This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft File: wg8AjBzMpi5vw1bWNCBVpifcbPI.mft (raw, json) Hash identifier: NaPUXcPCkhq6FfpfzFnFgK1pzMmnCRs805MVeVGNoEg= Subject key identifier: 0B:D2:C5:09:28:D3:19:71:72:8B:B9:11:11:60:5E:0A:2C:69:E2:9A Authority key identifier: C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2 Certificate issuer: /CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2 Certificate serial: 019B2F3013B77732F0591C3A3F932F65376B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft Manifest number: 0574 Signing time: Thu 18 Dec 2025 02:00:38 +0000 Manifest this update: Thu 18 Dec 2025 02:00:38 +0000 Manifest next update: Fri 19 Dec 2025 02:00:38 +0000 Files and hashes: 1: daVp811knSp1vAQ4VaSwB16wNuQ.roa (hash: iy8xMmMHNxJK9Q7iUdfrNXSZrKuA7PPo2zxoT8FZYdE=) 2: wg8AjBzMpi5vw1bWNCBVpifcbPI.crl (hash: YEB+lZQYAMdeDV8z+OAmie8cLySnGki+TTdKbP7QEdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:13:b7:77:32:f0:59:1c:3a:3f:93:2f:65:37:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2 Validity Not Before: Dec 18 02:00:38 2025 GMT Not After : Dec 19 02:00:38 2025 GMT Subject: CN=0bd2c50928d31971728bb91111605e0a2c69e29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:30:b9:7c:2a:d0:81:a6:62:83:dd:9d:fa:97: 11:1e:9e:67:36:14:7d:27:da:ce:25:b3:57:c7:50: 45:b3:28:70:2b:a6:73:0c:e5:7f:b1:7e:14:ed:9a: 5b:e0:96:be:83:58:d4:5c:97:23:8b:50:f6:e3:41: 0d:50:0e:2e:95:6e:96:e3:55:a3:c8:20:6d:96:a5: b8:ba:ba:bc:d1:14:af:e7:8b:88:26:7a:98:1b:79: eb:41:f7:e5:0f:37:c8:41:5b:1f:51:4f:7e:15:fb: ae:37:2a:cf:c3:4b:a8:91:02:53:fd:3b:32:1a:00: 5f:70:dc:46:17:48:e6:34:f3:89:cd:4f:c1:22:dd: 0a:fb:96:f5:3e:41:27:33:69:f1:90:f1:02:84:1a: 41:43:89:44:54:a5:50:a8:12:0a:7e:6f:36:92:cd: f2:3a:78:dc:44:20:32:79:39:a7:87:2b:fa:5c:ee: 15:fb:17:7b:d5:26:d2:a0:3b:52:97:e6:04:34:4b: 0b:db:c0:ef:5b:b7:ef:c0:c3:38:50:1a:db:1c:2d: f0:1c:4c:9d:d8:37:6d:be:ed:71:85:21:25:fd:53: e1:44:ac:03:75:75:e2:be:00:b6:7d:93:cf:59:b0: 3f:2a:63:db:66:af:33:fb:2a:d3:08:83:78:c2:c1: 84:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D2:C5:09:28:D3:19:71:72:8B:B9:11:11:60:5E:0A:2C:69:E2:9A X509v3 Authority Key Identifier: keyid:C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:1b:13:c6:09:52:4d:b3:31:91:88:57:39:13:cd:64:3a:27: f1:5c:f9:c5:fe:6a:cd:5e:ea:8e:99:91:67:e9:17:35:d2:d6: 