This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft File: RwSF9erGdaJBq24C2OU90oVW0u4.mft (raw, json) Hash identifier: zGpdhOMUlVp6FKZ6oF77v1bPMfKIU2TZhUIKsJFgF8g= Subject key identifier: F5:85:6C:4E:65:E1:9C:46:85:39:C8:F5:90:62:0D:03:3E:A8:82:A3 Authority key identifier: 47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE Certificate issuer: /CN=470485f5eac675a241ab6e02d8e53dd28556d2ee Certificate serial: 019AF50B6FF1A8383C6ACFF1C3842A123EE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft Manifest number: 02A9 Signing time: Sat 06 Dec 2025 19:02:38 +0000 Manifest this update: Sat 06 Dec 2025 19:02:38 +0000 Manifest next update: Sun 07 Dec 2025 19:02:38 +0000 Files and hashes: 1: 1-ytWl0hX9ynA9JXKT1kDTjFFd_k.roa (hash: SVFx2HIlhTnZm/5An2t1/eTf/PAIAECB7vLR+zIL0/U=) 2: 4lqvUj_aarjM1QCov1WKcZ47cD4.roa (hash: CUeCuFIy+7/m+7Rp9JxCjE4itMo0nF9rOUfz1A83JwI=) 3: RwSF9erGdaJBq24C2OU90oVW0u4.crl (hash: 7fSRVI8D/3bXUhskfsRfKrl5xrKlz9uGOZrwID1jix4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:6f:f1:a8:38:3c:6a:cf:f1:c3:84:2a:12:3e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=470485f5eac675a241ab6e02d8e53dd28556d2ee Validity Not Before: Dec 6 19:02:38 2025 GMT Not After : Dec 7 19:02:38 2025 GMT Subject: CN=f5856c4e65e19c468539c8f590620d033ea882a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:54:9a:4b:6d:b7:38:70:58:24:9c:8f:3d:4d: f9:7f:ef:0d:0d:ad:7a:fc:6e:2b:40:f7:31:c5:1e: 8a:4e:90:8a:e0:62:0b:1c:b8:ca:3d:35:f0:62:78: 6d:49:9d:c7:bc:45:06:aa:bc:5f:16:fb:ee:62:47: e1:9a:2a:28:06:3c:83:b9:73:00:d9:d9:5d:7b:62: 2a:b9:67:41:db:d2:6b:c9:19:8f:b7:34:62:12:41: 93:3a:9c:d7:3b:af:24:be:48:84:5c:c8:15:b4:23: 2c:62:e6:da:da:16:2e:66:3a:16:d8:b5:58:05:d6: 21:98:08:b7:8c:db:a4:30:40:5a:fc:4c:1d:ac:c2: d1:9e:3a:7f:64:24:5b:94:5c:e2:61:aa:0a:cd:97: be:f8:90:1e:c6:12:70:d8:e8:19:6d:40:56:1a:1c: 2f:b5:e3:8d:4a:88:4f:c6:fc:92:9d:1d:bd:08:b9: 8a:17:a9:fa:67:95:ab:3d:b0:37:c1:d0:c1:b9:ff: 3d:68:d3:98:14:ad:8d:b6:bd:02:98:75:a3:c0:46: dd:e3:9f:74:c3:38:3e:da:91:47:a9:7f:4a:a4:31: cc:ef:8e:c9:75:c6:dc:d0:bc:d5:0e:15:7b:93:18: ad:f8:83:fd:81:b3:93:6e:f8:57:73:45:0f:c5:d6: b5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:85:6C:4E:65:E1:9C:46:85:39:C8:F5:90:62:0D:03:3E:A8:82:A3 X509v3 Authority Key Identifier: keyid:47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:87:57:68:b5:25:13:da:a8:6e:97:f3:5e:6e:42:88:38:34: