This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft File: w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft (raw, json) Hash identifier: iUbqKOdURUm7a9xDww0miBXlVvXxFx9RtXO9EGZXSNs= Subject key identifier: 6D:CD:14:95:31:D7:0B:A4:F0:0D:ED:00:C5:CD:90:BB:64:9B:2C:DF Authority key identifier: C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2 Certificate issuer: /CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2 Certificate serial: 019AF088AE4FC5A4BC85CA8D897812C5799A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft Manifest number: 10B0 Signing time: Fri 05 Dec 2025 22:01:20 +0000 Manifest this update: Fri 05 Dec 2025 22:01:20 +0000 Manifest next update: Sat 06 Dec 2025 22:01:20 +0000 Files and hashes: 1: Xx4qE33JyRm22QhkLWfKDRWAGnk.roa (hash: VBDGbrM1tTGjVGL2Bxa5hAlgL/jyV9v4XsVJ8TB6uSs=) 2: eG2TuLX8aQVwCJ3-wzt6pkOEazU.roa (hash: I5NjIqWx/H03PJ2xIH/VMY1e8Yxikj5eCAeypnxIYcY=) 3: mHOne7l3lhdaqSro0d11vLE5d_4.roa (hash: 3sZoQqde77oR7zY/rsYSyM4QGdtUrSErY7LS0PKr8xo=) 4: w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl (hash: 6GM0mNuF6eIN6K89wrWrf1mNh6gJtSPlhvHvkV/aNgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:ae:4f:c5:a4:bc:85:ca:8d:89:78:12:c5:79:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2 Validity Not Before: Dec 5 22:01:20 2025 GMT Not After : Dec 6 22:01:20 2025 GMT Subject: CN=6dcd149531d70ba4f00ded00c5cd90bb649b2cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:50:84:3f:8b:ae:43:22:e2:ca:14:9f:6b:2c: c2:a1:61:5d:3c:ad:52:df:ab:d6:53:7c:a1:d9:45: 57:00:38:88:0b:27:4d:c1:54:a1:22:45:0a:3a:c0: 9f:65:2c:bf:26:6b:ea:9e:2f:8f:6f:4f:53:87:af: cb:46:84:22:98:1f:7f:aa:4c:9a:bb:b0:42:7b:b0: f7:a7:82:5c:07:c6:2b:4d:9b:0b:48:bc:ed:75:e2: cf:b5:32:fb:fd:ba:39:a2:79:5c:a8:8b:0b:d8:f8: ba:92:7d:c1:1c:c5:67:05:c1:d0:f3:66:5f:0e:5a: 73:0f:54:85:64:56:5e:e5:34:7a:56:e9:ca:de:e0: 8c:d1:93:41:79:eb:07:c4:a2:69:e8:1e:b6:2f:76: d0:79:20:58:58:b7:f3:49:79:25:30:8e:36:0e:b3: 33:b3:4d:f0:16:95:ac:11:d0:7f:98:32:23:33:17: 42:4a:89:9d:20:7f:25:4c:68:58:1f:56:00:30:0c: 69:3f:22:ce:58:e5:6a:66:c0:a3:c0:82:37:4e:49: 04:be:a1:20:65:af:b0:98:dc:da:72:2b:65:ef:bc: 28:94:09:69:b1:a0:7d:8a:3c:60:08:32:4d:8f:24: 97:5e:01:c1:b8:2a:86:47:c6:3b:4c:f7:31:b6:09: ce:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:CD:14:95:31:D7:0B:A4:F0:0D:ED:00:C5:CD:90:BB:64:9B:2C:DF X509v3 Authority Key Identifier: keyid:C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:66:ec:05:c4:a8:25:32:02:f0:25:45:67:5f:0a:04:18:48: