This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft File: wC4yPxvhY8TX-LiKrY2q--AQbW8.mft (raw, json) Hash identifier: 5TVTmp3HCQVluX1LtVBFewEyGAR6Pj7hoWiC5LWiabU= Subject key identifier: C2:6E:77:EF:29:D2:61:4D:7F:F7:E3:12:CF:CB:F1:72:BA:2E:D7:64 Authority key identifier: C0:2E:32:3F:1B:E1:63:C4:D7:F8:B8:8A:AD:8D:AA:FB:E0:10:6D:6F Certificate issuer: /CN=c02e323f1be163c4d7f8b88aad8daafbe0106d6f Certificate serial: 019AF12D6600A1DE5DD5C4327A1614295A95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft Manifest number: 027F Signing time: Sat 06 Dec 2025 01:01:15 +0000 Manifest this update: Sat 06 Dec 2025 01:01:15 +0000 Manifest next update: Sun 07 Dec 2025 01:01:15 +0000 Files and hashes: 1: wC4yPxvhY8TX-LiKrY2q--AQbW8.crl (hash: qCzssXSK1QtUs4iCscgq1dD9n3Lsravydxd/KJjFWHI=) 2: z4hyHniAgsjhip0WWSLXoanCOdQ.roa (hash: M3AlMbZsNGFOvYnoOV0xvC8E+XBvcvrqkI0jCnJgG2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.crl rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:66:00:a1:de:5d:d5:c4:32:7a:16:14:29:5a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c02e323f1be163c4d7f8b88aad8daafbe0106d6f Validity Not Before: Dec 6 01:01:15 2025 GMT Not After : Dec 7 01:01:15 2025 GMT Subject: CN=c26e77ef29d2614d7ff7e312cfcbf172ba2ed764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d0:8e:d5:af:d7:30:f1:bc:33:aa:89:72:2c: ef:dd:98:83:5c:f0:53:ff:1c:c6:50:b4:27:e6:dc: 24:3e:f9:48:7d:e6:b7:cb:d5:06:72:27:b3:0d:10: bd:27:92:a7:bb:3f:9c:bb:d9:e0:ae:bf:da:c6:ed: 6b:61:ed:b4:52:6c:51:b8:ed:c2:2a:81:d5:12:3a: 14:48:14:5e:15:29:a1:81:a4:c2:68:19:9d:0e:50: b3:70:57:f8:78:25:50:53:b4:75:85:32:b8:04:a0: 3f:80:66:c5:86:22:1c:51:3a:b7:1b:e2:fe:25:f2: be:16:a9:2a:d9:73:1a:87:43:94:f6:d1:28:4f:21: c5:6a:cc:28:48:c0:cc:4a:70:b0:ec:48:95:31:98: b8:06:c1:01:29:22:41:6e:00:4a:0b:e8:23:8b:5a: 9b:4c:db:75:da:7a:28:a8:e2:f9:08:20:3f:38:11: 88:12:17:0b:f1:66:cf:89:8a:06:71:50:f9:39:97: 7b:77:23:a6:3a:4b:87:8b:cd:a4:21:49:43:b3:72: 30:30:3e:fc:48:40:7c:33:c0:48:c5:18:18:4f:6b: a9:5f:bb:14:fb:a9:24:af:10:07:4c:ff:90:6d:5a: a2:a1:d0:77:c0:a8:29:2a:01:07:7f:9f:70:15:21: ac:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:6E:77:EF:29:D2:61:4D:7F:F7:E3:12:CF:CB:F1:72:BA:2E:D7:64 X509v3 Authority Key Identifier: keyid:C0:2E:32:3F:1B:E1:63:C4:D7:F8:B8:8A:AD:8D:AA:FB:E0:10:6D:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0f:4e:a1:6a:06:95:11:b4:b3:13:e3:de:1d:cc:67:46:c3: