This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft File: wv0sdK1vri3dD26cOf3oMYk65vk.mft (raw, json) Hash identifier: hXivrwJgjByXbl9sDM8ca+4IuecmC1bm4u7eshw1URI= Subject key identifier: AA:37:54:76:C2:15:99:41:B6:F7:AA:F4:CF:5E:DC:C8:AC:4A:C4:57 Authority key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9 Certificate issuer: /CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9 Certificate serial: 019B3EA32EE724160888B9B56B136B4B6472 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft Manifest number: 0D8D Signing time: Sun 21 Dec 2025 02:00:40 +0000 Manifest this update: Sun 21 Dec 2025 02:00:40 +0000 Manifest next update: Mon 22 Dec 2025 02:00:40 +0000 Files and hashes: 1: g0tJ6HAhOEXfRw9hpwjv9qGtrPM.roa (hash: zh4s24WsuFFY5gPWDTRufukEWHpAkIbH1s15tmhjBvk=) 2: vJU7TYTNdrKazsGkyXHeqona0Pg.roa (hash: iL9E8+h90/3EbQ79KJw98Dj0cUBdo61gLVaVCxN/WHk=) 3: wv0sdK1vri3dD26cOf3oMYk65vk.crl (hash: 69cDwM3I12CiWjnuURbw1XPyL8EjjMkaCU6866CtFDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:2e:e7:24:16:08:88:b9:b5:6b:13:6b:4b:64:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9 Validity Not Before: Dec 21 02:00:40 2025 GMT Not After : Dec 22 02:00:40 2025 GMT Subject: CN=aa375476c2159941b6f7aaf4cf5edcc8ac4ac457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8b:bb:fc:99:16:c6:59:6c:e5:74:7f:ac:8d: d0:d7:3b:fa:44:2a:c5:e2:6e:f0:d9:74:1c:fb:d8: a4:84:4a:2f:57:34:4b:80:1b:86:ae:86:b9:ff:87: 85:66:b0:e2:69:49:b7:49:43:b8:90:4e:fc:00:35: f0:9b:ad:d1:ff:ea:a9:c5:5a:fc:a6:46:8d:60:92: 27:9f:b1:cf:ea:80:62:d3:50:b5:87:04:b6:7c:67: 3f:c9:be:fe:4b:89:d4:47:3d:57:cb:e6:5b:07:d8: 12:cb:46:66:ac:d6:50:10:33:d9:be:f9:98:c0:09: 7f:12:77:15:7e:80:3f:3b:e4:f5:9e:f7:72:9e:49: 49:14:49:64:12:74:91:32:d8:99:b4:f0:b7:ad:1b: 8e:4c:a9:f2:1a:fd:ec:ce:a8:d0:8c:65:4c:97:5a: 4a:4b:2d:7d:84:b6:e1:34:7b:55:ff:78:b7:97:44: 36:53:f9:88:30:51:d8:fc:e5:e8:ec:69:87:fb:65: af:c8:0c:f9:a7:5e:e1:e4:82:ed:18:54:a5:35:98: 30:c3:0b:be:5b:ed:45:0f:07:66:07:3a:ad:2d:ad: 48:b3:be:c2:68:bf:30:ae:f1:9b:da:79:22:1a:b2: 05:ae:f8:19:45:c8:a7:69:92:41:4c:e8:01:56:c0: 3e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:37:54:76:C2:15:99:41:B6:F7:AA:F4:CF:5E:DC:C8:AC:4A:C4:57 X509v3 Authority Key Identifier: keyid:C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:98:44:04:2d:7f:9b:6f:f3:5a:f3:d2:d1:b5:b0:6c:63:c8: 