This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft File: wBV0y54ONb-XVO-RdQFLx0YAjw4.mft (raw, json) Hash identifier: bjO7cvOt4wPXmGyWjsA7Rgcdd6mBHE8H2WUP1yiblj0= Subject key identifier: 5C:92:D6:91:89:DB:9B:C5:6D:83:D3:D8:9E:FC:B1:F4:C7:E1:4E:2A Authority key identifier: C0:15:74:CB:9E:0E:35:BF:97:54:EF:91:75:01:4B:C7:46:00:8F:0E Certificate issuer: /CN=c01574cb9e0e35bf9754ef9175014bc746008f0e Certificate serial: 019AF163FA30E92605E4BE24CE3C771CDD8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft Manifest number: 0423 Signing time: Sat 06 Dec 2025 02:00:52 +0000 Manifest this update: Sat 06 Dec 2025 02:00:52 +0000 Manifest next update: Sun 07 Dec 2025 02:00:52 +0000 Files and hashes: 1: nEKK32oFQy3X2Yzvdv8fEhGcazg.roa (hash: LMYqTrguswdi0QtX9F4iCp/SyY8hGayYOolliB1rgCg=) 2: wBV0y54ONb-XVO-RdQFLx0YAjw4.crl (hash: rLnD9JxgiVHFzukMqTqNk9WPkGJhaBoST+l2NIlGxIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:fa:30:e9:26:05:e4:be:24:ce:3c:77:1c:dd:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c01574cb9e0e35bf9754ef9175014bc746008f0e Validity Not Before: Dec 6 02:00:52 2025 GMT Not After : Dec 7 02:00:52 2025 GMT Subject: CN=5c92d69189db9bc56d83d3d89efcb1f4c7e14e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0e:cd:be:06:4e:f9:29:09:6d:87:d7:c3:14: ee:56:c2:3d:75:1b:32:3a:46:24:c0:0b:83:15:b8: 22:61:a4:c3:36:b3:5b:df:f6:a9:d1:14:27:c1:e1: 64:04:37:c5:98:2c:07:a2:cd:be:b1:2f:ed:8d:65: f5:90:ad:36:80:62:95:00:9d:a6:3f:d1:5e:d0:29: 25:9d:95:de:a3:52:c5:d9:9a:a7:9b:02:a2:51:4a: c0:29:c7:83:b2:90:8b:9d:6e:c9:4f:a4:a0:7f:14: cd:3f:0b:49:11:2f:6e:8f:69:f3:8b:da:49:13:ca: 2f:9c:bd:8d:49:3e:2e:1b:fd:3e:29:8c:7c:ea:8e: 7b:81:7e:43:26:32:49:85:ce:09:c7:8d:ca:28:4d: 8e:ef:0d:01:41:25:63:32:e1:4f:ac:35:96:bb:cb: 17:16:da:15:c1:07:dc:29:a9:c5:6a:8b:11:dc:a8: c2:8c:ff:0e:4b:fb:eb:68:7e:18:25:d0:79:b1:f1: 0a:ae:69:c7:8a:34:1c:0f:56:1c:c3:85:27:1c:e8: c5:b4:1b:77:d4:c6:8f:e9:27:d4:e5:d9:4d:9c:a3: 6e:f9:5a:5b:08:1c:ec:d5:d8:81:df:15:ad:c4:99: c9:77:b7:4b:be:b6:b7:78:a8:56:53:d7:7d:bf:36: 78:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:92:D6:91:89:DB:9B:C5:6D:83:D3:D8:9E:FC:B1:F4:C7:E1:4E:2A X509v3 Authority Key Identifier: keyid:C0:15:74:CB:9E:0E:35:BF:97:54:EF:91:75:01:4B:C7:46:00:8F:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:c6:82:78:34:f3:d2:ff:f1:01:2d:c3:a6:e0:01:6c:90:20: a6:c4:0b:ec:5e:1d:a6:a5:30:dd:db:d0:df:c6:25:53:6c:0f: 8c:8b:c4:cc:7b:45:cd:e6:76:cc:69:5a:d5:1d:2a:8b:2a:f0: 7f:78:75:4f:af:0c:0c:84:7b:af:d5:b1:a9:22:01:18:3c:41: 1b:4a:d7:34:04:ff:2b:dd:9a:bf:02:a7:a6:d4:66:d6:f0:57: c0:b3:91:30:4d:70:29:08:05:d1:4d:3e:7f:51:ff:ee:ee:38: e9:c9:1d:a5:27:3a:4a:b8:67:65:90:3b:4d:56:84:23:df:4d: b2:3c:4f:cc:68:6e:c0:34:7a:d2:43:97:d3:f9:8a:09:9b:43: 2d:ff:f3:17:8f:1e:94:cd:0e:5e:29:0e:e8:65:69:1e:a3:b0: 03:b4:c9:e0:68:85:fa:e4:c3:85:bc:79:73:d9:4a:79:46:54: 65:b8:29:68:ce:c5:df:e2:2d:82:b6:ec:bb:0e:f3:26:5f:be: 6f:69:ad:ce:ce:70:57:9c:29:76:17:cb:c0:54:86:6f:71:2a: d9:29:5f:97:0a:02:6b:1b:a8:e5:38:5a:b6:b8:03:39:18:a7: 20:7c:e8:d1:3b:69:e6:88:ea:67:26:28:8e:3d:25:c4:52:c4: 55:10:b4:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/ow6SYF5L4kzjx3HN2MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTU3NGNiOWUwZTM1YmY5NzU0ZWY5MTc1MDE0YmM3NDYw MDhmMGUwHhcNMjUxMjA2MDIwMDUyWhcNMjUxMjA3MDIwMDUyWjAzMTEwLwYDVQQD Eyg1YzkyZDY5MTg5ZGI5YmM1NmQ4M2QzZDg5ZWZjYjFmNGM3ZTE0ZTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyA7NvgZO+SkJbYfXwxTuVsI9dRsy OkYkwAuDFbgiYaTDNrNb3/ap0RQnweFkBDfFmCwHos2+sS/tjWX1kK02gGKVAJ2m P9Fe0CklnZXeo1LF2ZqnmwKiUUrAKceDspCLnW7JT6SgfxTNPwtJES9uj2nzi9pJ E8ovnL2NST4uG/0+KYx86o57gX5DJjJJhc4Jx43KKE2O7w0BQSVjMuFPrDWWu8sX FtoVwQfcKanFaosR3KjCjP8OS/vraH4YJdB5sfEKrmnHijQcD1Ycw4UnHOjFtBt3 1MaP6SfU5dlNnKNu+VpbCBzs1diB3xWtxJnJd7dLvra3eKhWU9d9vzZ4bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyS1pGJ25vFbYPT2J78sfTH4U4qMB8GA1UdIwQY MBaAFMAVdMueDjW/l1TvkXUBS8dGAI8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0JWMHk1NE9OYi1YVk8tUmRRRkx4MFlBanc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zOTY4OTAtZTk2Yy00ZDFmLTkzNmMt OGZlZTdlYzdjM2NkLzEvd0JWMHk1NE9OYi1YVk8tUmRRRkx4MFlBanc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8zOTY4OTAtZTk2Yy00ZDFmLTkzNmMtOGZlZTdlYzdjM2Nk LzEvd0JWMHk1NE9OYi1YVk8tUmRRRkx4MFlBanc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssaCeDTz 0v/xAS3DpuABbJAgpsQL7F4dpqUw3dvQ38YlU2wPjIvEzHtFzeZ2zGla1R0qiyrw f3h1T68MDIR7r9WxqSIBGDxBG0rXNAT/K92avwKnptRm1vBXwLORME1wKQgF0U0+ f1H/7u446ckdpSc6SrhnZZA7TVaEI99NsjxPzGhuwDR60kOX0/mKCZtDLf/zF48e lM0OXikO6GVpHqOwA7TJ4GiF+uTDhbx5c9lKeUZUZbgpaM7F3+Itgrbsuw7zJl++ b2mtzs5wV5wpdhfLwFSGb3Eq2SlflwoCaxuo5ThatrgDORinIHzo0Ttp5ojqZyYo jj0lxFLEVRC01w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:43 2025 by rpki-client