This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft File: wBWqbOyG3yEV4qEOkgnYqi35i78.mft (raw, json) Hash identifier: 9KKPcdDOD+vDl5iN/1K++pOBhLFxMMkl42+WrBzj4Rw= Subject key identifier: EA:21:BB:3C:6B:B4:1F:16:D5:DF:DD:BD:BE:EA:18:9F:D5:48:8A:E0 Authority key identifier: C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF Certificate issuer: /CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf Certificate serial: 019AF31BE722D16A78B4BB69BE7131B2F3BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft Manifest number: 0222 Signing time: Sat 06 Dec 2025 10:01:23 +0000 Manifest this update: Sat 06 Dec 2025 10:01:23 +0000 Manifest next update: Sun 07 Dec 2025 10:01:23 +0000 Files and hashes: 1: u0y20R9QTPyQ909oZwz8h1z4D_c.roa (hash: JOHDDdtCt33NzefI4pce2GppbGjse6UDJKzNAqgwUuA=) 2: wBWqbOyG3yEV4qEOkgnYqi35i78.crl (hash: 6EibtJjaND4b9mEKt8S59lCmUXlt9u+bnixtJmO74rY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:e7:22:d1:6a:78:b4:bb:69:be:71:31:b2:f3:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf Validity Not Before: Dec 6 10:01:23 2025 GMT Not After : Dec 7 10:01:23 2025 GMT Subject: CN=ea21bb3c6bb41f16d5dfddbdbeea189fd5488ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d4:74:e0:04:af:c1:3b:35:f7:71:e4:50:41: 16:62:dd:eb:bf:91:bb:c6:90:d1:ee:6a:cb:bd:bd: 52:83:99:5f:cf:72:17:05:c3:34:4f:59:a2:ce:6d: f3:1c:31:09:ce:0f:29:7a:75:fa:e5:f6:43:6c:45: 21:f5:76:8f:63:1f:55:ec:f5:46:3c:bc:f1:24:45: 2d:c7:2e:7f:b8:c6:43:69:32:dc:79:ac:9e:87:ef: eb:b8:9d:2a:e5:9f:3d:c5:87:36:77:d8:d2:e4:4c: e1:46:a8:98:b1:2c:e2:c1:83:bf:80:cd:75:bb:89: 50:39:a6:be:59:e1:15:f9:36:45:09:04:c9:47:3c: 04:d4:b3:17:85:44:1b:21:77:24:6f:20:5b:7f:eb: 41:54:22:35:04:5a:d0:51:8e:e0:be:42:53:89:ea: 08:fa:64:66:99:4a:e8:60:9a:73:b1:21:64:c3:3a: 2a:33:af:b9:13:a1:c0:f3:c1:c1:16:03:73:f5:33: 12:9f:ab:2a:ba:04:6a:e6:c9:9f:54:45:dd:ef:fb: 1d:a3:d3:0d:b3:8d:c8:79:47:b6:6b:33:1f:a3:79: e1:a5:97:d9:df:d4:df:05:50:dd:77:55:66:f7:2f: 42:96:35:30:aa:d4:3d:3b:39:f7:7c:e8:4c:9e:ec: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:21:BB:3C:6B:B4:1F:16:D5:DF:DD:BD:BE:EA:18:9F:D5:48:8A:E0 X509v3 Authority Key Identifier: keyid:C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:ea:ac:0c:23:51:09:3d:3f:42:81:a6:86:ba:53:d1:c6:ce: 36:6e:85:f9:98:be:60:72:ad:6c:87:f5:2b:a3:e1:55:91:ad: fa:cd:6d:10:f2:84:86:51:57:79:f9:e6:4c:5f:dd:a6:c4:bb: 2a:93:23:23:d6:23:bc:93:aa:13:6e:be:c2:a4:7c:f7:60:8e: 80:f0:0d:b1:10:78:f3:be:64:44:7a:26:53:56:22:ea:ae:c3: 1d:03:3b:08:95:5d:93:d8:56:26:9a:c8:bb:75:31:86:3b:d6: cc:37:6e:22:18:d6:f2:23:0c:27:25:d5:e2:3e:3c:41:75:6e: 2e:c7:68:07:e1:07:72:bc:d6:90:c3:f7:d1:f9:17:5c:ab:5c: 70:7e:51:e7:bd:89:47:81:f8:00:c6:7b:85:74:4f:c4:13:36: 58:53:2c:ae:17:8d:72:ac:84:5b:09:11:51:69:cf:76:71:4c: 33:ba:e9:5b:3f:06:0a:db:bd:96:23:f0:cd:91:f4:3d:ac:28: a3:b0:58:05:52:b1:79:0d:9f:0d:2e:2e:ab:bb:45:64:94:7a: 54:c2:44:19:ce:f3:23:e7:cb:50:c9:8e:62:72:33:30:af:58: 9e:70:bb:c8:63:50:41:c4:ce:27:37:5d:6f:43:da:c0:f7:ef: 4f:60:72:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+ci0Wp4tLtpvnExsvO+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTVhYTZjZWM4NmRmMjExNWUyYTEwZTkyMDlkOGFhMmRm OThiYmYwHhcNMjUxMjA2MTAwMTIzWhcNMjUxMjA3MTAwMTIzWjAzMTEwLwYDVQQD EyhlYTIxYmIzYzZiYjQxZjE2ZDVkZmRkYmRiZWVhMTg5ZmQ1NDg4YWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9R04ASvwTs193HkUEEWYt3rv5G7 xpDR7mrLvb1Sg5lfz3IXBcM0T1mizm3zHDEJzg8penX65fZDbEUh9XaPYx9V7PVG PLzxJEUtxy5/uMZDaTLceayeh+/ruJ0q5Z89xYc2d9jS5EzhRqiYsSziwYO/gM11 u4lQOaa+WeEV+TZFCQTJRzwE1LMXhUQbIXckbyBbf+tBVCI1BFrQUY7gvkJTieoI +mRmmUroYJpzsSFkwzoqM6+5E6HA88HBFgNz9TMSn6squgRq5smfVEXd7/sdo9MN s43IeUe2azMfo3nhpZfZ39TfBVDdd1Vm9y9CljUwqtQ9Ozn3fOhMnuwpGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOohuzxrtB8W1d/dvb7qGJ/VSIrgMB8GA1UdIwQY MBaAFMAVqmzsht8hFeKhDpIJ2Kot+Yu/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0JXcWJPeUczeUVWNHFFT2tnbllxaTM1aTc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83NGUwODUtM2EyOS00YzE5LTg0ODUt YjdmOWI3MDJlZDQ4LzEvd0JXcWJPeUczeUVWNHFFT2tnbllxaTM1aTc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS83NGUwODUtM2EyOS00YzE5LTg0ODUtYjdmOWI3MDJlZDQ4 LzEvd0JXcWJPeUczeUVWNHFFT2tnbllxaTM1aTc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqeqsDCNR CT0/QoGmhrpT0cbONm6F+Zi+YHKtbIf1K6PhVZGt+s1tEPKEhlFXefnmTF/dpsS7 KpMjI9YjvJOqE26+wqR892COgPANsRB4875kRHomU1Yi6q7DHQM7CJVdk9hWJprI u3UxhjvWzDduIhjW8iMMJyXV4j48QXVuLsdoB+EHcrzWkMP30fkXXKtccH5R572J R4H4AMZ7hXRPxBM2WFMsrheNcqyEWwkRUWnPdnFMM7rpWz8GCtu9liPwzZH0Pawo o7BYBVKxeQ2fDS4uq7tFZJR6VMJEGc7zI+fLUMmOYnIzMK9YnnC7yGNQQcTOJzdd b0PawPfvT2Bygw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:23:22 2025 by rpki-client