This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft File: wpN7lGGj0mbpNYNOUEehgiODYsg.mft (raw, json) Hash identifier: 1Pc8vjCPNzh+VbZ1mQVkBW0HTqPD+6E9W7shFLkqlsQ= Subject key identifier: 9A:47:21:50:55:DE:25:A3:89:24:16:0A:53:CD:96:8C:6E:4F:75:35 Authority key identifier: C2:93:7B:94:61:A3:D2:66:E9:35:83:4E:50:47:A1:82:23:83:62:C8 Certificate issuer: /CN=c2937b9461a3d266e935834e5047a182238362c8 Certificate serial: 019AF163FDBCBC79E74885A8456DA7BB04B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 02:00:53 +0000 Manifest this update: Sat 06 Dec 2025 02:00:53 +0000 Manifest next update: Sun 07 Dec 2025 02:00:53 +0000 Files and hashes: 1: kDT6d1olq2g9PhBud1lpevtgwMM.roa (hash: GVT4b+j1f9W7ipFuYf2UE8OPchdOvhrHWTWGtiol0Gg=) 2: wpN7lGGj0mbpNYNOUEehgiODYsg.crl (hash: RhCTbtOkKgjEkBUkQfVzbBEwyEVvkJ29dkfYnLgTtzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:fd:bc:bc:79:e7:48:85:a8:45:6d:a7:bb:04:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2937b9461a3d266e935834e5047a182238362c8 Validity Not Before: Dec 6 02:00:53 2025 GMT Not After : Dec 7 02:00:53 2025 GMT Subject: CN=9a47215055de25a38924160a53cd968c6e4f7535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a3:35:1b:b6:c7:8d:84:b2:af:53:49:6a:31: 0a:68:6a:31:fb:ac:e8:3d:20:54:06:c9:18:b6:bd: 60:3c:65:01:4b:92:f5:16:c9:02:21:cf:6e:30:dd: a3:ae:d2:f9:5f:e9:d1:f6:97:17:00:b0:92:4a:bb: a2:1b:6e:aa:78:31:e5:8a:86:6f:c6:fc:5b:85:f5: 77:af:63:7e:e4:e4:2f:5f:ab:3a:9c:26:eb:86:3c: 10:30:8b:1c:d0:3f:51:1c:44:85:18:35:5f:f0:f8: 81:e6:2d:4a:00:94:61:36:34:91:6c:64:bd:92:a0: 75:4f:06:2e:fa:0f:d4:86:67:d5:2b:04:91:f3:7c: 94:e2:ed:3e:eb:77:88:76:a3:fb:00:3f:d7:1a:80: 4c:a1:b4:85:b1:4d:57:a3:d2:23:c4:91:ec:64:42: fb:99:85:39:1f:4f:a5:19:7f:fb:96:90:c9:66:bf: 9f:73:d0:45:5a:95:81:75:1f:42:4a:40:f0:24:36: 31:cc:8d:73:7d:26:3d:0a:61:b3:d9:5b:49:11:7a: 05:9d:1f:25:e7:c6:01:12:3d:f4:94:c7:a6:e4:ba: 0d:0d:c8:56:e1:b5:3b:04:25:6c:8d:82:98:fc:d3: 3c:e0:a9:39:2b:c7:19:59:1f:41:af:69:83:b4:78: 3f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:47:21:50:55:DE:25:A3:89:24:16:0A:53:CD:96:8C:6E:4F:75:35 X509v3 Authority Key Identifier: keyid:C2:93:7B:94:61:A3:D2:66:E9:35:83:4E:50:47:A1:82:23:83:62:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:8b:a8:e6:a4:b4:e0:df:a6:6f:b2:94:d7:bf:f5:fa:0c:6f: 63:5d:69:10:ed:2a:db:d8:9d:27:0c:0c:54:4c:b9:fb:fc:6e: 