This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft File: wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft (raw, json) Hash identifier: G3PlX1ntjlIZ/Yz9CiIvoFtDJKCIHVcPVxKqc2iuuLY= Subject key identifier: 4E:95:AA:3B:99:1E:56:70:6C:85:13:4B:7A:FE:3F:28:50:E7:32:26 Authority key identifier: C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E Certificate issuer: /CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e Certificate serial: 019AF3523993D818D0CA2A5441AD18B73EA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 11:00:43 +0000 Manifest this update: Sat 06 Dec 2025 11:00:43 +0000 Manifest next update: Sun 07 Dec 2025 11:00:43 +0000 Files and hashes: 1: 6-ydJeMMctB8c_kcu4H6al3x9lI.roa (hash: gkHYAXqWoGGFpT0nUFUwvYsxIUFHF9fDa7NiP95iNN8=) 2: wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl (hash: lcC12e9AtHAhGAkbC2LzRhPSotAoZhDSr4tRjkoS4DA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:39:93:d8:18:d0:ca:2a:54:41:ad:18:b7:3e:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e Validity Not Before: Dec 6 11:00:43 2025 GMT Not After : Dec 7 11:00:43 2025 GMT Subject: CN=4e95aa3b991e56706c85134b7afe3f2850e73226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:89:8d:9d:12:d9:41:c6:4f:71:63:88:dc:0e: 50:01:e0:c2:67:d4:cf:40:3a:d6:23:01:ce:b1:ba: 86:00:bb:e8:67:98:9b:8d:18:45:4d:d7:ef:44:43: 12:8a:b0:4f:fc:af:c0:f2:48:65:80:95:d9:61:a2: c3:28:27:53:27:65:aa:b1:35:eb:02:4e:c9:70:72: 23:d2:89:80:5e:ef:0d:c2:7d:b8:c4:aa:41:ed:fd: d1:06:75:fc:00:2e:53:c5:3c:04:28:e4:21:bc:0a: 66:d9:59:af:e9:95:82:93:f6:c7:d4:58:5d:6b:ef: 2d:82:7a:b3:ba:78:ba:23:88:e7:bf:1c:e8:7b:66: 63:28:51:ac:7e:b7:8a:23:ab:b9:6f:43:b1:27:d9: 8f:0e:aa:9c:f8:9d:ff:87:b4:df:bc:f3:ea:61:a7: d7:aa:09:e8:cb:64:bf:da:a8:4d:b5:3f:ce:ac:49: 20:27:41:0a:9d:ee:59:83:20:82:30:a9:e8:9e:8f: 01:98:21:7b:62:28:d0:bf:10:81:a4:cc:69:5b:73: 08:83:90:10:a3:0e:5b:0a:1d:e2:c7:4e:e3:fa:08: a7:c1:44:9d:0d:d4:8d:1a:3c:a3:c7:ff:42:96:52: 45:9f:84:24:ec:75:b2:9e:19:04:4c:86:be:d0:58: 7e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:95:AA:3B:99:1E:56:70:6C:85:13:4B:7A:FE:3F:28:50:E7:32:26 X509v3 Authority Key Identifier: keyid:C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:b3:9b:42:13:10:c4:e8:01:2d:ae:d8:3a:d6:41:3a:59:7f: 2f:b3:3c:a9:86:47:23:e6:dd:6a:9f:9c:28:af:ca:c8:84:0c: 0e:f4:5e:48:33:34:4a:5c:24:f1:4f:00:d5:a5:49:d0:f6:94: eb:2f:34:2e:d9:28:4e:3f:60:9a:36:30:23:0a:9e:ad:a8:f6: 3d:0a:0e:2e:16:c5:2c:fa:12:15:a4:dd:05:b6:35:2b:07:a7: f5:a5:54:b5:08:ef:24:a0:62:31:33:29:2e:d8:2f:32:93:44: bc:0e:10:23:ba:96:58:5b:70:7f:8f:f2:56:5f:a6:f0:4e:15: 7c:ad:85:81:0b:94:28:46:57:b2:c1:e6:55:c9:10:cd:b7:d3: 45:a0:6e:ed:44:0c:35:74:f4:17:51:63:11:e1:91:6e:b8:3e: 3b:e0:a4:c3:78:f8:18:bc:a9:8c:a0:ac:2f:82:b8:2b:ef:17: 10:ef:e3:1b:d3:f7:6d:88:f6:36:2e:7d:d2:54:96:10:c1:f0: e8:ee:4c:b5:62:46:49:22:24:c4:55:3e:47:7e:d9:e1:48:5c: c4:f5:18:d4:4f:be:84:99:46:ca:2a:d4:97:53:03:fa:58:8e: 75:94:63:86:71:13:50:8f:e4:07:6d:b4:10:46:fc:b2:aa:63: 1a:32:9c:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUjmT2BjQyipUQa0Ytz6hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMjRiZGJkZWQ2ZTVkMmZlMGZiNTI2NTAwYjNmZjg3NjY1 YjYwMGUwHhcNMjUxMjA2MTEwMDQzWhcNMjUxMjA3MTEwMDQzWjAzMTEwLwYDVQQD Eyg0ZTk1YWEzYjk5MWU1NjcwNmM4NTEzNGI3YWZlM2YyODUwZTczMjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1omNnRLZQcZPcWOI3A5QAeDCZ9TP QDrWIwHOsbqGALvoZ5ibjRhFTdfvREMSirBP/K/A8khlgJXZYaLDKCdTJ2WqsTXr Ak7JcHIj0omAXu8Nwn24xKpB7f3RBnX8AC5TxTwEKOQhvApm2Vmv6ZWCk/bH1Fhd a+8tgnqzuni6I4jnvxzoe2ZjKFGsfreKI6u5b0OxJ9mPDqqc+J3/h7TfvPPqYafX qgnoy2S/2qhNtT/OrEkgJ0EKne5ZgyCCMKnono8BmCF7YijQvxCBpMxpW3MIg5AQ ow5bCh3ix07j+ginwUSdDdSNGjyjx/9CllJFn4Qk7HWynhkETIa+0Fh+uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6VqjuZHlZwbIUTS3r+PyhQ5zImMB8GA1UdIwQY MBaAFMAkvb3tbl0v4PtSZQCz/4dmW2AOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0NTOXZlMXVYU19nLTFKbEFMUF9oMlpiWUE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9jYzhmZmUtMzZiNC00YzgwLWE5MDct YWVhYTlkZjAxYTlkLzEvd0NTOXZlMXVYU19nLTFKbEFMUF9oMlpiWUE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9jYzhmZmUtMzZiNC00YzgwLWE5MDctYWVhYTlkZjAxYTlk LzEvd0NTOXZlMXVYU19nLTFKbEFMUF9oMlpiWUE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJrObQhMQ xOgBLa7YOtZBOll/L7M8qYZHI+bdap+cKK/KyIQMDvReSDM0Slwk8U8A1aVJ0PaU 6y80LtkoTj9gmjYwIwqeraj2PQoOLhbFLPoSFaTdBbY1Kwen9aVUtQjvJKBiMTMp LtgvMpNEvA4QI7qWWFtwf4/yVl+m8E4VfK2FgQuUKEZXssHmVckQzbfTRaBu7UQM NXT0F1FjEeGRbrg+O+Ckw3j4GLypjKCsL4K4K+8XEO/jG9P3bYj2Ni590lSWEMHw 6O5MtWJGSSIkxFU+R37Z4UhcxPUY1E++hJlGyirUl1MD+liOdZRjhnETUI/kB220 EEb8sqpjGjKcAA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:21:21 2025 by rpki-client