This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft File: wz-t0SfmXNkN4-lWjly8-0jJsko.mft (raw, json) Hash identifier: 0rYkB4Zw8d/CksOIrWzDnb0rf9RD7gMPmCE8tqh9nmE= Subject key identifier: AD:BD:7F:91:31:FD:8B:FB:F6:21:DC:1C:A9:F6:DE:B1:62:29:9B:ED Authority key identifier: C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A Certificate issuer: /CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a Certificate serial: 019AF209379763EA99243291B9546D04A569 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft Manifest number: 0762 Signing time: Sat 06 Dec 2025 05:01:21 +0000 Manifest this update: Sat 06 Dec 2025 05:01:21 +0000 Manifest next update: Sun 07 Dec 2025 05:01:21 +0000 Files and hashes: 1: mRIJhbiYi4_Fn9rbvJxpcE5BqwE.roa (hash: QFNaK1Gy0ycMOCo2B8J3U81MNF8ZnZJf7GULAc5HdJY=) 2: wz-t0SfmXNkN4-lWjly8-0jJsko.crl (hash: e36oIYmipJr86P3DqhnOp1W3IxRlGQuma7CUPAIw9pM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:37:97:63:ea:99:24:32:91:b9:54:6d:04:a5:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a Validity Not Before: Dec 6 05:01:21 2025 GMT Not After : Dec 7 05:01:21 2025 GMT Subject: CN=adbd7f9131fd8bfbf621dc1ca9f6deb162299bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fc:91:07:e7:b7:72:d8:91:c5:6f:5b:8b:05: cf:36:e4:51:18:9d:da:14:6e:db:64:8d:76:c8:ed: 72:a8:0b:15:ea:07:77:fb:5b:0c:56:2d:84:2d:7f: 5a:55:87:29:ef:c2:12:f5:20:ba:0c:f2:fc:28:98: a2:96:0e:a2:2a:4a:ae:46:c5:12:ff:ec:bd:29:f7: a5:09:19:3a:f2:8e:a8:66:29:46:ed:09:f1:d9:66: a3:6c:79:cc:63:f4:44:d3:0d:6a:ad:5b:e2:ff:89: 5e:c1:2f:b4:f4:bd:e0:ff:18:67:07:c4:88:06:d1: 3e:78:01:a9:7d:58:a6:1f:a9:9e:cf:5c:c4:3d:54: 14:15:a8:e6:52:ce:e3:c9:9b:22:99:ba:23:67:72: 2b:3a:f8:51:b0:47:91:0b:5a:1e:ad:5d:88:bb:fb: e1:51:15:f6:0b:e2:8a:95:d9:13:f3:ef:cb:cc:5e: 9a:2c:7d:81:b7:04:cd:45:2e:0f:70:5a:7a:78:77: 49:ed:82:29:1b:2c:91:5f:29:8d:c4:d5:9b:06:3e: e7:96:fe:79:bb:fa:2d:77:d4:5a:0b:9a:42:f4:32: 80:7f:84:a6:22:b7:07:4f:1b:92:7c:97:ec:18:5c: 05:d8:58:39:6f:28:00:70:d5:f7:19:95:e9:cf:f0: 01:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BD:7F:91:31:FD:8B:FB:F6:21:DC:1C:A9:F6:DE:B1:62:29:9B:ED X509v3 Authority Key Identifier: keyid:C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:fe:6e:ba:aa:ff:b9:17:82:8f:8d:a9:71:9b:f7:ee:57:ea: e8:34:c8:4f:0b:8a:92:e0:6b:ac:d7:a6:c4:75:fa:6d:99:20: 