This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft File: wWFXjOD_N_BsJjYuosY1e5hjO3A.mft (raw, json) Hash identifier: ejUH6tLIAIFdG8+hwul/FREZv3zGi/WWJhXmZbC260g= Subject key identifier: 47:32:FD:1E:CA:E5:A6:C1:86:6E:9C:CA:BB:9B:94:67:D6:04:33:E6 Authority key identifier: C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70 Certificate issuer: /CN=c161578ce0ff37f06c26362ea2c6357b98633b70 Certificate serial: 019B3A9175106D86D3C7A2E583D94301D9DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft Manifest number: 0F37 Signing time: Sat 20 Dec 2025 07:02:49 +0000 Manifest this update: Sat 20 Dec 2025 07:02:49 +0000 Manifest next update: Sun 21 Dec 2025 07:02:49 +0000 Files and hashes: 1: VaQFkBkaVYjwzbk-d1HfVSqGj30.roa (hash: mgqfVOInqFPvEjCxJre+1kdiyjEUS8UusvaHKwVL6Uo=) 2: wWFXjOD_N_BsJjYuosY1e5hjO3A.crl (hash: RiPk6YXVz9rWCJ0ckua/Ii6LL31Hp8vgPZvKNXzWcOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:75:10:6d:86:d3:c7:a2:e5:83:d9:43:01:d9:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c161578ce0ff37f06c26362ea2c6357b98633b70 Validity Not Before: Dec 20 07:02:49 2025 GMT Not After : Dec 21 07:02:49 2025 GMT Subject: CN=4732fd1ecae5a6c1866e9ccabb9b9467d60433e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e9:9c:55:b7:11:1e:a0:0f:af:41:63:61:51: f1:49:d1:6f:a5:f3:0b:48:4d:d8:5a:60:eb:18:44: 36:6c:06:a7:e5:df:1c:cc:e0:e4:9d:c0:29:07:f7: b1:11:6c:69:c7:99:cf:32:84:4e:32:58:fa:c3:c1: 97:e6:8c:45:6d:08:ed:fb:19:65:cc:a3:36:34:a9: e5:cc:c6:a4:21:24:ea:e0:cf:d2:93:bb:e4:f9:ff: 90:21:f4:09:14:7b:47:9a:96:6b:d1:df:8e:21:b8: bd:7d:00:f4:43:56:8b:d0:41:58:c3:a5:d9:5d:d9: ac:32:39:87:f7:97:6d:31:fd:c3:f2:cc:5b:ad:09: 46:ed:82:8f:bf:45:c5:e0:cf:85:45:db:30:b1:e4: 8e:df:f3:92:0a:32:81:9b:b9:b9:b4:43:46:09:6a: 61:ed:84:57:75:44:8f:e6:41:a8:f0:4b:ee:28:f3: 6c:36:2f:5e:42:e2:64:0c:a4:23:af:a5:d1:62:72: bb:70:91:76:71:28:00:61:31:4f:40:06:1e:aa:8b: c3:2a:52:3f:37:6d:0c:9e:88:3b:e8:1b:55:16:77: 50:e2:d3:cc:60:ae:31:ac:74:ad:ed:dc:a6:73:20: bb:79:8f:e3:f8:a2:56:1e:9c:d9:e7:37:88:cb:8d: 4a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:32:FD:1E:CA:E5:A6:C1:86:6E:9C:CA:BB:9B:94:67:D6:04:33:E6 X509v3 Authority Key Identifier: keyid:C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:65:2c:88:1c:c6:36:16:c4:d7:04:8f:d5:e1:2d:a9:46:53: 31:a4:fd:4d:38:c3:a1:a2:11:4e:de:e4:e8:01:b7:ef:52:94: