This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft File: wzCs3wQbXcx-XsbPj_i9BkjoZww.mft (raw, json) Hash identifier: 0LaQ6u1cbkd+WhajJnFi75DQMSHULxwMn7cPZSaAIm0= Subject key identifier: F3:A2:7F:55:9D:CB:4A:8C:2F:4F:18:BA:7F:90:FB:8E:5B:E7:DB:C6 Authority key identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C Certificate issuer: /CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c Certificate serial: 019AF23FCAF157B76FB77E7C640A6B5F0352 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft Manifest number: 13FA Signing time: Sat 06 Dec 2025 06:00:58 +0000 Manifest this update: Sat 06 Dec 2025 06:00:58 +0000 Manifest next update: Sun 07 Dec 2025 06:00:58 +0000 Files and hashes: 1: NfY8zpyx6EDpP6DxTuquvNoK9sY.roa (hash: mmbOZfwYelbaWl9riAjIdhT8MqPp3t5vAxerApfLsl0=) 2: wzCs3wQbXcx-XsbPj_i9BkjoZww.crl (hash: cnDktE/6wNxNatuVnHpKE5CrI7L5OuqaWDFixrm6C9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ca:f1:57:b7:6f:b7:7e:7c:64:0a:6b:5f:03:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c Validity Not Before: Dec 6 06:00:58 2025 GMT Not After : Dec 7 06:00:58 2025 GMT Subject: CN=f3a27f559dcb4a8c2f4f18ba7f90fb8e5be7dbc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7f:79:63:75:49:0e:2d:9b:9e:2a:3d:46:12: 49:0f:41:20:56:1d:30:42:3f:92:7e:a8:60:c9:14: 4a:62:27:d9:c8:96:1d:da:e2:6f:b1:81:07:1d:ea: 85:68:66:f0:af:eb:43:da:82:94:3b:3d:ef:46:ae: e0:55:1d:fb:fe:c7:b1:45:7c:f8:44:be:09:14:23: 1b:05:bf:32:e1:c0:04:20:67:09:a5:a5:96:09:d1: 40:da:f3:ed:74:6b:0d:52:77:1e:1a:16:63:3f:4e: 37:d7:f6:0e:d7:09:d8:cb:6a:e1:c5:ed:cf:0a:5b: d1:c4:f6:dd:36:fa:9f:65:79:6d:71:04:56:25:77: e1:6e:4c:03:83:2a:54:a2:78:55:7a:1a:20:40:4e: 5c:bf:4b:19:c5:eb:74:8e:b9:83:a9:e9:48:c2:ae: 98:31:02:a3:67:54:7a:c6:89:f0:6f:c2:6c:99:1f: fc:e8:5f:95:be:da:b0:f8:7c:7e:55:14:34:32:80: 68:c9:44:89:0d:91:cd:52:1a:ae:b2:7c:bf:9f:12: c2:21:52:ad:fe:41:4e:02:e5:5f:68:1d:3c:65:aa: 04:60:25:da:a6:48:d6:c4:dd:4b:87:fa:1b:7c:fe: 7c:e9:0e:01:48:e9:6b:50:62:41:ff:f8:70:ff:8a: e7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A2:7F:55:9D:CB:4A:8C:2F:4F:18:BA:7F:90:FB:8E:5B:E7:DB:C6 X509v3 Authority Key Identifier: keyid:C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:07:4e:6c:9b:97:b1:50:0b:37:37:67:1d:b4:f7:83:69:6a: fc:c7:34:b8:24:cc:b4:e1:18:b2:d9:1e:98:c2:08:9a:10:cf: c8:d8:a8:73:b0:59:fc:fe:29:20:dc:e9:f8:f6:23:d8:c9:43: a9:f7:5f:fe:00:63:21:b1:c7:ca:1a:b5:58:78:9a:48:04:2e: 0e:3e:16:5a:94:e8:77:4d:87:c7:96:fc:df:0d:9b:07:35:72: 09:e8:98:bf:10:32:6a:00:1a:7e:53:ff:27:0b:fd:e3:60:7e: c8:f5:c5:47:db:54:17:e6:af:18:2c:31:73:94:ff:ae:2b:e6: 6b:54:cd:be:10:d6:3d:c7:62:0b:f7:0e:be:b5:63:96:3e:fd: e0:7d:c5:27:f7:b4:48:75:20:93:38:c9:4c:23:04:cd:ef:29: 5a:56:67:9d:a0:97:5f:14:20:38:33:b3:07:7d:74:04:94:04: bd:2e:59:5c:97:3c:dd:05:2f:b8:0e:af:22:e4:2e:b0:7a:0d: b9:30:16:fc:c7:4e:c1:52:1b:f3:e1:87:5e:9a:6d:78:bf:19: 91:2b:cd:5c:40:6a:43:d6:4f:16:8a:5f:92:47:1e:64:9c:a1: ef:5c:2f:15:cc:d1:6a:2c:4e:6b:ab:88:9b:0a:9f:bb:a2:93: d3:df:3b:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8rxV7dvt358ZAprXwNSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzBhY2RmMDQxYjVkY2M3ZTVlYzZjZjhmZjhiZDA2NDhl ODY3MGMwHhcNMjUxMjA2MDYwMDU4WhcNMjUxMjA3MDYwMDU4WjAzMTEwLwYDVQQD EyhmM2EyN2Y1NTlkY2I0YThjMmY0ZjE4YmE3ZjkwZmI4ZTViZTdkYmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp395Y3VJDi2bnio9RhJJD0EgVh0w Qj+SfqhgyRRKYifZyJYd2uJvsYEHHeqFaGbwr+tD2oKUOz3vRq7gVR37/sexRXz4 RL4JFCMbBb8y4cAEIGcJpaWWCdFA2vPtdGsNUnceGhZjP0431/YO1wnYy2rhxe3P ClvRxPbdNvqfZXltcQRWJXfhbkwDgypUonhVehogQE5cv0sZxet0jrmDqelIwq6Y MQKjZ1R6xonwb8JsmR/86F+Vvtqw+Hx+VRQ0MoBoyUSJDZHNUhqusny/nxLCIVKt /kFOAuVfaB08ZaoEYCXapkjWxN1Lh/obfP586Q4BSOlrUGJB//hw/4rnpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOif1Wdy0qML08Yun+Q+45b59vGMB8GA1UdIwQY MBaAFMMwrN8EG13Mfl7Gz4/4vQZI6GcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3pDczN3UWJYY3gtWHNiUGpfaTlCa2pvWnd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yYTg0ZTktNjhiMy00ZTNmLWI2MTUt YTBhZDYxZDE5NGExLzEvd3pDczN3UWJYY3gtWHNiUGpfaTlCa2pvWnd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8yYTg0ZTktNjhiMy00ZTNmLWI2MTUtYTBhZDYxZDE5NGEx LzEvd3pDczN3UWJYY3gtWHNiUGpfaTlCa2pvWnd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwdObJuX sVALNzdnHbT3g2lq/Mc0uCTMtOEYstkemMIImhDPyNioc7BZ/P4pINzp+PYj2MlD qfdf/gBjIbHHyhq1WHiaSAQuDj4WWpTod02Hx5b83w2bBzVyCeiYvxAyagAaflP/ Jwv942B+yPXFR9tUF+avGCwxc5T/rivma1TNvhDWPcdiC/cOvrVjlj794H3FJ/e0 SHUgkzjJTCMEze8pWlZnnaCXXxQgODOzB310BJQEvS5ZXJc83QUvuA6vIuQusHoN uTAW/MdOwVIb8+GHXppteL8ZkSvNXEBqQ9ZPFopfkkceZJyh71wvFczRaixOa6uI mwqfu6KT0987Qw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:52 2025 by rpki-client