This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft File: wrXTr9C3Lrc0wh7XgjKetufBzkE.mft (raw, json) Hash identifier: VX400HMq0TUl8Frl2IfxCFjDdekvLm6IsPNHLKb7iGo= Subject key identifier: 63:A1:33:97:CC:2F:8D:9D:9C:DA:39:DD:AC:E4:93:DF:13:2C:37:F3 Authority key identifier: C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41 Certificate issuer: /CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41 Certificate serial: 019AF3F7804CB24BF6856BDB400B122D960C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft Manifest number: 0A2E Signing time: Sat 06 Dec 2025 14:01:14 +0000 Manifest this update: Sat 06 Dec 2025 14:01:14 +0000 Manifest next update: Sun 07 Dec 2025 14:01:14 +0000 Files and hashes: 1: 24ln-8DkQtv-Hk-B6dzvfSqyjQY.roa (hash: SeW6VNZ/+9bUzjzq/OzL5WVkY+lRaswkW52Mz3zEsYI=) 2: wrXTr9C3Lrc0wh7XgjKetufBzkE.crl (hash: O1FJI3sSkhWNCyG+sDan+LridIf28lvKWkPSjAa1Tzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:80:4c:b2:4b:f6:85:6b:db:40:0b:12:2d:96:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41 Validity Not Before: Dec 6 14:01:14 2025 GMT Not After : Dec 7 14:01:14 2025 GMT Subject: CN=63a13397cc2f8d9d9cda39ddace493df132c37f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a9:a9:1d:cb:2b:89:5e:8c:bc:83:80:4a:1c: 2c:88:b5:4d:55:9d:fb:93:4e:57:de:77:90:cc:57: 60:6b:2d:f9:5d:a1:a0:0e:cf:2f:ac:53:f4:0c:44: 06:c8:50:1f:97:1c:0d:e9:7a:e6:ac:95:f8:b2:ed: a0:2d:2c:fe:d7:0b:23:ca:12:99:11:48:34:b1:8b: 17:77:d9:ba:35:65:7e:04:f2:e1:dc:6f:22:dc:e9: 98:37:20:d5:59:31:f4:2a:bf:97:84:16:14:89:56: e6:d9:3f:79:21:d5:b3:58:56:87:b0:1e:73:bf:8f: 2b:8d:f7:7d:82:2f:14:ad:c4:92:bd:2f:5e:68:72: 6e:4b:7a:fb:c3:04:99:4a:60:5b:d5:b2:ba:26:50: d9:ff:22:d8:84:a5:dd:46:36:34:1d:f3:f9:54:cd: bb:01:06:db:f0:f0:e4:7e:06:d6:04:59:9e:c1:54: 86:11:b1:98:9b:f5:10:32:49:da:71:2a:08:18:3b: 09:78:b7:df:48:bb:f7:6b:4b:ad:14:80:e4:cf:f8: 9e:64:fe:51:b2:30:4f:f9:ff:33:ac:fe:0b:9a:a4: 8f:3d:a1:49:ab:1f:cc:9b:eb:d4:19:c2:1d:0b:40: 92:a9:31:a3:c8:81:4a:59:38:50:bb:c9:3b:f4:1b: 43:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:A1:33:97:CC:2F:8D:9D:9C:DA:39:DD:AC:E4:93:DF:13:2C:37:F3 X509v3 Authority Key Identifier: keyid:C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:99:b4:6d:f9:c8:ab:63:01:90:3d:4c:c7:1b:4d:7b:69:5c: 67:37:6e:46:7f:5e:29:b4:43:62:23:7d:03:6e:ca:e4:4a:6b: c1:63:71:67:12:16:84:c0:58:e3:fd:bf:eb:56:b6:ee:6a:f8: 87:e0:a1:e3:74:30:74:25:89:16:b2:2b:f7:17:cf:f6:f3:7e: 97:d1:94:1f:92:58:6b:ff:43:32:23:e8:53:2c:79:7e:d2:a4: d2:17:e9:4f:f4:41:1c:3e:3f:e6:b1:b5:b0:0f:f9:80:9a:cf: 81:b4:64:02:36:f1:61:0e:c4:ec:85:0b:31:3d:8d:a3:3e:d3: 29:2d:c1:15:3b:12:0c:f6:e6:7f:c3:df:0d:51:91:93:f6:08: 90:c9:2b:42:83:10:43:6c:ed:cc:f6:20:53:c0:e2:95:9d:0c: 62:41:e5:ca:70:e3:8a:0a:ed:4a:36:59:31:c4:5d:e1:23:51: 4a:59:90:1d:f5:87:7b:9a:06:da:01:b2:71:f9:5f:69:f0:25: 1c:c3:b7:95:42:f2:5d:d8:13:e7:d6:49:ef:a0:cc:25:91:64: 09:20:f1:c7:9e:76:43:3d:60:23:0b:4d:47:4c:c0:88:6a:01: b4:fc:68:3c:43:a7:ad:86:0d:c6:6d:e0:84:8b:ed:91:61:31: 81:ec:1b:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz94BMskv2hWvbQAsSLZYMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYjVkM2FmZDBiNzJlYjczNGMyMWVkNzgyMzI5ZWI2ZTdj MWNlNDEwHhcNMjUxMjA2MTQwMTE0WhcNMjUxMjA3MTQwMTE0WjAzMTEwLwYDVQQD Eyg2M2ExMzM5N2NjMmY4ZDlkOWNkYTM5ZGRhY2U0OTNkZjEzMmMzN2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKmpHcsriV6MvIOAShwsiLVNVZ37 k05X3neQzFdgay35XaGgDs8vrFP0DEQGyFAflxwN6XrmrJX4su2gLSz+1wsjyhKZ EUg0sYsXd9m6NWV+BPLh3G8i3OmYNyDVWTH0Kr+XhBYUiVbm2T95IdWzWFaHsB5z v48rjfd9gi8UrcSSvS9eaHJuS3r7wwSZSmBb1bK6JlDZ/yLYhKXdRjY0HfP5VM27 AQbb8PDkfgbWBFmewVSGEbGYm/UQMknacSoIGDsJeLffSLv3a0utFIDkz/ieZP5R sjBP+f8zrP4LmqSPPaFJqx/Mm+vUGcIdC0CSqTGjyIFKWThQu8k79BtDrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOhM5fML42dnNo53azkk98TLDfzMB8GA1UdIwQY MBaAFMK106/Qty63NMIe14Iynrbnwc5BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3JYVHI5QzNMcmMwd2g3WGdqS2V0dWZCemtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lMmUwNDgtMjc4OC00OWI4LTllZDUt NDUzYmQ4OTk1YmNhLzEvd3JYVHI5QzNMcmMwd2g3WGdqS2V0dWZCemtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lMmUwNDgtMjc4OC00OWI4LTllZDUtNDUzYmQ4OTk1YmNh LzEvd3JYVHI5QzNMcmMwd2g3WGdqS2V0dWZCemtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZm0bfnI q2MBkD1MxxtNe2lcZzduRn9eKbRDYiN9A27K5EprwWNxZxIWhMBY4/2/61a27mr4 h+Ch43QwdCWJFrIr9xfP9vN+l9GUH5JYa/9DMiPoUyx5ftKk0hfpT/RBHD4/5rG1 sA/5gJrPgbRkAjbxYQ7E7IULMT2Noz7TKS3BFTsSDPbmf8PfDVGRk/YIkMkrQoMQ Q2ztzPYgU8DilZ0MYkHlynDjigrtSjZZMcRd4SNRSlmQHfWHe5oG2gGycflfafAl HMO3lULyXdgT59ZJ76DMJZFkCSDxx552Qz1gIwtNR0zAiGoBtPxoPEOnrYYNxm3g hIvtkWExgewbYw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:17:04 2025 by rpki-client