This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft File: wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft (raw, json) Hash identifier: rfffB5HUQIiXfVhMGdzKdBxPgttJBMl8ruKEJAmkkp0= Subject key identifier: A3:5E:2E:E3:71:66:E8:04:09:26:3D:51:83:96:52:9A:78:9B:E9:CF Authority key identifier: C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4 Certificate issuer: /CN=c30aef396394ea5950dc7956ab1bf491364622a4 Certificate serial: 019AF3524040B09E08416C658651FC3C6970 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft Manifest number: 16BC Signing time: Sat 06 Dec 2025 11:00:45 +0000 Manifest this update: Sat 06 Dec 2025 11:00:45 +0000 Manifest next update: Sun 07 Dec 2025 11:00:45 +0000 Files and hashes: 1: rZbNK2xJ4XhKao8afy4CimeXVSk.roa (hash: DH234KafhTlCh4Rrjfu8Y3PnZSWa2Wt2QfsLpMy42vQ=) 2: wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl (hash: 7o2eghMyP1vN218Pcdt3kt6umLN198Wu13lzJ2fTtgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:40:40:b0:9e:08:41:6c:65:86:51:fc:3c:69:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c30aef396394ea5950dc7956ab1bf491364622a4 Validity Not Before: Dec 6 11:00:45 2025 GMT Not After : Dec 7 11:00:45 2025 GMT Subject: CN=a35e2ee37166e80409263d518396529a789be9cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:07:ca:01:6a:ae:59:40:1d:c3:66:e7:88:91: 2f:79:a2:2c:9f:ed:27:50:a6:b9:ab:fd:bd:ea:aa: 2d:ad:89:33:7a:6b:45:0c:1e:56:64:9e:65:8e:9b: 21:67:a8:35:8f:88:2a:1b:38:70:3b:38:0c:eb:a7: b7:19:a1:69:0e:54:00:ab:2a:29:2e:2f:a9:1c:49: a1:c1:30:f8:d3:09:28:40:ba:0f:39:c0:ce:03:48: 2b:0d:6c:b3:f9:15:00:94:c6:9b:28:03:c7:80:07: 10:83:ba:97:0f:3c:aa:ca:3a:e7:06:c5:6a:13:bc: ef:b0:45:03:17:f3:29:b6:67:08:27:c6:17:41:ac: 1b:b4:45:d3:65:f1:ae:e3:ff:99:84:13:42:64:b3: 49:23:d8:10:9e:48:47:40:e2:d5:30:54:aa:b9:34: ab:27:fa:2a:62:15:93:e5:7f:7a:2a:92:2b:e5:85: 4b:a5:57:04:e4:97:46:8b:3b:72:c6:3e:4c:06:fb: 86:e8:b4:81:8c:7e:c3:78:33:d6:56:5c:81:7f:60: 41:64:49:f6:9b:8e:fd:33:e2:7b:44:28:db:9f:78: 38:a8:96:2e:82:21:65:3b:c9:92:d6:4d:70:18:a9: 8d:5c:f0:7f:0e:c0:bb:5f:b0:4a:46:66:82:b0:62: 70:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:5E:2E:E3:71:66:E8:04:09:26:3D:51:83:96:52:9A:78:9B:E9:CF X509v3 Authority Key Identifier: keyid:C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:0a:4e:52:4c:d0:76:2d:61:c3:1e:1a:32:39:cd:ed:d3:e5: 