This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft File: wc2HDWChpsQgZxWK7rzA4_1t2B8.mft (raw, json) Hash identifier: HOzBLj2Mtw8U8Kdqf3D0OMfT7Fg7Wh9i60JseM9YaVs= Subject key identifier: 91:ED:57:1F:2F:9E:37:6B:53:45:D8:5E:59:20:E3:BC:29:1F:B4:7F Authority key identifier: C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F Certificate issuer: /CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f Certificate serial: 019B2C9D8A1684027E3812718A39F399A3D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft Manifest number: 0463 Signing time: Wed 17 Dec 2025 14:01:20 +0000 Manifest this update: Wed 17 Dec 2025 14:01:20 +0000 Manifest next update: Thu 18 Dec 2025 14:01:20 +0000 Files and hashes: 1: BqHb_zqnMM3dIgBF_BTfgVY5a5k.roa (hash: uhtJUVXZSGPPQKjYqbLF+Cz5CPTBTCYfz/c5yIRK4Ss=) 2: wc2HDWChpsQgZxWK7rzA4_1t2B8.crl (hash: 22FESxJp8mMjck7crbNyGv04AxztfZ0By4k7Dx0ElZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:8a:16:84:02:7e:38:12:71:8a:39:f3:99:a3:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f Validity Not Before: Dec 17 14:01:20 2025 GMT Not After : Dec 18 14:01:20 2025 GMT Subject: CN=91ed571f2f9e376b5345d85e5920e3bc291fb47f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:50:cc:d2:88:1a:ed:0e:8a:07:cf:f5:3b:f4: 0c:4d:cc:b3:dd:8b:b7:d1:83:66:e9:11:7e:c5:4a: e7:71:cd:e9:7c:33:c5:88:99:4b:02:5f:b3:3d:3d: d0:af:2a:3e:21:e0:97:fb:80:5a:1c:a5:e2:03:c5: 9f:15:f0:b1:09:02:f5:2a:d6:35:45:a3:90:f4:22: 6b:40:7f:ce:f9:6b:dc:7e:a6:3c:ad:96:75:22:d6: d1:7f:4c:1a:3e:32:bd:1e:0e:d2:d9:d6:05:05:fd: 0c:f6:a6:f2:d3:75:ab:00:9a:f3:00:a7:a2:18:1a: 54:8f:89:67:39:2f:42:65:c3:f4:6c:e8:a1:c4:34: 58:fe:67:c9:87:a6:13:72:e4:0e:e3:7c:73:e4:62: 1c:f1:91:75:4c:85:bd:9d:40:f1:21:f6:14:19:35: 57:6b:27:4e:d9:83:4d:03:5b:85:ba:d1:5d:0e:13: 8b:6c:51:77:3d:1b:5a:1d:0c:22:13:93:d0:3b:f3: 2e:76:c1:e3:d6:ed:d4:bc:a2:46:54:db:e5:48:0d: a3:94:ff:c3:d3:7e:3f:3e:47:66:dd:b4:1d:73:cb: 50:21:54:62:f8:a7:10:a2:69:0e:2b:c8:5e:54:1d: 4c:b9:a3:02:e9:64:8c:47:9f:67:f6:9d:f9:ae:5a: c4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:ED:57:1F:2F:9E:37:6B:53:45:D8:5E:59:20:E3:BC:29:1F:B4:7F X509v3 Authority Key Identifier: keyid:C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:96:42:19:c9:16:18:9b:ff:87:32:fd:ae:f8:d0:43:e3:f8: 2d:5a:9f:e2:7a:32:df:9f:99:39:91:d4:37:29:04:fb:68:4e: db:4b:65:55:ec:aa:f9:bc:69:ac:af:ea:b6:d6:3d:ed:fe:5d: b4:8c:ce:91:37:6c:cd:86:a8:89:d8:dc:d4:60:52:2c:4a:71: a5:36:cf:55:ab:b1:91:4d:a1:86:4c:ad:7f:d9:d0:10:19:f2: 8f:5c:ed:1e:9a:b0:fb:1f:a5:9e:a0:ba:0d:02:e6:ff:b6:e5: 44:23:16:c5:c1:78:80:ef:3b:3d:8d:05:af:7f:1d:a0:d9:66: 2e:28:76:87:5f:bf:38:db:8c:da:8c:1c:67:52:63:7f:ac:34: 88:c6:47:6d:f4:74:fe:c2:17:33:93:72:7b:53:cd:84:51:64: ef:7c:72:dc:86:5a:94:36:3c:48:d4:5f:64:85:90:75:19:a2: f5:0e:58:ec:4c:02:1e:73:33:1a:9a:84:e5:8f:b1:bd:07:b0: f7:94:d6:f1:3e:83:7b:23:92:a5:86:05:90:69:23:da:f6:af: fc:6f:5f:74:b9:b7:0b:e4:69:56:a8:d1:da:96:93:e0:1a:54: e2:fe:dd:48:5d:53:fc:0d:43:6d:3a:db:82:db:b0:c8:14:82: 35:61:28:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnYoWhAJ+OBJxijnzmaPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxY2Q4NzBkNjBhMWE2YzQyMDY3MTU4YWVlYmNjMGUzZmQ2 ZGQ4MWYwHhcNMjUxMjE3MTQwMTIwWhcNMjUxMjE4MTQwMTIwWjAzMTEwLwYDVQQD Eyg5MWVkNTcxZjJmOWUzNzZiNTM0NWQ4NWU1OTIwZTNiYzI5MWZiNDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FDM0oga7Q6KB8/1O/QMTcyz3Yu3 0YNm6RF+xUrncc3pfDPFiJlLAl+zPT3Qryo+IeCX+4BaHKXiA8WfFfCxCQL1KtY1 RaOQ9CJrQH/O+WvcfqY8rZZ1ItbRf0waPjK9Hg7S2dYFBf0M9qby03WrAJrzAKei GBpUj4lnOS9CZcP0bOihxDRY/mfJh6YTcuQO43xz5GIc8ZF1TIW9nUDxIfYUGTVX aydO2YNNA1uFutFdDhOLbFF3PRtaHQwiE5PQO/MudsHj1u3UvKJGVNvlSA2jlP/D 034/Pkdm3bQdc8tQIVRi+KcQomkOK8heVB1MuaMC6WSMR59n9p35rlrEEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHtVx8vnjdrU0XYXlkg47wpH7R/MB8GA1UdIwQY MBaAFMHNhw1goabEIGcViu68wOP9bdgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy84MzVhODItOGJiZS00MGIyLWIyZDQt MDQ4MWM2NmMyYjVhLzEvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy84MzVhODItOGJiZS00MGIyLWIyZDQtMDQ4MWM2NmMyYjVh LzEvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpZCGckW GJv/hzL9rvjQQ+P4LVqf4noy35+ZOZHUNykE+2hO20tlVeyq+bxprK/qttY97f5d tIzOkTdszYaoidjc1GBSLEpxpTbPVauxkU2hhkytf9nQEBnyj1ztHpqw+x+lnqC6 DQLm/7blRCMWxcF4gO87PY0Fr38doNlmLih2h1+/ONuM2owcZ1Jjf6w0iMZHbfR0 /sIXM5Nye1PNhFFk73xy3IZalDY8SNRfZIWQdRmi9Q5Y7EwCHnMzGpqE5Y+xvQew 95TW8T6DeyOSpYYFkGkj2vav/G9fdLm3C+RpVqjR2paT4BpU4v7dSF1T/A1DbTrb gtuwyBSCNWEoIw== -----END CERTIFICATE-----Generated at Wed Dec 17 16:42:28 2025 by rpki-client