ed:15:2c:a7:9e:51:00:29:93:47:1d:c1:ba:d0:5f:fb:b9:0b: 7b:cc:98:66:b2:f4:4f:0b:6e:03:82:a6:65:06:aa:fa:b5:71: d8:09:59:c9:1f:23:65:38:ee:77:4a:94:96:00:3b:9e:ce:dd: 3a:03:04:1f:53:03:3c:51:c4:14:32:10:b7:32:55:d3:29:86: d4:77:0b:90:8b:f3:f7:50:5c:84:bc:9b:3c:d3:d9:1f:a3:71: 15:54:ba:86:36:52:e4:d6:5d:60:bf:f5:cc:98:d1:51:84:72: 09:23:b5:71:b2:0c:f6:ed:7a:c5:d7:a8:0c:48:1f:85:cd:26: 9f:ad:3a:cb:67:de:40:85:41:17:dd:e8:6e:72:72:ca:13:97: 9e:9b:a3:67:75:fe:09:2f:a2:9a:1d:87:cf:0b:83:c4:50:cc: cb:a7:db:db:0b:1f:b9:83:52:6f:67:fd:31:55:58:b9:4d:b9: c5:6d:cf:91:89:70:f9:c1:ef:5e:f0:21:d8:18:47:f4:b5:89: ba:d6:e5:72:8d:4d:f4:0f:98:13:2f:63:c3:63:13:e8:e5:95: 60:ae:0d:b0:be:6b:ee:e3:01:33:9c:b3:b5:a8:99:87:58:50: 01:45:40:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWYAod5d1cQyehYUKVqVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMmUzMjNmMWJlMTYzYzRkN2Y4Yjg4YWFkOGRhYWZiZTAx MDZkNmYwHhcNMjUxMjA2MDEwMTE1WhcNMjUxMjA3MDEwMTE1WjAzMTEwLwYDVQQD EyhjMjZlNzdlZjI5ZDI2MTRkN2ZmN2UzMTJjZmNiZjE3MmJhMmVkNzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNCO1a/XMPG8M6qJcizv3ZiDXPBT /xzGULQn5twkPvlIfea3y9UGciezDRC9J5Knuz+cu9ngrr/axu1rYe20UmxRuO3C KoHVEjoUSBReFSmhgaTCaBmdDlCzcFf4eCVQU7R1hTK4BKA/gGbFhiIcUTq3G+L+ JfK+Fqkq2XMah0OU9tEoTyHFaswoSMDMSnCw7EiVMZi4BsEBKSJBbgBKC+gji1qb TNt12nooqOL5CCA/OBGIEhcL8WbPiYoGcVD5OZd7dyOmOkuHi82kIUlDs3IwMD78 SEB8M8BIxRgYT2upX7sU+6kkrxAHTP+QbVqiodB3wKgpKgEHf59wFSGsdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJud+8p0mFNf/fjEs/L8XK6LtdkMB8GA1UdIwQY MBaAFMAuMj8b4WPE1/i4iq2NqvvgEG1vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0M0eVB4dmhZOFRYLUxpS3JZMnEtLUFRYlc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hYWVkNmItMTQzNC00N2M2LWE3NGQt MWRmMWVjY2RkYzg3LzEvd0M0eVB4dmhZOFRYLUxpS3JZMnEtLUFRYlc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9hYWVkNmItMTQzNC00N2M2LWE3NGQtMWRmMWVjY2RkYzg3 LzEvd0M0eVB4dmhZOFRYLUxpS3JZMnEtLUFRYlc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiw9OoWoG lRG0sxPj3h3MZ0bD7RUsp55RACmTRx3ButBf+7kLe8yYZrL0TwtuA4KmZQaq+rVx 2AlZyR8jZTjud0qUlgA7ns7dOgMEH1MDPFHEFDIQtzJV0ymG1HcLkIvz91BchLyb PNPZH6NxFVS6hjZS5NZdYL/1zJjRUYRyCSO1cbIM9u16xdeoDEgfhc0mn606y2fe QIVBF93obnJyyhOXnpujZ3X+CS+imh2HzwuDxFDMy6fb2wsfuYNSb2f9MVVYuU25 xW3PkYlw+cHvXvAh2BhH9LWJutblco1N9A+YEy9jw2MT6OWVYK4NsL5r7uMBM5yz taiZh1hQAUVAdA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:53 2025 by rpki-client