This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft File: wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft (raw, json) Hash identifier: AgkQ4JXq0EMeWhtJ+YjgDRnCl2/2SKqDs0R+1S57fHw= Subject key identifier: A8:EE:A1:F6:C7:15:E8:63:29:7E:B4:68:51:7B:59:7D:B0:36:A3:A4 Authority key identifier: C0:F8:DB:B2:14:A6:14:9F:3D:4D:42:A0:C4:13:2D:57:25:99:27:52 Certificate issuer: /CN=c0f8dbb214a6149f3d4d42a0c4132d5725992752 Certificate serial: 019AF5AEDD64CF8E5ACDE5205E5CAA1C3B90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft Manifest number: 0246 Signing time: Sat 06 Dec 2025 22:01:09 +0000 Manifest this update: Sat 06 Dec 2025 22:01:09 +0000 Manifest next update: Sun 07 Dec 2025 22:01:09 +0000 Files and hashes: 1: 2qyhqFKpARK1F2ET6I7_YKaOPc0.roa (hash: qGM3ZFQucsF8/9E/V05Xc9DkgTgt/0zHmMZ5RCHxskE=) 2: wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl (hash: GFpI61EM/vGCCnJdU6v15VEMnW8OcXBRNi90qlP+Dc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:dd:64:cf:8e:5a:cd:e5:20:5e:5c:aa:1c:3b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0f8dbb214a6149f3d4d42a0c4132d5725992752 Validity Not Before: Dec 6 22:01:09 2025 GMT Not After : Dec 7 22:01:09 2025 GMT Subject: CN=a8eea1f6c715e863297eb468517b597db036a3a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f2:b5:e0:7a:eb:18:3e:9b:e0:59:ba:bc:f4: 03:95:c0:2c:f4:2e:20:86:df:56:05:69:46:7b:eb: a7:4b:cd:7b:37:f2:ed:7c:64:01:f6:ff:f3:aa:68: f9:92:f2:09:8a:0e:e7:98:78:c3:1b:b6:43:c5:6f: 26:9c:b4:c2:41:fd:1a:0d:dc:0c:0f:54:2d:74:fb: 0d:59:01:66:11:ec:be:d5:6f:cc:dd:f9:cb:2f:95: af:ed:7d:fc:34:94:82:e1:a3:69:57:97:68:6e:fe: 91:be:aa:6f:6a:8d:e9:ad:52:99:fd:b3:57:70:31: 39:db:02:ef:7f:1f:fe:28:ae:51:86:84:22:c4:45: f9:46:7f:e1:6b:c1:48:3f:9d:ef:b0:c4:c9:9d:1a: a7:7c:82:3d:b9:7c:3c:91:af:98:76:16:48:45:8d: 7f:91:a0:0f:5d:e9:8b:65:fd:34:83:9a:f0:c2:41: f2:7b:39:10:b5:03:18:1f:57:b9:cc:8b:e5:ba:0d: 06:08:bd:d4:0e:a4:49:52:35:e2:0e:38:81:ff:59: b4:d8:28:64:28:00:9f:d4:23:f7:7a:c3:0a:6b:a6: 20:50:f4:8a:1d:c2:a7:a9:c4:63:84:9b:63:de:59: 0b:0d:84:8f:9b:ec:5a:7c:15:2b:ee:4a:a8:a5:ab: c5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EE:A1:F6:C7:15:E8:63:29:7E:B4:68:51:7B:59:7D:B0:36:A3:A4 X509v3 Authority Key Identifier: keyid:C0:F8:DB:B2:14:A6:14:9F:3D:4D:42:A0:C4:13:2D:57:25:99:27:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e0:99:39:1f:c2:43:8f:c5:58:bd:2e:06:67:1c:e3:6d:db: 