7b:30:af:6f:2b:da:e2:32:b6:76:0e:db:40:13:b5:b0:94:9d: 4b:06:c9:a7:6f:54:d7:c9:c9:26:0c:b1:71:05:fc:4e:e3:9d: 3d:9d:f6:e9:de:13:40:f8:b7:59:1d:a2:cb:cf:13:f4:b1:df: db:a8:f3:68:c5:df:bf:fa:8a:cf:43:37:10:90:55:7f:34:ea: eb:e2:8c:55:65:de:0c:28:4e:29:38:19:69:c9:35:07:23:a0: 8b:d7:10:63:e7:e5:3a:2a:90:7c:ac:9a:74:a0:34:ad:37:12: 09:57:0e:e2:2f:a4:bc:f3:dd:09:a9:aa:cc:83:81:06:0c:ec: e1:17:2f:a6:54:f5:20:3f:e6:63:52:3a:e8:e2:f6:40:8d:23: 79:38:a8:d5:66:a2:cc:3c:d2:f7:d5:76:48:7a:7e:f4:b7:74: 4d:df:3b:0c:e7:f1:8b:d8:e1:d8:1b:70:b1:5a:0e:39:2a:c4: a2:7f:96:bf:03:c6:45:7c:3d:e4:17:d4:c7:ee:95:e0:a8:5a: 72:27:8d:48:b7:51:6f:85:4b:62:96:d1:17:8e:7e:5e:9f:9f: 7a:ed:ea:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMBO3dzLwWRw6P5MvZTdrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMGYwMDhjMWNjY2E2MmU2ZmMzNTZkNjM0MjA1NWE2Mjdk YzZjZjIwHhcNMjUxMjE4MDIwMDM4WhcNMjUxMjE5MDIwMDM4WjAzMTEwLwYDVQQD EygwYmQyYzUwOTI4ZDMxOTcxNzI4YmI5MTExMTYwNWUwYTJjNjllMjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDC5fCrQgaZig92d+pcRHp5nNhR9 J9rOJbNXx1BFsyhwK6ZzDOV/sX4U7Zpb4Ja+g1jUXJcji1D240ENUA4ulW6W41Wj yCBtlqW4urq80RSv54uIJnqYG3nrQfflDzfIQVsfUU9+FfuuNyrPw0uokQJT/Tsy GgBfcNxGF0jmNPOJzU/BIt0K+5b1PkEnM2nxkPEChBpBQ4lEVKVQqBIKfm82ks3y OnjcRCAyeTmnhyv6XO4V+xd71SbSoDtSl+YENEsL28DvW7fvwMM4UBrbHC3wHEyd 2Ddtvu1xhSEl/VPhRKwDdXXivgC2fZPPWbA/KmPbZq8z+yrTCIN4wsGEJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvSxQko0xlxcou5ERFgXgosaeKaMB8GA1UdIwQY MBaAFMIPAIwczKYub8NW1jQgVaYn3GzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2c4QWpCek1waTV2dzFiV05DQlZwaWZjYlBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81ODBlNTEtNGMwZC00MTYyLWE5YWUt N2Q3ZmNlNWRiMDVjLzEvd2c4QWpCek1waTV2dzFiV05DQlZwaWZjYlBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS81ODBlNTEtNGMwZC00MTYyLWE5YWUtN2Q3ZmNlNWRiMDVj LzEvd2c4QWpCek1waTV2dzFiV05DQlZwaWZjYlBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxsTxglS TbMxkYhXORPNZDon8Vz5xf5qzV7qjpmRZ+kXNdLWezCvbyva4jK2dg7bQBO1sJSd SwbJp29U18nJJgyxcQX8TuOdPZ326d4TQPi3WR2iy88T9LHf26jzaMXfv/qKz0M3 EJBVfzTq6+KMVWXeDChOKTgZack1ByOgi9cQY+flOiqQfKyadKA0rTcSCVcO4i+k vPPdCamqzIOBBgzs4RcvplT1ID/mY1I66OL2QI0jeTio1WaizDzS99V2SHp+9Ld0 Td87DOfxi9jh2BtwsVoOOSrEon+WvwPGRXw95BfUx+6V4KhacieNSLdRb4VLYpbR F45+Xp+feu3q8w== -----END CERTIFICATE-----Generated at Thu Dec 18 07:10:27 2025 by rpki-client