This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft File: wvPozdMcgnmN3vk0AfKcfcqmr20.mft (raw, json) Hash identifier: EBbiS4ZfscQW/u+dxWItLiwE0J5uI7S3uCiwSpXvNy8= Subject key identifier: D1:B9:4C:10:D0:01:2E:0B:D5:BF:FF:69:C7:88:74:1A:A9:63:7F:94 Authority key identifier: C2:F3:E8:CD:D3:1C:82:79:8D:DE:F9:34:01:F2:9C:7D:CA:A6:AF:6D Certificate issuer: /CN=c2f3e8cdd31c82798ddef93401f29c7dcaa6af6d Certificate serial: 019AF051B3D37D29BB883109C2AB6FDA8B8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft Manifest number: EA Signing time: Fri 05 Dec 2025 21:01:17 +0000 Manifest this update: Fri 05 Dec 2025 21:01:17 +0000 Manifest next update: Sat 06 Dec 2025 21:01:17 +0000 Files and hashes: 1: wvPozdMcgnmN3vk0AfKcfcqmr20.crl (hash: H3/yQt8D9wKoUotm1w5LBhG7bwo4qS0Vgx9fUwejhBE=) 2: xIllA8mBfD0CE_Yok6WhXftpMvk.roa (hash: tUc/QZEe3fgD7JMv9CZx61iqBXYp1mekZgazOTqgam8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.crl rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:b3:d3:7d:29:bb:88:31:09:c2:ab:6f:da:8b:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2f3e8cdd31c82798ddef93401f29c7dcaa6af6d Validity Not Before: Dec 5 21:01:17 2025 GMT Not After : Dec 6 21:01:17 2025 GMT Subject: CN=d1b94c10d0012e0bd5bfff69c788741aa9637f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:54:7f:37:08:28:20:08:7e:3f:87:49:a2:64: 0c:cc:4d:58:41:6d:ef:66:11:6f:fc:c1:9e:f8:94: 51:05:ba:47:d4:0e:82:d5:ec:b9:3d:ea:43:37:3c: 04:bd:85:36:fd:17:de:e2:61:0a:cc:c9:b1:07:76: 90:bd:2c:e0:99:c6:a9:f6:87:32:8b:f5:39:96:4e: f4:bf:6a:9a:74:09:54:0b:59:e4:c9:ad:15:84:d2: 27:60:d5:b8:e1:1d:76:9e:8e:e8:63:9f:bc:da:e7: 93:ca:6c:76:ba:54:e4:d5:15:1c:03:3f:26:3b:d0: 93:0e:c3:39:9a:6e:46:ad:c8:e5:98:17:e0:aa:2c: 76:07:32:5a:2c:69:d9:cc:b5:b7:8d:5e:5f:df:33: f4:eb:1c:f9:86:6a:3f:f1:cb:5c:71:a3:76:4d:97: fc:2a:05:52:0c:47:a3:85:c7:8c:5c:ed:c0:ec:91: 91:f5:8b:7e:3d:ac:eb:f5:18:fb:38:3c:cf:db:04: 3d:8b:32:ff:cf:7b:af:4d:1f:b3:2f:02:7c:3c:86: 71:7f:f2:f4:08:9e:99:68:19:d1:a9:a5:9a:e1:01: cd:34:69:ee:37:4d:f5:f4:72:6a:5b:4c:01:64:ed: 54:0b:c9:4e:4d:1d:af:3d:2e:f6:51:5c:1a:df:5c: 3b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B9:4C:10:D0:01:2E:0B:D5:BF:FF:69:C7:88:74:1A:A9:63:7F:94 X509v3 Authority Key Identifier: keyid:C2:F3:E8:CD:D3:1C:82:79:8D:DE:F9:34:01:F2:9C:7D:CA:A6:AF:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ce:82:d5:69:0e:7b:e4:52:0d:aa:4b:6c:9b:dc:c1:d4:e3: