This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft File: w_sAsiDqeEoEaDBU_L9OS0ietCA.mft (raw, json) Hash identifier: K4LtjXih0b9r9xBeA/iKH3YESCg+Nuym6D5V/LACaoU= Subject key identifier: 73:48:F9:EE:48:86:07:B3:BD:85:7B:19:C6:C2:7D:2C:C2:25:67:AE Authority key identifier: C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20 Certificate issuer: /CN=c3fb00b220ea784a04683054fcbf4e4b489eb420 Certificate serial: 019AF19ADB00827D7779B79A704383C2911D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft Manifest number: 0B20 Signing time: Sat 06 Dec 2025 03:00:48 +0000 Manifest this update: Sat 06 Dec 2025 03:00:48 +0000 Manifest next update: Sun 07 Dec 2025 03:00:48 +0000 Files and hashes: 1: JXn11nJ90d5TiYF9GBYXGMgzBVU.roa (hash: xKanBKZfDLhsfcdAIiMFoN3EiNJRNn6FGvW7wSns+Xk=) 2: w_sAsiDqeEoEaDBU_L9OS0ietCA.crl (hash: YiLje6lP5AdxVL694sJXnMPa/SjC4mwZQUdMrhW84MA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:db:00:82:7d:77:79:b7:9a:70:43:83:c2:91:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3fb00b220ea784a04683054fcbf4e4b489eb420 Validity Not Before: Dec 6 03:00:48 2025 GMT Not After : Dec 7 03:00:48 2025 GMT Subject: CN=7348f9ee488607b3bd857b19c6c27d2cc22567ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9c:87:79:4c:23:11:c6:2c:5d:00:3b:d6:82: d8:c6:6b:3f:59:d7:f8:16:af:0c:de:c5:68:17:6c: e9:bf:11:af:ac:f4:48:f5:cb:0d:b2:ff:4a:55:c7: 10:71:27:40:93:81:ec:d6:d0:93:bd:08:5b:d7:dd: c0:6d:eb:73:f7:c3:36:a1:f3:75:37:84:6c:42:2f: fc:8f:76:98:2f:98:76:6b:65:6a:ca:d5:43:df:1d: 3c:fe:03:35:b5:21:c5:72:40:20:88:de:8d:61:bc: 2f:a3:15:49:70:df:d9:7e:b1:2c:29:c7:a9:f8:6c: e7:b4:e9:55:f5:60:6b:a9:0f:2d:ca:af:ba:fc:51: 23:e6:52:82:9c:30:8f:4d:b6:90:1c:25:29:0f:38: e1:d2:b1:58:f5:7a:43:af:f8:1d:0c:14:8d:f5:e7: 33:1a:8a:c7:e6:c4:e5:4f:f2:7b:0b:16:b3:cc:73: a6:e7:6f:d7:52:ee:0f:cb:83:71:3a:7e:57:50:0e: 9d:37:2f:dc:14:f3:57:1c:d4:53:59:ac:85:9a:90: b1:69:b9:f3:fe:ff:e3:ba:4b:32:ba:bc:4b:4a:4b: fd:bb:01:87:fd:e2:b3:92:46:ef:de:27:f5:72:27: fc:b4:4a:8a:cc:3c:0c:14:1a:7e:83:96:df:90:71: b2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:48:F9:EE:48:86:07:B3:BD:85:7B:19:C6:C2:7D:2C:C2:25:67:AE X509v3 Authority Key Identifier: keyid:C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:8c:88:3b:89:ed:c1:eb:47:42:ed:d6:15:35:dd:f4:b0:e0: e3:17:ec:50:b2:f8:a2:f5:5c:3c:e9:48:4e:d9:3c:c5:83:b0: 