This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft File: _wcypCMoB0cBFCIh49RqKfKWwpw.mft (raw, json) Hash identifier: zJKr46QI8ETO47gHm8OzNXUGblc2eAIL4nnMzS8TQt0= Subject key identifier: BD:12:D1:5F:BA:81:B9:A6:D9:72:02:F3:6A:93:5A:53:56:EE:B8:38 Authority key identifier: FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C Certificate issuer: /CN=ff0732a42328074701142221e3d46a29f296c29c Certificate serial: 019AF208D70E0D54FE393983F6875B2B2CDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft Manifest number: 0310 Signing time: Sat 06 Dec 2025 05:00:56 +0000 Manifest this update: Sat 06 Dec 2025 05:00:56 +0000 Manifest next update: Sun 07 Dec 2025 05:00:56 +0000 Files and hashes: 1: 1-dSj2fWJdUO6bz9sc2BYVK5JDQE.roa (hash: dsFKxx55TJI4durjTXMUPKnGnFdN9dd8cpckDwK4aTc=) 2: _wcypCMoB0cBFCIh49RqKfKWwpw.crl (hash: ZBHo4dCebaw/OZCz4YosiDE6l6jAGpQf9fMRHeF1Ixw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d7:0e:0d:54:fe:39:39:83:f6:87:5b:2b:2c:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff0732a42328074701142221e3d46a29f296c29c Validity Not Before: Dec 6 05:00:56 2025 GMT Not After : Dec 7 05:00:56 2025 GMT Subject: CN=bd12d15fba81b9a6d97202f36a935a5356eeb838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7e:12:9c:d9:c6:0c:ba:4b:a5:1f:c1:b8:a9: 3f:43:9b:68:80:ff:f9:01:cf:56:2b:0e:99:89:61: ec:bf:3e:c2:a7:3b:05:5c:52:20:e7:8b:e8:b3:2e: 80:33:6e:f5:56:a6:2d:f8:99:da:e7:84:9c:42:37: 02:2e:9a:8a:14:71:34:29:0c:77:54:e6:48:4b:c3: c3:16:d8:5c:86:a9:f2:77:8a:4a:e5:18:34:2e:0e: 15:b7:93:cd:31:59:ed:0e:ad:8d:c1:9f:b6:83:b3: 1b:00:fc:8a:10:1f:28:24:ec:7f:80:f2:2e:0b:8d: 18:5b:9c:3c:df:2d:62:9c:c9:dc:77:9b:4e:c7:91: 76:26:8f:5c:7d:42:c9:43:b6:78:a1:56:68:54:72: 6e:f9:f2:df:18:91:b1:84:a9:ef:0a:16:6e:f7:db: c5:03:22:2b:cc:ff:24:04:ba:a8:39:00:f4:de:5b: a0:f1:a7:f5:1e:b4:4d:d6:65:88:67:70:86:0d:f2: a1:ac:ee:d6:d3:a7:90:cb:a7:89:b0:14:99:43:d5: ad:86:38:cd:1c:71:10:90:3d:35:4f:48:90:50:4a: 3f:b8:7a:e8:d1:5f:36:0f:1c:08:9b:f6:6c:91:1e: 41:3d:21:84:9e:dd:c1:c0:1b:4c:be:08:76:a6:41: be:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:12:D1:5F:BA:81:B9:A6:D9:72:02:F3:6A:93:5A:53:56:EE:B8:38 X509v3 Authority Key Identifier: keyid:FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:87:bf:d1:c5:84:44:f3:51:d3:ef:75:b2:2f:1a:a2:3c:e7: 14:d3:7f:2a:86:46:2a:33:26:2b:5b:9f:ec:60:47:e2:b8:ad: 