This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft File: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft (raw, json) Hash identifier: 2xPXenN2d3l7iqlUISv4IB+CHnn+JxyafH6XdEjd9O8= Subject key identifier: 0F:B2:C9:7C:A0:3A:11:8F:DF:7F:1A:0C:5C:8E:BC:9A:7F:21:85:94 Authority key identifier: C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7 Certificate issuer: /CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7 Certificate serial: 019B2BF8CEB037B2D1B324BC3B88E96A8F86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft Manifest number: 09F8 Signing time: Wed 17 Dec 2025 11:01:24 +0000 Manifest this update: Wed 17 Dec 2025 11:01:24 +0000 Manifest next update: Thu 18 Dec 2025 11:01:24 +0000 Files and hashes: 1: U3hg_F1n66wHfUJa1B5AwM1jPe0.roa (hash: P69ebvhq55UOViQWYuaYwNEg2G9WcwEDt0JaOwktWKA=) 2: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl (hash: OOf91YMcEt/YFXXkSdTCc7T/8nwJn+FBX0YoqNaltcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:ce:b0:37:b2:d1:b3:24:bc:3b:88:e9:6a:8f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7 Validity Not Before: Dec 17 11:01:24 2025 GMT Not After : Dec 18 11:01:24 2025 GMT Subject: CN=0fb2c97ca03a118fdf7f1a0c5c8ebc9a7f218594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f4:15:ed:fa:36:32:09:51:c2:75:f3:ce:84: 9a:4d:2c:9e:f3:71:55:86:07:5d:dc:e1:fb:28:49: ca:32:19:4a:67:87:86:f2:24:00:aa:19:f3:34:22: 82:35:6c:02:b3:3f:f4:ea:15:5e:5b:30:03:0d:63: 27:f2:35:eb:57:34:21:01:c6:8d:05:c0:5b:c6:5d: a7:28:66:7a:65:2e:d2:49:1f:65:5e:69:ef:f7:87: 5c:25:95:c0:7c:56:2f:d7:13:25:19:67:be:34:de: 19:85:18:4b:04:56:06:ca:46:f6:dd:4e:3b:a7:04: 0e:c3:b1:59:bc:07:45:57:13:8e:28:2d:0b:a0:67: 09:94:e1:5d:df:80:8f:7a:84:38:d2:61:f9:1c:93: 38:19:52:a1:04:4b:38:e6:03:92:97:26:ce:ec:87: 2a:fe:94:cd:ab:f2:39:ea:c2:d9:90:cf:c7:58:e3: 27:bc:d2:72:b1:b4:c5:6a:c0:1c:2c:8a:70:61:52: e9:69:9a:42:5f:8d:de:f6:79:80:9e:dd:fb:2d:06: 63:65:49:c7:28:d5:e0:b8:f9:7a:a2:93:3a:4c:38: 39:c6:34:50:ef:61:ce:a5:29:b8:d2:8b:b8:0b:99: 55:fa:cf:02:a1:3a:66:df:c7:ad:f8:1a:7f:10:ff: 9e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B2:C9:7C:A0:3A:11:8F:DF:7F:1A:0C:5C:8E:BC:9A:7F:21:85:94 X509v3 Authority Key Identifier: keyid:C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:93:60:05:b9:06:f0:a0:36:3b:3c:63:d4:17:2d:2d:a9:1b: 57:97:81:37:b3:b4:98:dc:3a:29:57:a7:46:df:ca:de:cc:f2: 