This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft File: wHCBpvcho3qeHXmTFbs-onWLiHc.mft (raw, json) Hash identifier: 2XT4mJiv2iF7V65MNehEMLrl57E+/gN/x+8AAjST2Mc= Subject key identifier: F6:23:B0:EE:D7:D9:B4:E2:7E:EF:8D:10:97:8D:D4:35:6C:1C:44:42 Authority key identifier: C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77 Certificate issuer: /CN=c07081a6f721a37a9e1d799315bb3ea2758b8877 Certificate serial: 019AF276C0411FD253F2015734EBD62722BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft Manifest number: 06B6 Signing time: Sat 06 Dec 2025 07:00:59 +0000 Manifest this update: Sat 06 Dec 2025 07:00:59 +0000 Manifest next update: Sun 07 Dec 2025 07:00:59 +0000 Files and hashes: 1: iBvouIeGNb-tETlrG7R7kd8KLJk.roa (hash: ZFh8TKmia8sW44WOw2BVZ15xBNpA9QpJzWskGjFsYMo=) 2: wHCBpvcho3qeHXmTFbs-onWLiHc.crl (hash: z+WR2tr7X5hrNdYvhs8eyJt83cei2xo3qQzwszkvH5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:c0:41:1f:d2:53:f2:01:57:34:eb:d6:27:22:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c07081a6f721a37a9e1d799315bb3ea2758b8877 Validity Not Before: Dec 6 07:00:59 2025 GMT Not After : Dec 7 07:00:59 2025 GMT Subject: CN=f623b0eed7d9b4e27eef8d10978dd4356c1c4442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c8:db:3f:39:d0:61:dc:15:8e:26:bc:b9:be: e9:16:b4:df:7b:bb:50:19:39:23:6b:43:36:a7:4e: 23:92:d6:80:63:8f:d1:5c:7f:ac:a0:57:e4:9d:c3: a5:70:74:f4:b2:6d:40:f8:63:ea:14:9d:3e:a6:37: 1c:c3:6d:ab:1a:68:9f:11:05:a2:9e:c3:f9:cb:5b: 72:6a:68:34:7a:4c:9d:51:6f:d2:99:a9:db:97:41: bc:db:6e:61:7e:e6:f3:49:90:63:1b:a9:fa:f7:a7: a6:9f:7c:dd:6c:e6:58:5a:cd:d1:4a:d2:04:f3:2f: ce:d5:b0:7d:1f:32:d7:90:ca:14:d4:08:00:c2:44: a1:af:c9:7d:d0:7f:be:af:f7:4e:de:4d:31:bc:87: 14:80:37:61:88:17:a4:a3:d0:bb:78:50:a9:ce:11: 35:69:5e:be:85:60:fa:a6:b5:11:78:44:ad:72:ae: 4b:c3:58:af:2c:63:e3:9b:64:84:bf:5c:93:18:b2: 97:46:50:74:ab:c5:0c:11:48:31:33:e0:7a:7c:b7: 64:69:49:4d:18:16:d7:f7:1c:d4:71:58:dc:f3:82: f0:cc:0c:d0:4f:45:f5:33:ff:c7:99:75:7c:68:c0: 16:39:67:12:51:8d:1a:f8:e4:e2:fa:f1:8d:b2:50: 11:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:23:B0:EE:D7:D9:B4:E2:7E:EF:8D:10:97:8D:D4:35:6C:1C:44:42 X509v3 Authority Key Identifier: keyid:C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7f:22:2d:e8:fb:d0:38:a5:7e:de:fa:73:28:53:db:87:c8: 69:76:e5:4a:bb:7c:52:96:d0:6b:91:b9:81:14:b1:e2:22:30: 