31:79:e1:c5:4d:5f:d4:82:33:9b:b3:65:1f:fc:c0:97:73:e1: d2:dd:17:50:22:51:a4:79:89:00:9f:fe:2e:46:21:1b:48:2e: f3:a2:9b:87:1d:d7:01:5f:34:dc:7c:ac:9d:c7:7d:e7:2a:fa: e0:21:bf:3b:7b:69:92:43:9b:b2:b2:ef:09:e6:ab:90:2c:2a: db:06:04:95:36:61:22:49:e4:eb:55:b1:82:02:96:bb:47:40: 77:81:0f:fe:69:eb:d4:3e:84:04:8e:ca:d0:35:33:cc:8c:f8: 94:0d:12:98:24:a5:f4:e8:1b:47:b4:2a:f4:be:45:f0:82:20: 4b:95:ac:a9:e4:69:17:4e:ba:54:bd:3e:33:d7:b5:c0:f0:87: 69:f6:c1:68:cf:80:ac:88:60:7d:34:4d:8f:4e:e5:df:28:77: cd:3d:70:98:e7:33:fa:20:14:b4:84:ce:ad:eb:b9:82:b9:03: 69:4e:45:df:10:c4:08:a8:9c:0e:98:34:91:55:24:61:74:3c: 5b:4c:8c:5d:3f:2c:78:16:f4:0e:03:41:c7:c6:3d:47:93:d7: 96:47:5d:25:73:fc:4c:1a:5a:70:d0:30:5f:bf:b1:64:8d:14: fa:f4:b3:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rt1kz45azeUgXlyqHDuQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZjhkYmIyMTRhNjE0OWYzZDRkNDJhMGM0MTMyZDU3MjU5 OTI3NTIwHhcNMjUxMjA2MjIwMTA5WhcNMjUxMjA3MjIwMTA5WjAzMTEwLwYDVQQD EyhhOGVlYTFmNmM3MTVlODYzMjk3ZWI0Njg1MTdiNTk3ZGIwMzZhM2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+PK14HrrGD6b4Fm6vPQDlcAs9C4g ht9WBWlGe+unS817N/LtfGQB9v/zqmj5kvIJig7nmHjDG7ZDxW8mnLTCQf0aDdwM D1QtdPsNWQFmEey+1W/M3fnLL5Wv7X38NJSC4aNpV5dobv6Rvqpvao3prVKZ/bNX cDE52wLvfx/+KK5RhoQixEX5Rn/ha8FIP53vsMTJnRqnfII9uXw8ka+YdhZIRY1/ kaAPXemLZf00g5rwwkHyezkQtQMYH1e5zIvlug0GCL3UDqRJUjXiDjiB/1m02Chk KACf1CP3esMKa6YgUPSKHcKnqcRjhJtj3lkLDYSPm+xafBUr7kqopavFFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjuofbHFehjKX60aFF7WX2wNqOkMB8GA1UdIwQY MBaAFMD427IUphSfPU1CoMQTLVclmSdSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1BqYnNoU21GSjg5VFVLZ3hCTXRWeVdaSjFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wNzQ5YzAtZGVjMy00ZjAxLTliZDct MzQ0OGE4ODljZTc1LzEvd1BqYnNoU21GSjg5VFVLZ3hCTXRWeVdaSjFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8wNzQ5YzAtZGVjMy00ZjAxLTliZDctMzQ0OGE4ODljZTc1 LzEvd1BqYnNoU21GSjg5VFVLZ3hCTXRWeVdaSjFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOCZOR/C Q4/FWL0uBmcc423bMXnhxU1f1IIzm7NlH/zAl3Ph0t0XUCJRpHmJAJ/+LkYhG0gu 86Kbhx3XAV803Hysncd95yr64CG/O3tpkkObsrLvCearkCwq2wYElTZhIknk61Wx ggKWu0dAd4EP/mnr1D6EBI7K0DUzzIz4lA0SmCSl9OgbR7Qq9L5F8IIgS5WsqeRp F066VL0+M9e1wPCHafbBaM+ArIhgfTRNj07l3yh3zT1wmOcz+iAUtITOreu5grkD aU5F3xDECKicDpg0kVUkYXQ8W0yMXT8seBb0DgNBx8Y9R5PXlkddJXP8TBpacNAw X7+xZI0U+vSzCQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:53:30 2025 by rpki-client