This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft File: wvMmbgYS2DFPTp-So9uLyyU-2rw.mft (raw, json) Hash identifier: G99WE1Rvs8RbGNxJD6G7wfKJPYq9dCxj5Cbe+2CBNhM= Subject key identifier: B8:A3:27:8B:8D:CF:A4:BF:70:97:F4:01:8A:9B:40:0F:7C:42:2F:3C Authority key identifier: C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC Certificate issuer: /CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc Certificate serial: 019AF50B7B7743E597E0ED490EA8EC1BB4D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft Manifest number: 0BC2 Signing time: Sat 06 Dec 2025 19:02:41 +0000 Manifest this update: Sat 06 Dec 2025 19:02:41 +0000 Manifest next update: Sun 07 Dec 2025 19:02:41 +0000 Files and hashes: 1: 9QfEv6VDYJHwg-_mBcw3nPg902w.roa (hash: bDGQkiI5avL3G45Js05YIuwiQofAZ2dxukXBkwwmDkY=) 2: wvMmbgYS2DFPTp-So9uLyyU-2rw.crl (hash: vgUen0LveIyThwK8rTfxiuKOMgqfUcErxQpLzDA9QZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:7b:77:43:e5:97:e0:ed:49:0e:a8:ec:1b:b4:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc Validity Not Before: Dec 6 19:02:41 2025 GMT Not After : Dec 7 19:02:41 2025 GMT Subject: CN=b8a3278b8dcfa4bf7097f4018a9b400f7c422f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d6:e8:d5:a8:6e:92:cd:3a:e7:3a:86:39:5a: 88:57:30:4f:09:1e:7a:bd:aa:da:ee:8a:13:32:e6: 5b:f2:75:49:5b:53:9e:34:4a:4a:68:45:15:72:b4: ce:c7:ac:65:da:83:82:b9:7e:3c:08:86:63:d0:aa: bf:0f:9b:ed:38:9c:8e:3a:74:6f:e0:32:3e:49:81: 96:a4:65:5e:17:0e:d1:10:f5:63:8f:77:3f:28:a5: 51:d5:a4:67:c0:16:40:e0:f5:4a:04:d7:2b:34:72: 85:3f:ea:18:f1:91:f8:f3:1c:f7:b6:cc:bb:cf:01: b3:e9:6b:64:e0:44:54:be:bf:6f:68:5e:e9:16:0e: 22:e9:ee:4e:76:c7:a9:ab:03:bb:7b:9a:ee:4e:8b: c6:81:46:ae:cf:43:b0:ba:ed:7d:7e:4c:8c:47:ac: 04:ea:af:2e:55:dd:6a:32:4c:56:8e:d1:b2:25:7a: 51:9b:29:2c:3d:8e:de:bf:d5:64:63:d4:48:94:c5: 50:75:8c:23:21:aa:99:4a:91:9b:1f:95:1a:7d:0d: 5d:d0:f3:f4:fe:67:96:d2:15:38:34:d0:38:de:a9: 63:38:1c:52:63:a8:cf:d2:29:32:f5:45:c9:e2:02: 5a:89:fc:c2:4f:8e:f9:94:ce:11:87:78:6e:01:dd: d2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A3:27:8B:8D:CF:A4:BF:70:97:F4:01:8A:9B:40:0F:7C:42:2F:3C X509v3 Authority Key Identifier: keyid:C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:fc:fb:62:7b:13:1c:de:2c:c3:59:66:3a:a4:7f:2a:52:46: fd:b7:f1:e4:0b:4e:f4:c7:f9:86:1e:1c:5d:a1:11:71:78:24: fc:cd:16:72:7d:1e:94:c3:48:09:31:bb:21:7a:b2:dd:b0:16: 41:81:49:87:22:51:2a:02:c6:38:c9:7d:f7:eb:01:a8:27:f5: fc:66:f5:d6:eb:2e:ec:db:40:c8:a2:6c:a1:3c:b2:bf:b1:90: 71:e5:35:63:bc:be:49:e6:e8:8e:ed:dc:c1:ea:bf:de:93:b4: 76:89:f0:94:21:74:8d:83:76:c1:de:64:65:df:41:36:45:ba: fd:78:6e:21:f9:48:d1:0b:bb:00:e6:bb:b9:5e:06:8c:51:43: 62:9d:d9:41:1e:33:a1:ff:da:b2:c9:d9:4f:ca:c9:39:e4:e5: be:68:00:d4:12:5a:3a:a5:58:3e:ed:a5:07:67:93:5c:bb:84: a8:38:4c:ff:58:d3:c9:a6:de:75:ef:09:e1:10:df:97:7f:00: 5c:69:19:1d:13:af:c9:8d:61:ae:38:f4:43:54:4b:46:eb:08: 0c:55:08:02:8a:25:9e:4b:4d:ce:b6:99:d1:4f:17:e7:ba:7c: 73:07:6c:e8:8a:99:9e:3d:a4:44:ea:6d:31:98:e3:86:eb:55: 35:3f:01:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C3t3Q+WX4O1JDqjsG7TWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZjMyNjZlMDYxMmQ4MzE0ZjRlOWY5MmEzZGI4YmNiMjUz ZWRhYmMwHhcNMjUxMjA2MTkwMjQxWhcNMjUxMjA3MTkwMjQxWjAzMTEwLwYDVQQD EyhiOGEzMjc4YjhkY2ZhNGJmNzA5N2Y0MDE4YTliNDAwZjdjNDIyZjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdbo1ahuks065zqGOVqIVzBPCR56 vara7ooTMuZb8nVJW1OeNEpKaEUVcrTOx6xl2oOCuX48CIZj0Kq/D5vtOJyOOnRv 4DI+SYGWpGVeFw7REPVjj3c/KKVR1aRnwBZA4PVKBNcrNHKFP+oY8ZH48xz3tsy7 zwGz6Wtk4ERUvr9vaF7pFg4i6e5OdsepqwO7e5ruTovGgUauz0Owuu19fkyMR6wE 6q8uVd1qMkxWjtGyJXpRmyksPY7ev9VkY9RIlMVQdYwjIaqZSpGbH5UafQ1d0PP0 /meW0hU4NNA43qljOBxSY6jP0iky9UXJ4gJaifzCT475lM4Rh3huAd3S2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLijJ4uNz6S/cJf0AYqbQA98Qi88MB8GA1UdIwQY MBaAFMLzJm4GEtgxT06fkqPbi8slPtq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3ZNbWJnWVMyREZQVHAtU285dUx5eVUtMnJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kY2VhY2YtZGFlMi00NzYzLWIzOTkt MmZiOTlmZTVlNDc3LzEvd3ZNbWJnWVMyREZQVHAtU285dUx5eVUtMnJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9kY2VhY2YtZGFlMi00NzYzLWIzOTktMmZiOTlmZTVlNDc3 LzEvd3ZNbWJnWVMyREZQVHAtU285dUx5eVUtMnJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/z7YnsT HN4sw1lmOqR/KlJG/bfx5AtO9Mf5hh4cXaERcXgk/M0Wcn0elMNICTG7IXqy3bAW QYFJhyJRKgLGOMl99+sBqCf1/Gb11usu7NtAyKJsoTyyv7GQceU1Y7y+Seboju3c weq/3pO0donwlCF0jYN2wd5kZd9BNkW6/XhuIflI0Qu7AOa7uV4GjFFDYp3ZQR4z of/assnZT8rJOeTlvmgA1BJaOqVYPu2lB2eTXLuEqDhM/1jTyabede8J4RDfl38A XGkZHROvyY1hrjj0Q1RLRusIDFUIAoolnktNzraZ0U8X57p8cwds6IqZnj2kROpt MZjjhutVNT8BCw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:54:54 2025 by rpki-client