This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft File: wQohI_VJJk58u5-iHSxRN3IUhuQ.mft (raw, json) Hash identifier: rssgQh3mCp1AKBnP++69XgqnDFzssE0M75VEqyiSnEs= Subject key identifier: 7C:DB:BD:25:52:42:34:D5:C4:72:2F:E9:E0:96:87:2B:B1:8B:F0:1F Authority key identifier: C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4 Certificate issuer: /CN=c10a2123f549264e7cbb9fa21d2c5137721486e4 Certificate serial: 019AF277258BB166DAEB453787C3E9DF26AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:01:25 +0000 Manifest this update: Sat 06 Dec 2025 07:01:25 +0000 Manifest next update: Sun 07 Dec 2025 07:01:25 +0000 Files and hashes: 1: XEsqeKOf3nUKp6N27Tk-w17zShA.roa (hash: k+ZjcSbWsbCQX+BZ6yWaMdK9CN57/SVKpUlCaIxWc4g=) 2: wQohI_VJJk58u5-iHSxRN3IUhuQ.crl (hash: x/wltUJrSRI/YdsXFE8kPqB7HKYWD5HUpwsZ8d2I24o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:25:8b:b1:66:da:eb:45:37:87:c3:e9:df:26:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c10a2123f549264e7cbb9fa21d2c5137721486e4 Validity Not Before: Dec 6 07:01:25 2025 GMT Not After : Dec 7 07:01:25 2025 GMT Subject: CN=7cdbbd25524234d5c4722fe9e096872bb18bf01f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:15:03:63:ad:5a:67:cd:9e:3e:fa:48:02:9a: ad:f6:d6:05:6d:fe:9b:f4:55:14:a0:0e:4c:00:b6: 52:f5:a0:38:3b:6c:5e:d6:5f:da:4c:e2:17:d6:f3: 97:b9:bc:d7:de:6e:86:0f:c5:ca:0e:a9:02:2b:52: d8:3c:59:21:96:ec:ad:fc:99:77:06:44:11:06:6b: 3d:fb:15:ec:03:d9:71:f9:9e:db:d8:c6:4f:f9:ff: 65:ce:a5:7f:a3:d0:45:6f:f9:41:09:5a:77:ce:f6: cc:68:bd:75:b5:c3:f5:93:b3:a2:71:71:f0:c2:dc: f9:5e:8c:9c:da:c5:8d:c8:09:72:8f:fb:6b:ce:7b: c6:a1:2c:a6:4a:a5:9e:c5:b1:c5:30:e4:7a:8d:98: 46:5a:f2:1e:d5:7c:d9:9c:66:45:19:3f:ee:12:89: b5:27:1b:b3:b7:db:8a:9f:3e:b7:cb:c6:4c:12:4b: a4:89:32:c4:dd:ba:87:9c:b5:92:b3:47:2d:98:2b: 66:ab:90:25:b2:4b:d6:8d:cc:6a:e9:d8:13:1c:e0: 4c:00:ad:e3:23:fb:1a:e0:d6:17:12:3e:89:d7:0b: 79:cc:07:a0:cf:0b:12:71:cd:6f:a5:84:b5:97:63: 9c:d2:01:51:8c:08:29:db:16:f7:db:f2:51:55:27: 1c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DB:BD:25:52:42:34:D5:C4:72:2F:E9:E0:96:87:2B:B1:8B:F0:1F X509v3 Authority Key Identifier: keyid:C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:7e:4b:3c:db:6b:7c:a3:45:73:b8:96:42:b4:16:3b:8d:eb: 31:33:e0:b3:9f:43:f3:17:e6:ff:2d:b8:bc:28:e4:81:bf:65: aa:20:81:4c:81:95:66:15:f3:9a:60:20:8b:3c:63:7d:97:80: bb:04:ce:16:ec:8b:8f:ce:f9:85:a9:0c:ad:5a:b7:1f:4f:aa: 00:fd:88:6d:ce:48:a9:95:0c:71:34:40:b6:24:13:dc:f0:0d: a0:3c:f4:8e:01:06:59:67:66:77:34:1f:a8:ab:4c:ce:f4:44: 9a:de:1e:e5:cc:a5:df:13:a3:30:50:80:e2:6d:eb:fa:33:8e: 57:fe:71:aa:ab:86:ce:d6:33:f4:32:56:f9:de:4a:8a:72:2c: 10:ce:38:3f:13:68:a3:b1:9e:d2:65:5f:2c:fb:de:0d:31:d6: b1:f1:2b:2a:6a:89:12:c2:3e:05:ea:ab:c3:3b:70:68:28:d6: c7:f3:eb:83:fe:d0:87:8f:10:c9:ea:e9:01:1e:e5:a0:9b:80: 28:0c:82:b8:65:2c:06:fe:26:27:5a:1a:4e:d0:46:96:ff:f3: 62:c9:68:ca:55:2b:ea:14:4b:27:73:2b:87:6a:59:e2:66:5c: 63:97:53:d0:89:38:91:bf:60:ef:d9:71:0e:db:0c:18:72:85: 73:28:26:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyWLsWba60U3h8Pp3yarMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMGEyMTIzZjU0OTI2NGU3Y2JiOWZhMjFkMmM1MTM3NzIx NDg2ZTQwHhcNMjUxMjA2MDcwMTI1WhcNMjUxMjA3MDcwMTI1WjAzMTEwLwYDVQQD Eyg3Y2RiYmQyNTUyNDIzNGQ1YzQ3MjJmZTllMDk2ODcyYmIxOGJmMDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBUDY61aZ82ePvpIApqt9tYFbf6b 9FUUoA5MALZS9aA4O2xe1l/aTOIX1vOXubzX3m6GD8XKDqkCK1LYPFkhluyt/Jl3 BkQRBms9+xXsA9lx+Z7b2MZP+f9lzqV/o9BFb/lBCVp3zvbMaL11tcP1k7OicXHw wtz5Xoyc2sWNyAlyj/trznvGoSymSqWexbHFMOR6jZhGWvIe1XzZnGZFGT/uEom1 Jxuzt9uKnz63y8ZMEkukiTLE3bqHnLWSs0ctmCtmq5AlskvWjcxq6dgTHOBMAK3j I/sa4NYXEj6J1wt5zAegzwsScc1vpYS1l2Oc0gFRjAgp2xb32/JRVScc+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzbvSVSQjTVxHIv6eCWhyuxi/AfMB8GA1UdIwQY MBaAFMEKISP1SSZOfLufoh0sUTdyFIbkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FvaElfVkpKazU4dTUtaUhTeFJOM0lVaHVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mNzVkMTYtNDAzOS00NmNhLThiMWUt YWRiMzAwZjcyMjVhLzEvd1FvaElfVkpKazU4dTUtaUhTeFJOM0lVaHVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9mNzVkMTYtNDAzOS00NmNhLThiMWUtYWRiMzAwZjcyMjVh LzEvd1FvaElfVkpKazU4dTUtaUhTeFJOM0lVaHVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApH5LPNtr fKNFc7iWQrQWO43rMTPgs59D8xfm/y24vCjkgb9lqiCBTIGVZhXzmmAgizxjfZeA uwTOFuyLj875hakMrVq3H0+qAP2Ibc5IqZUMcTRAtiQT3PANoDz0jgEGWWdmdzQf qKtMzvREmt4e5cyl3xOjMFCA4m3r+jOOV/5xqquGztYz9DJW+d5KinIsEM44PxNo o7Ge0mVfLPveDTHWsfErKmqJEsI+BeqrwztwaCjWx/Prg/7Qh48QyerpAR7loJuA KAyCuGUsBv4mJ1oaTtBGlv/zYsloylUr6hRLJ3Mrh2pZ4mZcY5dT0Ik4kb9g79lx DtsMGHKFcygmRA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:43 2025 by rpki-client