This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft File: w-cV2UkPUh42oFb5mb-1bg8h_IY.mft (raw, json) Hash identifier: rYxfOCRXm0sGG9jXK+X8Z9fF6mm4+1Q7yzn6iQEk3U0= Subject key identifier: BF:34:E5:05:A6:74:C3:32:D9:F4:02:1C:DF:5E:2D:5C:90:79:24:D1 Authority key identifier: C3:E7:15:D9:49:0F:52:1E:36:A0:56:F9:99:BF:B5:6E:0F:21:FC:86 Certificate issuer: /CN=c3e715d9490f521e36a056f999bfb56e0f21fc86 Certificate serial: 019AF208DE9CFAAC7D7D022C655F874F7E49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: 93cxze7c4JAF56bmAgg1bcYIt74.roa (hash: iEbAMOM9WFYV3hM+y+EZ0P2K3mOE4Q2PoJ4nGQhO9MQ=) 2: w-cV2UkPUh42oFb5mb-1bg8h_IY.crl (hash: tbOhtfYeHxkO5uX/h6M5Kv3kgJtcXtFnTDV3rcjROq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:de:9c:fa:ac:7d:7d:02:2c:65:5f:87:4f:7e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3e715d9490f521e36a056f999bfb56e0f21fc86 Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=bf34e505a674c332d9f4021cdf5e2d5c907924d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:08:17:c1:2c:49:84:f7:eb:88:44:84:63:b1: 86:5f:5d:77:49:02:dc:4e:e8:a0:71:39:e5:68:46: 55:a9:c9:b4:f7:12:a5:8c:39:d7:8d:2f:db:48:37: 32:b8:d0:47:44:aa:71:92:28:06:fb:66:81:6a:f9: 9a:67:f9:38:3f:ac:42:9d:54:72:a0:96:51:48:80: 3b:00:8b:b8:13:3b:79:4f:99:2b:2a:7b:c5:3f:63: db:37:5c:2a:b2:b5:fd:18:d2:fa:fa:8f:cc:71:ac: 0a:66:87:9e:da:95:6f:8f:c6:41:65:5b:76:4e:df: da:7d:ec:a2:29:91:95:0b:13:a8:2c:f1:19:90:53: 80:8b:fa:e4:eb:ce:72:fc:5f:12:0f:f7:d5:65:66: 51:73:18:75:d3:57:4c:40:a3:f3:9c:7b:20:10:76: e5:c6:4c:2f:28:64:2e:8e:53:84:27:af:bc:e8:09: e1:9d:58:cd:59:c1:fb:24:06:18:61:c1:c0:bf:6c: 56:c2:02:2d:ae:b0:63:35:80:02:e7:a8:69:e8:af: f3:23:43:35:30:b3:34:d6:68:79:09:c0:7b:de:03: ae:e5:ab:91:7b:44:11:08:84:00:39:f6:73:32:2e: 30:9e:6a:b1:9f:21:d2:8f:f4:8b:9f:8a:55:07:22: fd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:34:E5:05:A6:74:C3:32:D9:F4:02:1C:DF:5E:2D:5C:90:79:24:D1 X509v3 Authority Key Identifier: keyid:C3:E7:15:D9:49:0F:52:1E:36:A0:56:F9:99:BF:B5:6E:0F:21:FC:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:a9:7c:f7:43:f3:9b:89:94:91:cd:48:34:bf:35:fd:cc:ef: 4a:b5:74:13:54:f3:80:7c:ab:ab:37:61:90:55:67:41:8c:1a: 3c:ac:3d:ac:d9:0c:11:1b:b7:c8:d5:29:03:50:15:4f:f1:c8: 6f:a0:d0:5e:8c:dd:39:94:88:ff:dd:b1:58:ad:e8:eb:57:83: e9:8e:ee:4c:f2:b0:24:f7:5f:ad:eb:e0:65:93:23:24:11:d7: d5:f8:31:d6:7d:c3:90:95:e6:b8:cc:c6:8e:c5:b3:c5:e3:e3: 94:dd:a9:3c:4a:05:cb:59:2a:79:1a:0f:4a:fa:7d:b8:41:b1: f6:1a:3b:fc:74:33:17:b4:dc:94:2c:ad:f9:60:fc:8f:fa:70: 03:56:4b:02:62:3a:f7:6a:ce:9c:4e:50:5f:06:58:0b:f1:0b: 69:14:7c:1a:88:ff:9b:76:c8:a0:cc:9c:ca:e9:61:ac:bc:79: 0c:87:3e:4e:ae:0c:ec:64:95:f0:f4:8d:84:45:b4:41:ee:bd: 29:b5:8d:2b:0b:fe:f3:ed:50:eb:6b:65:f3:0e:58:94:9b:08: 76:1d:21:f7:d9:bd:37:ac:1a:c5:88:44:28:88:c7:54:9c:16: 71:67:cd:85:07:33:5b:47:6a:fb:ca:28:91:c5:14:20:15:d2: d0:96:9a:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCN6c+qx9fQIsZV+HT35JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZTcxNWQ5NDkwZjUyMWUzNmEwNTZmOTk5YmZiNTZlMGYy MWZjODYwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD EyhiZjM0ZTUwNWE2NzRjMzMyZDlmNDAyMWNkZjVlMmQ1YzkwNzkyNGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuggXwSxJhPfriESEY7GGX113SQLc TuigcTnlaEZVqcm09xKljDnXjS/bSDcyuNBHRKpxkigG+2aBavmaZ/k4P6xCnVRy oJZRSIA7AIu4Ezt5T5krKnvFP2PbN1wqsrX9GNL6+o/McawKZoee2pVvj8ZBZVt2 Tt/afeyiKZGVCxOoLPEZkFOAi/rk685y/F8SD/fVZWZRcxh101dMQKPznHsgEHbl xkwvKGQujlOEJ6+86AnhnVjNWcH7JAYYYcHAv2xWwgItrrBjNYAC56hp6K/zI0M1 MLM01mh5CcB73gOu5auRe0QRCIQAOfZzMi4wnmqxnyHSj/SLn4pVByL9GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL805QWmdMMy2fQCHN9eLVyQeSTRMB8GA1UdIwQY MBaAFMPnFdlJD1IeNqBW+Zm/tW4PIfyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdy1jVjJVa1BVaDQyb0ZiNW1iLTFiZzhoX0lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS81MmIyNzktNGUwMi00NDBmLTgzYzAt YjkzNjAyNGEyNTRhLzEvdy1jVjJVa1BVaDQyb0ZiNW1iLTFiZzhoX0lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS81MmIyNzktNGUwMi00NDBmLTgzYzAtYjkzNjAyNGEyNTRh LzEvdy1jVjJVa1BVaDQyb0ZiNW1iLTFiZzhoX0lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV6l890Pz m4mUkc1INL81/czvSrV0E1TzgHyrqzdhkFVnQYwaPKw9rNkMERu3yNUpA1AVT/HI b6DQXozdOZSI/92xWK3o61eD6Y7uTPKwJPdfrevgZZMjJBHX1fgx1n3DkJXmuMzG jsWzxePjlN2pPEoFy1kqeRoPSvp9uEGx9ho7/HQzF7TclCyt+WD8j/pwA1ZLAmI6 92rOnE5QXwZYC/ELaRR8Goj/m3bIoMycyulhrLx5DIc+Tq4M7GSV8PSNhEW0Qe69 KbWNKwv+8+1Q62tl8w5YlJsIdh0h99m9N6waxYhEKIjHVJwWcWfNhQczW0dq+8oo kcUUIBXS0Jaaig== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:47 2025 by rpki-client