This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft File: weOkSujPAkPx3_4mhOPdWo_IXXk.mft (raw, json) Hash identifier: 3l3JTy6+fvmcQ66sKRGwNovLlRkJ5JYO+DBZJxVoIMk= Subject key identifier: 32:BE:71:A5:3D:F9:7B:B7:A5:CC:31:41:77:FA:16:6E:A3:A7:A0:20 Authority key identifier: C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79 Certificate issuer: /CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79 Certificate serial: 019AF208BFA7ACE1B42E0BEF43D7FFCA5298 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft Manifest number: 15D9 Signing time: Sat 06 Dec 2025 05:00:50 +0000 Manifest this update: Sat 06 Dec 2025 05:00:50 +0000 Manifest next update: Sun 07 Dec 2025 05:00:50 +0000 Files and hashes: 1: 8SCwalNOCtaX1GmWAS6VFuVHGa4.roa (hash: MCBdmn43q9v0IHNEMsKZZxueWeuhZImr9/xukqPZ3tY=) 2: weOkSujPAkPx3_4mhOPdWo_IXXk.crl (hash: UIeJnyR6uoehQgrzFW20J0+t9idlVFW4Xfx8rRiD4Vg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:bf:a7:ac:e1:b4:2e:0b:ef:43:d7:ff:ca:52:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79 Validity Not Before: Dec 6 05:00:50 2025 GMT Not After : Dec 7 05:00:50 2025 GMT Subject: CN=32be71a53df97bb7a5cc314177fa166ea3a7a020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:05:87:0b:34:f3:33:51:e5:a6:8f:c5:c1:dd: be:c4:c0:46:70:2d:83:1c:32:0b:18:4d:e2:63:aa: 14:1e:a9:21:61:1f:df:93:3f:0d:8d:11:3b:0a:35: 14:9c:4a:18:4b:91:0f:6a:3a:d4:24:b9:34:58:0c: 4a:11:97:f1:d0:bc:86:f1:b2:50:f6:7d:5c:d5:94: 7d:22:86:23:39:57:c7:1d:f0:77:5f:a7:28:25:b1: b6:5f:87:c6:b9:e9:16:7c:a4:8c:0d:30:12:fb:db: 4e:d3:2d:0c:1b:10:69:f3:83:29:8f:fa:2f:4a:92: b8:4d:48:d6:3c:5a:00:9e:8a:7c:0b:de:dc:77:d8: 97:d2:e9:47:96:16:45:12:20:af:4c:84:0a:d5:53: 79:8d:42:be:6c:54:d5:05:76:ff:52:af:80:56:a3: a8:06:8b:69:1d:bf:f5:48:4f:fc:1b:f4:3d:d1:eb: cb:f6:7e:1f:16:4d:b9:d5:e4:59:2e:dc:87:4b:dc: e8:2a:18:04:9a:8d:52:62:f1:f1:af:25:b5:54:08: e6:86:8c:08:3f:15:51:4c:88:25:3f:a5:f8:ba:e8: 48:ae:a8:1d:99:c3:5f:30:a3:82:81:a7:b0:4c:e0: 80:df:14:22:1d:75:da:c6:56:6f:50:fe:de:0d:15: 42:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BE:71:A5:3D:F9:7B:B7:A5:CC:31:41:77:FA:16:6E:A3:A7:A0:20 X509v3 Authority Key Identifier: keyid:C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c3:47:59:0e:19:b2:da:72:0b:57:81:ae:ad:7d:54:8e:22: d1:7c:0e:45:75:cc:cb:d5:19:59:61:a9:f7:b5:e1:7c:8b:bb: bd:b2:1d:35:1b:97:1b:93:77:3a:50:9f:c0:22:e6:65:06:4e: c4:60:9c:d0:d9:0b:9d:b0:72:76:af:b7:de:00:c2:58:f3:bf: 43:98:61:0e:20:c2:4b:29:fa:ab:a3:03:c9:09:f8:c2:7b:fb: 6f:3b:8d:6c:4e:6b:fa:97:69:61:06:b0:49:3f:d6:4f:a4:ae: 73:ba:db:31:cb:fe:28:78:38:f4:cc:b2:29:07:a0:c1:c5:ef: ee:9f:ed:20:ad:37:92:d9:1d:98:2f:17:7d:b4:e8:f1:97:16: f3:30:1f:b2:1a:88:f9:9a:bb:91:c3:b5:90:d3:eb:bd:76:02: db:55:d6:ac:9d:43:03:b6:d1:92:81:af:0a:29:4c:b3:8e:63: 3d:a4:12:54:16:db:43:63:84:b7:fe:49:d8:1b:1b:38:c4:38: de:f5:19:a5:3b:a6:2f:fe:15:da:f8:0e:b6:da:46:a0:40:c1: ca:e1:3d:e1:07:d8:19:80:4e:9a:24:08:e3:d3:58:7a:c9:39: 6c:b9:8f:98:70:d5:b7:32:2d:00:9f:e8:70:38:fa:1c:b7:6e: 47:78:27:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCL+nrOG0LgvvQ9f/ylKYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZTNhNDRhZThjZjAyNDNmMWRmZmUyNjg0ZTNkZDVhOGZj ODVkNzkwHhcNMjUxMjA2MDUwMDUwWhcNMjUxMjA3MDUwMDUwWjAzMTEwLwYDVQQD EygzMmJlNzFhNTNkZjk3YmI3YTVjYzMxNDE3N2ZhMTY2ZWEzYTdhMDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwWHCzTzM1Hlpo/Fwd2+xMBGcC2D HDILGE3iY6oUHqkhYR/fkz8NjRE7CjUUnEoYS5EPajrUJLk0WAxKEZfx0LyG8bJQ 9n1c1ZR9IoYjOVfHHfB3X6coJbG2X4fGuekWfKSMDTAS+9tO0y0MGxBp84Mpj/ov SpK4TUjWPFoAnop8C97cd9iX0ulHlhZFEiCvTIQK1VN5jUK+bFTVBXb/Uq+AVqOo BotpHb/1SE/8G/Q90evL9n4fFk251eRZLtyHS9zoKhgEmo1SYvHxryW1VAjmhowI PxVRTIglP6X4uuhIrqgdmcNfMKOCgaewTOCA3xQiHXXaxlZvUP7eDRVCBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDK+caU9+Xu3pcwxQXf6Fm6jp6AgMB8GA1UdIwQY MBaAFMHjpErozwJD8d/+JoTj3VqPyF15MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2VPa1N1alBBa1B4M180bWhPUGRXb19JWFhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iZjRhNDQtYmI4YS00NjUxLWEwYWEt MzhkMjkyZDBmN2VjLzEvd2VPa1N1alBBa1B4M180bWhPUGRXb19JWFhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9iZjRhNDQtYmI4YS00NjUxLWEwYWEtMzhkMjkyZDBmN2Vj LzEvd2VPa1N1alBBa1B4M180bWhPUGRXb19JWFhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcNHWQ4Z stpyC1eBrq19VI4i0XwORXXMy9UZWWGp97XhfIu7vbIdNRuXG5N3OlCfwCLmZQZO xGCc0NkLnbBydq+33gDCWPO/Q5hhDiDCSyn6q6MDyQn4wnv7bzuNbE5r+pdpYQaw ST/WT6Suc7rbMcv+KHg49MyyKQegwcXv7p/tIK03ktkdmC8XfbTo8ZcW8zAfshqI +Zq7kcO1kNPrvXYC21XWrJ1DA7bRkoGvCilMs45jPaQSVBbbQ2OEt/5J2BsbOMQ4 3vUZpTumL/4V2vgOttpGoEDByuE94QfYGYBOmiQI49NYesk5bLmPmHDVtzItAJ/o cDj6HLduR3gnNw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:18:03 2025 by rpki-client