This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft File: wvMmbgYS2DFPTp-So9uLyyU-2rw.mft (raw, json) Hash identifier: glqzVO0CNUbBdHCx9R2ECzaAWyfEDM4giPZmSIN/ukI= Subject key identifier: CC:57:BC:43:6B:FB:5A:35:34:F9:E4:80:90:86:24:AA:55:47:37:C4 Authority key identifier: C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC Certificate issuer: /CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc Certificate serial: 019B3A9122D9715EC920BB7880321FCDF52A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft Manifest number: 0BE6 Signing time: Sat 20 Dec 2025 07:02:28 +0000 Manifest this update: Sat 20 Dec 2025 07:02:28 +0000 Manifest next update: Sun 21 Dec 2025 07:02:28 +0000 Files and hashes: 1: 9QfEv6VDYJHwg-_mBcw3nPg902w.roa (hash: bDGQkiI5avL3G45Js05YIuwiQofAZ2dxukXBkwwmDkY=) 2: wvMmbgYS2DFPTp-So9uLyyU-2rw.crl (hash: 1aeWgILmKkd/mQ8oBpUyvL52R1PXFEDSRYK4B/HhlwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:22:d9:71:5e:c9:20:bb:78:80:32:1f:cd:f5:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc Validity Not Before: Dec 20 07:02:28 2025 GMT Not After : Dec 21 07:02:28 2025 GMT Subject: CN=cc57bc436bfb5a3534f9e480908624aa554737c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:48:e4:e6:29:3c:08:d4:0d:94:0a:2e:dd:31: ae:4f:2e:0d:3f:6c:2f:9e:4b:fe:a6:b8:1b:1f:34: 36:17:d2:d6:03:6b:33:d7:d6:d9:32:c0:20:fd:77: aa:e2:7f:95:a5:b7:b6:9b:74:c4:fd:af:6b:a6:85: b3:e6:3e:da:7c:cf:ce:b0:8e:3e:d8:55:7b:2b:f5: 44:08:11:ba:cb:cc:25:8d:a4:86:c4:76:be:82:dc: 4f:91:0b:b7:67:5f:38:66:a2:27:4d:24:7b:ae:39: be:74:df:7e:f2:88:83:96:56:b1:4b:d7:c2:55:2d: b3:f5:23:6a:12:d2:5d:8e:05:b2:f2:80:d9:1b:89: 21:7c:74:bf:5a:3c:97:e6:db:b6:25:6f:8a:fb:ed: c5:31:e6:52:d0:3d:fa:41:f5:0c:8c:0d:0f:e8:b5: 7b:1c:31:44:41:45:17:d6:52:45:82:7b:6f:6d:b6: 05:f9:f6:c3:1c:e4:89:04:c5:a1:47:62:e5:e4:30: 29:fb:03:08:54:88:2c:e6:55:fc:94:e7:c6:f6:19: 00:4f:5a:47:13:6c:60:7a:cf:85:80:45:17:94:6f: 58:d6:43:20:09:e4:37:a1:4a:fe:db:88:d0:f8:95: 0a:2a:f1:55:a2:8c:88:5f:a4:37:d4:ab:6f:40:7f: 97:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:57:BC:43:6B:FB:5A:35:34:F9:E4:80:90:86:24:AA:55:47:37:C4 X509v3 Authority Key Identifier: keyid:C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a7:b1:88:66:20:e1:1d:5b:de:09:23:f0:5f:22:0d:15:c5: fb:72:9d:45:bc:92:5d:84:9b:4e:a6:f0:7d:78:45:a0:be:4e: 