This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft File: wDJJW4nc6BsMf4ht38NgS94G2KY.mft (raw, json) Hash identifier: vpogsbzCoxpKmkVpmEf4D1flg9K1sNXPdrTgvYKBFOY= Subject key identifier: 0F:C9:5D:4E:C0:FE:57:05:47:55:FB:F9:9A:A0:06:0D:FD:92:D1:42 Authority key identifier: C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6 Certificate issuer: /CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6 Certificate serial: 019AF12D8BD4BD27B5BD43C251400D3E8793 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:24 +0000 Manifest this update: Sat 06 Dec 2025 01:01:24 +0000 Manifest next update: Sun 07 Dec 2025 01:01:24 +0000 Files and hashes: 1: mHKZZdX4P1dK57yB0hCJdDCS-A8.roa (hash: sgKlWaet9A3w8v934Vjaqn1vJ0nwSp4V/6BEjtLuqMM=) 2: wDJJW4nc6BsMf4ht38NgS94G2KY.crl (hash: 5runY4RK+BPw2vHuLSxxbqeO0Eq9fiEsTgEYQuJOd9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:8b:d4:bd:27:b5:bd:43:c2:51:40:0d:3e:87:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6 Validity Not Before: Dec 6 01:01:24 2025 GMT Not After : Dec 7 01:01:24 2025 GMT Subject: CN=0fc95d4ec0fe57054755fbf99aa0060dfd92d142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c9:1c:f2:6c:02:f5:51:67:5a:7b:55:ab:dc: 47:74:ed:e0:ed:27:00:d2:95:eb:6f:1f:76:bc:ef: 5e:98:78:6a:09:51:a1:ab:43:ae:36:d4:79:de:6e: f9:5d:7b:61:32:ce:82:a9:a5:a5:fb:63:4a:b3:08: bb:91:5e:75:26:a4:a8:5b:ca:7b:68:1b:f6:22:22: 3a:49:07:14:71:c9:0e:26:46:29:f9:9f:86:b8:97: 48:4c:66:21:d8:81:92:37:3e:12:c7:24:86:88:55: 54:b2:8c:74:6c:1b:67:40:6f:cc:9c:4c:5e:76:5e: ef:ae:e9:35:95:1c:70:cc:c9:f5:99:1f:c4:11:f5: ef:af:b3:3e:b4:bd:f0:4d:7b:f1:55:41:ff:60:63: 76:1f:5c:24:e1:79:1e:90:26:5b:a5:ac:ec:30:f3: f6:7b:58:47:6e:25:c6:10:2b:89:7f:25:77:c4:a9: cf:98:39:fa:0f:32:69:96:a9:3c:4f:77:96:7d:d3: ad:23:61:f4:00:50:20:67:d1:42:44:d2:a8:9d:ca: e5:f1:8d:5a:a6:d8:4c:c2:c3:73:d2:d2:da:de:f9: 28:10:bd:cb:ff:8c:39:37:a7:c8:cd:c6:1e:e6:3b: 1e:9a:b2:0c:50:3d:4e:d0:5d:b5:73:72:34:0b:bc: 48:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C9:5D:4E:C0:FE:57:05:47:55:FB:F9:9A:A0:06:0D:FD:92:D1:42 X509v3 Authority Key Identifier: keyid:C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:25:41:4f:fc:0b:52:70:32:15:6c:4b:c0:27:e2:61:f6:95: 30:59:0d:0a:cf:6d:db:43:a0:e5:ee:71:9c:6c:25:f6:14:15: 81:1a:d7:a5:e7:39:bb:06:e1:5e:b6:c9:64:b9:c6:c0:d1:1b: 