98:a3:83:04:e0:2a:a9:60:60:83:37:d1:39:17:6c:92:e5:bc: 2f:74:b8:a4:d8:e6:25:b3:e5:42:1f:65:03:61:4e:9f:b4:e0: 26:d5:37:f0:cb:39:1c:aa:c8:10:af:97:98:01:73:99:4e:5e: 02:d0:c0:f6:2e:4d:38:8d:1a:11:da:a3:33:a3:61:e4:24:08: 46:43:0e:5e:07:ae:c8:9b:f9:44:a4:ce:12:e3:b8:0e:fb:f3: 14:0f:88:24:35:18:36:c2:eb:65:98:7b:3d:89:6b:46:9c:85: 10:f5:53:60:22:aa:e6:f2:4c:8f:01:0a:70:62:e8:f9:24:31: 42:36:17:25:fa:0c:0e:a9:66:48:74:62:55:72:f4:63:ba:4b: bb:af:b1:b7:38:f1:4b:77:87:53:7f:43:43:92:0b:5a:8e:3d: 10:47:1d:40:c5:4c:38:41:a0:21:88:dc:56:9b:bd:54:25:49: f6:01:da:81:2f:1f:9e:ae:b5:46:71:3b:20:a4:07:82:f0:ab: 26:0d:59:e5:5d:1e:a3:d0:96:76:61:4a:d4:22:6a:d0:1e:58: 5c:09:27:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNcODVT+OTmD9odbKyzbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMDczMmE0MjMyODA3NDcwMTE0MjIyMWUzZDQ2YTI5ZjI5 NmMyOWMwHhcNMjUxMjA2MDUwMDU2WhcNMjUxMjA3MDUwMDU2WjAzMTEwLwYDVQQD EyhiZDEyZDE1ZmJhODFiOWE2ZDk3MjAyZjM2YTkzNWE1MzU2ZWViODM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX4SnNnGDLpLpR/BuKk/Q5togP/5 Ac9WKw6ZiWHsvz7CpzsFXFIg54vosy6AM271VqYt+Jna54ScQjcCLpqKFHE0KQx3 VOZIS8PDFthchqnyd4pK5Rg0Lg4Vt5PNMVntDq2NwZ+2g7MbAPyKEB8oJOx/gPIu C40YW5w83y1inMncd5tOx5F2Jo9cfULJQ7Z4oVZoVHJu+fLfGJGxhKnvChZu99vF AyIrzP8kBLqoOQD03lug8af1HrRN1mWIZ3CGDfKhrO7W06eQy6eJsBSZQ9WthjjN HHEQkD01T0iQUEo/uHro0V82DxwIm/ZskR5BPSGEnt3BwBtMvgh2pkG+awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0S0V+6gbmm2XIC82qTWlNW7rg4MB8GA1UdIwQY MBaAFP8HMqQjKAdHARQiIePUainylsKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3djeXBDTW9CMGNCRkNJaDQ5UnFLZktXd3B3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jNDk3NWYtZWE5NC00M2E3LTkzMjYt N2NhMjJiYTE0MWIzLzEvX3djeXBDTW9CMGNCRkNJaDQ5UnFLZktXd3B3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9jNDk3NWYtZWE5NC00M2E3LTkzMjYtN2NhMjJiYTE0MWIz LzEvX3djeXBDTW9CMGNCRkNJaDQ5UnFLZktXd3B3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoe/0cWE RPNR0+91si8aojznFNN/KoZGKjMmK1uf7GBH4ritmKODBOAqqWBggzfRORdskuW8 L3S4pNjmJbPlQh9lA2FOn7TgJtU38Ms5HKrIEK+XmAFzmU5eAtDA9i5NOI0aEdqj M6Nh5CQIRkMOXgeuyJv5RKTOEuO4DvvzFA+IJDUYNsLrZZh7PYlrRpyFEPVTYCKq 5vJMjwEKcGLo+SQxQjYXJfoMDqlmSHRiVXL0Y7pLu6+xtzjxS3eHU39DQ5ILWo49 EEcdQMVMOEGgIYjcVpu9VCVJ9gHagS8fnq61RnE7IKQHgvCrJg1Z5V0eo9CWdmFK 1CJq0B5YXAknnA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:09 2025 by rpki-client