81:f6:56:c4:c0:11:f0:7f:66:f5:63:f6:e4:ed:e1:b2:89:1b: c9:84:c1:27:ee:24:65:cb:a0:51:2c:9d:bc:02:a3:43:c0:d0: 30:a1:5c:96:e6:a4:a4:6b:4e:0c:4f:b8:ce:cc:d9:89:8f:55: a6:aa:b9:de:c9:81:46:67:25:8b:f5:b7:3e:00:c9:bc:f8:3b: ac:ab:74:79:7f:13:49:cd:5e:02:ef:0f:c6:c5:00:c5:a7:a0: e7:e7:6c:92:bc:f1:ac:80:ba:42:8f:5d:18:27:8c:2a:dd:f3: 7f:df:ff:cb:77:3e:ab:48:8f:21:06:8a:57:cc:b0:1e:6b:7a: 56:24:c1:8b:0d:16:af:f2:16:f1:23:73:6f:f3:66:b1:08:07: 18:d6:f5:66:2c:43:c3:71:71:1b:8f:fd:5d:ad:24:ae:7d:69: 4b:43:6c:e1:8a:e0:fe:a4:8c:6d:76:c5:5b:c0:43:e2:9d:7a: d6:97:41:0b:5f:48:92:88:50:96:07:60:a6:42:a4:05:6c:32: cd:69:e4:7d:fc:a7:0d:f2:be:f3:d4:0e:d7:aa:ef:c9:45:67: 18:e9:81:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kSLZcV7JILt4gDIfzfUqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZjMyNjZlMDYxMmQ4MzE0ZjRlOWY5MmEzZGI4YmNiMjUz ZWRhYmMwHhcNMjUxMjIwMDcwMjI4WhcNMjUxMjIxMDcwMjI4WjAzMTEwLwYDVQQD EyhjYzU3YmM0MzZiZmI1YTM1MzRmOWU0ODA5MDg2MjRhYTU1NDczN2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUjk5ik8CNQNlAou3TGuTy4NP2wv nkv+prgbHzQ2F9LWA2sz19bZMsAg/Xeq4n+Vpbe2m3TE/a9rpoWz5j7afM/OsI4+ 2FV7K/VECBG6y8wljaSGxHa+gtxPkQu3Z184ZqInTSR7rjm+dN9+8oiDllaxS9fC VS2z9SNqEtJdjgWy8oDZG4khfHS/WjyX5tu2JW+K++3FMeZS0D36QfUMjA0P6LV7 HDFEQUUX1lJFgntvbbYF+fbDHOSJBMWhR2Ll5DAp+wMIVIgs5lX8lOfG9hkAT1pH E2xges+FgEUXlG9Y1kMgCeQ3oUr+24jQ+JUKKvFVooyIX6Q31KtvQH+XcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxXvENr+1o1NPnkgJCGJKpVRzfEMB8GA1UdIwQY MBaAFMLzJm4GEtgxT06fkqPbi8slPtq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3ZNbWJnWVMyREZQVHAtU285dUx5eVUtMnJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kY2VhY2YtZGFlMi00NzYzLWIzOTkt MmZiOTlmZTVlNDc3LzEvd3ZNbWJnWVMyREZQVHAtU285dUx5eVUtMnJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9kY2VhY2YtZGFlMi00NzYzLWIzOTktMmZiOTlmZTVlNDc3 LzEvd3ZNbWJnWVMyREZQVHAtU285dUx5eVUtMnJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6exiGYg 4R1b3gkj8F8iDRXF+3KdRbySXYSbTqbwfXhFoL5OgfZWxMAR8H9m9WP25O3hsokb yYTBJ+4kZcugUSydvAKjQ8DQMKFcluakpGtODE+4zszZiY9Vpqq53smBRmcli/W3 PgDJvPg7rKt0eX8TSc1eAu8PxsUAxaeg5+dskrzxrIC6Qo9dGCeMKt3zf9//y3c+ q0iPIQaKV8ywHmt6ViTBiw0Wr/IW8SNzb/NmsQgHGNb1ZixDw3FxG4/9Xa0krn1p S0Ns4Yrg/qSMbXbFW8BD4p161pdBC19IkohQlgdgpkKkBWwyzWnkffynDfK+89QO 16rvyUVnGOmByQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:02:03 2025 by rpki-client