This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft File: wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft (raw, json) Hash identifier: RSow684zF1Kk1k83tjXeVTuBoFPJ+VbTAtwlB2Tl5Mk= Subject key identifier: 0F:9F:D4:7B:41:5F:0E:B9:7F:AA:19:5A:43:41:0D:C7:AD:8C:13:DC Authority key identifier: C3:03:7D:2E:7B:09:A0:FB:D1:08:16:8A:44:87:4F:6B:D1:68:9B:60 Certificate issuer: /CN=c3037d2e7b09a0fbd108168a44874f6bd1689b60 Certificate serial: 019AF0BF6FEEB3AF17495653E1ACD4BB1959 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft Manifest number: 157C Signing time: Fri 05 Dec 2025 23:01:09 +0000 Manifest this update: Fri 05 Dec 2025 23:01:09 +0000 Manifest next update: Sat 06 Dec 2025 23:01:09 +0000 Files and hashes: 1: fS3aIp_dstilOoZpsHs2fT3hEwI.roa (hash: ekL2u08a8PJkCPy3xwuS3H8hi/HVcBEIiMkXY+L534U=) 2: wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl (hash: SXA+dD+pzuz0msmoSsCmkzFd9oGe/zTxaeZwcBUWEg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:6f:ee:b3:af:17:49:56:53:e1:ac:d4:bb:19:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3037d2e7b09a0fbd108168a44874f6bd1689b60 Validity Not Before: Dec 5 23:01:09 2025 GMT Not After : Dec 6 23:01:09 2025 GMT Subject: CN=0f9fd47b415f0eb97faa195a43410dc7ad8c13dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a3:03:d0:84:6a:50:8f:49:1f:a1:1c:a2:c4: 7a:4e:68:3d:f5:0c:6e:a9:71:8b:fc:e5:16:e6:12: 76:65:f7:62:c5:d1:89:1e:21:1e:dd:d5:1e:a9:ba: 8c:90:0a:e2:92:47:ab:c6:d8:03:a3:c7:9e:41:bf: 55:07:f1:0f:85:c5:b7:89:6d:88:bf:0c:64:65:f8: e7:26:1c:80:c1:1d:fa:37:04:23:c3:3a:78:fd:19: 11:5c:f3:4b:b7:0d:ed:b1:9e:93:8b:72:6d:28:7b: cf:75:5f:3f:e1:a3:89:af:d3:0b:a6:fb:e3:cd:cb: 13:46:1c:bb:86:50:b1:8d:2f:d1:71:98:0d:33:60: e4:c3:04:17:a3:af:1f:88:5b:ed:e3:d1:1b:82:03: 77:ec:59:23:3e:92:90:45:a0:eb:6b:26:02:dd:a8: 54:9a:3f:6c:ba:92:fc:d0:1d:22:6b:3d:df:f7:f8: f3:95:dc:20:40:4c:2b:1c:c2:f1:8c:61:a9:7a:66: 87:31:f8:64:c5:a4:70:22:32:36:6b:4f:2e:25:a2: 9d:a4:a9:76:38:7f:9a:b7:4b:aa:05:ff:be:c5:c2: cf:df:08:08:a8:f3:1f:e6:75:94:2e:32:97:cc:1d: 8b:06:3d:72:0a:cc:92:eb:7f:06:db:4c:86:02:7f: 7b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9F:D4:7B:41:5F:0E:B9:7F:AA:19:5A:43:41:0D:C7:AD:8C:13:DC X509v3 Authority Key Identifier: keyid:C3:03:7D:2E:7B:09:A0:FB:D1:08:16:8A:44:87:4F:6B:D1:68:9B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ef:8e:32:2c:36:c7:af:6b:8d:05:8c:27:f1:f5:a7:9b:43: b3:94:a7:6e:1d:ba:dc:8a:08:ed:00:f2:d1:46:26:69:cb:24: f7:40:eb:0b:4f:d3:93:9d:50:b4:b2:9b:3d:70:30:76:e5:f0: 03:92:81:fb:97:99:ce:55:85:04:91:51:c5:ce:e8:4e:84:21: e5:2f:3d:e6:70:4b:a8:c2:3a:30:5a:c9:c2:6e:cb:7b:a2:dc: 62:43:bd:ba:02:a1:5d:13:d9:b1:ae:d9:bb:6a:da:fb:2a:03: c7:7d:15:1f:33:af:d5:aa:83:28:00:94:63:3a:49:ee:36:a4: 70:37:95:9e:8e:24:e8:2c:ca:fc:bf:06:9c:4d:f6:39:6d:76: 95:a4:1a:36:dc:53:c6:86:74:3a:b2:c0:49:ee:38:c7:18:f8: 44:07:80:be:0d:3a:f0:cb:f3:f7:4d:ef:67:c7:64:6f:e4:76: 53:75:84:91:f8:f8:00:11:1a:59:8c:c4:57:84:db:e8:40:3b: 22:58:17:bd:c8:53:f6:b7:a4:62:b8:d1:85:f0:ad:26:c5:57: 48:68:8f:c4:d4:b4:5c:1f:76:74:28:6f:d7:56:af:48:25:d8: 68:a5:08:9d:b0:8f:c2:7f:72:4e:52:66:f6:f4:13:37:21:3b: 35:e1:22:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv2/us68XSVZT4azUuxlZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMDM3ZDJlN2IwOWEwZmJkMTA4MTY4YTQ0ODc0ZjZiZDE2 ODliNjAwHhcNMjUxMjA1MjMwMTA5WhcNMjUxMjA2MjMwMTA5WjAzMTEwLwYDVQQD EygwZjlmZDQ3YjQxNWYwZWI5N2ZhYTE5NWE0MzQxMGRjN2FkOGMxM2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaMD0IRqUI9JH6EcosR6Tmg99Qxu qXGL/OUW5hJ2ZfdixdGJHiEe3dUeqbqMkArikkerxtgDo8eeQb9VB/EPhcW3iW2I vwxkZfjnJhyAwR36NwQjwzp4/RkRXPNLtw3tsZ6Ti3JtKHvPdV8/4aOJr9MLpvvj zcsTRhy7hlCxjS/RcZgNM2DkwwQXo68fiFvt49EbggN37FkjPpKQRaDrayYC3ahU mj9supL80B0iaz3f9/jzldwgQEwrHMLxjGGpemaHMfhkxaRwIjI2a08uJaKdpKl2 OH+at0uqBf++xcLP3wgIqPMf5nWULjKXzB2LBj1yCsyS638G20yGAn97GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+f1HtBXw65f6oZWkNBDcetjBPcMB8GA1UdIwQY MBaAFMMDfS57CaD70QgWikSHT2vRaJtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3dOOUxuc0pvUHZSQ0JhS1JJZFBhOUZvbTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS82Y2I3MmQtNjkwYS00MDZmLThhZGQt ODBlN2JiYjA0MWIyLzEvd3dOOUxuc0pvUHZSQ0JhS1JJZFBhOUZvbTJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS82Y2I3MmQtNjkwYS00MDZmLThhZGQtODBlN2JiYjA0MWIy LzEvd3dOOUxuc0pvUHZSQ0JhS1JJZFBhOUZvbTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmu+OMiw2 x69rjQWMJ/H1p5tDs5Snbh263IoI7QDy0UYmacsk90DrC0/Tk51QtLKbPXAwduXw A5KB+5eZzlWFBJFRxc7oToQh5S895nBLqMI6MFrJwm7Le6LcYkO9ugKhXRPZsa7Z u2ra+yoDx30VHzOv1aqDKACUYzpJ7jakcDeVno4k6CzK/L8GnE32OW12laQaNtxT xoZ0OrLASe44xxj4RAeAvg068Mvz903vZ8dkb+R2U3WEkfj4ABEaWYzEV4Tb6EA7 IlgXvchT9rekYrjRhfCtJsVXSGiPxNS0XB92dChv11avSCXYaKUInbCPwn9yTlJm 9vQTNyE7NeEiVA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:07 2025 by rpki-client