This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft File: w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft (raw, json) Hash identifier: xwyDe89Dfjp3aIUWn7OKpot6YL8DoxmehUiU7y/7Mrc= Subject key identifier: 5F:FA:E7:8E:90:30:CB:5E:A4:6E:90:31:C1:98:8E:D9:CE:3D:7D:40 Authority key identifier: C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63 Certificate issuer: /CN=c34bdff88e8e8989871e13408111ad1433b30c63 Certificate serial: 019AF19A989E7FCE7274ED689454D359A538 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft Manifest number: 0BCB Signing time: Sat 06 Dec 2025 03:00:31 +0000 Manifest this update: Sat 06 Dec 2025 03:00:31 +0000 Manifest next update: Sun 07 Dec 2025 03:00:31 +0000 Files and hashes: 1: ugMcDv1gcgsXhUTa2vBxQzpCLaI.roa (hash: rt0w1lyTwHj5nTBBa43BIhts6ikl3ovgbdGlD8LZ7VQ=) 2: w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl (hash: uKyI537R96RLGRnKGV7VM5LpqnrmKNmUEc5qwVL1rQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:98:9e:7f:ce:72:74:ed:68:94:54:d3:59:a5:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c34bdff88e8e8989871e13408111ad1433b30c63 Validity Not Before: Dec 6 03:00:31 2025 GMT Not After : Dec 7 03:00:31 2025 GMT Subject: CN=5ffae78e9030cb5ea46e9031c1988ed9ce3d7d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:da:c4:60:22:75:05:eb:cf:c8:a1:16:b2:4c: 66:75:a2:30:42:38:8a:29:7b:62:a1:b2:3d:0e:e8: 77:31:d5:16:13:e6:ac:6e:b5:f2:e0:92:6e:65:50: fa:67:81:ec:e8:5e:90:93:d3:ad:d9:36:fb:73:bd: ba:2c:a7:0e:43:6c:40:4d:14:bd:29:6b:1a:c0:dc: d2:6b:b7:f2:d4:12:97:0c:d7:f0:8f:56:8a:5e:7d: 4d:a0:21:6f:ec:2f:4f:0f:71:e1:06:68:9f:eb:90: 1b:f2:17:20:fe:7d:3a:f4:37:59:fc:fd:64:fb:19: 04:03:ea:1d:43:25:22:34:e4:fa:c6:93:1f:d2:ed: b9:d5:e7:14:b9:c1:19:25:26:92:75:99:4d:14:f7: 12:a2:18:78:ae:4e:f6:6d:5d:51:3a:98:ee:cc:ed: 5f:2c:fb:5a:e4:02:99:3f:9f:3c:94:a8:54:63:82: d3:ec:20:76:95:1b:be:ee:3f:c5:d8:99:48:24:18: 0e:82:c0:92:a3:a6:5b:65:07:ac:f2:12:03:e8:b7: c5:d5:09:f0:18:d5:63:f0:92:47:28:40:16:82:e9: cc:d2:82:c2:2d:b5:e6:d8:ab:85:22:06:5c:92:5a: e3:52:18:80:a5:f7:23:28:3c:16:ce:90:dc:26:a9: 30:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FA:E7:8E:90:30:CB:5E:A4:6E:90:31:C1:98:8E:D9:CE:3D:7D:40 X509v3 Authority Key Identifier: keyid:C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:8d:61:82:ab:86:d1:7f:4a:70:1d:71:a0:73:e4:72:c1:25: ec:98:60:de:5a:ad:09:7f:4e:67:3b:9c:d5:5e:40:7f:89:1b: 38:1d:b4:96:a2:bf:f3:f1:2b:3a:6d:ab:67:e8:1c:1e:f1:fd: 12:e4:83:fd:73:02:1f:10:fe:89:5a:10:b7:35:5c:a1:e5:1a: 1a:46:0e:90:6b:7d:7a:a6:2d:bc:1e:ed:9e:a3:53:68:9f:92: 20:e0:85:56:ee:30:0a:66:03:87:b6:1c:3a:dc:c9:68:d0:b9: 17:57:98:c1:59:9a:7d:d0:1c:a6:45:94:c6:ed:18:c7:97:d3: 6a:f8:85:07:5f:94:f0:58:41:25:20:51:32:25:19:44:34:5f: 1d:f7:e9:a2:2a:89:a2:c3:da:37:c1:cd:6e:33:0a:b1:a0:38: 74:da:d9:9e:d5:91:56:3a:5a:e5:1c:be:d2:7d:56:9b:2f:80: 27:91:c1:b5:b0:72:3a:41:0c:de:e6:73:1f:41:ae:81:2f:84: 6c:06:93:6d:c5:f5:2b:17:00:5b:1b:b9:72:f6:2f:7d:95:37: 65:61:b2:fc:7d:ff:17:36:05:3e:f8:d9:88:a9:62:00:97:73: 00:5c:18:70:7e:aa:87:d9:ba:35:cc:e1:f9:2c:ca:5f:e1:78: 91:40:95:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpief85ydO1olFTTWaU4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNGJkZmY4OGU4ZTg5ODk4NzFlMTM0MDgxMTFhZDE0MzNi MzBjNjMwHhcNMjUxMjA2MDMwMDMxWhcNMjUxMjA3MDMwMDMxWjAzMTEwLwYDVQQD Eyg1ZmZhZTc4ZTkwMzBjYjVlYTQ2ZTkwMzFjMTk4OGVkOWNlM2Q3ZDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9rEYCJ1BevPyKEWskxmdaIwQjiK KXtiobI9Duh3MdUWE+asbrXy4JJuZVD6Z4Hs6F6Qk9Ot2Tb7c726LKcOQ2xATRS9 KWsawNzSa7fy1BKXDNfwj1aKXn1NoCFv7C9PD3HhBmif65Ab8hcg/n069DdZ/P1k +xkEA+odQyUiNOT6xpMf0u251ecUucEZJSaSdZlNFPcSohh4rk72bV1ROpjuzO1f LPta5AKZP588lKhUY4LT7CB2lRu+7j/F2JlIJBgOgsCSo6ZbZQes8hID6LfF1Qnw GNVj8JJHKEAWgunM0oLCLbXm2KuFIgZcklrjUhiApfcjKDwWzpDcJqkwpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/6546QMMtepG6QMcGYjtnOPX1AMB8GA1UdIwQY MBaAFMNL3/iOjomJhx4TQIERrRQzswxjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzB2Zi1JNk9pWW1ISGhOQWdSR3RGRE96REdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84MjQ3YTYtMmIxMi00ODNmLWIxYWMt NmFjMWQxNTU1NGFiLzEvdzB2Zi1JNk9pWW1ISGhOQWdSR3RGRE96REdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi84MjQ3YTYtMmIxMi00ODNmLWIxYWMtNmFjMWQxNTU1NGFi LzEvdzB2Zi1JNk9pWW1ISGhOQWdSR3RGRE96REdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABI1hgquG 0X9KcB1xoHPkcsEl7Jhg3lqtCX9OZzuc1V5Af4kbOB20lqK/8/ErOm2rZ+gcHvH9 EuSD/XMCHxD+iVoQtzVcoeUaGkYOkGt9eqYtvB7tnqNTaJ+SIOCFVu4wCmYDh7Yc OtzJaNC5F1eYwVmafdAcpkWUxu0Yx5fTaviFB1+U8FhBJSBRMiUZRDRfHffpoiqJ osPaN8HNbjMKsaA4dNrZntWRVjpa5Ry+0n1Wmy+AJ5HBtbByOkEM3uZzH0GugS+E bAaTbcX1KxcAWxu5cvYvfZU3ZWGy/H3/FzYFPvjZiKliAJdzAFwYcH6qh9m6Nczh +SzKX+F4kUCVtQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:28 2025 by rpki-client