45:03:89:0b:1c:66:63:6b:63:e4:a6:5a:77:30:d3:cf:27:46: 7c:aa:1f:0c:60:a6:20:c9:4f:c1:16:5b:44:63:9a:6e:8c:af: 3e:8d:96:7d:7a:a8:92:a6:e9:13:14:25:bb:e2:73:1f:3f:b4: 28:8e:97:82:62:b5:a9:3a:ce:19:13:72:85:17:5b:a5:a7:0d: 6c:39:34:26:6b:81:12:e6:a7:de:b0:9e:0a:fc:69:40:6e:8d: 51:1c:78:04:d6:4e:77:f5:d0:4e:ca:e2:93:a2:3b:53:44:84: e7:a5:b8:4b:be:b4:13:6f:2c:42:33:8b:44:b8:8b:b8:0b:fe: 92:81:11:50:ee:40:ba:d7:b2:e7:c8:14:46:0f:c6:69:cd:d3: 9a:1e:1f:73:74:2c:bb:3c:f0:4b:3a:f7:bc:80:69:c6:b3:93: 1e:3e:b8:45:2e:80:6c:f8:29:53:bb:b8:a7:88:36:de:b3:b5: 9d:ca:0f:10:c3:df:e1:5a:72:21:1c:31:96:f2:2f:1d:ee:9a: ce:57:03:42:a5:4e:8e:1b:a0:3b:cf:72:4d:56:6e:b1:d2:60: 17:01:d3:36:28:c1:84:f7:73:a0:ef:e9:cd:c6:3b:21:0f:8b: 03:a3:93:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+oy7nJBYIiLm1axNrS2RyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZmQyYzc0YWQ2ZmFlMmRkZDBmNmU5YzM5ZmRlODMxODkz YWU2ZjkwHhcNMjUxMjIxMDIwMDQwWhcNMjUxMjIyMDIwMDQwWjAzMTEwLwYDVQQD EyhhYTM3NTQ3NmMyMTU5OTQxYjZmN2FhZjRjZjVlZGNjOGFjNGFjNDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYu7/JkWxlls5XR/rI3Q1zv6RCrF 4m7w2XQc+9ikhEovVzRLgBuGroa5/4eFZrDiaUm3SUO4kE78ADXwm63R/+qpxVr8 pkaNYJInn7HP6oBi01C1hwS2fGc/yb7+S4nURz1Xy+ZbB9gSy0ZmrNZQEDPZvvmY wAl/EncVfoA/O+T1nvdynklJFElkEnSRMtiZtPC3rRuOTKnyGv3szqjQjGVMl1pK Sy19hLbhNHtV/3i3l0Q2U/mIMFHY/OXo7GmH+2WvyAz5p17h5ILtGFSlNZgwwwu+ W+1FDwdmBzqtLa1Is77CaL8wrvGb2nkiGrIFrvgZRcinaZJBTOgBVsA+2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKo3VHbCFZlBtveq9M9e3MisSsRXMB8GA1UdIwQY MBaAFML9LHStb64t3Q9unDn96DGJOub5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3Ywc2RLMXZyaTNkRDI2Y09mM29NWWs2NXZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81NDI2MDMtNTQ2Mi00YjhkLThiYzQt NTM1Y2MwYzEwMmYwLzEvd3Ywc2RLMXZyaTNkRDI2Y09mM29NWWs2NXZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS81NDI2MDMtNTQ2Mi00YjhkLThiYzQtNTM1Y2MwYzEwMmYw LzEvd3Ywc2RLMXZyaTNkRDI2Y09mM29NWWs2NXZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhphEBC1/ m2/zWvPS0bWwbGPIRQOJCxxmY2tj5KZadzDTzydGfKofDGCmIMlPwRZbRGOaboyv Po2WfXqokqbpExQlu+JzHz+0KI6XgmK1qTrOGRNyhRdbpacNbDk0JmuBEuan3rCe CvxpQG6NURx4BNZOd/XQTsrik6I7U0SE56W4S760E28sQjOLRLiLuAv+koERUO5A utey58gURg/Gac3Tmh4fc3QsuzzwSzr3vIBpxrOTHj64RS6AbPgpU7u4p4g23rO1 ncoPEMPf4VpyIRwxlvIvHe6azlcDQqVOjhugO89yTVZusdJgFwHTNijBhPdzoO/p zcY7IQ+LA6OTfA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:16:19 2025 by rpki-client