8b:a7:75:b7:e5:9d:de:2a:e0:f2:e2:f3:87:94:71:96:d7:52: b9:6d:7d:6b:52:3c:ea:a5:13:cb:f2:0e:2d:19:c3:c0:2e:11: dd:ab:be:a5:81:ba:03:c5:a4:d3:16:48:9d:d6:45:77:73:4a: 37:07:b1:1a:98:25:54:d2:27:5f:6d:ba:e3:3f:d5:3f:7c:9b: 07:83:82:26:61:32:b7:b3:ab:04:e0:20:e6:6f:b2:eb:a5:eb: b2:9a:55:1a:17:9c:43:24:1c:6c:72:7d:71:0a:85:7e:c7:b5: b8:79:9f:d8:6d:85:98:a0:1d:95:06:70:3d:76:7f:ad:6b:fd: 4f:0d:19:04:5b:bc:4f:f6:e9:13:df:30:ac:9a:8e:31:c1:04: dc:ff:3d:ce:98:7f:40:5c:5b:65:51:7f:fa:54:d3:e4:71:f6: 83:55:8f:e9:62:53:7e:08:ca:d3:4c:50:ee:f4:13:5d:61:b4: df:0c:d8:cb:17:9e:80:ea:a5:44:19:59:5f:96:d4:1e:6e:7e: 7e:b3:30:6d:81:9e:be:2e:a4:9c:24:39:fa:26:43:dd:21:3a: 32:62:b3:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/28vHnnSIWoRW2nuwS1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyOTM3Yjk0NjFhM2QyNjZlOTM1ODM0ZTUwNDdhMTgyMjM4 MzYyYzgwHhcNMjUxMjA2MDIwMDUzWhcNMjUxMjA3MDIwMDUzWjAzMTEwLwYDVQQD Eyg5YTQ3MjE1MDU1ZGUyNWEzODkyNDE2MGE1M2NkOTY4YzZlNGY3NTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqM1G7bHjYSyr1NJajEKaGox+6zo PSBUBskYtr1gPGUBS5L1FskCIc9uMN2jrtL5X+nR9pcXALCSSruiG26qeDHlioZv xvxbhfV3r2N+5OQvX6s6nCbrhjwQMIsc0D9RHESFGDVf8PiB5i1KAJRhNjSRbGS9 kqB1TwYu+g/UhmfVKwSR83yU4u0+63eIdqP7AD/XGoBMobSFsU1Xo9IjxJHsZEL7 mYU5H0+lGX/7lpDJZr+fc9BFWpWBdR9CSkDwJDYxzI1zfSY9CmGz2VtJEXoFnR8l 58YBEj30lMem5LoNDchW4bU7BCVsjYKY/NM84Kk5K8cZWR9Br2mDtHg/owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpHIVBV3iWjiSQWClPNloxuT3U1MB8GA1UdIwQY MBaAFMKTe5Rho9Jm6TWDTlBHoYIjg2LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3BON2xHR2owbWJwTllOT1VFZWhnaU9EWXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85ZGVkMmUtMzk3My00YmNmLTk1NjIt Mzc3NDg4MWU3ZTFlLzEvd3BON2xHR2owbWJwTllOT1VFZWhnaU9EWXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC85ZGVkMmUtMzk3My00YmNmLTk1NjItMzc3NDg4MWU3ZTFl LzEvd3BON2xHR2owbWJwTllOT1VFZWhnaU9EWXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWIuo5qS0 4N+mb7KU17/1+gxvY11pEO0q29idJwwMVEy5+/xui6d1t+Wd3irg8uLzh5RxltdS uW19a1I86qUTy/IOLRnDwC4R3au+pYG6A8Wk0xZIndZFd3NKNwexGpglVNInX226 4z/VP3ybB4OCJmEyt7OrBOAg5m+y66XrsppVGhecQyQcbHJ9cQqFfse1uHmf2G2F mKAdlQZwPXZ/rWv9Tw0ZBFu8T/bpE98wrJqOMcEE3P89zph/QFxbZVF/+lTT5HH2 g1WP6WJTfgjK00xQ7vQTXWG03wzYyxeegOqlRBlZX5bUHm5+frMwbYGevi6knCQ5 +iZD3SE6MmKzFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:28 2025 by rpki-client