This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.mft File: wVwVNEGqsCDrb2Df9xUu6qyupOc.mft (raw, json) Hash identifier: ICZONQ/Q5oRg/i6a3QOMtD/prum5r+Je4jTaYiIlw5c= Subject key identifier: DA:B4:DE:02:B8:AD:B8:29:15:C9:5A:66:D1:EB:88:A1:CF:7A:E9:CD Authority key identifier: C1:5C:15:34:41:AA:B0:20:EB:6F:60:DF:F7:15:2E:EA:AC:AE:A4:E7 Certificate issuer: /CN=c15c153441aab020eb6f60dff7152eeaacaea4e7 Certificate serial: 019AF19B6AA4E76D3DEA7A744D0BB3A0145D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wVwVNEGqsCDrb2Df9xUu6qyupOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:01:25 +0000 Manifest this update: Sat 06 Dec 2025 03:01:25 +0000 Manifest next update: Sun 07 Dec 2025 03:01:25 +0000 Files and hashes: 1: d20SUDYIRv-4bm5PviK5Z-zGDs0.roa (hash: Eh4bKXtFp88meM/tOgLhq0HIMCc67pkb4NNRMEjL16E=) 2: wVwVNEGqsCDrb2Df9xUu6qyupOc.crl (hash: 4DhxR2+Zva1rUu77jeJzq3Op3s0F7QVBnpLx8tgh9ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.mft rsync://rpki.ripe.net/repository/DEFAULT/wVwVNEGqsCDrb2Df9xUu6qyupOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:6a:a4:e7:6d:3d:ea:7a:74:4d:0b:b3:a0:14:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c15c153441aab020eb6f60dff7152eeaacaea4e7 Validity Not Before: Dec 6 03:01:25 2025 GMT Not After : Dec 7 03:01:25 2025 GMT Subject: CN=dab4de02b8adb82915c95a66d1eb88a1cf7ae9cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c1:fc:48:53:e2:2e:42:1b:b0:25:81:67:81: 76:75:de:30:62:57:35:ad:21:5e:d8:8a:36:c9:5c: 2e:2b:5b:41:9e:cb:c5:45:2a:6e:48:3e:fd:26:a4: ff:7f:2f:87:a1:66:4c:86:67:8e:11:b9:7d:3e:c3: b5:ed:58:9e:d7:59:f2:b5:cf:85:e7:7a:52:b8:41: 80:00:3a:45:60:f4:15:27:81:6d:0a:5f:7e:27:7a: 04:42:c9:27:51:17:ed:83:1d:41:2b:ef:5d:75:c4: ae:d7:fd:7d:8e:4f:2a:5a:85:d0:f0:56:85:39:45: 1b:97:fa:68:05:10:71:9d:04:d9:96:15:83:f6:84: f9:27:39:de:02:9f:7d:83:2e:2f:55:35:30:40:ae: 3a:bd:38:8a:43:48:17:60:aa:bf:a3:5a:e2:2a:f0: 4a:3f:bf:4c:8c:46:5b:55:81:1f:cb:0f:0e:ef:ef: dd:18:cd:dd:68:63:9d:fc:b9:80:9f:17:2f:29:df: ed:0f:53:7b:d0:6d:9d:96:d8:8b:8b:1c:28:61:47: 11:30:09:78:dd:1f:e7:bb:a0:fd:fa:87:e4:dc:6d: 09:f0:e5:c8:1d:e3:5a:f6:c8:49:1b:b1:0c:94:6f: 3c:65:5d:1e:01:7d:5e:1c:f1:c3:d4:9e:07:1e:77: de:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B4:DE:02:B8:AD:B8:29:15:C9:5A:66:D1:EB:88:A1:CF:7A:E9:CD X509v3 Authority Key Identifier: keyid:C1:5C:15:34:41:AA:B0:20:EB:6F:60:DF:F7:15:2E:EA:AC:AE:A4:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVwVNEGqsCDrb2Df9xUu6qyupOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:cc:0e:b4:1c:cd:54:18:1b:f1:98:40:96:dd:1f:30:1f:19: 