This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft File: wQHFvAkVovfLFlsLfXEyEvpXMy0.mft (raw, json) Hash identifier: Xz8ddY+U1Ztd3/L+4IQ1QRXUXVx/5tKzg2C4x+TeCq0= Subject key identifier: 06:89:AD:B1:B5:F8:0E:38:5C:1A:63:38:0C:6C:98:C6:E6:BA:57:9B Authority key identifier: C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D Certificate issuer: /CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d Certificate serial: 019AF31B889B0414A070E374FFBAB78FBFC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:00:59 +0000 Manifest this update: Sat 06 Dec 2025 10:00:59 +0000 Manifest next update: Sun 07 Dec 2025 10:00:59 +0000 Files and hashes: 1: 9rnqD1RU0JdMjSu8BzguZaGfvTA.roa (hash: GMQdSU1ONVtRLJ/ahFPu6uQVjVVqJu2bd95QqZUAXII=) 2: wQHFvAkVovfLFlsLfXEyEvpXMy0.crl (hash: bYg+SR9UN1dKMtTR7gYoMKwYqRUCF96s7Zq7CX4pz64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:88:9b:04:14:a0:70:e3:74:ff:ba:b7:8f:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d Validity Not Before: Dec 6 10:00:59 2025 GMT Not After : Dec 7 10:00:59 2025 GMT Subject: CN=0689adb1b5f80e385c1a63380c6c98c6e6ba579b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ac:a0:9d:15:71:c4:0f:49:d8:3c:85:4f:33: c6:02:32:d1:2a:ab:0f:6e:c5:40:44:84:52:76:df: 8b:ae:18:09:73:f0:43:22:71:ea:01:8d:6e:0d:99: 1b:20:3a:a3:d4:82:7a:83:91:c8:73:f4:d3:ad:a9: bc:10:ff:74:99:5e:58:53:07:f6:bb:ea:89:c5:cc: 70:a4:3c:09:07:d1:6e:9b:d7:11:c7:8d:50:d2:3d: e6:89:49:fc:d1:87:ad:57:f1:f7:d2:3d:03:f7:2e: cd:74:89:49:e9:6c:8f:31:1a:28:f9:42:98:7c:3c: fe:a9:2d:68:14:b3:26:ec:ec:1d:95:30:a3:53:40: 67:c2:f8:73:db:42:27:83:ae:3c:e3:5c:fa:b5:6e: 15:c7:9c:c3:a1:62:50:f9:d9:d2:c5:6f:11:e7:20: 04:f9:78:ef:d7:98:5b:75:c7:38:c7:0a:7c:e7:97: 9a:31:5f:fe:d5:e5:69:c7:40:7b:e2:b5:81:58:8d: 63:16:f8:95:f0:14:75:ca:d4:1b:38:bb:68:52:f3: 63:3a:8f:f9:94:e7:40:e7:c4:30:e1:50:48:21:a6: 67:e4:03:95:91:55:f8:a3:67:23:58:3b:ec:fc:bb: e6:1d:34:12:90:e5:ed:44:07:f5:36:d1:77:51:ff: 29:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:89:AD:B1:B5:F8:0E:38:5C:1A:63:38:0C:6C:98:C6:E6:BA:57:9B X509v3 Authority Key Identifier: keyid:C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:4a:2b:cc:7f:24:8b:e1:0a:c1:ed:6a:40:91:81:a4:a3:76: f4:46:b3:fc:cc:eb:6e:9b:34:75:ad:0b:ba:fb:82:1b:c7:47: 43:c1:b6:b2:3e:65:de:4b:df:d6:44:a0:b5:a7:b1:92:76:91: 