This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft File: Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft (raw, json) Hash identifier: 58FDXIMLCok1v8sXsF9CnbZGRGaEjYnoGo2JCZZ09jY= Subject key identifier: A7:3B:DF:9B:1C:92:3B:4B:22:CE:59:A0:0D:BD:37:26:35:1D:F0:0E Authority key identifier: 5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F Certificate issuer: /CN=5afd8667cce95be0ae96058c4550d7088035312f Certificate serial: 019AF2E433308C08E35B547FA9EA5E0D1DBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft Manifest number: 13E2 Signing time: Sat 06 Dec 2025 09:00:32 +0000 Manifest this update: Sat 06 Dec 2025 09:00:32 +0000 Manifest next update: Sun 07 Dec 2025 09:00:32 +0000 Files and hashes: 1: 1-Nwco5vWw63pYOoiXeEziJ8cPec.roa (hash: A8og17z+q1WxTvxdTmf8v2Hsh2pkC1lSNWSe2XBfRe4=) 2: NP9ETkcPIfZiSMV55HsJboQ-GHY.roa (hash: cI4wvFFvTdVvpTjPJ+zLUBYHPo+x7aSz3XoVXrfmrY4=) 3: Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl (hash: Cb3PWzDyZ/4n2RQK84b0fLQftKW8m2MSdC/GaBT6SHk=) 4: oASD19FfafZ9Bk1cWcQplzT_eGk.roa (hash: 5KCTISkJIdPY0yxRXHdtjkMOZNoEuDC1m+xGq1kXxdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:33:30:8c:08:e3:5b:54:7f:a9:ea:5e:0d:1d:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5afd8667cce95be0ae96058c4550d7088035312f Validity Not Before: Dec 6 09:00:32 2025 GMT Not After : Dec 7 09:00:32 2025 GMT Subject: CN=a73bdf9b1c923b4b22ce59a00dbd3726351df00e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:98:58:95:62:cc:b8:db:4c:38:d3:d9:67:a7: 3c:71:21:9d:92:2d:c5:d5:09:bd:b9:5e:20:ed:a2: e0:66:02:81:60:79:1a:88:71:d7:fa:b7:82:06:68: 0f:b4:c2:6a:6a:ef:23:b2:0c:52:cf:2a:75:6d:08: eb:1e:dc:05:7b:ac:5b:a2:83:e8:58:e7:2c:d3:27: 34:33:30:27:ff:bc:f2:70:69:e1:d6:64:e0:07:7f: ed:a0:a8:30:77:61:67:42:4a:c4:61:4a:60:e5:23: 6c:50:eb:e4:ab:1e:21:7c:54:dc:1f:b7:7f:a6:36: 82:db:fe:8b:21:12:88:e4:f7:2c:94:ab:a6:c1:c1: cf:d4:27:7a:c7:4a:2b:cf:46:66:f1:02:2c:40:b8: 6a:e0:60:f7:bc:50:cc:c2:0c:3f:de:61:b2:35:e9: 7d:e4:08:5b:53:99:be:95:1b:33:52:38:44:26:c8: 30:36:15:d3:0e:35:b2:3a:0d:0f:cc:3d:8b:05:32: 67:30:5e:67:b9:e0:b9:99:03:92:d3:7b:6f:18:4e: 2f:b9:0b:28:60:63:94:f9:71:22:fd:5c:9a:fb:3b: de:8f:9c:57:2b:96:66:b2:b0:49:3f:cd:92:6a:be: bb:87:86:25:b0:a3:cc:a4:78:06:8f:76:46:43:b7: 5e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3B:DF:9B:1C:92:3B:4B:22:CE:59:A0:0D:BD:37:26:35:1D:F0:0E X509v3 Authority Key Identifier: keyid:5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d4:50:6f:a2:f6:89:fe:e9:f0:42:78:46:c3:8e:60:77:57: ff:50:06:50:ac:e1:67:b9:8e:10:a7:bd:e2:0c:fd:ea:87:55: d0:e3:b0:e2:1f:a0:f4:2d:59:e1:5e:cf:97:b8:dd:4f:a8:cc: 2c:b2:36:7d:af:8e:42:06:05:f2:e3:11:a4:b7:6f:81:f5:a3: fd:43:26:6c:86:cf:f8:c8:43:b9:d4:4c:6c:63:bb:84:8b:d5: d1:69:34:91:de:22:8e:f0:10:92:85:70:ab:1b:53:3a:75:7b: 95:10:7a:a4:9c:51:45:de:36:ac:43:2d:7b:87:8a:87:f2:20: 13:b2:d2:ff:a8:55:65:d5:00:5a:80:55:9b:85:22:7d:ea:27: d2:f3:a7:b4:76:37:ac:47:62:ae:0e:7b:5f:3f:95:e5:ce:ba: 21:d2:83:90:cb:f5:5e:75:23:73:fd:de:a6:3e:da:8e:4c:ee: 01:7f:b9:55:58:fd:76:a7:96:54:d1:66:cf:52:91:07:8a:e4: 62:a3:11:e9:95:a6:b3:74:6b:04:9a:6e:c2:1b:13:96:67:fc: 90:4f:80:ee:97:11:ab:78:4d:d3:4c:7b:7b:76:7d:1b:6f:6a: 8b:51:35:b5:05:0b:7f:45:34:20:0d:a6:2f:f9:a9:70:c2:32: 28:93:6c:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5DMwjAjjW1R/qepeDR29MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZmQ4NjY3Y2NlOTViZTBhZTk2MDU4YzQ1NTBkNzA4ODAz NTMxMmYwHhcNMjUxMjA2MDkwMDMyWhcNMjUxMjA3MDkwMDMyWjAzMTEwLwYDVQQD EyhhNzNiZGY5YjFjOTIzYjRiMjJjZTU5YTAwZGJkMzcyNjM1MWRmMDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1phYlWLMuNtMONPZZ6c8cSGdki3F 1Qm9uV4g7aLgZgKBYHkaiHHX+reCBmgPtMJqau8jsgxSzyp1bQjrHtwFe6xbooPo WOcs0yc0MzAn/7zycGnh1mTgB3/toKgwd2FnQkrEYUpg5SNsUOvkqx4hfFTcH7d/ pjaC2/6LIRKI5PcslKumwcHP1Cd6x0orz0Zm8QIsQLhq4GD3vFDMwgw/3mGyNel9 5AhbU5m+lRszUjhEJsgwNhXTDjWyOg0PzD2LBTJnMF5nueC5mQOS03tvGE4vuQso YGOU+XEi/Vya+zvej5xXK5ZmsrBJP82Sar67h4YlsKPMpHgGj3ZGQ7derQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKc735sckjtLIs5ZoA29NyY1HfAOMB8GA1UdIwQY MBaAFFr9hmfM6VvgrpYFjEVQ1wiANTEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3YyR1o4enBXLUN1bGdXTVJWRFhDSUExTVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9hYWNiMGEtY2Y2NC00ZTc1LWE5ZGYt MjQ5YWM3NzNjMjgyLzEvV3YyR1o4enBXLUN1bGdXTVJWRFhDSUExTVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9hYWNiMGEtY2Y2NC00ZTc1LWE5ZGYtMjQ5YWM3NzNjMjgy LzEvV3YyR1o4enBXLUN1bGdXTVJWRFhDSUExTVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtRQb6L2 if7p8EJ4RsOOYHdX/1AGUKzhZ7mOEKe94gz96odV0OOw4h+g9C1Z4V7Pl7jdT6jM LLI2fa+OQgYF8uMRpLdvgfWj/UMmbIbP+MhDudRMbGO7hIvV0Wk0kd4ijvAQkoVw qxtTOnV7lRB6pJxRRd42rEMte4eKh/IgE7LS/6hVZdUAWoBVm4Uifeon0vOntHY3 rEdirg57Xz+V5c66IdKDkMv1XnUjc/3epj7ajkzuAX+5VVj9dqeWVNFmz1KRB4rk YqMR6ZWms3RrBJpuwhsTlmf8kE+A7pcRq3hN00x7e3Z9G29qi1E1tQULf0U0IA2m L/mpcMIyKJNsMg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:40:20 2025 by rpki-client