This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft File: wV59e7ae-ssMc5ApcsdNctKb938.mft (raw, json) Hash identifier: zbtgiiUvXD+D+HkX4li4LFqU+IAoo6le3stHgRDFaNY= Subject key identifier: E0:EE:8E:A5:4E:BE:8E:C7:08:3B:7F:AF:5C:8F:46:B2:8C:5B:6C:50 Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F Certificate issuer: /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f Certificate serial: 019AF1D202C7680050D24D6892AA42B876D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft Manifest number: 07EE Signing time: Sat 06 Dec 2025 04:01:03 +0000 Manifest this update: Sat 06 Dec 2025 04:01:03 +0000 Manifest next update: Sun 07 Dec 2025 04:01:03 +0000 Files and hashes: 1: HKldyiYx0sP4BotQ-G1ccS2afug.roa (hash: S4NVBzYTXH0ZvYQ/TjKg8cdi2I+vo34ebyJooJvff+M=) 2: wV59e7ae-ssMc5ApcsdNctKb938.crl (hash: ETYKe0EsjWaJXuYnS3iL5UYiAA0UXozgQx3atquugFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:02:c7:68:00:50:d2:4d:68:92:aa:42:b8:76:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f Validity Not Before: Dec 6 04:01:03 2025 GMT Not After : Dec 7 04:01:03 2025 GMT Subject: CN=e0ee8ea54ebe8ec7083b7faf5c8f46b28c5b6c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:be:97:3b:6c:1a:6f:c6:28:e6:3b:21:e5:f5: 14:c7:f6:05:30:3d:4c:44:d5:7f:58:b8:f0:43:42: 26:bc:3c:92:fe:fa:f2:c5:9a:fc:97:8f:8a:b3:63: 4b:96:5b:cc:de:ad:c5:14:eb:50:2b:84:b5:ea:0b: 5e:89:1d:43:54:5a:29:1b:40:88:69:fb:d9:c2:6b: da:de:71:65:3d:d5:2e:53:b4:92:31:50:60:16:d3: f0:97:b9:dc:ce:9f:78:53:31:f5:40:ae:e8:fc:65: 2f:72:e4:b0:a9:31:e0:ab:72:d4:95:d9:ea:d0:ad: cb:fb:03:e7:1d:8e:83:df:21:ca:48:5a:05:76:ba: 63:a2:de:46:82:e3:bc:49:b7:03:66:63:e6:6e:88: 34:92:50:82:b0:b5:c3:62:83:e9:98:82:67:f2:07: 3b:1a:3f:a6:cd:df:ab:62:37:01:72:25:1b:25:c2: d1:26:11:cc:4c:f2:d7:b2:a9:b7:45:e5:de:c9:06: 32:8c:1e:b2:df:ff:46:d9:d7:91:80:e7:c3:e8:43: ad:2b:80:7e:4f:6f:a7:70:cb:f0:0a:3b:5e:09:f1: d1:02:ce:4a:ec:44:76:42:26:8a:de:83:c2:fc:59: 6c:8c:72:04:24:ef:34:b5:19:f9:b5:f3:19:8b:8f: eb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EE:8E:A5:4E:BE:8E:C7:08:3B:7F:AF:5C:8F:46:B2:8C:5B:6C:50 X509v3 Authority Key Identifier: keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:6b:fe:43:de:45:33:79:b7:71:c6:a6:1c:1a:cb:c7:e3:4c: 98:1d:f8:39:79:4d:88:c2:4e:1d:d6:c5:60:21:b6:39:61:56: 54:76:03:ff:3b:12:f1:b6:92:71:69:59:ff:58:aa:c5:17:db: a1:51:0f:7d:35:33:fd:90:19:93:f5:df:c3:0f:8d:6a:b7:1c: 60:7b:8e:3f:27:90:cb:65:1f:c7:6e:0b:be:a4:15:82:b2:aa: 17:bc:85:be:6a:d1:f8:2d:e5:99:d0:4e:4a:79:f6:3b:f4:fd: ce:2b:0b:86:de:82:7c:de:bf:15:6a:7f:97:b1:15:8f:98:4f: a0:9d:ef:f8:17:ae:80:de:30:7b:6e:c4:3c:a9:a1:0e:5f:f6: 4e:7b:8d:75:7b:a3:d1:6a:11:2c:92:e4:dc:b4:9e:98:15:38: ed:f1:78:35:6a:b5:67:94:5e:0a:69:4f:4d:d1:80:28:83:7c: ce:16:e0:b5:ac:36:c2:ed:52:7c:01:15:d0:5d:5c:44:a5:3a: 9c:22:81:52:c0:55:b2:89:76:47:5e:3e:a7:c1:36:08:d4:d6: 43:b5:a3:08:c2:4f:5d:a8:fb:be:1f:56:62:98:e7:1d:2b:98: 8c:5e:91:49:32:3c:af:7a:fd:11:c3:15:4f:71:ab:48:4e:b9: 31:09:8c:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gLHaABQ0k1okqpCuHbYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNWU3ZDdiYjY5ZWZhY2IwYzczOTAyOTcyYzc0ZDcyZDI5 YmY3N2YwHhcNMjUxMjA2MDQwMTAzWhcNMjUxMjA3MDQwMTAzWjAzMTEwLwYDVQQD EyhlMGVlOGVhNTRlYmU4ZWM3MDgzYjdmYWY1YzhmNDZiMjhjNWI2YzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL6XO2wab8Yo5jsh5fUUx/YFMD1M RNV/WLjwQ0ImvDyS/vryxZr8l4+Ks2NLllvM3q3FFOtQK4S16gteiR1DVFopG0CI afvZwmva3nFlPdUuU7SSMVBgFtPwl7nczp94UzH1QK7o/GUvcuSwqTHgq3LUldnq 0K3L+wPnHY6D3yHKSFoFdrpjot5GguO8SbcDZmPmbog0klCCsLXDYoPpmIJn8gc7 Gj+mzd+rYjcBciUbJcLRJhHMTPLXsqm3ReXeyQYyjB6y3/9G2deRgOfD6EOtK4B+ T2+ncMvwCjteCfHRAs5K7ER2QiaK3oPC/FlsjHIEJO80tRn5tfMZi4/ruwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODujqVOvo7HCDt/r1yPRrKMW2xQMB8GA1UdIwQY MBaAFMFefXu2nvrLDHOQKXLHTXLSm/d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lYTQwMmEtMGZmNi00N2Q5LTljZDAt MzQ3YTBmN2M1YjA4LzEvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9lYTQwMmEtMGZmNi00N2Q5LTljZDAtMzQ3YTBmN2M1YjA4 LzEvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmv+Q95F M3m3ccamHBrLx+NMmB34OXlNiMJOHdbFYCG2OWFWVHYD/zsS8baScWlZ/1iqxRfb oVEPfTUz/ZAZk/Xfww+NarccYHuOPyeQy2Ufx24LvqQVgrKqF7yFvmrR+C3lmdBO Snn2O/T9zisLht6CfN6/FWp/l7EVj5hPoJ3v+BeugN4we27EPKmhDl/2TnuNdXuj 0WoRLJLk3LSemBU47fF4NWq1Z5ReCmlPTdGAKIN8zhbgtaw2wu1SfAEV0F1cRKU6 nCKBUsBVsol2R14+p8E2CNTWQ7WjCMJPXaj7vh9WYpjnHSuYjF6RSTI8r3r9EcMV T3GrSE65MQmM/A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:46 2025 by rpki-client