This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft File: wc2HDWChpsQgZxWK7rzA4_1t2B8.mft (raw, json) Hash identifier: 978/87qz0/0e37bHxAKZwtX9fGH0Hp8K5uFwCAsZ3jw= Subject key identifier: 27:7B:11:66:B6:39:DB:BF:8F:5A:B4:D2:35:B2:9D:C2:45:ED:D0:26 Authority key identifier: C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F Certificate issuer: /CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f Certificate serial: 019AF0BEDCE5FB76CBEA7BA006486C7B0115 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft Manifest number: 0444 Signing time: Fri 05 Dec 2025 23:00:31 +0000 Manifest this update: Fri 05 Dec 2025 23:00:31 +0000 Manifest next update: Sat 06 Dec 2025 23:00:31 +0000 Files and hashes: 1: BqHb_zqnMM3dIgBF_BTfgVY5a5k.roa (hash: uhtJUVXZSGPPQKjYqbLF+Cz5CPTBTCYfz/c5yIRK4Ss=) 2: wc2HDWChpsQgZxWK7rzA4_1t2B8.crl (hash: i20MtDwhtaUvJ6TM7T7Z8CEbyuJTdYuU3iz0+0cq0MA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:dc:e5:fb:76:cb:ea:7b:a0:06:48:6c:7b:01:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f Validity Not Before: Dec 5 23:00:31 2025 GMT Not After : Dec 6 23:00:31 2025 GMT Subject: CN=277b1166b639dbbf8f5ab4d235b29dc245edd026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:be:2d:c9:f6:c3:48:61:c8:66:9c:e2:33:27: 2a:51:9b:ea:72:b0:fe:aa:f9:c6:22:ee:fd:fe:29: a6:93:dc:5e:5a:c1:c2:76:4d:f8:a9:e5:c3:18:92: 01:51:2b:3b:87:fb:f8:5c:fd:97:a8:f8:13:4d:ba: ab:d1:5e:ba:b0:78:23:c4:80:33:b5:6b:23:56:f3: 25:c5:c0:de:fa:53:71:51:d1:f0:7f:f4:c5:93:c7: f5:06:a7:34:18:c0:5f:76:de:01:da:01:ff:4f:74: e5:9c:d2:b8:36:70:1b:55:90:7c:76:96:26:29:f7: 52:99:e1:c5:02:6c:9e:ec:d1:a6:e7:59:c8:6a:8b: 21:f8:b7:bb:aa:ec:41:03:49:dd:96:e4:0b:ac:f2: 3a:13:ba:34:6b:2a:30:8f:ff:65:79:f6:4a:ab:84: 26:ba:e7:50:a1:80:74:c6:3a:8b:83:a4:31:e4:41: 77:e2:09:26:59:56:4b:f9:29:66:17:66:e0:de:69: 2c:41:ba:86:ea:c5:80:c8:c2:12:1d:76:e2:11:e5: 66:86:0d:47:c5:ac:8f:0e:c0:51:7a:bf:7e:93:0c: 23:6a:b4:12:b0:76:af:c2:e9:a4:fa:43:7e:86:db: c0:40:8e:d0:c7:51:0a:c3:9f:49:c2:a6:4f:7d:dd: 39:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:7B:11:66:B6:39:DB:BF:8F:5A:B4:D2:35:B2:9D:C2:45:ED:D0:26 X509v3 Authority Key Identifier: keyid:C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b9:39:76:3d:1e:aa:f0:fc:44:ba:5b:5e:a1:8f:3b:8a:48: 12:fc:54:63:c6:48:ca:d7:e2:c1:af:fb:7c:e6:52:85:6a:04: f4:2a:ad:85:65:9c:ed:84:c5:26:5a:a8:99:08:70:68:75:5f: 53:aa:72:f0:cb:bc:2c:e5:b0:08:00:e9:a7:b3:25:f2:e6:f8: bd:28:07:e9:15:99:0a:9a:83:13:43:00:e2:96:58:66:8b:f6: bb:88:fb:f4:46:c7:2b:4a:82:a9:a5:a3:42:ab:98:3b:f6:f3: c2:c1:79:56:b3:e4:3d:1f:11:06:ce:db:71:e1:6a:85:2a:f9: d0:74:09:bb:7c:ee:c5:4e:39:9f:41:a1:a0:b5:e8:e9:ab:53: 90:0d:f2:81:4b:d2:9a:8e:69:ab:94:81:a5:70:91:08:fe:c3: d0:f1:c5:ab:07:41:e4:41:2e:ec:8f:8a:0a:8a:a0:38:a0:63: 7d:c3:19:a9:cc:a7:1a:59:2b:a4:8f:52:99:1c:9c:ee:ec:8f: ee:c7:ed:b2:69:97:27:36:0e:b4:6a:c7:69:13:c7:b7:60:60: 49:7f:97:76:30:58:8e:d3:07:8f:8c:f7:24:08:48:32:15:3d: f7:41:52:f6:d9:fd:7f:ab:37:cf:3e:41:21:d1:83:6f:7d:64: 18:7b:b9:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvtzl+3bL6nugBkhsewEVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxY2Q4NzBkNjBhMWE2YzQyMDY3MTU4YWVlYmNjMGUzZmQ2 ZGQ4MWYwHhcNMjUxMjA1MjMwMDMxWhcNMjUxMjA2MjMwMDMxWjAzMTEwLwYDVQQD EygyNzdiMTE2NmI2MzlkYmJmOGY1YWI0ZDIzNWIyOWRjMjQ1ZWRkMDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb4tyfbDSGHIZpziMycqUZvqcrD+ qvnGIu79/immk9xeWsHCdk34qeXDGJIBUSs7h/v4XP2XqPgTTbqr0V66sHgjxIAz tWsjVvMlxcDe+lNxUdHwf/TFk8f1Bqc0GMBfdt4B2gH/T3TlnNK4NnAbVZB8dpYm KfdSmeHFAmye7NGm51nIaosh+Le7quxBA0ndluQLrPI6E7o0ayowj/9lefZKq4Qm uudQoYB0xjqLg6Qx5EF34gkmWVZL+SlmF2bg3mksQbqG6sWAyMISHXbiEeVmhg1H xayPDsBRer9+kwwjarQSsHavwumk+kN+htvAQI7Qx1EKw59JwqZPfd05dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCd7EWa2Odu/j1q00jWyncJF7dAmMB8GA1UdIwQY MBaAFMHNhw1goabEIGcViu68wOP9bdgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy84MzVhODItOGJiZS00MGIyLWIyZDQt MDQ4MWM2NmMyYjVhLzEvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy84MzVhODItOGJiZS00MGIyLWIyZDQtMDQ4MWM2NmMyYjVh LzEvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7k5dj0e qvD8RLpbXqGPO4pIEvxUY8ZIytfiwa/7fOZShWoE9CqthWWc7YTFJlqomQhwaHVf U6py8Mu8LOWwCADpp7Ml8ub4vSgH6RWZCpqDE0MA4pZYZov2u4j79EbHK0qCqaWj QquYO/bzwsF5VrPkPR8RBs7bceFqhSr50HQJu3zuxU45n0GhoLXo6atTkA3ygUvS mo5pq5SBpXCRCP7D0PHFqwdB5EEu7I+KCoqgOKBjfcMZqcynGlkrpI9SmRyc7uyP 7sftsmmXJzYOtGrHaRPHt2BgSX+XdjBYjtMHj4z3JAhIMhU990FS9tn9f6s3zz5B IdGDb31kGHu5RQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:05 2025 by rpki-client