de:80:9b:a9:6a:10:a9:f4:ff:16:88:1c:dd:7b:e6:20:46:a1: 78:65:e7:bb:de:fa:06:44:ed:99:88:72:4e:80:9b:dd:ee:87: b4:68:07:77:1f:22:27:3e:aa:7b:0a:fb:49:50:ce:b5:0e:43: b1:1b:ea:68:3e:5f:43:07:fd:b5:9e:83:d1:61:b0:8b:16:a9: a5:76:58:15:e6:b8:7f:e9:9f:87:5a:65:0d:9c:92:95:0e:cf: cd:3d:e9:52:f5:75:35:f1:39:09:5e:2c:c5:05:76:30:23:fd: b3:10:35:e3:44:76:ab:2d:30:eb:f9:e8:e2:d2:00:0d:53:00: ea:de:2b:52:75:82:28:f8:bc:43:2e:71:ee:0e:a0:b7:12:eb: 8b:1d:88:27:fc:7a:4c:59:3c:65:f7:db:85:85:64:3d:44:1c: dd:19:0c:e5:a9:fc:88:6f:a7:e7:79:52:c0:ed:fe:f8:db:50: b7:5f:7d:31:bd:8f:e6:fd:b0:b0:05:2f:20:29:94:f5:75:0e: e0:9e:a4:d1:4c:68:c5:2f:ad:da:34:7c:0e:5c:4e:bb:7b:f0: 39:f5:be:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kXUQbYbTx6Llg9lDAdnfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNjE1NzhjZTBmZjM3ZjA2YzI2MzYyZWEyYzYzNTdiOTg2 MzNiNzAwHhcNMjUxMjIwMDcwMjQ5WhcNMjUxMjIxMDcwMjQ5WjAzMTEwLwYDVQQD Eyg0NzMyZmQxZWNhZTVhNmMxODY2ZTljY2FiYjliOTQ2N2Q2MDQzM2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOmcVbcRHqAPr0FjYVHxSdFvpfML SE3YWmDrGEQ2bAan5d8czODkncApB/exEWxpx5nPMoROMlj6w8GX5oxFbQjt+xll zKM2NKnlzMakISTq4M/Sk7vk+f+QIfQJFHtHmpZr0d+OIbi9fQD0Q1aL0EFYw6XZ XdmsMjmH95dtMf3D8sxbrQlG7YKPv0XF4M+FRdswseSO3/OSCjKBm7m5tENGCWph 7YRXdUSP5kGo8EvuKPNsNi9eQuJkDKQjr6XRYnK7cJF2cSgAYTFPQAYeqovDKlI/ N20Mnog76BtVFndQ4tPMYK4xrHSt7dymcyC7eY/j+KJWHpzZ5zeIy41KRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcy/R7K5abBhm6cyrublGfWBDPmMB8GA1UdIwQY MBaAFMFhV4zg/zfwbCY2LqLGNXuYYztwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1dGWGpPRF9OX0JzSmpZdW9zWTFlNWhqTzNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYjgzNzMtMGMyYy00YjA2LWJmNjkt YWZiZjRlY2YyYjUwLzEvd1dGWGpPRF9OX0JzSmpZdW9zWTFlNWhqTzNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wYjgzNzMtMGMyYy00YjA2LWJmNjktYWZiZjRlY2YyYjUw LzEvd1dGWGpPRF9OX0JzSmpZdW9zWTFlNWhqTzNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGUsiBzG NhbE1wSP1eEtqUZTMaT9TTjDoaIRTt7k6AG371KU3oCbqWoQqfT/Fogc3XvmIEah eGXnu976BkTtmYhyToCb3e6HtGgHdx8iJz6qewr7SVDOtQ5DsRvqaD5fQwf9tZ6D 0WGwixappXZYFea4f+mfh1plDZySlQ7PzT3pUvV1NfE5CV4sxQV2MCP9sxA140R2 qy0w6/no4tIADVMA6t4rUnWCKPi8Qy5x7g6gtxLrix2IJ/x6TFk8ZffbhYVkPUQc 3RkM5an8iG+n53lSwO3++NtQt199Mb2P5v2wsAUvICmU9XUO4J6k0UxoxS+t2jR8 DlxOu3vwOfW+1w== -----END CERTIFICATE-----Generated at Sat Dec 20 14:07:35 2025 by rpki-client