87:86:32:cd:a1:4a:7f:68:08:a9:50:96:85:fe:07:fb:d7:bf: af:81:79:71:ce:25:50:f8:0e:4f:fc:07:f5:1c:e6:ce:80:6a: 20:10:15:7b:d4:50:d6:a1:7e:97:e8:c2:bb:56:a4:28:c7:e2: 2b:b5:55:b6:7c:8e:52:d3:7d:73:97:d9:24:ac:5b:1b:72:2f: 29:27:0d:f8:82:76:85:68:32:48:88:79:4b:ea:4a:1e:a3:9f: 61:06:a4:95:ab:07:29:ef:b6:fa:31:c2:f7:1b:84:3b:9c:8d: 7b:4f:6c:dc:95:72:20:d6:61:fb:0b:58:b7:70:13:a0:5f:28: 64:fb:58:b6:f4:58:e3:df:78:0c:4a:b6:b9:71:d3:c2:73:36: de:3b:50:7f:7c:30:80:e0:c8:af:61:5e:11:ac:50:9d:32:e2: c7:78:37:b0:40:18:e3:f4:63:15:9c:c6:0a:f2:0c:1c:42:5c: 2c:4b:9c:82:a3:b2:9d:cf:52:ca:aa:62:f2:b6:70:ed:e4:d6: 8b:54:f5:70:7a:d7:de:19:66:ba:6b:70:88:d1:57:0e:44:ed: fc:76:ab:6f:60:37:36:01:17:42:50:e0:ef:00:3a:b6:3f:1b: 91:ed:79:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUkBAsJ4IQWxlhlH8PGlwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMGFlZjM5NjM5NGVhNTk1MGRjNzk1NmFiMWJmNDkxMzY0 NjIyYTQwHhcNMjUxMjA2MTEwMDQ1WhcNMjUxMjA3MTEwMDQ1WjAzMTEwLwYDVQQD EyhhMzVlMmVlMzcxNjZlODA0MDkyNjNkNTE4Mzk2NTI5YTc4OWJlOWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwfKAWquWUAdw2bniJEveaIsn+0n UKa5q/296qotrYkzemtFDB5WZJ5ljpshZ6g1j4gqGzhwOzgM66e3GaFpDlQAqyop Li+pHEmhwTD40wkoQLoPOcDOA0grDWyz+RUAlMabKAPHgAcQg7qXDzyqyjrnBsVq E7zvsEUDF/MptmcIJ8YXQawbtEXTZfGu4/+ZhBNCZLNJI9gQnkhHQOLVMFSquTSr J/oqYhWT5X96KpIr5YVLpVcE5JdGiztyxj5MBvuG6LSBjH7DeDPWVlyBf2BBZEn2 m479M+J7RCjbn3g4qJYugiFlO8mS1k1wGKmNXPB/DsC7X7BKRmaCsGJwYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNeLuNxZugECSY9UYOWUpp4m+nPMB8GA1UdIwQY MBaAFMMK7zljlOpZUNx5Vqsb9JE2RiKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3dydk9XT1U2bGxRM0hsV3F4djBrVFpHSXFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kZGM5YTEtNTg5Mi00NGQxLWI0OTAt MjY3ZGE5MWZiZmY4LzEvd3dydk9XT1U2bGxRM0hsV3F4djBrVFpHSXFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kZGM5YTEtNTg5Mi00NGQxLWI0OTAtMjY3ZGE5MWZiZmY4 LzEvd3dydk9XT1U2bGxRM0hsV3F4djBrVFpHSXFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQpOUkzQ di1hwx4aMjnN7dPlh4YyzaFKf2gIqVCWhf4H+9e/r4F5cc4lUPgOT/wH9RzmzoBq IBAVe9RQ1qF+l+jCu1akKMfiK7VVtnyOUtN9c5fZJKxbG3IvKScN+IJ2hWgySIh5 S+pKHqOfYQaklasHKe+2+jHC9xuEO5yNe09s3JVyINZh+wtYt3AToF8oZPtYtvRY 4994DEq2uXHTwnM23jtQf3wwgODIr2FeEaxQnTLix3g3sEAY4/RjFZzGCvIMHEJc LEucgqOync9Syqpi8rZw7eTWi1T1cHrX3hlmumtwiNFXDkTt/Harb2A3NgEXQlDg 7wA6tj8bke15Tg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:03:08 2025 by rpki-client