This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft File: wznRHn1JkvmvswQx42BCqv3eXAo.mft (raw, json) Hash identifier: /yAMERw33F5sLQmv0ZmuIVevUq+W4tFci6kmptm0kPk= Subject key identifier: AB:ED:CD:A0:A8:B9:98:00:06:CF:67:B4:5D:3F:7A:43:45:4F:10:53 Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a Certificate serial: 019AF50BBF76509CC1C4D7B2153FE43F270B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft Manifest number: 0712 Signing time: Sat 06 Dec 2025 19:02:59 +0000 Manifest this update: Sat 06 Dec 2025 19:02:59 +0000 Manifest next update: Sun 07 Dec 2025 19:02:59 +0000 Files and hashes: 1: TLgLKVaOUqUcy2aOeR6b7swW9-Q.roa (hash: C/2OykLDOSnCVBosN3ZMBK6gouI0wlKQDVzKIVuT/aw=) 2: wznRHn1JkvmvswQx42BCqv3eXAo.crl (hash: qHaTrSqyTyahFE5ICsZLutBlvoDpnuNky/s91mg8ULg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:bf:76:50:9c:c1:c4:d7:b2:15:3f:e4:3f:27:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a Validity Not Before: Dec 6 19:02:59 2025 GMT Not After : Dec 7 19:02:59 2025 GMT Subject: CN=abedcda0a8b9980006cf67b45d3f7a43454f1053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:14:1f:05:74:48:9c:59:35:4c:31:4e:4c:cb: 6e:27:2a:75:c2:6a:3e:d0:02:9d:a3:e3:63:0b:da: bf:03:94:7f:5c:a8:b3:ed:58:6f:7c:2a:1c:33:df: db:d0:35:b2:c5:0c:c2:4e:b5:24:1a:54:ac:1d:ef: 55:34:f4:4a:8f:34:f0:3f:bd:de:1a:bd:39:05:03: 5a:a2:eb:9f:18:ce:3b:82:e8:cd:51:76:9f:68:76: 98:75:0d:61:e2:db:bc:36:60:8d:9d:ec:ff:e8:ff: 7b:bf:27:69:f7:6d:9e:bb:0b:76:12:0c:82:ab:a7: 21:97:b1:c3:7b:c6:36:90:46:a6:ea:cb:ac:1d:e8: 06:d9:ef:98:a4:08:f7:c4:66:9a:8d:ac:22:8d:d5: f8:ac:58:88:c5:5c:8c:8e:96:a7:d2:0b:3f:4f:f5: 9c:c2:88:e9:2c:1d:8e:a9:d8:20:bd:bf:6d:f8:41: ae:32:08:9c:19:34:ab:3d:19:5e:e8:c0:c5:06:72: e7:9d:d6:1e:b7:54:b0:f6:47:de:ef:1a:5c:24:83: a3:7e:f6:ff:87:0b:ad:81:29:a8:25:41:69:90:72: 21:fb:82:75:b2:72:db:8b:b8:94:e2:b7:35:4c:f3: 0d:4b:97:9a:f3:50:97:0f:95:54:c5:f6:95:64:bf: 26:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:ED:CD:A0:A8:B9:98:00:06:CF:67:B4:5D:3F:7A:43:45:4F:10:53 X509v3 Authority Key Identifier: keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:17:02:8b:61:f2:84:7b:32:9d:f7:e6:9f:06:1d:fe:64:1d: 1b:39:ea:f5:e1:c0:d5:b4:65:ea:25:af:46:18:99:9a:04:6e: cc:4f:b2:22:03:e9:81:c6:a2:ff:79:6f:82:0c:2e:15:41:51: 26:ad:d0:f4:6c:5a:ce:8c:f3:f8:80:b9:55:83:6b:c0:26:99: 0c:11:51:a9:23:4c:b7:5c:31:8f:7e:f3:7d:8c:36:de:b2:34: ec:ac:35:31:c6:7c:dd:13:b8:1f:b7:dd:5c:96:ad:2f:d2:92: 97:78:7d:83:eb:4c:43:c8:84:f5:2f:dc:45:01:e3:45:dc:92: f9:70:7f:88:01:4b:06:74:9b:28:e2:be:05:29:ad:03:cf:7f: 98:de:9d:fc:c2:38:9b:5d:d2:cb:1d:40:83:53:75:23:6a:02: c2:40:e2:2b:09:40:1e:21:a2:b0:48:73:81:7b:54:5f:79:b9: da:23:95:f7:36:8e:8d:33:fa:11:3d:e6:ec:22:05:84:84:f9: 98:3c:75:e7:a2:5f:40:3b:6f:31:57:1a:7e:d5:d6:7f:a5:d5: 21:75:5c:c2:3c:ef:42:35:25:d7:92:e8:a5:ba:ec:2c:d6:f0: b1:d7:ca:ad:2e:de:08:b7:4c:31:1e:0f:e0:a8:36:eb:f7:76: f3:85:f1:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C792UJzBxNeyFT/kPycLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzlkMTFlN2Q0OTkyZjlhZmIzMDQzMWUzNjA0MmFhZmRk ZTVjMGEwHhcNMjUxMjA2MTkwMjU5WhcNMjUxMjA3MTkwMjU5WjAzMTEwLwYDVQQD EyhhYmVkY2RhMGE4Yjk5ODAwMDZjZjY3YjQ1ZDNmN2E0MzQ1NGYxMDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhQfBXRInFk1TDFOTMtuJyp1wmo+ 0AKdo+NjC9q/A5R/XKiz7VhvfCocM9/b0DWyxQzCTrUkGlSsHe9VNPRKjzTwP73e Gr05BQNaouufGM47gujNUXafaHaYdQ1h4tu8NmCNnez/6P97vydp922euwt2EgyC q6chl7HDe8Y2kEam6susHegG2e+YpAj3xGaajawijdX4rFiIxVyMjpan0gs/T/Wc wojpLB2Oqdggvb9t+EGuMgicGTSrPRle6MDFBnLnndYet1Sw9kfe7xpcJIOjfvb/ hwutgSmoJUFpkHIh+4J1snLbi7iU4rc1TPMNS5ea81CXD5VUxfaVZL8moQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvtzaCouZgABs9ntF0/ekNFTxBTMB8GA1UdIwQY MBaAFMM50R59SZL5r7MEMeNgQqr93lwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jMGRlZjYtYmMwYS00MjIxLTk3OTEt MmQ4MDE5MDE3ODQ5LzEvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9jMGRlZjYtYmMwYS00MjIxLTk3OTEtMmQ4MDE5MDE3ODQ5 LzEvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxcCi2Hy hHsynffmnwYd/mQdGznq9eHA1bRl6iWvRhiZmgRuzE+yIgPpgcai/3lvggwuFUFR Jq3Q9Gxazozz+IC5VYNrwCaZDBFRqSNMt1wxj37zfYw23rI07Kw1McZ83RO4H7fd XJatL9KSl3h9g+tMQ8iE9S/cRQHjRdyS+XB/iAFLBnSbKOK+BSmtA89/mN6d/MI4 m13Syx1Ag1N1I2oCwkDiKwlAHiGisEhzgXtUX3m52iOV9zaOjTP6ET3m7CIFhIT5 mDx156JfQDtvMVcaftXWf6XVIXVcwjzvQjUl15LopbrsLNbwsdfKrS7eCLdMMR4P 4Kg26/d284Xx+Q== -----END CERTIFICATE-----Generated at Sun Dec 7 04:44:51 2025 by rpki-client