This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft File: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft (raw, json) Hash identifier: 2gDSB0lfDti1mLBtE0euOd+XtIJFB59gQyobJJK7nJ4= Subject key identifier: 25:19:57:07:A1:75:AF:65:75:8A:33:6C:48:E0:79:E5:1D:4D:27:67 Authority key identifier: C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7 Certificate issuer: /CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7 Certificate serial: 019AF2099BFAF01E4A036A52393494DF7253 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft Manifest number: 09DA Signing time: Sat 06 Dec 2025 05:01:47 +0000 Manifest this update: Sat 06 Dec 2025 05:01:47 +0000 Manifest next update: Sun 07 Dec 2025 05:01:47 +0000 Files and hashes: 1: U3hg_F1n66wHfUJa1B5AwM1jPe0.roa (hash: P69ebvhq55UOViQWYuaYwNEg2G9WcwEDt0JaOwktWKA=) 2: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl (hash: JMgQ7pd0XubIhFmNy1+C2I1gHkl+We90mQcQLEpO9aQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9b:fa:f0:1e:4a:03:6a:52:39:34:94:df:72:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7 Validity Not Before: Dec 6 05:01:47 2025 GMT Not After : Dec 7 05:01:47 2025 GMT Subject: CN=25195707a175af65758a336c48e079e51d4d2767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:76:76:d9:52:7c:92:a4:4d:d8:52:48:32: 3f:c0:0c:3f:3b:39:01:48:7b:76:bf:d2:b0:b4:67: a4:45:d3:3b:c4:53:31:9c:fc:b9:a4:78:56:73:48: 23:03:f9:a2:51:05:93:53:2c:ba:c8:66:f0:55:89: c8:b1:3a:8a:88:5f:84:3a:e0:46:b3:4e:e0:a8:6c: 09:08:b8:d1:a6:e0:cc:da:27:c5:a7:46:ba:73:9a: 20:21:b6:78:64:e6:97:ac:77:eb:6e:e4:ed:49:63: e4:af:e8:b2:12:84:9e:f7:a9:2c:af:03:15:19:ad: e2:ff:a5:02:0e:de:00:2b:58:e9:da:e9:05:ee:89: 3e:8a:aa:7f:e1:fd:10:c6:4c:cc:a6:a1:da:ad:cd: 35:8f:6f:16:ba:87:0c:cc:94:3e:48:22:d2:19:a2: fa:6a:b7:02:44:bc:34:8b:76:37:b3:73:d9:e3:62: 41:8c:f0:c9:4d:32:06:87:94:83:3f:24:42:13:99: e7:11:23:db:f2:5c:30:82:c6:cc:91:64:8f:54:36: ba:07:1c:85:1c:7c:64:3d:f2:fe:ab:53:6b:01:5f: 29:39:35:e1:e4:d7:93:47:e3:46:4e:e8:d5:9e:c0: 93:ca:e6:5c:9c:e4:1c:f9:fd:bb:57:ce:fe:02:f3: 64:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:19:57:07:A1:75:AF:65:75:8A:33:6C:48:E0:79:E5:1D:4D:27:67 X509v3 Authority Key Identifier: keyid:C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:58:04:c1:d2:ce:56:10:39:43:70:50:4a:13:aa:a9:1c:80: f1:a9:89:c1:72:92:57:fb:9c:09:ed:0e:cb:1b:9f:7e:c4:74: b6:77:c5:6c:87:b4:38:10:4b:51:16:8e:2b:8a:b6:0c:b7:85: 1c:99:b7:ea:05:3b:97:54:f5:5a:ce:f1:65:04:5a:ce:f1:11: e8:0d:9a:be:5e:e6:41:68:2e:b7:db:09:81:28:5c:d9:92:bc: cb:f2:4f:24:30:df:c2:4a:87:f1:9c:c1:6b:44:51:3a:e3:9e: 24:3f:aa:87:1d:33:da:a6:13:58:d9:02:bb:13:01:df:77:af: 0d:ac:f8:25:01:1b:78:a7:76:ab:fb:0f:d7:5c:4a:f8:e8:f8: be:2a:07:bb:74:0b:4c:a4:03:bf:a6:e4:d8:d3:15:b1:c7:76: fc:1c:41:3d:d1:84:28:ad:4a:05:bc:44:54:2b:6c:7a:71:52: 1c:95:22:9e:69:f4:65:fd:ac:a7:3a:d1:c6:1c:de:77:88:4a: be:e1:2c:14:4a:b9:6e:e1:13:37:e6:2d:50:65:a9:86:e4:57: bd:e5:7a:95:b5:b8:46:90:03:44:f7:a8:39:fd:ae:99:87:52: 8e:f2:62:d4:5e:25:43:70:b0:93:a2:d2:c6:39:4a:79:0b:84: de:ec:d5:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZv68B5KA2pSOTSU33JTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNmNiNTY0MmU4N2Q0ZTRlMDMwOTA4NDIyOGUyOWU2OTk5 ZWQwYjcwHhcNMjUxMjA2MDUwMTQ3WhcNMjUxMjA3MDUwMTQ3WjAzMTEwLwYDVQQD EygyNTE5NTcwN2ExNzVhZjY1NzU4YTMzNmM0OGUwNzllNTFkNGQyNzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRR2dtlSfJKkTdhSSDI/wAw/OzkB SHt2v9KwtGekRdM7xFMxnPy5pHhWc0gjA/miUQWTUyy6yGbwVYnIsTqKiF+EOuBG s07gqGwJCLjRpuDM2ifFp0a6c5ogIbZ4ZOaXrHfrbuTtSWPkr+iyEoSe96ksrwMV Ga3i/6UCDt4AK1jp2ukF7ok+iqp/4f0QxkzMpqHarc01j28WuocMzJQ+SCLSGaL6 arcCRLw0i3Y3s3PZ42JBjPDJTTIGh5SDPyRCE5nnESPb8lwwgsbMkWSPVDa6BxyF HHxkPfL+q1NrAV8pOTXh5NeTR+NGTujVnsCTyuZcnOQc+f27V87+AvNk/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUZVwehda9ldYozbEjgeeUdTSdnMB8GA1UdIwQY MBaAFMBstWQuh9Tk4DCQhCKOKeaZntC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0d5MVpDNkgxT1RnTUpDRUlvNHA1cG1lMExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hNDAwNjYtMDVlYS00MDNlLWI4ZTct MDdjZjBiMzNhODQ5LzEvd0d5MVpDNkgxT1RnTUpDRUlvNHA1cG1lMExjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9hNDAwNjYtMDVlYS00MDNlLWI4ZTctMDdjZjBiMzNhODQ5 LzEvd0d5MVpDNkgxT1RnTUpDRUlvNHA1cG1lMExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1gEwdLO VhA5Q3BQShOqqRyA8amJwXKSV/ucCe0OyxuffsR0tnfFbIe0OBBLURaOK4q2DLeF HJm36gU7l1T1Ws7xZQRazvER6A2avl7mQWgut9sJgShc2ZK8y/JPJDDfwkqH8ZzB a0RROuOeJD+qhx0z2qYTWNkCuxMB33evDaz4JQEbeKd2q/sP11xK+Oj4vioHu3QL TKQDv6bk2NMVscd2/BxBPdGEKK1KBbxEVCtsenFSHJUinmn0Zf2spzrRxhzed4hK vuEsFEq5buETN+YtUGWphuRXveV6lbW4RpADRPeoOf2umYdSjvJi1F4lQ3Cwk6LS xjlKeQuE3uzV0A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:24 2025 by rpki-client