This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft File: _wcypCMoB0cBFCIh49RqKfKWwpw.mft (raw, json) Hash identifier: 78Pph0L2uF6kQFGBSlFTRvLUIxoFumyAnzyjxj9MAWg= Subject key identifier: C3:08:54:E0:35:16:16:13:98:71:00:48:27:F7:1C:6B:BC:30:30:25 Authority key identifier: FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C Certificate issuer: /CN=ff0732a42328074701142221e3d46a29f296c29c Certificate serial: 019B2BF8D6F01C02AD69BFBBFBFFD3C16053 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft Manifest number: 032E Signing time: Wed 17 Dec 2025 11:01:26 +0000 Manifest this update: Wed 17 Dec 2025 11:01:26 +0000 Manifest next update: Thu 18 Dec 2025 11:01:26 +0000 Files and hashes: 1: 1-dSj2fWJdUO6bz9sc2BYVK5JDQE.roa (hash: dsFKxx55TJI4durjTXMUPKnGnFdN9dd8cpckDwK4aTc=) 2: _wcypCMoB0cBFCIh49RqKfKWwpw.crl (hash: aR09j1lJ+Y+f8GrzhkAzizFAC/pDQSdeTdSXlDuqtSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:d6:f0:1c:02:ad:69:bf:bb:fb:ff:d3:c1:60:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff0732a42328074701142221e3d46a29f296c29c Validity Not Before: Dec 17 11:01:26 2025 GMT Not After : Dec 18 11:01:26 2025 GMT Subject: CN=c30854e0351616139871004827f71c6bbc303025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:11:ab:65:44:c9:be:ad:4f:2a:63:91:88:1f: 9a:83:35:d0:5d:f8:d6:3c:c2:d3:d0:88:79:4c:c8: 1b:3c:a0:40:9d:38:2e:43:06:d0:aa:e3:05:05:9b: 8d:76:f4:3f:26:48:dd:0b:00:56:1f:eb:d9:db:a9: 58:5b:08:10:0f:58:3a:14:93:04:61:3b:f5:d1:3c: c7:11:7a:22:7b:7e:7d:26:6a:69:18:d1:fd:2e:5c: 15:21:1f:96:4d:cd:4f:39:b7:62:40:23:0a:28:5c: f6:eb:3d:24:e8:37:9c:f7:4a:91:8e:4c:07:d7:96: 15:e1:0f:b6:36:56:b2:b5:d8:d8:0d:06:48:ee:69: 36:38:8c:e5:73:6a:56:6e:95:5f:6d:30:d8:0a:bf: 8a:b0:32:26:38:a8:7e:e9:f2:70:61:db:3f:53:33: 5c:a8:3c:9c:0e:ce:40:d1:72:4f:6e:d8:97:48:ac: 05:fb:b2:20:4e:74:42:aa:81:d5:c2:03:0f:8b:15: c7:d5:57:c7:89:04:96:28:20:7e:72:29:8c:93:98: 1d:fd:9e:2b:03:40:89:2e:7b:0e:e8:6b:73:bb:7f: 98:5f:02:40:ae:8c:28:0c:ed:66:8d:b8:b5:42:c5: fe:2e:c6:ac:7c:ae:13:c8:96:30:87:24:15:64:55: 84:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:08:54:E0:35:16:16:13:98:71:00:48:27:F7:1C:6B:BC:30:30:25 X509v3 Authority Key Identifier: keyid:FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:1a:e2:4c:40:a8:72:d2:bd:30:bb:8d:8f:64:8c:65:8a:6a: cf:38:2d:d4:84:6b:6f:11:e9:6e:e5:05:75:ec:bb:7a:2e:3d: 