d3:54:a1:f3:e2:40:0e:33:03:c6:ee:54:43:a3:78:83:00:85: 4e:85:c6:e8:2a:e9:3d:a2:62:76:76:e2:d7:49:3a:74:8f:38: d1:6d:f8:c0:41:df:9c:e7:8e:e3:fd:04:bd:21:0a:85:b9:1b: 4b:59:28:97:ea:ce:6b:93:01:02:35:a4:90:b6:91:ac:22:f6: 0d:f6:e9:63:48:f4:d7:e5:d9:9c:0b:b5:72:21:46:89:84:8b: 78:30:f7:5e:4f:9c:3a:59:3c:3e:15:4a:46:d9:e3:19:a3:6d: ae:aa:96:1d:a0:55:14:bb:b9:b9:7a:54:30:fc:d9:8d:55:55: bd:8c:0b:f6:b4:b7:27:76:8d:3e:34:93:05:fd:4c:8b:14:25: 2c:e8:8e:e7:1e:75:db:2b:58:17:cf:60:6d:52:95:c7:17:f7: 48:5b:75:f6:e9:c1:2c:0b:01:6b:45:e5:b3:cb:6b:08:81:7b: 94:e8:80:d9:14:32:45:24:7e:8d:66:74:cc:45:e8:0e:03:96: db:5d:aa:2a:f4:de:e9:ff:72:35:df:b9:83:d0:c4:ac:a3:d6: 04:75:22:69:fa:d5:37:72:7c:1b:dc:cb:ef:fe:55:ac:d5:70: d1:03:76:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUbPTfSm7iDEJwqtv2ouNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZjNlOGNkZDMxYzgyNzk4ZGRlZjkzNDAxZjI5YzdkY2Fh NmFmNmQwHhcNMjUxMjA1MjEwMTE3WhcNMjUxMjA2MjEwMTE3WjAzMTEwLwYDVQQD EyhkMWI5NGMxMGQwMDEyZTBiZDViZmZmNjljNzg4NzQxYWE5NjM3Zjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lR/NwgoIAh+P4dJomQMzE1YQW3v ZhFv/MGe+JRRBbpH1A6C1ey5PepDNzwEvYU2/Rfe4mEKzMmxB3aQvSzgmcap9ocy i/U5lk70v2qadAlUC1nkya0VhNInYNW44R12no7oY5+82ueTymx2ulTk1RUcAz8m O9CTDsM5mm5GrcjlmBfgqix2BzJaLGnZzLW3jV5f3zP06xz5hmo/8ctccaN2TZf8 KgVSDEejhceMXO3A7JGR9Yt+Pazr9Rj7ODzP2wQ9izL/z3uvTR+zLwJ8PIZxf/L0 CJ6ZaBnRqaWa4QHNNGnuN0319HJqW0wBZO1UC8lOTR2vPS72UVwa31w7HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNG5TBDQAS4L1b//aceIdBqpY3+UMB8GA1UdIwQY MBaAFMLz6M3THIJ5jd75NAHynH3Kpq9tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3ZQb3pkTWNnbm1OM3ZrMEFmS2NmY3FtcjIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kZmI4ZjUtNDlhZi00ZjQ4LTg5M2Mt ZmM1NzQ0MGQ0NDhhLzEvd3ZQb3pkTWNnbm1OM3ZrMEFmS2NmY3FtcjIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9kZmI4ZjUtNDlhZi00ZjQ4LTg5M2MtZmM1NzQ0MGQ0NDhh LzEvd3ZQb3pkTWNnbm1OM3ZrMEFmS2NmY3FtcjIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWs6C1WkO e+RSDapLbJvcwdTj01Sh8+JADjMDxu5UQ6N4gwCFToXG6CrpPaJidnbi10k6dI84 0W34wEHfnOeO4/0EvSEKhbkbS1kol+rOa5MBAjWkkLaRrCL2DfbpY0j01+XZnAu1 ciFGiYSLeDD3Xk+cOlk8PhVKRtnjGaNtrqqWHaBVFLu5uXpUMPzZjVVVvYwL9rS3 J3aNPjSTBf1MixQlLOiO5x512ytYF89gbVKVxxf3SFt19unBLAsBa0Xls8trCIF7 lOiA2RQyRSR+jWZ0zEXoDgOW212qKvTe6f9yNd+5g9DErKPWBHUiafrVN3J8G9zL 7/5VrNVw0QN2gw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:07:28 2025 by rpki-client