This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft File: wzCs3wQbXcx-XsbPj_i9BkjoZww.mft (raw, json) Hash identifier: Je2lfQ7OSQxe0omVHR+CfLI41ZHmmEx4gZ8fp1/vcf8= Subject key identifier: 38:39:64:06:7B:F2:5C:AE:AF:D0:7B:07:4B:E8:81:45:40:BB:BA:2B Authority key identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C Certificate issuer: /CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c Certificate serial: 019B416DD48C321D5FE2454BC850AAC0D32D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft Manifest number: 1423 Signing time: Sun 21 Dec 2025 15:01:15 +0000 Manifest this update: Sun 21 Dec 2025 15:01:15 +0000 Manifest next update: Mon 22 Dec 2025 15:01:15 +0000 Files and hashes: 1: NfY8zpyx6EDpP6DxTuquvNoK9sY.roa (hash: mmbOZfwYelbaWl9riAjIdhT8MqPp3t5vAxerApfLsl0=) 2: wzCs3wQbXcx-XsbPj_i9BkjoZww.crl (hash: GTnwVcsiW82zT0ZccC8lIE3DcDG0vhQ1LBv4RtCpVaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:d4:8c:32:1d:5f:e2:45:4b:c8:50:aa:c0:d3:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c Validity Not Before: Dec 21 15:01:15 2025 GMT Not After : Dec 22 15:01:15 2025 GMT Subject: CN=383964067bf25caeafd07b074be8814540bbba2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f9:6f:4b:58:47:56:0a:06:c8:65:a0:71:d3: 1d:b2:f4:33:e0:83:63:d4:16:62:2b:14:98:56:b2: 86:88:8f:5d:c5:53:6b:65:f8:9b:60:27:a5:53:70: f0:8c:98:55:e1:e8:a2:08:18:58:45:da:dd:42:cd: 1f:27:10:f4:cc:7c:fb:fe:87:2e:47:a8:88:47:32: b5:7c:0c:55:26:dd:a1:99:a2:9b:f4:a7:e3:fb:e3: cf:2e:99:01:3e:02:6d:58:f9:9f:63:bf:e7:8f:4a: a5:cf:94:7e:15:d3:21:fe:58:97:73:42:06:01:5d: 87:51:68:cb:d6:5e:95:f2:d9:b2:99:8a:c8:a8:1c: 2a:16:2e:c5:b6:e8:dd:5a:22:22:fc:63:49:02:b1: d5:60:e8:13:ac:f0:44:fd:7a:4c:85:96:70:ee:80: e7:09:bd:2f:d9:c2:1d:b3:de:99:ed:41:68:ca:13: 78:74:5d:1d:42:2c:88:a3:9a:c9:1c:6a:a8:e4:ea: 3c:61:90:78:6e:7a:24:0f:a6:90:07:90:b2:ed:de: b4:2a:de:e2:2a:4b:5e:fb:09:11:ed:c4:6d:f8:45: 7c:80:70:ec:6c:48:04:41:1c:71:70:6c:61:30:ae: 0b:a8:ff:e4:f0:a5:8c:df:22:87:d8:34:a5:a9:31: f6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:39:64:06:7B:F2:5C:AE:AF:D0:7B:07:4B:E8:81:45:40:BB:BA:2B X509v3 Authority Key Identifier: keyid:C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:22:73:3e:c0:a7:c0:78:8b:ae:25:3c:1e:2a:f0:fc:27:d1: cb:39:f1:b7:ad:e3:06:5a:23:ff:dd:b9:dc:63:c8:83:fb:3f: bd:6c:1e:4b:64:7f:8c:43:93:d5:d4:96:1e:b2:15:0a:64:bb: 80:f8:27:d1:1b:88:c8:f6:d4:e6:69:a9:a9:79:d9:39:34:ac: de:d4:6c:74:11:81:6c:f9:d4:4a:b5:bf:e7:19:76:a3:6a:0b: 88:10:7a:bb:d5:ab:0f:a3:97:b6:94:7c:9f:55:ab:a6:ac:46: 41:bb:7c:19:cc:b0:37:1d:d5:66:21:98:ae:92:75:c7:75:a1: f5:73:d9:27:a7:2b:c8:58:66:8f:9f:d7:f0:0a:d4:cb:57:d1: 0f:2e:0c:0b:79:37:1e:ab:2a:1c:de:69:cd:84:39:1d:6b:0d: d4:03:e4:31:8d:87:d4:73:b9:98:9d:c0:e0:49:19:a1:44:87: 99:df:fa:b0:8e:7d:fd:a7:67:a3:03:0d:fd:1e:6b:2d:40:94: f0:99:1e:4b:89:91:25:e8:28:08:a3:76:87:9b:5c:d6:8e:37: 90:d3:03:52:b6:81:08:cf:74:89:49:51:97:a7:94:43:bc:8f: 89:bc:29:1d:8f:aa:af:e1:5e:72:a2:9c:cc:79:8b:5e:88:4f: 9a:e0:df:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbdSMMh1f4kVLyFCqwNMtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzBhY2RmMDQxYjVkY2M3ZTVlYzZjZjhmZjhiZDA2NDhl ODY3MGMwHhcNMjUxMjIxMTUwMTE1WhcNMjUxMjIyMTUwMTE1WjAzMTEwLwYDVQQD EygzODM5NjQwNjdiZjI1Y2FlYWZkMDdiMDc0YmU4ODE0NTQwYmJiYTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuflvS1hHVgoGyGWgcdMdsvQz4INj 1BZiKxSYVrKGiI9dxVNrZfibYCelU3DwjJhV4eiiCBhYRdrdQs0fJxD0zHz7/ocu R6iIRzK1fAxVJt2hmaKb9Kfj++PPLpkBPgJtWPmfY7/nj0qlz5R+FdMh/liXc0IG AV2HUWjL1l6V8tmymYrIqBwqFi7FtujdWiIi/GNJArHVYOgTrPBE/XpMhZZw7oDn Cb0v2cIds96Z7UFoyhN4dF0dQiyIo5rJHGqo5Oo8YZB4bnokD6aQB5Cy7d60Kt7i Kkte+wkR7cRt+EV8gHDsbEgEQRxxcGxhMK4LqP/k8KWM3yKH2DSlqTH2lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDg5ZAZ78lyur9B7B0vogUVAu7orMB8GA1UdIwQY MBaAFMMwrN8EG13Mfl7Gz4/4vQZI6GcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3pDczN3UWJYY3gtWHNiUGpfaTlCa2pvWnd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yYTg0ZTktNjhiMy00ZTNmLWI2MTUt YTBhZDYxZDE5NGExLzEvd3pDczN3UWJYY3gtWHNiUGpfaTlCa2pvWnd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8yYTg0ZTktNjhiMy00ZTNmLWI2MTUtYTBhZDYxZDE5NGEx LzEvd3pDczN3UWJYY3gtWHNiUGpfaTlCa2pvWnd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyJzPsCn wHiLriU8Hirw/CfRyznxt63jBloj/9253GPIg/s/vWweS2R/jEOT1dSWHrIVCmS7 gPgn0RuIyPbU5mmpqXnZOTSs3tRsdBGBbPnUSrW/5xl2o2oLiBB6u9WrD6OXtpR8 n1WrpqxGQbt8GcywNx3VZiGYrpJ1x3Wh9XPZJ6cryFhmj5/X8ArUy1fRDy4MC3k3 HqsqHN5pzYQ5HWsN1APkMY2H1HO5mJ3A4EkZoUSHmd/6sI59/adnowMN/R5rLUCU 8JkeS4mRJegoCKN2h5tc1o43kNMDUraBCM90iUlRl6eUQ7yPibwpHY+qr+FecqKc zHmLXohPmuDfNw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:15:44 2025 by rpki-client