This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft File: wvX9MCMFUknyE9FcugAMoCa7b6M.mft (raw, json) Hash identifier: zRzC7gO4SFgTX9DzBnZmJnA3FMOzQRaIAY2jF+dWwHg= Subject key identifier: DD:4B:3E:17:5E:31:7C:43:02:E9:61:AA:12:63:73:FE:38:A3:1F:E9 Authority key identifier: C2:F5:FD:30:23:05:52:49:F2:13:D1:5C:BA:00:0C:A0:26:BB:6F:A3 Certificate issuer: /CN=c2f5fd3023055249f213d15cba000ca026bb6fa3 Certificate serial: 019AF1646D698C961E385701695B15E66127 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 02:01:21 +0000 Manifest this update: Sat 06 Dec 2025 02:01:21 +0000 Manifest next update: Sun 07 Dec 2025 02:01:21 +0000 Files and hashes: 1: BMHVHu-JbszVmlaPK0QGdQjobqk.roa (hash: G29ynB8gmG1T9KHI25JYWbt3xJ8CodHiSO5tv95eYEk=) 2: wvX9MCMFUknyE9FcugAMoCa7b6M.crl (hash: KoOR2VELmnZelg+JQvRKo/RQ5oSuxiZ8/ltvp8BWpNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.crl rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:6d:69:8c:96:1e:38:57:01:69:5b:15:e6:61:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2f5fd3023055249f213d15cba000ca026bb6fa3 Validity Not Before: Dec 6 02:01:21 2025 GMT Not After : Dec 7 02:01:21 2025 GMT Subject: CN=dd4b3e175e317c4302e961aa126373fe38a31fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ec:36:d6:a2:c1:5a:95:27:ee:cf:1a:d1:22: 41:c8:62:97:8c:28:a8:8c:44:c0:7f:71:40:1a:12: 26:98:be:cb:f1:4c:2b:76:72:5f:c1:c1:cc:6a:59: ee:6c:cb:d5:78:63:8b:26:f2:b3:34:9e:00:3a:88: db:70:01:19:5c:38:d4:db:d3:2b:dc:59:7e:4d:83: 7d:6e:66:0c:ee:ad:40:49:ce:24:71:b3:2e:ab:1a: ec:47:42:93:79:9c:1c:f7:cb:ee:33:89:e2:6d:d0: d5:e1:35:cb:d9:4e:00:bc:eb:a8:43:f7:df:fd:af: d1:c5:20:a9:9f:b0:6d:a1:a9:0d:62:22:42:01:f0: 3a:8f:1e:81:a6:6c:20:a2:46:2f:75:1d:24:b8:c0: bf:9b:f0:d5:e0:bb:6d:37:34:4f:25:17:d6:0b:cd: 50:6a:ec:90:1f:b5:44:d6:6c:ec:a8:21:cc:67:86: e5:9f:5b:85:3d:9d:29:37:1c:9d:5f:34:1f:92:bc: 28:0a:a6:e1:c4:fa:e2:35:58:cc:49:23:a4:8f:19: 67:77:3c:46:8d:c8:b4:2b:45:14:02:83:d5:77:22: 53:5e:1a:45:71:c5:a6:1b:64:46:e2:27:1a:f4:5a: f7:b0:23:c9:3e:78:53:e2:fc:c1:45:67:be:38:b2: 5d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4B:3E:17:5E:31:7C:43:02:E9:61:AA:12:63:73:FE:38:A3:1F:E9 X509v3 Authority Key Identifier: keyid:C2:F5:FD:30:23:05:52:49:F2:13:D1:5C:BA:00:0C:A0:26:BB:6F:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:8b:8e:27:0b:46:2a:88:4a:d9:f0:c4:01:df:0b:f4:a6:92: