This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft File: wnz1VgIH7OhILDL8tplfd9f3MMs.mft (raw, json) Hash identifier: SLdtN+tXXzhzgqWSO/Xl8+AviXYD73mfIKSlP7S/F98= Subject key identifier: E5:CF:3B:BF:D6:B1:F9:78:DA:B4:AC:D9:B9:F9:F5:FA:40:63:98:BB Authority key identifier: C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB Certificate issuer: /CN=c27cf5560207ece8482c32fcb6995f77d7f730cb Certificate serial: 019AF12D23EACCB8A5C64A69C8498468BE59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft Manifest number: 0447 Signing time: Sat 06 Dec 2025 01:00:58 +0000 Manifest this update: Sat 06 Dec 2025 01:00:58 +0000 Manifest next update: Sun 07 Dec 2025 01:00:58 +0000 Files and hashes: 1: f45K-_tztLGikN2V1uWSCFuY_68.roa (hash: xJe3gW2GTPkOmGgSxCeDd1gAbtFU96D/eKs9HOKj+Eo=) 2: wnz1VgIH7OhILDL8tplfd9f3MMs.crl (hash: RsGXN4wo0v10iRDhnsVHcBCz3a+8f9egbHS3kxsHV64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:23:ea:cc:b8:a5:c6:4a:69:c8:49:84:68:be:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c27cf5560207ece8482c32fcb6995f77d7f730cb Validity Not Before: Dec 6 01:00:58 2025 GMT Not After : Dec 7 01:00:58 2025 GMT Subject: CN=e5cf3bbfd6b1f978dab4acd9b9f9f5fa406398bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2b:f1:39:fc:a3:71:89:cb:69:5a:cf:8b:95: 3d:a4:47:be:fb:03:1a:58:34:4a:93:47:78:45:51: a2:1f:41:ba:a5:59:7c:61:2b:16:48:56:25:21:28: 81:63:22:aa:4a:e4:90:37:9f:20:3d:ed:b3:a6:5e: 88:96:cd:6e:96:d5:60:98:90:75:74:0b:87:46:0d: f1:87:73:f3:54:7d:06:38:9e:84:d8:ee:aa:b5:be: aa:41:0f:f4:84:58:47:52:29:bd:de:0b:f0:70:da: 23:f1:81:54:cc:3c:96:33:ee:3e:04:17:84:3e:e6: 2b:d4:92:8c:e2:fc:1a:b4:39:7f:79:e3:d1:f7:fa: d2:d1:5d:84:63:b4:9a:7f:e5:83:e9:85:df:bc:71: dc:5c:53:c7:ca:a0:96:94:d1:a3:c6:cf:33:06:d9: ed:80:11:14:75:cc:fc:9f:96:87:3d:25:af:3b:5e: 14:85:a2:8d:de:d2:97:48:4b:20:da:d3:68:4b:5f: a4:1f:f8:2c:79:25:17:ea:fc:04:86:31:7a:be:22: 18:e5:37:86:59:5d:bf:60:09:24:36:cc:39:de:89: be:bd:1f:cd:71:00:2a:da:1f:1d:f7:cb:49:26:36: b7:c5:16:25:01:75:6b:76:4a:98:36:d8:06:89:3e: cb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CF:3B:BF:D6:B1:F9:78:DA:B4:AC:D9:B9:F9:F5:FA:40:63:98:BB X509v3 Authority Key Identifier: keyid:C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:55:69:df:9f:68:f2:08:5a:9f:63:0c:2b:c7:ba:43:b3:26: 02:37:b5:10:3e:bf:18:34:bd:cc:ca:66:50:95:42:ab:4a:b6: f9:1d:fd:df:d7:60:51:4a:aa:b3:ed:b8:53:30:5e:8e:34:fe: d3:f2:d2:5b:7b:fd:3b:67:59:9e:f9:27:42:16:02:5c:04:b5: f6:0c:06:b8:16:8e:92:d5:b6:19:e8:f5:65:8a:69:7f:0a:c4: a7:43:e3:42:df:86:ca:38:d7:30:03:f4:a6:97:8f:be:5a:70: 39:e1:9c:3e:bf:a0:f5:ea:cd:98:d8:72:e6:1b:11:47:f3:0f: c6:71:fb:1f:4f:95:08:4c:b7:d5:d1:fa:b8:a1:3a:0b:cc:75: cd:38:b0:f1:11:40:d6:96:2e:56:81:5d:a9:5c:21:78:0d:e3: 44:e1:bc:25:fb:24:a0:66:99:3a:98:33:00:ca:f8:8e:53:84: cf:1b:af:21:88:2d:7c:cd:22:f1:ca:bc:7c:b7:c2:41:a4:d2: c9:94:ab:36:c2:7f:01:6a:2e:e7:a3:87:04:f5:bf:a4:5c:f3: 5b:f5:fe:f3:5d:ba:b3:ea:ad:b9:5f:ce:d0:1a:6e:13:b8:c9: 53:ac:1c:87:89:e5:6f:96:98:bd:5a:e5:c4:b3:77:3c:a9:66: 52:c7:d0:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSPqzLilxkppyEmEaL5ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyN2NmNTU2MDIwN2VjZTg0ODJjMzJmY2I2OTk1Zjc3ZDdm NzMwY2IwHhcNMjUxMjA2MDEwMDU4WhcNMjUxMjA3MDEwMDU4WjAzMTEwLwYDVQQD EyhlNWNmM2JiZmQ2YjFmOTc4ZGFiNGFjZDliOWY5ZjVmYTQwNjM5OGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SvxOfyjcYnLaVrPi5U9pEe++wMa WDRKk0d4RVGiH0G6pVl8YSsWSFYlISiBYyKqSuSQN58gPe2zpl6Ils1ultVgmJB1 dAuHRg3xh3PzVH0GOJ6E2O6qtb6qQQ/0hFhHUim93gvwcNoj8YFUzDyWM+4+BBeE PuYr1JKM4vwatDl/eePR9/rS0V2EY7Saf+WD6YXfvHHcXFPHyqCWlNGjxs8zBtnt gBEUdcz8n5aHPSWvO14UhaKN3tKXSEsg2tNoS1+kH/gseSUX6vwEhjF6viIY5TeG WV2/YAkkNsw53om+vR/NcQAq2h8d98tJJja3xRYlAXVrdkqYNtgGiT7L5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXPO7/Wsfl42rSs2bn59fpAY5i7MB8GA1UdIwQY MBaAFMJ89VYCB+zoSCwy/LaZX3fX9zDLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd256MVZnSUg3T2hJTERMOHRwbGZkOWYzTU1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8zMmYzYmItMjU5NC00YjM3LTk0YWEt OTQxMjQ0ZjVkZGVkLzEvd256MVZnSUg3T2hJTERMOHRwbGZkOWYzTU1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8zMmYzYmItMjU5NC00YjM3LTk0YWEtOTQxMjQ0ZjVkZGVk LzEvd256MVZnSUg3T2hJTERMOHRwbGZkOWYzTU1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVVp359o 8ghan2MMK8e6Q7MmAje1ED6/GDS9zMpmUJVCq0q2+R3939dgUUqqs+24UzBejjT+ 0/LSW3v9O2dZnvknQhYCXAS19gwGuBaOktW2Gej1ZYppfwrEp0PjQt+GyjjXMAP0 ppePvlpwOeGcPr+g9erNmNhy5hsRR/MPxnH7H0+VCEy31dH6uKE6C8x1zTiw8RFA 1pYuVoFdqVwheA3jROG8JfskoGaZOpgzAMr4jlOEzxuvIYgtfM0i8cq8fLfCQaTS yZSrNsJ/AWou56OHBPW/pFzzW/X+8126s+qtuV/O0BpuE7jJU6wch4nlb5aYvVrl xLN3PKlmUsfQgA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:37:51 2025 by rpki-client