6a:93:56:ca:08:dd:a5:4f:c5:8f:45:63:d2:f6:80:f2:2c:5b: 95:1a:25:bc:8d:e0:7e:67:ed:14:dd:c5:bd:7b:f0:9e:b8:b1: 0e:61:2e:dc:ca:1a:dd:04:65:71:a1:3d:43:3c:0c:8f:25:ce: ef:2d:fd:7c:41:4d:f5:90:8e:6b:a4:6c:39:40:62:84:64:47: 00:59:ca:8e:ec:8a:be:4c:ef:d2:4c:3b:28:ac:97:c9:65:b7: 4d:25:d3:43:90:fe:6d:61:9f:76:7b:32:76:df:63:00:7c:b4: a1:c4:2f:2b:eb:d3:20:6d:53:50:cd:a0:70:cd:7d:b8:f9:50: 8e:ae:e1:96:e9:86:54:89:39:96:c0:fd:84:c5:63:06:b5:bb: e0:ae:18:0d:27:e4:9a:12:93:f2:dd:5f:9a:72:2e:3a:0b:21: 10:fd:26:71:b7:96:7b:7f:17:6b:34:dc:5d:c5:d6:b0:53:10: 00:52:29:42:0a:af:6b:d5:b2:cf:7d:8d:c3:0e:c5:94:02:b1: de:76:3d:88:51:a6:31:62:7d:71:43:78:85:0e:d9:19:5b:6d: f1:f0:0a:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+NbwHAKtab+7+//TwWBTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMDczMmE0MjMyODA3NDcwMTE0MjIyMWUzZDQ2YTI5ZjI5 NmMyOWMwHhcNMjUxMjE3MTEwMTI2WhcNMjUxMjE4MTEwMTI2WjAzMTEwLwYDVQQD EyhjMzA4NTRlMDM1MTYxNjEzOTg3MTAwNDgyN2Y3MWM2YmJjMzAzMDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhGrZUTJvq1PKmORiB+agzXQXfjW PMLT0Ih5TMgbPKBAnTguQwbQquMFBZuNdvQ/JkjdCwBWH+vZ26lYWwgQD1g6FJME YTv10TzHEXoie359JmppGNH9LlwVIR+WTc1PObdiQCMKKFz26z0k6Dec90qRjkwH 15YV4Q+2NlaytdjYDQZI7mk2OIzlc2pWbpVfbTDYCr+KsDImOKh+6fJwYds/UzNc qDycDs5A0XJPbtiXSKwF+7IgTnRCqoHVwgMPixXH1VfHiQSWKCB+cimMk5gd/Z4r A0CJLnsO6Gtzu3+YXwJArowoDO1mjbi1QsX+LsasfK4TyJYwhyQVZFWE6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMIVOA1FhYTmHEASCf3HGu8MDAlMB8GA1UdIwQY MBaAFP8HMqQjKAdHARQiIePUainylsKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3djeXBDTW9CMGNCRkNJaDQ5UnFLZktXd3B3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jNDk3NWYtZWE5NC00M2E3LTkzMjYt N2NhMjJiYTE0MWIzLzEvX3djeXBDTW9CMGNCRkNJaDQ5UnFLZktXd3B3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9jNDk3NWYtZWE5NC00M2E3LTkzMjYtN2NhMjJiYTE0MWIz LzEvX3djeXBDTW9CMGNCRkNJaDQ5UnFLZktXd3B3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRriTECo ctK9MLuNj2SMZYpqzzgt1IRrbxHpbuUFdey7ei49apNWygjdpU/Fj0Vj0vaA8ixb lRolvI3gfmftFN3FvXvwnrixDmEu3Moa3QRlcaE9QzwMjyXO7y39fEFN9ZCOa6Rs OUBihGRHAFnKjuyKvkzv0kw7KKyXyWW3TSXTQ5D+bWGfdnsydt9jAHy0ocQvK+vT IG1TUM2gcM19uPlQjq7hlumGVIk5lsD9hMVjBrW74K4YDSfkmhKT8t1fmnIuOgsh EP0mcbeWe38XazTcXcXWsFMQAFIpQgqva9Wyz32Nww7FlAKx3nY9iFGmMWJ9cUN4 hQ7ZGVtt8fAKkQ== -----END CERTIFICATE-----Generated at Wed Dec 17 17:45:20 2025 by rpki-client