This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft File: wXPRwALuqv2ht1iN1WIcTm_Jn64.mft (raw, json) Hash identifier: HQIZ0zCzx7pV+dUwRY8/mWtZ7jnk49owf81FKW7v5Gc= Subject key identifier: DC:0B:C2:3F:09:F6:98:6D:44:BF:2A:50:C2:BE:63:30:69:2B:50:BC Authority key identifier: C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE Certificate issuer: /CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae Certificate serial: 019AF31C7E679B1BC37420BB8668EEA74AB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft Manifest number: 0626 Signing time: Sat 06 Dec 2025 10:02:02 +0000 Manifest this update: Sat 06 Dec 2025 10:02:02 +0000 Manifest next update: Sun 07 Dec 2025 10:02:02 +0000 Files and hashes: 1: JVqwz5mxYEMKGOHUiJ_GpSZnGN0.roa (hash: h8BGg/oG3iccU6NMytqMgx4YDS4KmCfVV7fVMEeYu2Y=) 2: wXPRwALuqv2ht1iN1WIcTm_Jn64.crl (hash: 8Q5rA0vdymaFUMHcHGHgCqY14gwIjpQ4GQiz1jZYI5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:7e:67:9b:1b:c3:74:20:bb:86:68:ee:a7:4a:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae Validity Not Before: Dec 6 10:02:02 2025 GMT Not After : Dec 7 10:02:02 2025 GMT Subject: CN=dc0bc23f09f6986d44bf2a50c2be6330692b50bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:92:3d:75:43:98:3f:d9:e9:19:da:0a:b6:b5: d2:a9:c5:d1:33:d6:21:a2:9d:3e:c1:f8:fd:53:34: 38:c2:85:a3:ca:f4:49:09:05:ea:23:1d:e3:bc:d8: 9f:a2:7c:cf:23:4e:9b:68:7e:67:35:ad:5a:f7:5d: be:20:cf:ab:ab:78:fd:25:0f:a7:80:3e:3c:96:5b: 8f:e9:a5:83:28:09:ef:b8:8a:b3:73:4c:2b:14:0d: d2:35:3b:bd:60:ef:9a:50:37:cb:11:53:04:2f:44: fe:29:63:89:df:4e:cb:a5:b9:55:c7:f7:84:32:f6: 90:82:64:60:d3:69:dc:59:85:e3:e7:d4:7b:52:97: dd:16:6d:7f:da:60:44:bf:96:67:d5:6b:89:b5:21: 71:f5:7d:82:b9:ac:17:38:2b:71:c5:bf:44:a8:8e: 38:3e:2c:24:ad:7f:41:4e:2e:71:70:0c:c0:92:7e: 9f:94:2c:90:18:44:be:95:70:6e:c5:06:dd:d1:05: 97:67:95:0f:27:d6:98:b5:57:6c:da:b7:10:73:c7: df:10:96:f8:07:16:24:53:b0:16:04:76:da:fe:e1: ba:fe:59:06:4e:ce:86:ef:3d:fa:d5:0b:12:4f:d9: 5c:4a:1a:1d:23:c9:67:0b:fd:da:38:db:20:1f:b0: bb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0B:C2:3F:09:F6:98:6D:44:BF:2A:50:C2:BE:63:30:69:2B:50:BC X509v3 Authority Key Identifier: keyid:C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:fc:1c:3c:7d:b9:ed:e1:9f:4e:eb:4a:5f:a3:cb:96:72:fa: c6:b8:77:38:db:7d:ac:06:cb:5a:20:2f:12:ec:e9:b1:5c:e0: 