This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft File: wv6ZPR8xDoFzwXzpJ48en44i48I.mft (raw, json) Hash identifier: QUjBruoRKhkHm0z8lKi15yJYcb50BqMgg03MRRJjlFM= Subject key identifier: D3:40:91:2C:83:9C:4A:B5:80:23:89:41:34:5F:63:24:A8:9B:31:D6 Authority key identifier: C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2 Certificate issuer: /CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2 Certificate serial: 019AF31C14CA49E06B5CB8A42CD5F3F2CF25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:01:34 +0000 Manifest this update: Sat 06 Dec 2025 10:01:34 +0000 Manifest next update: Sun 07 Dec 2025 10:01:34 +0000 Files and hashes: 1: Mp1fGdgDn3PJKQzmX0OXaKwztw8.roa (hash: r365CtsIuSw4zwNKBRELvDJ1xes0I/H0wB5Xk0xJ+cE=) 2: wv6ZPR8xDoFzwXzpJ48en44i48I.crl (hash: flSWnzI5Hlv6z1EODNANszEyFCPaclHhLEAFG0XdM9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:14:ca:49:e0:6b:5c:b8:a4:2c:d5:f3:f2:cf:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2 Validity Not Before: Dec 6 10:01:34 2025 GMT Not After : Dec 7 10:01:34 2025 GMT Subject: CN=d340912c839c4ab580238941345f6324a89b31d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bd:cc:6a:63:4e:46:70:8d:18:1e:8a:da:6e: 71:1d:96:09:b2:37:3b:50:a0:7f:73:6b:a9:82:9d: e9:4e:de:2e:91:14:69:29:b6:eb:e9:a5:35:20:e9: b9:80:ec:1c:e1:99:1f:45:6a:40:ca:5b:ba:24:7b: 30:20:4b:09:df:10:8b:3a:72:9d:04:f8:07:7a:cb: db:c4:df:d5:61:91:cb:6f:1a:c7:c2:40:fe:34:80: 15:6c:fa:85:dd:2d:3c:ab:23:4d:8c:ea:d2:43:fe: 79:a4:70:c7:9a:8e:b8:24:b5:e2:11:39:d7:a2:b5: 2a:89:e5:06:b5:a9:2e:17:a4:79:99:3c:ff:17:db: b1:8c:15:89:6b:1e:29:b8:44:09:b6:f1:f0:a8:91: d9:f6:14:18:5b:9c:5e:bd:2f:c5:15:23:66:a0:80: f4:ec:b1:a9:79:77:b6:f9:da:5a:5a:d4:b1:70:a5: 7a:40:11:99:a7:96:39:11:24:28:ae:4a:af:6e:f0: 4f:70:ff:60:a1:f9:e0:3f:99:98:28:ff:3a:97:7e: 6a:22:a4:eb:cc:39:42:60:34:a1:2e:ac:e4:af:c6: 04:40:41:9b:ba:26:d6:5c:d0:0e:ed:2f:44:e9:c4: fe:4c:de:ef:c4:32:57:43:59:a9:a3:04:e9:d9:88: 25:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:40:91:2C:83:9C:4A:B5:80:23:89:41:34:5F:63:24:A8:9B:31:D6 X509v3 Authority Key Identifier: keyid:C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:9f:89:30:5d:c9:0b:23:94:ec:66:3e:2a:1a:6a:05:3b:9f: b1:5d:4c:41:99:e5:be:66:92:cd:57:ed:0c:08:04:bc:c9:9d: 39:6c:d6:ab:11:c9:ab:f0:da:ff:fc:b9:85:a9:4e:c9:c7:61: 