This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft File: _wcypCMoB0cBFCIh49RqKfKWwpw.mft (raw, json) Hash identifier: jyEDGM67o/5uubqIIxpbu7Hx/c52lByR7hk5t8Jr44Y= Subject key identifier: C9:F5:10:0B:03:82:2F:48:17:68:FE:79:82:22:E8:CF:A9:78:2C:5C Authority key identifier: FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C Certificate issuer: /CN=ff0732a42328074701142221e3d46a29f296c29c Certificate serial: 019B35A0A2B7D9FD41C216A82798E1CE39E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft Manifest number: 0333 Signing time: Fri 19 Dec 2025 08:01:18 +0000 Manifest this update: Fri 19 Dec 2025 08:01:18 +0000 Manifest next update: Sat 20 Dec 2025 08:01:18 +0000 Files and hashes: 1: 1-dSj2fWJdUO6bz9sc2BYVK5JDQE.roa (hash: dsFKxx55TJI4durjTXMUPKnGnFdN9dd8cpckDwK4aTc=) 2: _wcypCMoB0cBFCIh49RqKfKWwpw.crl (hash: qVd9g1cenX2DHpDP4lsP17BPGklxj0RG047wStJiFZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:a2:b7:d9:fd:41:c2:16:a8:27:98:e1:ce:39:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff0732a42328074701142221e3d46a29f296c29c Validity Not Before: Dec 19 08:01:18 2025 GMT Not After : Dec 20 08:01:18 2025 GMT Subject: CN=c9f5100b03822f481768fe798222e8cfa9782c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:17:9c:0a:08:8e:42:01:a0:50:65:a6:59:ae: cc:66:d5:01:e8:51:3a:ff:94:d1:8f:92:38:7e:2f: 03:52:b5:bf:41:b0:06:25:d8:31:94:89:51:9a:ba: 0d:61:9b:0c:25:bc:21:5c:4f:48:c5:ba:f6:44:9a: 71:3a:1f:70:9c:f9:80:85:37:e4:85:88:fd:46:6a: fa:f0:a3:c8:e4:c9:7f:c3:86:59:ef:32:90:73:e7: 34:b6:03:92:7c:f5:38:08:74:dd:34:ea:b8:bf:02: 72:c9:39:be:2f:f9:21:5a:86:ee:e2:8a:76:2b:80: 42:d5:14:c1:63:e0:d9:43:99:7e:8b:20:0a:b3:47: 5a:73:8d:d9:12:c4:af:01:27:06:e7:60:db:0d:17: 19:bd:fe:30:63:22:a4:06:70:9a:99:28:9d:c3:88: ab:e1:9c:99:8d:83:15:6e:71:f3:68:31:96:53:4d: 99:a3:6a:d7:ab:c3:f1:c9:63:a6:20:c4:64:9e:b2: 45:9d:a8:a8:e5:67:f9:67:34:10:51:d9:41:04:eb: e0:53:b9:09:8d:02:b5:b3:21:e8:85:83:99:e1:f2: 1b:ab:51:0b:5f:73:63:12:47:e6:d7:85:2b:68:28: cf:64:ea:27:0d:68:28:e2:ba:48:11:54:22:43:11: 20:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F5:10:0B:03:82:2F:48:17:68:FE:79:82:22:E8:CF:A9:78:2C:5C X509v3 Authority Key Identifier: keyid:FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:16:0b:1d:11:cc:f4:fa:6f:58:06:45:93:68:7b:a1:4f:f3: c2:a8:6e:b4:75:0a:94:8e:6e:96:8d:a8:50:4d:43:40:6f:a4: