This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft File: wSXvTcnT7N9IZlXC3SMenLuwoLc.mft (raw, json) Hash identifier: Zo6HK+6DSMYFbCawIeMYuG4CA0DJr0zcJJr4jb/CfkQ= Subject key identifier: 0A:C9:67:0D:48:60:76:A0:74:F6:1A:7D:E9:CD:21:EC:7B:DB:7F:77 Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7 Certificate issuer: /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7 Certificate serial: 019AF3890428FF1C6AC6AA8FAFBB8F7E0655 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 12:00:34 +0000 Manifest this update: Sat 06 Dec 2025 12:00:34 +0000 Manifest next update: Sun 07 Dec 2025 12:00:34 +0000 Files and hashes: 1: uR-Qt3k3bfM3gqD_iPwjYus1OKg.roa (hash: wvva5AnG6XL5jcw7hAwIwlMKF+/vvms/lQ+w5Fd0MJA=) 2: wSXvTcnT7N9IZlXC3SMenLuwoLc.crl (hash: EeVd9BkesiM9TWYJOOEnF9VLUD9YbxOqrjQf3puFJtw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:04:28:ff:1c:6a:c6:aa:8f:af:bb:8f:7e:06:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7 Validity Not Before: Dec 6 12:00:34 2025 GMT Not After : Dec 7 12:00:34 2025 GMT Subject: CN=0ac9670d486076a074f61a7de9cd21ec7bdb7f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:24:81:03:fb:de:af:19:b4:c6:16:3f:cb:67: ea:97:25:c0:82:6b:c8:10:e0:e8:4e:7d:31:4b:56: 76:a2:3c:31:26:31:a8:01:3a:af:b6:fb:e8:f3:4a: a0:5a:91:f5:aa:6e:e5:10:7c:8a:d0:36:33:84:26: 80:ff:3e:71:28:eb:85:a4:c6:e7:94:a7:07:2f:da: 48:6b:34:24:09:16:09:15:e7:8c:6c:5b:52:67:ca: 50:06:6b:74:3e:ec:83:2a:45:73:94:be:7e:4b:19: bc:b4:6e:19:b8:d1:cb:1f:f5:26:17:bc:6c:cd:ba: 7c:bc:a8:54:72:34:83:a7:f2:ca:9e:f8:60:6f:d5: 02:d2:1f:88:12:c8:e7:bb:68:fa:02:b4:19:b5:cd: 7c:d6:ea:8c:3f:64:eb:3f:43:d9:f3:67:6a:25:70: 33:5a:88:9f:6a:54:db:55:8d:8b:27:48:77:ca:4e: fd:45:2f:40:30:8d:07:df:ea:22:ef:2e:58:56:fa: 1c:d3:5f:19:30:7a:62:5f:fe:64:30:d3:6d:f0:c3: d3:91:ce:9b:4d:00:35:5b:ff:cc:48:5f:6b:d9:2d: 41:88:b1:09:c0:0f:3f:44:38:b3:d5:8b:66:b9:87: 00:0b:d4:9c:8b:9e:3f:ed:f8:4a:7d:20:b6:5c:34: 7d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C9:67:0D:48:60:76:A0:74:F6:1A:7D:E9:CD:21:EC:7B:DB:7F:77 X509v3 Authority Key Identifier: keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:37:8e:4b:ce:a3:56:69:25:82:9e:16:36:2e:b3:4b:42:d7: 1f:f3:b1:a6:35:ee:0c:56:18:71:95:0f:ad:e4:ac:9e:33:9f: 59:ec:79:f4:8c:5e:a3:1f:c8:62:9a:a2:95:97:96:11:a1:e5: 2c:27:ba:86:fa:9b:ba:69:66:0d:2f:15:50:c1:59:42:95:da: 69:43:06:d4:95:24:b0:0a:a8:34:68:bc:66:12:61:5f:4a:fe: 02:20:5a:1d:e5:3c:1f:e9:5a:ca:e4:1d:83:6a:69:c9:15:56: 5d:6a:37:58:06:67:e3:d3:25:6e:ff:a8:20:55:83:fe:c6:bb: 79:21:f7:bc:5b:44:95:73:f0:9b:5d:c5:83:2a:39:85:f9:f3: b3:ac:39:2d:0a:14:2b:87:68:b4:7e:01:3c:6d:c5:25:20:ca: 82:8a:8d:a9:aa:fc:dd:b1:f5:71:d9:f8:bd:8c:3d:e4:96:2b: 5f:db:27:91:fd:ea:4a:86:97:9a:d8:e3:99:cc:42:18:b9:fa: a1:83:3a:1e:97:21:a1:8b:f1:85:03:ad:76:10:52:22:c3:31: 08:c2:d1:97:45:e6:13:4e:a1:a7:e1:7d:59:fc:7f:f8:f1:a1: fd:db:1f:fc:b7:62:d1:43:a6:e0:e1:e8:9d:33:46:ad:a8:1d: a6:4c:f3:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziQQo/xxqxqqPr7uPfgZVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMjVlZjRkYzlkM2VjZGY0ODY2NTVjMmRkMjMxZTljYmJi MGEwYjcwHhcNMjUxMjA2MTIwMDM0WhcNMjUxMjA3MTIwMDM0WjAzMTEwLwYDVQQD EygwYWM5NjcwZDQ4NjA3NmEwNzRmNjFhN2RlOWNkMjFlYzdiZGI3Zjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiSBA/verxm0xhY/y2fqlyXAgmvI EODoTn0xS1Z2ojwxJjGoATqvtvvo80qgWpH1qm7lEHyK0DYzhCaA/z5xKOuFpMbn lKcHL9pIazQkCRYJFeeMbFtSZ8pQBmt0PuyDKkVzlL5+Sxm8tG4ZuNHLH/UmF7xs zbp8vKhUcjSDp/LKnvhgb9UC0h+IEsjnu2j6ArQZtc181uqMP2TrP0PZ82dqJXAz WoifalTbVY2LJ0h3yk79RS9AMI0H3+oi7y5YVvoc018ZMHpiX/5kMNNt8MPTkc6b TQA1W//MSF9r2S1BiLEJwA8/RDiz1YtmuYcAC9Sci54/7fhKfSC2XDR9/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArJZw1IYHagdPYafenNIex72393MB8GA1UdIwQY MBaAFMEl703J0+zfSGZVwt0jHpy7sKC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lYTgxNzAtMGRiMy00ZDAyLWFhOGEt ZTc0NGM1YmVmNTYxLzEvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9lYTgxNzAtMGRiMy00ZDAyLWFhOGEtZTc0NGM1YmVmNTYx LzEvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvDeOS86j Vmklgp4WNi6zS0LXH/OxpjXuDFYYcZUPreSsnjOfWex59Ixeox/IYpqilZeWEaHl LCe6hvqbumlmDS8VUMFZQpXaaUMG1JUksAqoNGi8ZhJhX0r+AiBaHeU8H+layuQd g2ppyRVWXWo3WAZn49Mlbv+oIFWD/sa7eSH3vFtElXPwm13Fgyo5hfnzs6w5LQoU K4dotH4BPG3FJSDKgoqNqar83bH1cdn4vYw95JYrX9snkf3qSoaXmtjjmcxCGLn6 oYM6HpchoYvxhQOtdhBSIsMxCMLRl0XmE06hp+F9Wfx/+PGh/dsf/Ldi0UOm4OHo nTNGragdpkzz1g== -----END CERTIFICATE-----Generated at Sat Dec 6 20:30:27 2025 by rpki-client