This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft File: WvZis_PcgxKxtryRfwrwBiJ3U1U.mft (raw, json) Hash identifier: uGwmVb9I6C6Hb4X2/+pUodhKGEVPf9KUMmBHVd7u1GE= Subject key identifier: CF:53:FA:AD:28:AF:44:4A:B0:97:68:ED:F7:2B:25:DD:23:4C:6A:0E Authority key identifier: 5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55 Certificate issuer: /CN=5af662b3f3dc8312b1b6bc917f0af00622775355 Certificate serial: 019AF19AFE8A8FAD809F7068461DD064AD8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:00:57 +0000 Manifest this update: Sat 06 Dec 2025 03:00:57 +0000 Manifest next update: Sun 07 Dec 2025 03:00:57 +0000 Files and hashes: 1: 7LnQSFfXaCdtSrN73Q04rTSUR1U.roa (hash: qe1kV18U1ftZ6/1GEB/ILiq/KKpDzYSHRLnRjgpziJY=) 2: WvZis_PcgxKxtryRfwrwBiJ3U1U.crl (hash: ErWn5qI2neNXiClq0q7qpesBJ4sInIhBadvQXQV7R98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:fe:8a:8f:ad:80:9f:70:68:46:1d:d0:64:ad:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5af662b3f3dc8312b1b6bc917f0af00622775355 Validity Not Before: Dec 6 03:00:57 2025 GMT Not After : Dec 7 03:00:57 2025 GMT Subject: CN=cf53faad28af444ab09768edf72b25dd234c6a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e4:0f:d0:5c:f7:9d:85:da:8c:16:8f:d7:24: 97:58:56:bc:be:44:6c:00:47:e1:be:92:b7:15:e7: ac:73:61:42:e7:d0:9b:67:62:43:ed:b7:06:88:cb: 6a:0d:87:71:3a:95:f1:bb:37:63:9d:58:72:ec:05: b7:53:22:c9:e8:4a:f1:72:f2:7d:59:53:7d:1a:48: 1b:d4:42:2b:be:62:7d:fa:e5:4e:75:72:9d:fb:f7: 9e:75:0d:81:21:31:4b:e9:e9:de:a5:60:59:b2:22: 2e:7d:ca:52:03:1e:06:67:91:2c:99:59:0c:c6:7a: 86:17:ea:89:1d:18:03:93:53:72:ab:3f:8d:dd:e5: c6:14:26:de:bd:65:4c:e1:4e:00:1e:e5:0a:c7:30: 41:1d:92:5d:1a:f5:14:10:d8:b6:21:a0:19:94:7b: 95:43:9c:c9:56:63:29:84:cd:06:b2:c6:de:5c:71: e7:b2:fe:a1:3d:ae:8d:f2:d2:12:b3:5f:8a:33:5b: b0:6d:0b:39:84:2d:37:78:4b:d5:d9:53:0e:b4:86: 49:17:fe:26:9a:4d:36:62:f8:e7:71:9f:60:26:60: a0:be:4b:ee:05:b2:47:d8:05:e2:82:8d:58:d6:a3: 12:09:bf:92:e3:35:d4:b2:21:cc:eb:bd:95:b4:dd: 59:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:53:FA:AD:28:AF:44:4A:B0:97:68:ED:F7:2B:25:DD:23:4C:6A:0E X509v3 Authority Key Identifier: keyid:5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b4:b7:94:31:f3:cb:e3:d2:0f:bc:10:af:b8:75:71:5f:be: 5f:30:88:a4:a7:ec:4a:01:66:cd:29:34:34:86:b4:1b:17:2e: 