54:44:4c:11:57:e7:3c:71:85:e1:a0:a6:d6:42:3a:1d:c8:77: d2:99:b9:ce:ad:66:e0:83:5d:ef:a8:93:62:a5:32:ee:31:86: dc:47:a8:0d:60:73:34:01:cb:14:17:eb:a5:62:c7:77:44:4b: 2b:05:ed:3e:2d:d8:9c:1f:60:86:d9:a6:f3:82:a0:63:cf:21: 11:1a:de:a1:83:7c:54:bb:c4:13:5d:c6:8c:ab:a4:40:02:a7: ca:10:a4:54:dc:98:7f:99:82:76:d6:8f:a2:45:d7:82:32:fe: 7f:67:10:d8:26:f7:f5:7e:39:31:61:03:0e:44:33:9b:9a:93: 31:24:1d:3b:3d:3c:f6:ab:72:87:3b:13:0d:08:8f:ce:b1:f6: 4a:6f:fb:f0:c2:7a:46:da:1c:ff:79:3e:32:71:58:0c:af:b1: 1f:63:21:4f:49:bf:d4:9f:f3:f8:d6:7b:f9:03:b5:94:61:91: 11:76:9e:7c:61:95:71:fb:c0:dc:e4:f2:a6:33:df:08:b7:38: f7:1d:30:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4ibBBSgcON0/7q3j7/AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDFjNWJjMDkxNWEyZjdjYjE2NWIwYjdkNzEzMjEyZmE1 NzMzMmQwHhcNMjUxMjA2MTAwMDU5WhcNMjUxMjA3MTAwMDU5WjAzMTEwLwYDVQQD EygwNjg5YWRiMWI1ZjgwZTM4NWMxYTYzMzgwYzZjOThjNmU2YmE1NzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaygnRVxxA9J2DyFTzPGAjLRKqsP bsVARIRSdt+LrhgJc/BDInHqAY1uDZkbIDqj1IJ6g5HIc/TTram8EP90mV5YUwf2 u+qJxcxwpDwJB9Fum9cRx41Q0j3miUn80YetV/H30j0D9y7NdIlJ6WyPMRoo+UKY fDz+qS1oFLMm7OwdlTCjU0Bnwvhz20Ing64841z6tW4Vx5zDoWJQ+dnSxW8R5yAE +Xjv15hbdcc4xwp855eaMV/+1eVpx0B74rWBWI1jFviV8BR1ytQbOLtoUvNjOo/5 lOdA58Qw4VBIIaZn5AOVkVX4o2cjWDvs/LvmHTQSkOXtRAf1NtF3Uf8pnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAaJrbG1+A44XBpjOAxsmMbmulebMB8GA1UdIwQY MBaAFMEBxbwJFaL3yxZbC31xMhL6VzMtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FIRnZBa1ZvdmZMRmxzTGZYRXlFdnBYTXkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9jZmNkZTAtOWFhMy00YzJkLWI4Zjct OTI4ZDkxNzkxOTA3LzEvd1FIRnZBa1ZvdmZMRmxzTGZYRXlFdnBYTXkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9jZmNkZTAtOWFhMy00YzJkLWI4ZjctOTI4ZDkxNzkxOTA3 LzEvd1FIRnZBa1ZvdmZMRmxzTGZYRXlFdnBYTXkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0orzH8k i+EKwe1qQJGBpKN29Eaz/Mzrbps0da0LuvuCG8dHQ8G2sj5l3kvf1kSgtaexknaR VERMEVfnPHGF4aCm1kI6Hch30pm5zq1m4INd76iTYqUy7jGG3EeoDWBzNAHLFBfr pWLHd0RLKwXtPi3YnB9ghtmm84KgY88hERreoYN8VLvEE13GjKukQAKnyhCkVNyY f5mCdtaPokXXgjL+f2cQ2Cb39X45MWEDDkQzm5qTMSQdOz089qtyhzsTDQiPzrH2 Sm/78MJ6Rtoc/3k+MnFYDK+xH2MhT0m/1J/z+NZ7+QO1lGGREXaefGGVcfvA3OTy pjPfCLc49x0wHw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:52:59 2025 by rpki-client