78:44:09:27:a3:03:87:96:1e:34:f3:b4:53:3c:21:93:81:91: d9:ee:24:b9:42:27:e0:a1:d6:c6:0c:29:73:91:63:a9:e5:73: 5d:c5:45:7b:ee:a2:5e:3e:a5:64:2b:8d:f5:25:6a:ec:49:d4: 49:32:de:e6:19:6c:4a:83:52:39:24:61:91:d4:29:7b:a0:4b: 56:68:e2:9f:4d:e7:6c:90:4c:f3:19:ba:a7:b7:cf:9a:d8:09: 0b:c1:d9:9f:2f:fd:8a:9c:8e:64:bc:52:73:37:4a:cb:18:17: f0:9c:69:e3:d3:42:f3:d1:af:f7:c7:c7:1c:af:d1:36:af:3a: bf:c5:cb:45:14:39:e5:63:a7:6b:2b:61:1b:02:02:de:75:43: 57:7a:8a:55:a0:b5:ce:b8:3f:18:9e:32:46:d5:f9:2d:d0:9d: 3e:fb:87:1a:9a:55:8c:bc:49:aa:ca:71:e3:51:bb:8c:5b:c8: 6a:03:37:f5:0b:9f:2d:b7:2b:aa:4a:c8:69:a0:94:71:68:74: 05:d1:29:ba:93:bc:58:14:7f:c0:09:ed:7c:37:3b:92:ef:48: 35:bb:2b:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+M6wN7LRsyS8O4jpao+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNmNiNTY0MmU4N2Q0ZTRlMDMwOTA4NDIyOGUyOWU2OTk5 ZWQwYjcwHhcNMjUxMjE3MTEwMTI0WhcNMjUxMjE4MTEwMTI0WjAzMTEwLwYDVQQD EygwZmIyYzk3Y2EwM2ExMThmZGY3ZjFhMGM1YzhlYmM5YTdmMjE4NTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvQV7fo2MglRwnXzzoSaTSye83FV hgdd3OH7KEnKMhlKZ4eG8iQAqhnzNCKCNWwCsz/06hVeWzADDWMn8jXrVzQhAcaN BcBbxl2nKGZ6ZS7SSR9lXmnv94dcJZXAfFYv1xMlGWe+NN4ZhRhLBFYGykb23U47 pwQOw7FZvAdFVxOOKC0LoGcJlOFd34CPeoQ40mH5HJM4GVKhBEs45gOSlybO7Icq /pTNq/I56sLZkM/HWOMnvNJysbTFasAcLIpwYVLpaZpCX43e9nmAnt37LQZjZUnH KNXguPl6opM6TDg5xjRQ72HOpSm40ou4C5lV+s8CoTpm38et+Bp/EP+eiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+yyXygOhGP338aDFyOvJp/IYWUMB8GA1UdIwQY MBaAFMBstWQuh9Tk4DCQhCKOKeaZntC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0d5MVpDNkgxT1RnTUpDRUlvNHA1cG1lMExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hNDAwNjYtMDVlYS00MDNlLWI4ZTct MDdjZjBiMzNhODQ5LzEvd0d5MVpDNkgxT1RnTUpDRUlvNHA1cG1lMExjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9hNDAwNjYtMDVlYS00MDNlLWI4ZTctMDdjZjBiMzNhODQ5 LzEvd0d5MVpDNkgxT1RnTUpDRUlvNHA1cG1lMExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr5NgBbkG 8KA2Ozxj1BctLakbV5eBN7O0mNw6KVenRt/K3szyeEQJJ6MDh5YeNPO0Uzwhk4GR 2e4kuUIn4KHWxgwpc5FjqeVzXcVFe+6iXj6lZCuN9SVq7EnUSTLe5hlsSoNSOSRh kdQpe6BLVmjin03nbJBM8xm6p7fPmtgJC8HZny/9ipyOZLxSczdKyxgX8Jxp49NC 89Gv98fHHK/RNq86v8XLRRQ55WOnaythGwIC3nVDV3qKVaC1zrg/GJ4yRtX5LdCd PvuHGppVjLxJqspx41G7jFvIagM39QufLbcrqkrIaaCUcWh0BdEpupO8WBR/wAnt fDc7ku9INbsrEg== -----END CERTIFICATE-----Generated at Wed Dec 17 15:26:37 2025 by rpki-client