9e:f2:ff:b3:3c:d7:e4:5c:3c:9f:df:66:49:1b:4b:9f:23:65: 25:b7:85:69:96:41:1b:11:c5:4a:3a:e7:8a:be:7a:ac:41:27: 77:07:48:d2:c9:1a:ce:4f:ca:16:db:f8:87:c0:7d:15:fe:f5: ff:4d:b5:2e:96:cd:cb:34:e4:d6:7e:6b:96:bc:cc:9d:9e:e5: 40:5e:e0:56:11:f5:a2:54:3c:16:21:d1:22:ee:f4:21:fa:ac: 96:69:e3:02:72:37:0c:82:26:47:29:cc:03:a3:9f:5f:54:b5: 1f:e9:2f:6b:1a:e8:29:f4:e1:2b:78:12:72:2b:74:e3:40:b7: 6b:24:2a:e8:da:d2:35:d0:39:6f:e4:9b:d7:6a:e1:7d:ce:d7: 34:b8:06:0e:1e:eb:31:a5:c9:c6:97:c6:61:52:26:c1:e9:4c: bf:f7:67:1c:2b:e2:20:1d:ea:85:6f:3f:51:92:8c:0a:6b:da: 29:57:ea:b0:e7:ab:4a:a6:35:b9:91:16:0b:12:3c:2e:54:54: 07:ef:f3:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYvUvSe1vUPCUUANPoeTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMzI0OTViODlkY2U4MWIwYzdmODg2ZGRmYzM2MDRiZGUw NmQ4YTYwHhcNMjUxMjA2MDEwMTI0WhcNMjUxMjA3MDEwMTI0WjAzMTEwLwYDVQQD EygwZmM5NWQ0ZWMwZmU1NzA1NDc1NWZiZjk5YWEwMDYwZGZkOTJkMTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8kc8mwC9VFnWntVq9xHdO3g7ScA 0pXrbx92vO9emHhqCVGhq0OuNtR53m75XXthMs6CqaWl+2NKswi7kV51JqSoW8p7 aBv2IiI6SQcUcckOJkYp+Z+GuJdITGYh2IGSNz4SxySGiFVUsox0bBtnQG/MnExe dl7vruk1lRxwzMn1mR/EEfXvr7M+tL3wTXvxVUH/YGN2H1wk4XkekCZbpazsMPP2 e1hHbiXGECuJfyV3xKnPmDn6DzJplqk8T3eWfdOtI2H0AFAgZ9FCRNKoncrl8Y1a pthMwsNz0tLa3vkoEL3L/4w5N6fIzcYe5jsemrIMUD1O0F21c3I0C7xIgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/JXU7A/lcFR1X7+ZqgBg39ktFCMB8GA1UdIwQY MBaAFMAySVuJ3OgbDH+Ibd/DYEveBtimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0RKSlc0bmM2QnNNZjRodDM4TmdTOTRHMktZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMmRkMmMtNGQwYy00MjBhLTk4YTUt MDJlNjQyMmM0MTgxLzEvd0RKSlc0bmM2QnNNZjRodDM4TmdTOTRHMktZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8xMmRkMmMtNGQwYy00MjBhLTk4YTUtMDJlNjQyMmM0MTgx LzEvd0RKSlc0bmM2QnNNZjRodDM4TmdTOTRHMktZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFiVBT/wL UnAyFWxLwCfiYfaVMFkNCs9t20Og5e5xnGwl9hQVgRrXpec5uwbhXrbJZLnGwNEb nvL/szzX5Fw8n99mSRtLnyNlJbeFaZZBGxHFSjrnir56rEEndwdI0skazk/KFtv4 h8B9Ff71/021LpbNyzTk1n5rlrzMnZ7lQF7gVhH1olQ8FiHRIu70IfqslmnjAnI3 DIImRynMA6OfX1S1H+kvaxroKfThK3gScit040C3ayQq6NrSNdA5b+Sb12rhfc7X NLgGDh7rMaXJxpfGYVImwelMv/dnHCviIB3qhW8/UZKMCmvaKVfqsOerSqY1uZEW CxI8LlRUB+/zog== -----END CERTIFICATE-----Generated at Sat Dec 6 10:04:26 2025 by rpki-client