This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft File: wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft (raw, json) Hash identifier: xBFS4QDin5/YQM8E1ZSTXJXEtrAE45kEJh8YZ7cioKA= Subject key identifier: 9D:AD:92:01:2C:5B:90:0F:3C:7F:DD:93:01:9F:A3:0F:B5:45:92:F6 Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29 Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229 Certificate serial: 019AF38A1639138A3F049C62767823DB3C69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 12:01:44 +0000 Manifest this update: Sat 06 Dec 2025 12:01:44 +0000 Manifest next update: Sun 07 Dec 2025 12:01:44 +0000 Files and hashes: 1: 2ckuuQNGelqhfIDU0HMZ3G_jIN4.roa (hash: Ly3hlzB/x5T87M29FpEs5LMZzWEyS3uYaMyLbALjnTU=) 2: wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl (hash: +E5j6QvwyjU/OzvSIO3AMC0qCvaFLkmT6MIciBSpOOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:16:39:13:8a:3f:04:9c:62:76:78:23:db:3c:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229 Validity Not Before: Dec 6 12:01:44 2025 GMT Not After : Dec 7 12:01:44 2025 GMT Subject: CN=9dad92012c5b900f3c7fdd93019fa30fb54592f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d9:2c:f1:9d:c3:58:bd:0e:77:3e:dd:9f:8b: 7e:24:8b:5f:9f:7c:4b:2e:38:6e:a5:94:41:b0:16: 57:0d:11:78:9d:d0:2e:e6:6b:70:1e:b4:ba:30:f4: 45:3f:47:e8:9a:3f:04:63:e8:32:45:4b:05:52:48: 6b:31:4e:92:4a:af:d4:09:ed:b7:8d:93:5e:f4:ab: 7f:46:a2:a7:3a:10:19:c4:b8:ad:ea:f2:8a:c5:5f: b1:17:d6:fb:8d:e2:b2:4a:aa:3a:9c:53:dc:f2:db: b5:e6:ca:67:5b:b1:35:c7:8e:0d:64:17:f0:09:c0: 4f:c1:8d:0b:05:5b:86:8c:bb:fc:72:7a:cc:fe:03: 39:e2:1a:55:c5:9d:34:c5:1c:1a:50:b9:75:00:0d: d3:f8:98:22:a5:0a:81:52:d4:b5:17:b7:7a:3b:b0: b7:3f:4f:59:45:54:e8:b3:39:c1:b6:e0:29:1a:59: 6a:55:5f:75:72:dd:f1:4e:71:33:de:88:8c:1d:93: 06:83:99:07:3d:b4:cb:a8:9a:7d:f3:48:ed:dc:38: af:42:d5:4f:1f:f0:f2:16:32:80:bc:e4:e1:55:22: ad:56:30:c7:3f:00:f4:a1:57:c4:17:e9:8c:56:c4: b4:5c:b2:c4:ea:b1:ba:f5:b0:64:fb:1f:10:9f:77: 6f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AD:92:01:2C:5B:90:0F:3C:7F:DD:93:01:9F:A3:0F:B5:45:92:F6 X509v3 Authority Key Identifier: keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:99:ab:15:cb:6a:9c:57:b2:67:32:ac:c2:3b:2c:69:38:3d: ea:0f:3b:71:8e:90:46:c8:3d:ad:26:60:5d:06:a3:db:90:09: fb:e7:b7:e1:e6:32:f3:72:17:60:22:29:e2:ad:c7:a0:ed:44: 48:5d:cb:0e:4c:f6:b7:92:08:78:82:de:c0:bb:ba:ad:53:4f: 4d:f7:f8:29:67:4c:79:ff:0b:f5:59:3c:2d:bf:59:96:05:4e: 70:d6:36:5e:fb:6d:36:58:ea:0d:77:4e:49:90:ff:22:27:c1: f7:0a:47:94:6a:e9:f7:90:fc:04:35:cc:98:70:25:4d:f7:eb: f4:65:60:61:00:f9:de:fd:6b:9e:d3:52:fa:ff:d2:f8:9c:36: a7:2d:7f:39:c4:20:d3:d9:01:d9:26:17:e0:a7:0b:7a:a3:a1: 19:92:6b:e1:7b:c3:5c:65:84:f1:43:66:4e:29:6d:9d:1f:03: 4a:aa:de:56:e5:b6:53:9f:8d:c0:ed:4c:be:1f:25:00:1c:af: 66:94:b1:d3:17:6c:0b:8d:7e:45:94:ea:5b:f1:54:40:8a:1d: 5a:23:0c:da:ed:8a:53:80:64:62:77:75:ec:c5:37:ed:fb:ee: 10:ab:c0:11:9f:29:eb:65:12:7c:db:8f:f4:57:b4:3f:f3:97: e6:f0:43:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzihY5E4o/BJxidngj2zxpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYTIzMzU5MGRlNTg2ZTBjNTU4MjFjNmY2ZDU3MzJhZmM4 NDEyMjkwHhcNMjUxMjA2MTIwMTQ0WhcNMjUxMjA3MTIwMTQ0WjAzMTEwLwYDVQQD Eyg5ZGFkOTIwMTJjNWI5MDBmM2M3ZmRkOTMwMTlmYTMwZmI1NDU5MmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdks8Z3DWL0Odz7dn4t+JItfn3xL LjhupZRBsBZXDRF4ndAu5mtwHrS6MPRFP0fomj8EY+gyRUsFUkhrMU6SSq/UCe23 jZNe9Kt/RqKnOhAZxLit6vKKxV+xF9b7jeKySqo6nFPc8tu15spnW7E1x44NZBfw CcBPwY0LBVuGjLv8cnrM/gM54hpVxZ00xRwaULl1AA3T+JgipQqBUtS1F7d6O7C3 P09ZRVTosznBtuApGllqVV91ct3xTnEz3oiMHZMGg5kHPbTLqJp980jt3DivQtVP H/DyFjKAvOThVSKtVjDHPwD0oVfEF+mMVsS0XLLE6rG69bBk+x8Qn3dvHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2tkgEsW5APPH/dkwGfow+1RZL2MB8GA1UdIwQY MBaAFMCiM1kN5YbgxVghxvbVcyr8hBIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85N2IwYjctMDEzZC00MzNlLWI1Mzgt YTg0ZWI0MTFlZjhhLzEvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85N2IwYjctMDEzZC00MzNlLWI1MzgtYTg0ZWI0MTFlZjhh LzEvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5mrFctq nFeyZzKswjssaTg96g87cY6QRsg9rSZgXQaj25AJ++e34eYy83IXYCIp4q3HoO1E SF3LDkz2t5IIeILewLu6rVNPTff4KWdMef8L9Vk8Lb9ZlgVOcNY2XvttNljqDXdO SZD/IifB9wpHlGrp95D8BDXMmHAlTffr9GVgYQD53v1rntNS+v/S+Jw2py1/OcQg 09kB2SYX4KcLeqOhGZJr4XvDXGWE8UNmTiltnR8DSqreVuW2U5+NwO1Mvh8lAByv ZpSx0xdsC41+RZTqW/FUQIodWiMM2u2KU4BkYnd17MU37fvuEKvAEZ8p62USfNuP 9Fe0P/OX5vBDCg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:54:03 2025 by rpki-client