This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft File: wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft (raw, json) Hash identifier: JLY0RSPnUIcRi2UI0qUmmve7e+eQ3jHJU6qaeM4zS9I= Subject key identifier: D9:75:25:0A:7A:1F:A7:65:AB:38:F3:FF:F7:0B:7D:84:78:B1:F7:30 Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1 Certificate issuer: /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1 Certificate serial: 019AF9C323EDB550762B2F6BA7D3A96376B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft Manifest number: 0583 Signing time: Sun 07 Dec 2025 17:01:46 +0000 Manifest this update: Sun 07 Dec 2025 17:01:46 +0000 Manifest next update: Mon 08 Dec 2025 17:01:46 +0000 Files and hashes: 1: jQ35y5JqdtG9WdmH02jLEjnZC4E.roa (hash: FipHH6QD7PJQoRtOLX5VjgWSjY2BOLQCjuClzQsUWi8=) 2: wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl (hash: 7UpHRwcgsRTgDkEj9i6rIuj7m7Nk/Qts+w6OyDSr+uM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:c3:23:ed:b5:50:76:2b:2f:6b:a7:d3:a9:63:76:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1 Validity Not Before: Dec 7 17:01:46 2025 GMT Not After : Dec 8 17:01:46 2025 GMT Subject: CN=d975250a7a1fa765ab38f3fff70b7d8478b1f730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:14:70:82:e0:7a:6a:50:24:24:79:56:1f:63: ac:1d:82:3c:01:59:4a:f6:c6:2f:37:3d:fc:ac:7c: b0:86:64:67:76:c4:72:50:b1:60:43:23:df:15:af: 49:2e:85:11:8a:55:7a:58:1e:8e:33:e7:bf:57:1b: d5:8a:05:fa:4a:0c:f8:50:1d:c4:8d:88:a2:eb:61: ca:c3:95:27:83:1c:be:2d:76:40:5d:f8:d1:67:fe: 6a:c1:5c:46:23:60:c7:09:d2:d7:ac:04:dc:cf:68: 4d:15:e5:22:5b:6a:d3:d4:26:ba:b6:b1:0c:39:22: 19:92:21:fd:67:6b:37:a4:65:30:b4:61:5b:00:de: 25:56:c5:5a:c4:ef:2a:18:bb:13:69:68:d5:88:71: fc:6f:ca:4d:da:e5:b6:2e:2b:7e:f0:b5:c7:f0:e8: 68:e2:f9:35:c2:f6:37:e4:3b:1e:33:0c:db:64:42: 39:43:b3:8f:de:72:85:c6:7a:d0:24:4e:52:5e:40: ef:30:9d:5e:59:aa:6c:7a:19:ea:ad:5b:64:b0:2f: 23:6b:9d:d1:bd:d2:a4:f7:7f:4e:2a:d6:f0:71:03: fb:b0:e6:25:cf:13:ab:66:f5:4d:1f:22:7e:54:77: d6:02:2a:31:16:4e:10:d2:11:af:3c:9c:7a:bb:a7: 40:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:75:25:0A:7A:1F:A7:65:AB:38:F3:FF:F7:0B:7D:84:78:B1:F7:30 X509v3 Authority Key Identifier: keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:97:ae:73:c8:59:42:65:b5:13:71:fc:b0:0d:5f:af:95:e9: fc:c9:7f:89:45:b8:7c:be:28:04:18:9e:54:fd:da:b6:78:95: 30:08:6b:23:38:0d:9b:8f:6c:31:c9:3c:79:94:99:b6:ba:47: e8:53:43:06:49:dd:d0:19:06:a8:ac:03:9a:34:af:2f:9a:57: b4:19:37:7a:36:58:15:e5:0d:03:4e:b6:3c:1a:61:82:9d:a7: e7:42:e5:fd:b4:20:40:8a:d4:c9:d1:d0:d9:eb:2a:c5:8b:43: 06:be:33:c9:61:97:e0:2d:81:37:1e:7a:90:18:64:43:a0:76: 8b:5e:b3:f1:e4:28:81:d2:fd:83:8b:92:7f:53:9a:9e:82:b9: 9f:07:df:bf:b5:12:12:d4:01:ff:5f:a8:08:bf:9d:92:2d:e2: 57:f2:f1:ee:7c:d0:a7:05:b3:8c:f5:00:20:7c:6e:45:c6:40: da:c5:81:56:9e:56:ab:4d:50:a8:e5:7f:ab:78:10:f2:5b:dd: 09:6b:1a:7b:fa:f2:e9:a6:bb:53:f4:bb:55:ad:37:e1:ec:23: 01:e4:bc:71:fb:ad:3b:38:12:af:2a:47:fb:cb:cd:5d:18:0f: cf:4b:d2:4a:cf:3b:e0:3e:a0:f1:ec:7e:40:58:10:23:5c:07: 52:7c:92:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5wyPttVB2Ky9rp9OpY3ayMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzU4ZTVjNGY4MGE4MjA2Y2NjNTEwM2JmMmViZTNhNGU5 NmEwZjEwHhcNMjUxMjA3MTcwMTQ2WhcNMjUxMjA4MTcwMTQ2WjAzMTEwLwYDVQQD EyhkOTc1MjUwYTdhMWZhNzY1YWIzOGYzZmZmNzBiN2Q4NDc4YjFmNzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/RRwguB6alAkJHlWH2OsHYI8AVlK 9sYvNz38rHywhmRndsRyULFgQyPfFa9JLoURilV6WB6OM+e/VxvVigX6Sgz4UB3E jYii62HKw5Ungxy+LXZAXfjRZ/5qwVxGI2DHCdLXrATcz2hNFeUiW2rT1Ca6trEM OSIZkiH9Z2s3pGUwtGFbAN4lVsVaxO8qGLsTaWjViHH8b8pN2uW2Lit+8LXH8Oho 4vk1wvY35DseMwzbZEI5Q7OP3nKFxnrQJE5SXkDvMJ1eWapsehnqrVtksC8ja53R vdKk939OKtbwcQP7sOYlzxOrZvVNHyJ+VHfWAioxFk4Q0hGvPJx6u6dAiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNl1JQp6H6dlqzjz//cLfYR4sfcwMB8GA1UdIwQY MBaAFMM1jlxPgKggbMxRA78uvjpOlqDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82NTBjNDEtNzgwNC00YTI0LTkzNGUt MGRiYTdmYTZhNDAzLzEvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC82NTBjNDEtNzgwNC00YTI0LTkzNGUtMGRiYTdmYTZhNDAz LzEvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJeuc8hZ QmW1E3H8sA1fr5Xp/Ml/iUW4fL4oBBieVP3atniVMAhrIzgNm49sMck8eZSZtrpH 6FNDBknd0BkGqKwDmjSvL5pXtBk3ejZYFeUNA062PBphgp2n50Ll/bQgQIrUydHQ 2esqxYtDBr4zyWGX4C2BNx56kBhkQ6B2i16z8eQogdL9g4uSf1OanoK5nwffv7US EtQB/1+oCL+dki3iV/Lx7nzQpwWzjPUAIHxuRcZA2sWBVp5Wq01QqOV/q3gQ8lvd CWsae/ry6aa7U/S7Va034ewjAeS8cfutOzgSrypH+8vNXRgPz0vSSs874D6g8ex+ QFgQI1wHUnySHQ== -----END CERTIFICATE-----Generated at Mon Dec 8 02:35:32 2025 by rpki-client