58:79:95:62:09:48:ee:9e:f4:73:33:6a:fc:b1:ea:81:7d:bb: cb:2e:82:46:c4:07:75:e8:96:7b:e4:4a:ff:f6:92:c2:2d:ed: a8:42:d2:09:81:7e:20:07:92:67:80:8b:99:06:22:1b:b3:4a: b1:e1:70:80:82:03:f6:77:b8:e4:81:24:ea:4a:b0:43:76:49: 91:f0:04:2f:a3:ee:0a:91:bd:0b:59:88:c5:1a:47:a1:32:15: eb:00:ff:ba:3d:1e:c1:63:ba:76:a8:cd:df:24:61:40:2b:f3: 29:eb:5f:5e:2f:6d:c3:9d:ff:01:5b:3c:9a:5a:09:1e:a4:7a: fa:ea:e8:83:4a:a0:7d:d4:b1:da:3a:4c:4d:03:da:ef:3c:44: 43:38:07:76:e8:31:bf:97:5e:75:15:08:7a:f4:4a:7f:8e:90: 6c:9c:14:92:22:07:79:8f:29:25:e5:91:5b:6f:f6:e8:b3:ac: 1e:5a:06:4b:02:97:99:55:85:6a:a3:a3:ab:77:89:31:16:64: 05:d4:6d:9a:7b:9b:18:b7:60:ad:cc:ec:dd:25:da:61:de:5b: c4:d4:70:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydsBBH9JT8gFXNOvWJyK9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNzA4MWE2ZjcyMWEzN2E5ZTFkNzk5MzE1YmIzZWEyNzU4 Yjg4NzcwHhcNMjUxMjA2MDcwMDU5WhcNMjUxMjA3MDcwMDU5WjAzMTEwLwYDVQQD EyhmNjIzYjBlZWQ3ZDliNGUyN2VlZjhkMTA5NzhkZDQzNTZjMWM0NDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cjbPznQYdwVjia8ub7pFrTfe7tQ GTkja0M2p04jktaAY4/RXH+soFfkncOlcHT0sm1A+GPqFJ0+pjccw22rGmifEQWi nsP5y1tyamg0ekydUW/Smanbl0G8225hfubzSZBjG6n696emn3zdbOZYWs3RStIE 8y/O1bB9HzLXkMoU1AgAwkShr8l90H++r/dO3k0xvIcUgDdhiBeko9C7eFCpzhE1 aV6+hWD6prUReEStcq5Lw1ivLGPjm2SEv1yTGLKXRlB0q8UMEUgxM+B6fLdkaUlN GBbX9xzUcVjc84LwzAzQT0X1M//HmXV8aMAWOWcSUY0a+OTi+vGNslARWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYjsO7X2bTifu+NEJeN1DVsHERCMB8GA1UdIwQY MBaAFMBwgab3IaN6nh15kxW7PqJ1i4h3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0hDQnB2Y2hvM3FlSFhtVEZicy1vbldMaUhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85YWZkMjMtZDI4MC00OTVjLWIyNTIt ZjYwMDMxN2IxOTc4LzEvd0hDQnB2Y2hvM3FlSFhtVEZicy1vbldMaUhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy85YWZkMjMtZDI4MC00OTVjLWIyNTItZjYwMDMxN2IxOTc4 LzEvd0hDQnB2Y2hvM3FlSFhtVEZicy1vbldMaUhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATn8iLej7 0Dilft76cyhT24fIaXblSrt8UpbQa5G5gRSx4iIwWHmVYglI7p70czNq/LHqgX27 yy6CRsQHdeiWe+RK//aSwi3tqELSCYF+IAeSZ4CLmQYiG7NKseFwgIID9ne45IEk 6kqwQ3ZJkfAEL6PuCpG9C1mIxRpHoTIV6wD/uj0ewWO6dqjN3yRhQCvzKetfXi9t w53/AVs8mloJHqR6+urog0qgfdSx2jpMTQPa7zxEQzgHdugxv5dedRUIevRKf46Q bJwUkiIHeY8pJeWRW2/26LOsHloGSwKXmVWFaqOjq3eJMRZkBdRtmnubGLdgrczs 3SXaYd5bxNRw0A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:39:30 2025 by rpki-client