c9:72:3c:f1:2e:0c:17:ce:14:48:1b:03:f2:8a:c2:7c:f7:47: c4:99:47:13:76:d8:a5:a5:a6:f7:ad:6e:3d:38:cc:ec:b8:8e: 4d:c4:f1:6a:9c:ce:2c:cd:0e:63:64:43:a2:c3:53:5f:da:8b: be:03:5c:45:21:0a:3c:27:a4:ce:83:bd:b6:28:1f:27:f2:d9: fd:e7:7d:96:3c:3f:db:41:95:80:69:39:5c:92:e6:a9:67:c9: b0:7e:65:17:16:cc:54:2e:db:58:30:7a:27:03:18:5b:ed:99: 95:4a:5e:5e:9e:14:1e:31:93:0d:dc:26:60:25:ee:a5:e2:df: 93:77:f8:b2:28:83:e9:db:2e:1d:f4:64:82:c0:4f:0c:48:e0: 39:af:6f:1a:44:9f:78:85:b9:3d:72:62:19:b4:c0:b8:f7:f0: ed:1d:c5:8f:d1:39:1b:6a:62:21:00:70:a6:8a:71:e3:c5:64: e3:99:9d:c4:b7:1e:76:14:9d:74:e6:e1:d2:a2:c4:47:4b:f8: ea:ff:bf:41:dd:dc:47:e0:67:2c:0e:96:08:dd:5a:93:b9:b0: 04:be:03:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oKK32f1BwhaoJ5jhzjnjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMDczMmE0MjMyODA3NDcwMTE0MjIyMWUzZDQ2YTI5ZjI5 NmMyOWMwHhcNMjUxMjE5MDgwMTE4WhcNMjUxMjIwMDgwMTE4WjAzMTEwLwYDVQQD EyhjOWY1MTAwYjAzODIyZjQ4MTc2OGZlNzk4MjIyZThjZmE5NzgyYzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxecCgiOQgGgUGWmWa7MZtUB6FE6 /5TRj5I4fi8DUrW/QbAGJdgxlIlRmroNYZsMJbwhXE9Ixbr2RJpxOh9wnPmAhTfk hYj9Rmr68KPI5Ml/w4ZZ7zKQc+c0tgOSfPU4CHTdNOq4vwJyyTm+L/khWobu4op2 K4BC1RTBY+DZQ5l+iyAKs0dac43ZEsSvAScG52DbDRcZvf4wYyKkBnCamSidw4ir 4ZyZjYMVbnHzaDGWU02Zo2rXq8PxyWOmIMRknrJFnaio5Wf5ZzQQUdlBBOvgU7kJ jQK1syHohYOZ4fIbq1ELX3NjEkfm14UraCjPZOonDWgo4rpIEVQiQxEgHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMn1EAsDgi9IF2j+eYIi6M+peCxcMB8GA1UdIwQY MBaAFP8HMqQjKAdHARQiIePUainylsKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3djeXBDTW9CMGNCRkNJaDQ5UnFLZktXd3B3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jNDk3NWYtZWE5NC00M2E3LTkzMjYt N2NhMjJiYTE0MWIzLzEvX3djeXBDTW9CMGNCRkNJaDQ5UnFLZktXd3B3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9jNDk3NWYtZWE5NC00M2E3LTkzMjYtN2NhMjJiYTE0MWIz LzEvX3djeXBDTW9CMGNCRkNJaDQ5UnFLZktXd3B3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexYLHRHM 9PpvWAZFk2h7oU/zwqhutHUKlI5ulo2oUE1DQG+kyXI88S4MF84USBsD8orCfPdH xJlHE3bYpaWm961uPTjM7LiOTcTxapzOLM0OY2RDosNTX9qLvgNcRSEKPCekzoO9 tigfJ/LZ/ed9ljw/20GVgGk5XJLmqWfJsH5lFxbMVC7bWDB6JwMYW+2ZlUpeXp4U HjGTDdwmYCXupeLfk3f4siiD6dsuHfRkgsBPDEjgOa9vGkSfeIW5PXJiGbTAuPfw 7R3Fj9E5G2piIQBwpopx48Vk45mdxLcedhSddObh0qLER0v46v+/Qd3cR+BnLA6W CN1ak7mwBL4DJw== -----END CERTIFICATE-----Generated at Fri Dec 19 11:48:40 2025 by rpki-client