f1:73:85:b7:90:73:87:19:51:83:20: f3:7d:8f:24:31:42:2b:70:f6:83:80:97:97:5a:9f:51:4a:16: 06:54:6d:11:ed:9d:ca:d8:27:b6:fb:3b:93:a6:83:ba:20:16: d4:0b:71:c6:71:9e:7f:59:46:22:8c:be:0e:b8:d2:15:90:cd: 97:b5:f9:b9:26:b0:a5:24:8f:55:b6:7c:82:7e:5b:a3:bb:a3: e4:ed:88:29:41:0e:22:2a:ce:29:96:cb:92:e1:7c:51:85:58: dd:fc:88:c7:5a:98:52:1c:dc:d9:f7:02:9d:ec:51:78:47:d6: 0c:0c:47:ff:44:51:f3:0a:3d:9b:52:a4:23:6f:4c:75:8e:ec: 06:ff:0a:55:02:8c:6a:12:96:d5:e7:22:4a:a1:30:90:52:84: 33:17:b5:8d:b9:aa:f6:4c:76:f9:51:46:c5:b3:e7:8b:2e:a2: 07:3d:27:bf:b2:41:12:a3:ec:da:a2:21:07:d1:d7:e1:47:06: b8:b1:b9:58:0a:67:6d:99:32:4b:53:a6:37:85:ce:54:ff:1a: 52:55:e5:63:ea:35:64:cb:9b:8d:0c:37:16:f3:85:26:77:8c: e9:f5:5b:07:ac:49:be:67:ea:40:c2:c2:89:e4:fa:33:bc:01: f3:17:43:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7GsnSlAFlap72AZ84t5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NmY5MDNmOTFhODVhNjBjNTQ2ZWUxMTQxMzQ4Y2MzYzgw MzY5MjcwHhcNMjUxMjA2MDYwMDUxWhcNMjUxMjA3MDYwMDUxWjAzMTEwLwYDVQQD Eyg2ZjQ0ZmJjNjdhYmI1ZThlZjZhODI1MDY1N2E1Mzc5MGIyYTcwNjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaIoXZjhW5hOY3f9c55uoJTtnWs8 ZbPT9EmPIe9PjsBpdMNBUg4XqCK8x2Af9VI25yOoerzWu5f2+yB/gtUDhOBrIbjc 5SdlJOevvEr3rXMYTG+RuTPdPi0t6xYiKthXAcDdV+VLzCX9CaicxL2yl6ExfKNH c5MS2cPrPWCoOhhslGM8dvwG7TAgYzNFNM4q/0b/HXg/+yov36231K1IHqI457x8 3HJSwZpJ9c5IxKNdtYfeHUd8+u+pGkX4uW6QPDTRfRW1QseRk7dy8dfLt2AzrXK/ i2wpIFkbzTwtspSqLPJ08kdaXQ7JWIco3SADYNpMlDw05nlAcesgZJTZeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9E+8Z6u16O9qglBlelN5CypwZ2MB8GA1UdIwQY MBaAFJlvkD+RqFpgxUbuEUE0jMPIA2knMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVctUVA1R29XbURGUnU0UlFUU013OGdEYVNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMjAxMDEtMWM5Zi00NGM1LTgwNzct NTE5MGY3ODY5YTdmLzEvbVctUVA1R29XbURGUnU0UlFUU013OGdEYVNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9hMjAxMDEtMWM5Zi00NGM1LTgwNzctNTE5MGY3ODY5YTdm LzEvbVctUVA1R29XbURGUnU0UlFUU013OGdEYVNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPc+rSJz nPFzhbeQc4cZUYMg832PJDFCK3D2g4CXl1qfUUoWBlRtEe2dytgntvs7k6aDuiAW 1AtxxnGef1lGIoy+DrjSFZDNl7X5uSawpSSPVbZ8gn5bo7uj5O2IKUEOIirOKZbL kuF8UYVY3fyIx1qYUhzc2fcCnexReEfWDAxH/0RR8wo9m1KkI29MdY7sBv8KVQKM ahKW1eciSqEwkFKEMxe1jbmq9kx2+VFGxbPniy6iBz0nv7JBEqPs2qIhB9HX4UcG uLG5WApnbZkyS1OmN4XOVP8aUlXlY+o1ZMubjQw3FvOFJneM6fVbB6xJvmfqQMLC ieT6M7wB8xdDHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:39 2025 by rpki-client