4e:81:ec:db:a7:32:a3:39:43:78:88:4e:69:30:8a:48:1a:ea: 51:6e:55:89:b3:cd:d3:c9:12:07:ba:6c:22:68:2f:d0:3c:74: fd:e5:c1:af:78:ea:da:a8:77:e5:ca:60:cf:8a:bd:05:54:7a: 13:94:8d:67:f9:1c:4c:03:b7:14:83:58:cc:8e:04:22:b5:24: f3:0f:83:73:07:df:4d:d5:81:96:62:2e:02:d3:21:75:40:c5: 66:f0:79:89:85:e2:29:cd:16:f5:79:f5:27:aa:98:17:98:d9: a1:c4:bd:83:ee:cd:90:7f:3f:3f:17:14:fa:82:af:97:5d:2b: 96:e8:a7:d6:bf:25:ec:6c:e7:1f:2c:c0:f4:2a:56:ec:a2:6a: e3:c0:13:27:2d:8c:5b:2e:bb:c4:05:d8:29:c5:69:22:06:5f: 3d:7c:be:d6:5c:bb:7c:77:1f:64:3a:2e:69:cf:0c:20:d0:57: 1e:27:ff:92:13:2d:da:0d:73:cf:06:17:a5:21:0f:33:e0:a3: 82:04:12:91:f5:50:03:3a:b5:93:56:46:28:78:39:63:97:91: f0:8a:81:47:27:b7:d5:1e:dc:94:bc:30:35:aa:9a:8f:f9:5e: af:ec:64:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2qk52096np0TQuzoBRdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNWMxNTM0NDFhYWIwMjBlYjZmNjBkZmY3MTUyZWVhYWNh ZWE0ZTcwHhcNMjUxMjA2MDMwMTI1WhcNMjUxMjA3MDMwMTI1WjAzMTEwLwYDVQQD EyhkYWI0ZGUwMmI4YWRiODI5MTVjOTVhNjZkMWViODhhMWNmN2FlOWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMH8SFPiLkIbsCWBZ4F2dd4wYlc1 rSFe2Io2yVwuK1tBnsvFRSpuSD79JqT/fy+HoWZMhmeOEbl9PsO17Vie11nytc+F 53pSuEGAADpFYPQVJ4FtCl9+J3oEQsknURftgx1BK+9ddcSu1/19jk8qWoXQ8FaF OUUbl/poBRBxnQTZlhWD9oT5JzneAp99gy4vVTUwQK46vTiKQ0gXYKq/o1riKvBK P79MjEZbVYEfyw8O7+/dGM3daGOd/LmAnxcvKd/tD1N70G2dltiLixwoYUcRMAl4 3R/nu6D9+ofk3G0J8OXIHeNa9shJG7EMlG88ZV0eAX1eHPHD1J4HHnfeWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNq03gK4rbgpFclaZtHriKHPeunNMB8GA1UdIwQY MBaAFMFcFTRBqrAg629g3/cVLuqsrqTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1Z3Vk5FR3FzQ0RyYjJEZjl4VXU2cXl1cE9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83ODRjOWUtZTZlYS00OWU5LWFkYmUt NDc5Mjk3MzY0ZWI2LzEvd1Z3Vk5FR3FzQ0RyYjJEZjl4VXU2cXl1cE9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi83ODRjOWUtZTZlYS00OWU5LWFkYmUtNDc5Mjk3MzY0ZWI2 LzEvd1Z3Vk5FR3FzQ0RyYjJEZjl4VXU2cXl1cE9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMwOtBzN VBgb8ZhAlt0fMB8ZToHs26cyozlDeIhOaTCKSBrqUW5VibPN08kSB7psImgv0Dx0 /eXBr3jq2qh35cpgz4q9BVR6E5SNZ/kcTAO3FINYzI4EIrUk8w+DcwffTdWBlmIu AtMhdUDFZvB5iYXiKc0W9Xn1J6qYF5jZocS9g+7NkH8/PxcU+oKvl10rluin1r8l 7GznHyzA9CpW7KJq48ATJy2MWy67xAXYKcVpIgZfPXy+1ly7fHcfZDouac8MINBX Hif/khMt2g1zzwYXpSEPM+CjggQSkfVQAzq1k1ZGKHg5Y5eR8IqBRye31R7clLww Naqaj/ler+xkeA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:13:53 2025 by rpki-client