ad:0a:0f:2f:98:f7:25:d6:f1:09:eb:d9:9d:b0:22:df:08:36: 85:c3:7f:14:0c:f7:28:be:2f:7f:b0:c0:13:c3:78:03:b6:de: 35:19:f4:79:73:bc:9b:07:ce:37:86:30:c7:38:e5:e6:e2:f3: 44:38:6e:b1:dc:9e:b9:db:53:e4:f5:d9:fd:64:af:ce:31:9d: b7:1b:ea:29:79:45:1d:2c:67:f9:3e:71:94:f8:ff:b0:2c:a8: 02:77:84:36:86:02:51:42:31:d9:6b:6b:ab:08:46:c9:1e:57: 20:6d:9f:0d:72:5b:18:5c:24:b7:80:b5:b7:da:29:4e:72:2d: dc:f7:ea:8b:ac:d7:cd:85:24:2f:a9:d1:54:cd:27:bd:83:57: bd:fa:16:c8:5f:05:5d:02:bf:f7:d0:47:52:5e:0b:d7:df:73: b5:4f:34:1e:a6:e1:39:66:13:0b:90:99:a9:77:bf:aa:68:d7: 14:90:ae:2c:6d:a8:e8:c2:de:05:3f:56:6d:0d:7a:f1:1e:b2: bd:ec:33:84:da:d9:1c:5c:14:82:56:9d:eb:08:f2:4e:a1:33: d7:d5:5e:a0:de:ef:c6:81:0d:38:36:a8:2c:64:2a:f9:a7:6f: fe:10:e5:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C2/xqDg8as/xw4QqEj7oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MDQ4NWY1ZWFjNjc1YTI0MWFiNmUwMmQ4ZTUzZGQyODU1 NmQyZWUwHhcNMjUxMjA2MTkwMjM4WhcNMjUxMjA3MTkwMjM4WjAzMTEwLwYDVQQD EyhmNTg1NmM0ZTY1ZTE5YzQ2ODUzOWM4ZjU5MDYyMGQwMzNlYTg4MmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFSaS223OHBYJJyPPU35f+8NDa16 /G4rQPcxxR6KTpCK4GILHLjKPTXwYnhtSZ3HvEUGqrxfFvvuYkfhmiooBjyDuXMA 2dlde2IquWdB29JryRmPtzRiEkGTOpzXO68kvkiEXMgVtCMsYuba2hYuZjoW2LVY BdYhmAi3jNukMEBa/EwdrMLRnjp/ZCRblFziYaoKzZe++JAexhJw2OgZbUBWGhwv teONSohPxvySnR29CLmKF6n6Z5WrPbA3wdDBuf89aNOYFK2Ntr0CmHWjwEbd4590 wzg+2pFHqX9KpDHM747Jdcbc0LzVDhV7kxit+IP9gbOTbvhXc0UPxda1VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWFbE5l4ZxGhTnI9ZBiDQM+qIKjMB8GA1UdIwQY MBaAFEcEhfXqxnWiQatuAtjlPdKFVtLuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUndTRjllckdkYUpCcTI0QzJPVTkwb1ZXMHU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jNjBkODEtNzE0Mi00YTViLTliNTAt MDA3N2MyYmRiZjM3LzEvUndTRjllckdkYUpCcTI0QzJPVTkwb1ZXMHU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jNjBkODEtNzE0Mi00YTViLTliNTAtMDA3N2MyYmRiZjM3 LzEvUndTRjllckdkYUpCcTI0QzJPVTkwb1ZXMHU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHIdXaLUl E9qobpfzXm5CiDg0rQoPL5j3JdbxCevZnbAi3wg2hcN/FAz3KL4vf7DAE8N4A7be NRn0eXO8mwfON4Ywxzjl5uLzRDhusdyeudtT5PXZ/WSvzjGdtxvqKXlFHSxn+T5x lPj/sCyoAneENoYCUUIx2WtrqwhGyR5XIG2fDXJbGFwkt4C1t9opTnIt3Pfqi6zX zYUkL6nRVM0nvYNXvfoWyF8FXQK/99BHUl4L199ztU80HqbhOWYTC5CZqXe/qmjX FJCuLG2o6MLeBT9WbQ168R6yvewzhNrZHFwUglad6wjyTqEz19VeoN7vxoENODao LGQq+adv/hDl5g== -----END CERTIFICATE-----Generated at Sat Dec 6 21:20:44 2025 by rpki-client