This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft File: wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft (raw, json) Hash identifier: 1Dc2M0E0FwMG/degHOBeOXx80lOJF927Svkpf7/9GSE= Subject key identifier: 97:57:62:61:54:52:27:4E:41:26:CE:59:11:32:92:B5:56:23:A3:29 Authority key identifier: C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4 Certificate issuer: /CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4 Certificate serial: 019AF50B038811F0820C22A54432A83CB80F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft Manifest number: 1389 Signing time: Sat 06 Dec 2025 19:02:10 +0000 Manifest this update: Sat 06 Dec 2025 19:02:10 +0000 Manifest next update: Sun 07 Dec 2025 19:02:10 +0000 Files and hashes: 1: 2tiVBKWJb3sKibII0w4_JEP8cX8.roa (hash: yXLW83i0e/6bCMs04Sj4WwVKDgNnsbMkg4zpZba2Js0=) 2: wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl (hash: Z/YhgxdQ1EwJPaj7I/i3Qy6fF9R1PJ89XizphkgNh8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:03:88:11:f0:82:0c:22:a5:44:32:a8:3c:b8:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4 Validity Not Before: Dec 6 19:02:10 2025 GMT Not After : Dec 7 19:02:10 2025 GMT Subject: CN=975762615452274e4126ce59113292b55623a329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:85:a6:db:b5:62:a1:e7:64:27:9d:93:20:4d: 4a:5c:4a:71:2c:b7:4c:4c:84:cf:19:9d:7e:bd:bd: 2a:ab:d7:8e:9d:39:9f:0c:05:f2:04:65:7e:73:5e: 4c:6f:b6:bc:96:31:42:bb:9a:20:ae:b3:8f:18:ad: b0:8a:db:4e:25:5a:84:25:d1:e1:35:0f:0c:3a:26: 03:ba:f7:59:d1:4d:f8:49:ce:82:89:3c:0a:99:6d: 65:e0:eb:6b:a3:a8:89:c6:df:c1:23:f2:c3:c8:17: 7a:b6:73:28:08:84:24:48:05:d8:5d:89:5c:39:ed: 44:22:38:d5:24:e8:c5:8b:b9:28:f1:fa:37:8b:c5: fa:d4:b8:05:5e:41:b5:0b:56:09:52:b4:78:a4:44: d9:26:f7:8b:d2:45:5a:7f:20:b9:28:f3:1e:73:77: d3:66:e2:7d:7d:20:7e:e1:67:aa:8e:ed:c8:75:33: 21:be:51:3e:46:67:ec:6c:34:d0:84:77:89:62:fe: 9e:01:95:f1:34:b7:ef:5d:71:7f:0b:82:fd:a5:89: c2:4b:b7:c0:d6:46:65:a6:af:0a:a7:d6:c2:bf:d0: 4f:26:af:aa:61:8f:86:39:a3:6f:3d:32:66:a4:47: bb:d0:66:4c:ea:12:52:e5:9a:7c:56:a3:09:c8:5f: cd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:57:62:61:54:52:27:4E:41:26:CE:59:11:32:92:B5:56:23:A3:29 X509v3 Authority Key Identifier: keyid:C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:75:4e:00:f2:e4:f2:bf:52:09:52:12:69:f2:26:8b:60:a7: ad:c8:16:df:ce:76:32:d1:f6:ec:02:74:e0:9d:38:66:05:12: f9:a7:70:61:eb:01:8d:c7:cf:8f:52:82:c5:c9:1b:34:63:45: 21:40:5f:06:4d:c2:ea:bb:c9:39:e9:5e:31:c7:93:3a:7b:f5: 35:1c:19:83:20:2a:95:50:26:15:ef:50:60:02:d3:af:d2:f7: b4:d3:17:8e:47:1d:11:7b:ae:b8:b6:c0:f5:fb:97:2b:41:ec: 73:b5:97:85:3c:e7:63:ff:10:ec:00:09:c2:47:33:62:6e:f0: ff:7d:0e:14:88:7d:81:98:37:31:a9:e5:66:ab:8a:81:6c:cd: 89:e5:34:8f:11:93:41:7a:62:38:2a:3a:a3:cb:bc:2f:c2:86: 5f:ae:cd:98:2c:e6:62:07:b8:01:d8:15:30:1e:ef:f5:89:06: ec:ce:47:31:e5:87:3a:0e:0c:4b:16:64:8b:e1:c1:9d:6a:01: 48:71:5c:29:40:9e:a2:c6:77:85:a5:58:d7:19:69:11:42:65: 48:1d:12:3b:e3:cd:c7:0c:01:33:91:70:ca:ae:3e:7c:d2:8f: 64:47:44:fb:c3:9e:11:27:0b:37:df:ff:92:a5:fb:e2:6a:78: b0:ac:3e:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CwOIEfCCDCKlRDKoPLgPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNWVlMmQ5MDljOWI3NWM2ZDIwODRlMzM3OWJmMDMyNzRi Nzc2ZjQwHhcNMjUxMjA2MTkwMjEwWhcNMjUxMjA3MTkwMjEwWjAzMTEwLwYDVQQD Eyg5NzU3NjI2MTU0NTIyNzRlNDEyNmNlNTkxMTMyOTJiNTU2MjNhMzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroWm27VioedkJ52TIE1KXEpxLLdM TITPGZ1+vb0qq9eOnTmfDAXyBGV+c15Mb7a8ljFCu5ogrrOPGK2wittOJVqEJdHh NQ8MOiYDuvdZ0U34Sc6CiTwKmW1l4Otro6iJxt/BI/LDyBd6tnMoCIQkSAXYXYlc Oe1EIjjVJOjFi7ko8fo3i8X61LgFXkG1C1YJUrR4pETZJveL0kVafyC5KPMec3fT ZuJ9fSB+4Weqju3IdTMhvlE+RmfsbDTQhHeJYv6eAZXxNLfvXXF/C4L9pYnCS7fA 1kZlpq8Kp9bCv9BPJq+qYY+GOaNvPTJmpEe70GZM6hJS5Zp8VqMJyF/NwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdXYmFUUidOQSbOWREykrVWI6MpMB8GA1UdIwQY MBaAFMFe4tkJybdcbSCE4zeb8DJ0t3b0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1Y3aTJRbkp0MXh0SUlUak41dndNblMzZHZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hNzY1ZGEtNGFhMS00N2EyLThiNWQt ZWJlNDM5MDVlYjgxLzEvd1Y3aTJRbkp0MXh0SUlUak41dndNblMzZHZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9hNzY1ZGEtNGFhMS00N2EyLThiNWQtZWJlNDM5MDVlYjgx LzEvd1Y3aTJRbkp0MXh0SUlUak41dndNblMzZHZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHVOAPLk 8r9SCVISafImi2CnrcgW3852MtH27AJ04J04ZgUS+adwYesBjcfPj1KCxckbNGNF IUBfBk3C6rvJOeleMceTOnv1NRwZgyAqlVAmFe9QYALTr9L3tNMXjkcdEXuuuLbA 9fuXK0Hsc7WXhTznY/8Q7AAJwkczYm7w/30OFIh9gZg3ManlZquKgWzNieU0jxGT QXpiOCo6o8u8L8KGX67NmCzmYge4AdgVMB7v9YkG7M5HMeWHOg4MSxZki+HBnWoB SHFcKUCeosZ3haVY1xlpEUJlSB0SO+PNxwwBM5Fwyq4+fNKPZEdE+8OeEScLN9// kqX74mp4sKw+Iw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:39 2025 by rpki-client