73:34:33:75:63:ee:8f:25:dd:55:4d:66:0b:7b:4a:ad:a0:80: 55:fb:5b:52:1a:0a:d9:0c:fb:87:e3:a1:f4:d9:9a:e2:d1:53: 3d:19:26:19:b3:93:6c:ad:c4:4a:cb:fa:d5:f7:fd:f1:3a:5a: f7:57:fe:9c:d9:52:cb:30:a2:c9:a5:9e:d9:96:fc:4b:75:42: d7:85:61:9b:2d:88:34:fc:e6:63:c3:99:57:15:0f:99:b4:78: 39:8f:bc:75:d0:9b:10:e2:09:2c:67:fe:f7:21:14:31:ad:15: ff:15:85:c9:cd:a4:a9:56:0e:dd:a4:b1:05:d1:fb:4a:57:dd: e4:72:a5:3a:df:cb:5a:e8:f8:b5:1d:a4:b1:2c:9e:02:8e:62: 3a:74:b3:58:ba:cf:93:0b:9e:74:d5:91:6c:f2:b9:88:f3:ef: fb:51:c2:9a:25:4e:b7:00:7b:44:50:dd:aa:42:1f:3c:93:c0: 7a:ce:69:23:42:f5:71:2f:97:9a:4e:71:43:4b:6c:16:bf:c8: 02:62:1f:d6:45:79:4c:c4:eb:26:66:c6:28:b3:6d:35:0e:c9: a5:3c:6d:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHH5nmxvDdCC7hmjup0qxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNzNkMWMwMDJlZWFhZmRhMWI3NTg4ZGQ1NjIxYzRlNmZj OTlmYWUwHhcNMjUxMjA2MTAwMjAyWhcNMjUxMjA3MTAwMjAyWjAzMTEwLwYDVQQD EyhkYzBiYzIzZjA5ZjY5ODZkNDRiZjJhNTBjMmJlNjMzMDY5MmI1MGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJI9dUOYP9npGdoKtrXSqcXRM9Yh op0+wfj9UzQ4woWjyvRJCQXqIx3jvNifonzPI06baH5nNa1a912+IM+rq3j9JQ+n gD48lluP6aWDKAnvuIqzc0wrFA3SNTu9YO+aUDfLEVMEL0T+KWOJ307LpblVx/eE MvaQgmRg02ncWYXj59R7UpfdFm1/2mBEv5Zn1WuJtSFx9X2CuawXOCtxxb9EqI44 PiwkrX9BTi5xcAzAkn6flCyQGES+lXBuxQbd0QWXZ5UPJ9aYtVds2rcQc8ffEJb4 BxYkU7AWBHba/uG6/lkGTs6G7z361QsST9lcShodI8lnC/3aONsgH7C7TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwLwj8J9phtRL8qUMK+YzBpK1C8MB8GA1UdIwQY MBaAFMFz0cAC7qr9obdYjdViHE5vyZ+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1hQUndBTHVxdjJodDFpTjFXSWNUbV9KbjY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jNGZlMDQtMDYzYi00N2I3LWJlYmIt YjJjMGE0ZTdhZmMzLzEvd1hQUndBTHVxdjJodDFpTjFXSWNUbV9KbjY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9jNGZlMDQtMDYzYi00N2I3LWJlYmItYjJjMGE0ZTdhZmMz LzEvd1hQUndBTHVxdjJodDFpTjFXSWNUbV9KbjY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPwcPH25 7eGfTutKX6PLlnL6xrh3ONt9rAbLWiAvEuzpsVzgczQzdWPujyXdVU1mC3tKraCA VftbUhoK2Qz7h+Oh9Nma4tFTPRkmGbOTbK3ESsv61ff98Tpa91f+nNlSyzCiyaWe 2Zb8S3VC14Vhmy2INPzmY8OZVxUPmbR4OY+8ddCbEOIJLGf+9yEUMa0V/xWFyc2k qVYO3aSxBdH7Slfd5HKlOt/LWuj4tR2ksSyeAo5iOnSzWLrPkwuedNWRbPK5iPPv +1HCmiVOtwB7RFDdqkIfPJPAes5pI0L1cS+Xmk5xQ0tsFr/IAmIf1kV5TMTrJmbG KLNtNQ7JpTxtYw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:00 2025 by rpki-client