a7:09:99:bb:b5:76:99:27:d7:67:7d:2e:37:3d:9d:1c:2d:3a: 7e:cf:45:8d:c3:f1:b2:b7:88:12:ac:65:10:37:0b:7e:61:18: 9a:be:d9:41:ec:4d:e4:92:84:f1:c1:2b:f5:ae:7e:b4:66:6d: 44:6a:c3:1b:42:8c:fa:2c:5c:13:9e:36:ed:e2:82:02:b0:70: c9:1e:f8:43:75:3b:ba:1b:0d:14:a9:a9:c6:01:e0:aa:ba:f8: 6c:b1:a6:9b:e4:6b:9e:7b:d2:bc:ca:41:e2:70:39:e3:89:ba: 0b:81:45:30:13:eb:98:48:1e:d2:27:f5:65:7f:5a:9f:ab:3d: f0:a9:82:11:45:4f:61:b8:28:fe:a1:ba:8a:8a:ad:31:d4:8d: 74:7b:2c:75:d1:9c:b4:d3:bf:32:87:9d:5a:21:b9:28:32:9f: 28:8e:90:c0:2a:61:96:e8:81:c8:70:a9:de:62:de:f2:b3:b2: b7:38:a1:f5:6f:0b:6a:c6:12:99:f9:43:b4:ea:4b:dc:76:c4: a7:44:c9:90:17:aa:ed:56:8f:bf:5c:97:25:40:40:f5:f7:93: 58:fb:73:cb:7d:53:74:8f:d3:a4:6b:e9:8f:16:b6:0e:61:14: f7:94:bc:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZG1pjJYeOFcBaVsV5mEnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZjVmZDMwMjMwNTUyNDlmMjEzZDE1Y2JhMDAwY2EwMjZi YjZmYTMwHhcNMjUxMjA2MDIwMTIxWhcNMjUxMjA3MDIwMTIxWjAzMTEwLwYDVQQD EyhkZDRiM2UxNzVlMzE3YzQzMDJlOTYxYWExMjYzNzNmZTM4YTMxZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+w21qLBWpUn7s8a0SJByGKXjCio jETAf3FAGhImmL7L8UwrdnJfwcHMalnubMvVeGOLJvKzNJ4AOojbcAEZXDjU29Mr 3Fl+TYN9bmYM7q1ASc4kcbMuqxrsR0KTeZwc98vuM4nibdDV4TXL2U4AvOuoQ/ff /a/RxSCpn7BtoakNYiJCAfA6jx6BpmwgokYvdR0kuMC/m/DV4LttNzRPJRfWC81Q auyQH7VE1mzsqCHMZ4bln1uFPZ0pNxydXzQfkrwoCqbhxPriNVjMSSOkjxlndzxG jci0K0UUAoPVdyJTXhpFccWmG2RG4ica9Fr3sCPJPnhT4vzBRWe+OLJd+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1LPhdeMXxDAulhqhJjc/44ox/pMB8GA1UdIwQY MBaAFML1/TAjBVJJ8hPRXLoADKAmu2+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3ZYOU1DTUZVa255RTlGY3VnQU1vQ2E3YjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9jYzAyZTEtOGIzNi00MmEzLWI3NTYt YmUzNDg1NzA2YTdmLzEvd3ZYOU1DTUZVa255RTlGY3VnQU1vQ2E3YjZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9jYzAyZTEtOGIzNi00MmEzLWI3NTYtYmUzNDg1NzA2YTdm LzEvd3ZYOU1DTUZVa255RTlGY3VnQU1vQ2E3YjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYuOJwtG KohK2fDEAd8L9KaSpwmZu7V2mSfXZ30uNz2dHC06fs9FjcPxsreIEqxlEDcLfmEY mr7ZQexN5JKE8cEr9a5+tGZtRGrDG0KM+ixcE5427eKCArBwyR74Q3U7uhsNFKmp xgHgqrr4bLGmm+RrnnvSvMpB4nA544m6C4FFMBPrmEge0if1ZX9an6s98KmCEUVP Ybgo/qG6ioqtMdSNdHssddGctNO/MoedWiG5KDKfKI6QwCphluiByHCp3mLe8rOy tzih9W8LasYSmflDtOpL3HbEp0TJkBeq7VaPv1yXJUBA9feTWPtzy31TdI/TpGvp jxa2DmEU95S8AA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:54:52 2025 by rpki-client