This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft File: wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft (raw, json) Hash identifier: TSBRVzKhlUfYamJ+fwTxgwWx98rS+0KEGt77uZ9S9T0= Subject key identifier: F2:0E:36:F9:8B:AF:05:14:5D:B5:5B:E9:CF:47:37:48:00:7C:91:AA Authority key identifier: C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63 Certificate issuer: /CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63 Certificate serial: 019AF540BCB5FD1D7671EF0E83CBF90B47CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 20:00:51 +0000 Manifest this update: Sat 06 Dec 2025 20:00:51 +0000 Manifest next update: Sun 07 Dec 2025 20:00:51 +0000 Files and hashes: 1: I0H7qSqQ0AzLSSpiXqiH1EQi7-Q.roa (hash: Jow46MXmNk+mUHCbkELVJdKY8Y06A4U2s/PAO/haQb0=) 2: wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl (hash: 82OPhX6ynmjvU1EWoEkgmXn5zTqXIkjmo8McIfa9TeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:bc:b5:fd:1d:76:71:ef:0e:83:cb:f9:0b:47:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63 Validity Not Before: Dec 6 20:00:51 2025 GMT Not After : Dec 7 20:00:51 2025 GMT Subject: CN=f20e36f98baf05145db55be9cf473748007c91aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:68:34:92:d4:9d:06:83:34:a3:7e:67:45:11: ae:bb:57:cd:0b:e9:2d:5d:22:de:74:be:c2:c8:da: 97:b8:4a:1d:9a:22:d9:0f:5e:c8:c2:4f:8f:b2:ac: 55:f7:c5:61:20:2c:8a:09:ed:45:d2:2d:cb:01:9a: f5:1b:55:82:76:b8:5d:a1:99:90:59:62:38:b6:a0: 04:2b:61:ab:52:50:11:c1:c0:a2:df:ac:bd:f0:22: 7d:d6:26:b6:8d:99:3e:eb:64:c0:0c:e8:16:e8:37: 36:d6:4f:2c:98:0c:83:74:41:52:58:b1:26:7c:0d: 2a:da:62:cd:87:1d:d6:df:f9:0b:39:1c:54:37:9f: 3d:87:51:1c:42:ff:d7:28:c6:d2:38:65:91:08:16: 56:9a:e7:85:b7:0f:95:d3:c0:88:e0:03:d2:96:75: 4d:71:98:ae:18:5e:c6:9e:ae:b1:58:e7:30:f8:33: 66:b0:c4:b8:ad:16:a4:43:3f:ea:80:fd:12:b9:7c: fe:fc:a1:52:ac:9e:c4:37:3f:85:f2:f8:8d:8d:44: 6c:fa:e3:69:07:c0:ac:9f:9a:17:4f:97:a2:c6:4d: 46:fb:d9:82:c3:a8:4f:3b:ad:25:61:bb:bf:20:9a: de:fe:f3:09:1d:c9:9d:d0:7d:a8:0a:d5:83:5a:46: 9f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0E:36:F9:8B:AF:05:14:5D:B5:5B:E9:CF:47:37:48:00:7C:91:AA X509v3 Authority Key Identifier: keyid:C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:5d:d1:1b:a8:1d:e1:27:67:17:02:29:ad:2a:23:ae:0a:d5: 83:5d:c9:bf:a4:ea:d6:81:78:89:27:60:e8:13:4c:1f:a6:86: c4:29:bc:e3:22:b9:2b:9b:ed:71:f1:88:3d:9a:0c:07:fb:81: 26:d4:74:9f:75:54:d6:af:52:77:07:0c:95:be:83:39:31:36: ab:36:10:03:d9:4c:56:0e:4a:97:32:a6:5d:ca:c4:c3:f6:55: b4:8f:95:13:b7:56:05:06:6e:58:9a:ad:f5:e9:2c:eb:4f:2d: be:18:28:1b:23:5e:76:57:c0:f2:56:98:73:c4:14:06:e1:05: ea:38:b3:7a:c8:62:e5:1a:9d:a8:7c:58:81:30:17:ac:61:99: f0:18:eb:72:81:0e:12:b9:f9:26:b2:da:98:79:5c:7e:8c:36: 35:e3:df:23:62:78:3c:23:c8:e0:40:ad:06:54:84:e8:03:66: c8:fd:b3:6f:99:2f:ae:fd:e9:5e:44:60:c3:44:2e:93:14:20: f1:e1:e9:d6:e0:ba:d0:fc:cf:14:7b:3a:ee:2c:d6:d8:b1:58: d1:cb:60:56:06:4f:ef:b3:e3:5f:63:90:ab:57:ac:1d:d1:5d: 7e:72:11:bb:f0:12:ac:09:fd:d2:26:31:e6:ed:07:45:c4:2a: 5b:bb:64:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QLy1/R12ce8Og8v5C0fLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMmY1OWVjYTY0MjkzZDJjOTE2ZTdhYmIwOWUwNTJlMmNi MWNiNjMwHhcNMjUxMjA2MjAwMDUxWhcNMjUxMjA3MjAwMDUxWjAzMTEwLwYDVQQD EyhmMjBlMzZmOThiYWYwNTE0NWRiNTViZTljZjQ3Mzc0ODAwN2M5MWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWg0ktSdBoM0o35nRRGuu1fNC+kt XSLedL7CyNqXuEodmiLZD17Iwk+PsqxV98VhICyKCe1F0i3LAZr1G1WCdrhdoZmQ WWI4tqAEK2GrUlARwcCi36y98CJ91ia2jZk+62TADOgW6Dc21k8smAyDdEFSWLEm fA0q2mLNhx3W3/kLORxUN589h1EcQv/XKMbSOGWRCBZWmueFtw+V08CI4APSlnVN cZiuGF7Gnq6xWOcw+DNmsMS4rRakQz/qgP0SuXz+/KFSrJ7ENz+F8viNjURs+uNp B8Csn5oXT5eixk1G+9mCw6hPO60lYbu/IJre/vMJHcmd0H2oCtWDWkafwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIONvmLrwUUXbVb6c9HN0gAfJGqMB8GA1UdIwQY MBaAFMAvWeymQpPSyRbnq7CeBS4ssctjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0M5WjdLWkNrOUxKRnVlcnNKNEZMaXl4eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS81OGIyMGEtNDUyYi00ZjJiLWFhYjUt N2QxM2MwNzJkOTZiLzEvd0M5WjdLWkNrOUxKRnVlcnNKNEZMaXl4eTJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS81OGIyMGEtNDUyYi00ZjJiLWFhYjUtN2QxM2MwNzJkOTZi LzEvd0M5WjdLWkNrOUxKRnVlcnNKNEZMaXl4eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAel3RG6gd 4SdnFwIprSojrgrVg13Jv6Tq1oF4iSdg6BNMH6aGxCm84yK5K5vtcfGIPZoMB/uB JtR0n3VU1q9SdwcMlb6DOTE2qzYQA9lMVg5KlzKmXcrEw/ZVtI+VE7dWBQZuWJqt 9eks608tvhgoGyNedlfA8laYc8QUBuEF6jizeshi5RqdqHxYgTAXrGGZ8BjrcoEO Ern5JrLamHlcfow2NePfI2J4PCPI4ECtBlSE6ANmyP2zb5kvrv3pXkRgw0QukxQg 8eHp1uC60PzPFHs67izW2LFY0ctgVgZP77PjX2OQq1esHdFdfnIRu/ASrAn90iYx 5u0HRcQqW7tkuA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:49:45 2025 by rpki-client