04:94:33:08:23:ea:fe:f2:52:a2:98:15:ce:b7:12:eb:f7:ae: e6:fd:d2:af:2b:2f:f7:78:35:0b:39:0a:3a:75:b4:c8:d4:0a: 04:6b:c4:b3:06:7d:34:f5:df:cb:08:31:b8:aa:a6:4b:08:9a: c0:2c:27:c1:35:e3:de:45:73:b5:b7:df:18:26:4d:85:e9:cc: 19:6c:45:79:9a:48:28:89:3b:7b:e3:25:5d:b8:dd:56:0f:84: 2d:78:53:f1:14:18:fd:f4:45:83:b8:23:92:6a:d9:6c:a3:d2: dd:d7:a1:ed:53:1d:0f:1a:c7:f8:48:98:18:5c:c9:45:ec:6e: f3:57:95:0b:71:24:17:5e:56:de:84:1f:9a:f6:fc:2d:0f:22: 6b:d5:a2:f4:41:3e:64:2e:c8:d4:9e:51:09:50:76:a8:8f:83: 95:d5:14:29:27:0d:82:65:84:11:32:3d:03:44:0c:06:59:ff: 52:d9:61:ee:40:0e:c1:a3:66:9f:30:35:e3:bd:df:b9:9f:13: df:3d:ec:3e:c0:16:dc:8e:b2:cb:8b:7d:bc:b2:e9:84:b9:9e: f7:3c:6f:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmv6Kj62An3BoRh3QZK2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZjY2MmIzZjNkYzgzMTJiMWI2YmM5MTdmMGFmMDA2MjI3 NzUzNTUwHhcNMjUxMjA2MDMwMDU3WhcNMjUxMjA3MDMwMDU3WjAzMTEwLwYDVQQD EyhjZjUzZmFhZDI4YWY0NDRhYjA5NzY4ZWRmNzJiMjVkZDIzNGM2YTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuQP0Fz3nYXajBaP1ySXWFa8vkRs AEfhvpK3Feesc2FC59CbZ2JD7bcGiMtqDYdxOpXxuzdjnVhy7AW3UyLJ6ErxcvJ9 WVN9Gkgb1EIrvmJ9+uVOdXKd+/eedQ2BITFL6enepWBZsiIufcpSAx4GZ5EsmVkM xnqGF+qJHRgDk1Nyqz+N3eXGFCbevWVM4U4AHuUKxzBBHZJdGvUUENi2IaAZlHuV Q5zJVmMphM0GssbeXHHnsv6hPa6N8tISs1+KM1uwbQs5hC03eEvV2VMOtIZJF/4m mk02YvjncZ9gJmCgvkvuBbJH2AXigo1Y1qMSCb+S4zXUsiHM672VtN1ZQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9T+q0or0RKsJdo7fcrJd0jTGoOMB8GA1UdIwQY MBaAFFr2YrPz3IMSsba8kX8K8AYid1NVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3ZaaXNfUGNneEt4dHJ5UmZ3cndCaUozVTFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jYjQ2MjEtNDcxMC00YzRjLTg1YmEt ODcxY2Y0MDk3NzQ2LzEvV3ZaaXNfUGNneEt4dHJ5UmZ3cndCaUozVTFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jYjQ2MjEtNDcxMC00YzRjLTg1YmEtODcxY2Y0MDk3NzQ2 LzEvV3ZaaXNfUGNneEt4dHJ5UmZ3cndCaUozVTFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7S3lDHz y+PSD7wQr7h1cV++XzCIpKfsSgFmzSk0NIa0GxcuBJQzCCPq/vJSopgVzrcS6/eu 5v3Srysv93g1CzkKOnW0yNQKBGvEswZ9NPXfywgxuKqmSwiawCwnwTXj3kVztbff GCZNhenMGWxFeZpIKIk7e+MlXbjdVg+ELXhT8RQY/fRFg7gjkmrZbKPS3deh7VMd DxrH+EiYGFzJRexu81eVC3EkF15W3oQfmvb8LQ8ia9Wi9EE+ZC7I1J5RCVB2qI+D ldUUKScNgmWEETI9A0QMBln/Utlh7kAOwaNmnzA1473fuZ8T3z3sPsAW3I6yy4t9 vLLphLme9zxvsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:01 2025 by rpki-client