50:31:06:1c:16:15:df:17:b4:0b:1c:c6:6d:5c:63:0b:f1:3d: e8:e3:9a:7f:55:6c:91:02:fa:25:7e:3b:6b:fa:12:56:89:4d: ac:d4:ca:51:8a:91:36:1b:fd:99:49:fc:50:09:c9:08:21:ad: 74:ae:2c:f9:19:5f:f0:07:c6:43:0d:10:13:b3:f1:a5:06:c3: 43:a9:bd:0e:cd:05:cf:1b:d9:6b:d6:d1:7c:64:38:df:d6:83: 94:b2:d5:be:13:41:b4:fb:81:d1:99:a5:81:34:1b:01:05:7f: ff:46:f3:ee:22:1e:b0:4e:c3:c6:9f:8a:75:5f:6f:4d:45:58: d8:d3:d9:7b:a0:20:e7:7e:fe:86:95:c4:dc:77:9c:19:37:6f: a6:bc:26:0d:55:f7:78:20:b6:83:d4:9b:ef:48:62:96:a4:b9: 97:10:0d:2f:5d:c4:55:3b:13:de:14:b2:2e:96:83:c6:94:7a: 61:39:72:1f:8c:10:88:38:e8:9e:0d:8c:50:17:55:c0:a3:9e: c7:19:19:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHBTKSeBrXLikLNXz8s8lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZmU5OTNkMWYzMTBlODE3M2MxN2NlOTI3OGYxZTlmOGUy MmUzYzIwHhcNMjUxMjA2MTAwMTM0WhcNMjUxMjA3MTAwMTM0WjAzMTEwLwYDVQQD EyhkMzQwOTEyYzgzOWM0YWI1ODAyMzg5NDEzNDVmNjMyNGE4OWIzMWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL3MamNORnCNGB6K2m5xHZYJsjc7 UKB/c2upgp3pTt4ukRRpKbbr6aU1IOm5gOwc4ZkfRWpAylu6JHswIEsJ3xCLOnKd BPgHesvbxN/VYZHLbxrHwkD+NIAVbPqF3S08qyNNjOrSQ/55pHDHmo64JLXiETnX orUqieUGtakuF6R5mTz/F9uxjBWJax4puEQJtvHwqJHZ9hQYW5xevS/FFSNmoID0 7LGpeXe2+dpaWtSxcKV6QBGZp5Y5ESQorkqvbvBPcP9gofngP5mYKP86l35qIqTr zDlCYDShLqzkr8YEQEGbuibWXNAO7S9E6cT+TN7vxDJXQ1mpowTp2YglxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNAkSyDnEq1gCOJQTRfYySomzHWMB8GA1UdIwQY MBaAFML+mT0fMQ6Bc8F86SePHp+OIuPCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3Y2WlBSOHhEb0Z6d1h6cEo0OGVuNDRpNDhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNTMxMmItODQzOS00YmI0LTg2ZDIt NjliNDMyNzk5MzcyLzEvd3Y2WlBSOHhEb0Z6d1h6cEo0OGVuNDRpNDhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lNTMxMmItODQzOS00YmI0LTg2ZDItNjliNDMyNzk5Mzcy LzEvd3Y2WlBSOHhEb0Z6d1h6cEo0OGVuNDRpNDhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJ+JMF3J CyOU7GY+KhpqBTufsV1MQZnlvmaSzVftDAgEvMmdOWzWqxHJq/Da//y5halOycdh UDEGHBYV3xe0CxzGbVxjC/E96OOaf1VskQL6JX47a/oSVolNrNTKUYqRNhv9mUn8 UAnJCCGtdK4s+Rlf8AfGQw0QE7PxpQbDQ6m9Ds0FzxvZa9bRfGQ439aDlLLVvhNB tPuB0ZmlgTQbAQV//0bz7iIesE7Dxp+KdV9vTUVY2NPZe6Ag537+hpXE3HecGTdv prwmDVX3eCC2g9Sb70hilqS5lxANL13EVTsT3hSyLpaDxpR6YTlyH4wQiDjong2M UBdVwKOexxkZzw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:54 2025 by rpki-client