cf:66:36:af:87:08:06:fa:56:53:07:fe:fc:75:9d:e7:cc:80: 84:e9:28:e0:14:73:86:4c:6f:d5:bc:53:28:49:09:f8:84:82: c2:72:9e:13:60:b8:15:ef:9f:e1:a9:5d:88:cf:d9:2a:7c:be: d9:d5:07:b4:fd:d5:9c:10:14:bb:4e:78:b8:a6:e7:17:39:fa: c8:45:eb:81:ec:26:27:18:75:35:cf:86:08:f4:a2:b9:c1:d1: 2c:86:1e:d3:85:44:f7:73:bd:ca:b6:b4:0a:36:c1:f5:ed:a2: 70:43:b7:df:57:1d:5d:ec:8a:2f:3c:2d:18:75:f8:07:19:0d: e2:fd:d4:2c:6c:f5:24:33:5d:65:cc:71:c2:28:1d:74:7d:19: 61:7d:b9:f0:84:9a:ff:41:a1:1b:2e:ba:d9:0a:16:56:f5:a0: 7c:c4:b2:b6:97:33:17:62:e5:12:d4:aa:7c:1f:26:66:81:6c: f6:6d:06:bd:2d:36:2a:5e:04:aa:eb:78:81:3d:47:da:b0:70: f4:62:62:3c:f6:9e:59:3a:18:70:a0:ca:09:51:ef:7d:42:03: fa:55:34:0b:62:a4:5a:dd:f1:ac:a9:94:28:c2:6d:02:77:68: 93:7c:20:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiK5PxaS8hcqNiXgSxXmaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYThlODY0OGUwYmEzNmEzMjNhYjlkZjYzNDFkNjY4YmRh NmI0ZDIwHhcNMjUxMjA1MjIwMTIwWhcNMjUxMjA2MjIwMTIwWjAzMTEwLwYDVQQD Eyg2ZGNkMTQ5NTMxZDcwYmE0ZjAwZGVkMDBjNWNkOTBiYjY0OWIyY2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFCEP4uuQyLiyhSfayzCoWFdPK1S 36vWU3yh2UVXADiICydNwVShIkUKOsCfZSy/Jmvqni+Pb09Th6/LRoQimB9/qkya u7BCe7D3p4JcB8YrTZsLSLztdeLPtTL7/bo5onlcqIsL2Pi6kn3BHMVnBcHQ82Zf DlpzD1SFZFZe5TR6VunK3uCM0ZNBeesHxKJp6B62L3bQeSBYWLfzSXklMI42DrMz s03wFpWsEdB/mDIjMxdCSomdIH8lTGhYH1YAMAxpPyLOWOVqZsCjwII3TkkEvqEg Za+wmNzacitl77wolAlpsaB9ijxgCDJNjySXXgHBuCqGR8Y7TPcxtgnO2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3NFJUx1wuk8A3tAMXNkLtkmyzfMB8GA1UdIwQY MBaAFMOo6GSOC6NqMjq532NB1mi9prTSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzZqb1pJNExvMm95T3JuZlkwSFdhTDJtdE5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81YTNkMjAtZWNhYS00MGVhLTlkYjIt ZDU5ODQ1ZmI5YjNkLzEvdzZqb1pJNExvMm95T3JuZlkwSFdhTDJtdE5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC81YTNkMjAtZWNhYS00MGVhLTlkYjItZDU5ODQ1ZmI5YjNk LzEvdzZqb1pJNExvMm95T3JuZlkwSFdhTDJtdE5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWbsBcSo JTIC8CVFZ18KBBhIz2Y2r4cIBvpWUwf+/HWd58yAhOko4BRzhkxv1bxTKEkJ+ISC wnKeE2C4Fe+f4aldiM/ZKny+2dUHtP3VnBAUu054uKbnFzn6yEXrgewmJxh1Nc+G CPSiucHRLIYe04VE93O9yra0CjbB9e2icEO331cdXeyKLzwtGHX4BxkN4v3ULGz1 JDNdZcxxwigddH0ZYX258ISa/0GhGy662QoWVvWgfMSytpczF2LlEtSqfB8mZoFs 9m0GvS02Kl4Equt4gT1H2rBw9GJiPPaeWToYcKDKCVHvfUID+lU0C2KkWt3xrKmU KMJtAndok3wgzA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:22 2025 by rpki-client