9a:d7:8a:a1:10:88:0e:ed:82:75:0a:48:a2:4f:bf:21:fa:9f: df:1f:58:13:cb:ad:60:26:16:d6:92:22:fe:bf:80:bf:a9:1a: bb:10:a8:1c:b4:e3:53:c0:a5:7a:1f:ba:40:4a:ce:f4:19:0d: a8:16:3f:b5:d1:64:82:85:ee:18:f8:cd:bc:06:a3:62:e6:a4: 10:c3:f6:f5:c9:1a:15:2a:02:8c:79:91:57:e3:55:99:ce:9d: 09:49:eb:78:5f:38:d8:d0:de:52:7a:43:d1:49:d0:d7:3b:90: 66:1c:81:96:1d:ff:75:9f:08:88:39:15:31:d2:b4:86:a5:53: e8:01:1b:9c:a0:4e:e1:df:de:fa:3a:06:ce:15:66:86:fa:10: 4c:e6:f4:71:87:5a:d5:8d:87:f6:9d:fd:ab:20:ce:00:1e:b6: f0:96:45:09:de:4d:d4:e5:ce:95:19:e5:32:9d:26:53:3a:1d: e2:38:0a:bd:3b:94:71:9b:0d:e4:8e:21:02:50:90:86:d0:61: e1:c5:50:1c:03:4b:41:3a:a7:a0:b7:33:2a:50:e9:16:7a:0d: 14:44:c4:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtsAgn13ebeacEODwpEdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZmIwMGIyMjBlYTc4NGEwNDY4MzA1NGZjYmY0ZTRiNDg5 ZWI0MjAwHhcNMjUxMjA2MDMwMDQ4WhcNMjUxMjA3MDMwMDQ4WjAzMTEwLwYDVQQD Eyg3MzQ4ZjllZTQ4ODYwN2IzYmQ4NTdiMTljNmMyN2QyY2MyMjU2N2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZyHeUwjEcYsXQA71oLYxms/Wdf4 Fq8M3sVoF2zpvxGvrPRI9csNsv9KVccQcSdAk4Hs1tCTvQhb193Abetz98M2ofN1 N4RsQi/8j3aYL5h2a2VqytVD3x08/gM1tSHFckAgiN6NYbwvoxVJcN/ZfrEsKcep +GzntOlV9WBrqQ8tyq+6/FEj5lKCnDCPTbaQHCUpDzjh0rFY9XpDr/gdDBSN9ecz GorH5sTlT/J7CxazzHOm52/XUu4Py4NxOn5XUA6dNy/cFPNXHNRTWayFmpCxabnz /v/juksyurxLSkv9uwGH/eKzkkbv3if1cif8tEqKzDwMFBp+g5bfkHGyHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNI+e5IhgezvYV7GcbCfSzCJWeuMB8GA1UdIwQY MBaAFMP7ALIg6nhKBGgwVPy/TktInrQgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd19zQXNpRHFlRW9FYURCVV9MOU9TMGlldENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yMTAyMTEtZmZlYS00N2VlLTg5YmEt NmNjY2JhOTk3NGVjLzEvd19zQXNpRHFlRW9FYURCVV9MOU9TMGlldENBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8yMTAyMTEtZmZlYS00N2VlLTg5YmEtNmNjY2JhOTk3NGVj LzEvd19zQXNpRHFlRW9FYURCVV9MOU9TMGlldENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYyIO4nt wetHQu3WFTXd9LDg4xfsULL4ovVcPOlITtk8xYOwmteKoRCIDu2CdQpIok+/Ifqf 3x9YE8utYCYW1pIi/r+Av6kauxCoHLTjU8Cleh+6QErO9BkNqBY/tdFkgoXuGPjN vAajYuakEMP29ckaFSoCjHmRV+NVmc6dCUnreF842NDeUnpD0UnQ1zuQZhyBlh3/ dZ8IiDkVMdK0hqVT6AEbnKBO4d/e+joGzhVmhvoQTOb0cYda1Y2H9p39qyDOAB62 8JZFCd5N1OXOlRnlMp0mUzod4jgKvTuUcZsN5I4hAlCQhtBh4cVQHANLQTqnoLcz KlDpFnoNFETELw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:29:08 2025 by rpki-client