11:37:32:28:43:9a:3a:0f:8f:86:79:95:9e:16:5d:1f:a2:39: a2:93:4f:4d:71:4d:d6:b5:e2:81:dd:9c:5f:65:88:f8:bd:b2: 86:e1:15:bd:b9:cd:fb:8f:0c:1b:e2:dd:cd:3e:0b:8d:55:f0: c7:ef:75:d7:a6:ef:8c:ca:c1:1f:97:c7:11:92:cb:40:62:0c: 8c:68:3b:9a:f2:69:f8:85:0d:cf:f1:ba:b2:d7:57:5a:b2:6d: 8e:87:37:6b:13:51:bd:78:4c:e3:73:8b:65:77:64:e5:90:4f: 95:ec:2b:c9:78:0d:5c:87:4c:cd:4e:68:00:c3:20:ec:25:bd: c3:8d:cb:31:d4:03:af:83:b1:31:92:4d:db:4c:ab:22:de:ce: 49:f9:7e:06:3e:16:94:c5:14:06:b1:63:5d:e5:04:4c:43:6e: 74:96:50:2d:f8:56:85:d8:6e:d2:a9:2b:73:fe:81:26:8b:75: 73:5e:8e:7b:7b:12:72:1d:95:be:26:30:51:ed:29:62:28:9a: 7c:b6:73:4c:23:e7:33:af:9e:f7:dd:56:6f:5d:0d:4a:db:be: 88:49:1c:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTeXY+qZJDKRuVRtBKVpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzM2ZhZGQxMjdlNjVjZDkwZGUzZTk1NjhlNWNiY2ZiNDhj OWIyNGEwHhcNMjUxMjA2MDUwMTIxWhcNMjUxMjA3MDUwMTIxWjAzMTEwLwYDVQQD EyhhZGJkN2Y5MTMxZmQ4YmZiZjYyMWRjMWNhOWY2ZGViMTYyMjk5YmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPyRB+e3ctiRxW9biwXPNuRRGJ3a FG7bZI12yO1yqAsV6gd3+1sMVi2ELX9aVYcp78IS9SC6DPL8KJiilg6iKkquRsUS /+y9KfelCRk68o6oZilG7Qnx2WajbHnMY/RE0w1qrVvi/4lewS+09L3g/xhnB8SI BtE+eAGpfVimH6mez1zEPVQUFajmUs7jyZsimbojZ3IrOvhRsEeRC1oerV2Iu/vh URX2C+KKldkT8+/LzF6aLH2BtwTNRS4PcFp6eHdJ7YIpGyyRXymNxNWbBj7nlv55 u/otd9RaC5pC9DKAf4SmIrcHTxuSfJfsGFwF2Fg5bygAcNX3GZXpz/ABiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK29f5Ex/Yv79iHcHKn23rFiKZvtMB8GA1UdIwQY MBaAFMM/rdEn5lzZDePpVo5cvPtIybJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3otdDBTZm1YTmtONC1sV2pseTgtMGpKc2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iN2NkNDUtMWYwMy00MTU4LTgyOTct YTNmNjFlMzBiNTE0LzEvd3otdDBTZm1YTmtONC1sV2pseTgtMGpKc2tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9iN2NkNDUtMWYwMy00MTU4LTgyOTctYTNmNjFlMzBiNTE0 LzEvd3otdDBTZm1YTmtONC1sV2pseTgtMGpKc2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJP5uuqr/ uReCj42pcZv37lfq6DTITwuKkuBrrNemxHX6bZkgETcyKEOaOg+PhnmVnhZdH6I5 opNPTXFN1rXigd2cX2WI+L2yhuEVvbnN+48MG+LdzT4LjVXwx+9116bvjMrBH5fH EZLLQGIMjGg7mvJp+IUNz/G6stdXWrJtjoc3axNRvXhM43OLZXdk5ZBPlewryXgN XIdMzU5oAMMg7CW9w43LMdQDr4OxMZJN20yrIt7OSfl+Bj4WlMUUBrFjXeUETENu dJZQLfhWhdhu0qkrc/6BJot1c16Oe3sSch2VviYwUe0pYiiafLZzTCPnM6+e991W b10NStu+iEkclw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:24 2025 by rpki-client