This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft File: wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft (raw, json) Hash identifier: t1kRPbke4VKNRCvUO+PaqTM7GGEGGEjj7HxbskFX2qA= Subject key identifier: 1D:D2:14:CC:5D:94:1F:9A:69:5D:98:9B:CA:37:A8:3E:D8:DC:31:F1 Authority key identifier: C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4 Certificate issuer: /CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4 Certificate serial: 019B70A3667C69E8DD92520501ADA7B09CAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft Manifest number: 13C9 Signing time: Tue 30 Dec 2025 19:01:55 +0000 Manifest this update: Tue 30 Dec 2025 19:01:55 +0000 Manifest next update: Wed 31 Dec 2025 19:01:55 +0000 Files and hashes: 1: 2tiVBKWJb3sKibII0w4_JEP8cX8.roa (hash: yXLW83i0e/6bCMs04Sj4WwVKDgNnsbMkg4zpZba2Js0=) 2: wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl (hash: VoZX4Kq2y/ohpT50ZseU9A4h3yLI3oKkrQhHoPYYL4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 19:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a3:66:7c:69:e8:dd:92:52:05:01:ad:a7:b0:9c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4 Validity Not Before: Dec 30 19:01:55 2025 GMT Not After : Dec 31 19:01:55 2025 GMT Subject: CN=1dd214cc5d941f9a695d989bca37a83ed8dc31f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:40:99:f5:92:49:51:d6:5a:bc:e1:1b:a9:4f: 31:73:55:5b:bc:b6:04:d3:92:23:e0:a3:b7:00:50: 8f:2b:a2:d1:3f:f8:e6:98:54:44:10:fa:be:4d:34: 4b:a2:9b:9a:44:15:3d:6f:bb:0d:e7:89:8b:02:65: a1:7d:43:62:21:44:d8:27:f1:b2:df:35:cc:ea:22: 50:ca:91:90:58:31:d8:f6:b5:23:2d:de:f5:55:2e: b8:2f:1f:94:6b:6e:a3:c3:f4:08:f2:a8:9b:d0:1e: ab:bc:10:49:0b:ed:23:93:8a:a1:54:62:85:7a:89: 33:1a:07:e2:39:d1:95:24:c5:25:f0:36:e1:8d:83: 1c:8a:27:4a:54:11:10:e0:45:05:d4:40:e1:21:4f: 52:08:fa:e9:30:db:0e:ae:22:c1:3b:8d:28:eb:41: b7:be:87:b0:c8:f8:4b:c0:41:89:64:57:4e:59:75: 6c:14:46:d9:80:cf:0d:5d:0f:45:e2:b8:f3:6c:88: f7:97:23:ca:ee:1f:ed:3d:0c:a4:20:84:09:69:cd: af:11:37:39:1c:60:a9:68:f1:3c:00:72:c7:a9:9b: b2:53:17:ae:d9:89:42:76:20:0c:e2:62:fb:6c:b2: 2e:a1:34:67:c6:6b:0f:71:38:3e:39:e8:12:f2:19: 6d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D2:14:CC:5D:94:1F:9A:69:5D:98:9B:CA:37:A8:3E:D8:DC:31:F1 X509v3 Authority Key Identifier: keyid:C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:06:0f:aa:e0:2b:e7:c2:88:5b:ba:42:02:4e:d5:41:45:78: 01:3d:b9:94:10:3d:d3:96:68:84:ce:48:62:45:47:04:87:1f: fe:b0:e5:89:3e:66:b1:c1:25:53:b2:31:e5:e0:9a:d4:60:f3: 42:8b:2f:2d:ae:77:bf:33:98:65:39:6d:94:45:88:f1:65:7e: 4f:b5:4c:42:62:f2:3d:3e:b6:eb:9b:d6:d6:f2:bf:50:e7:2f: e5:a3:24:ae:4f:59:35:1b:4e:28:28:f1:dd:ad:78:0f:2b:f9: 1a:d3:45:84:90:18:70:49:14:41:d7:8f:9d:89:b7:91:51:54: 23:48:71:e4:42:d0:40:7f:28:b2:dc:7b:d2:5c:3d:19:71:5d: fb:2b:40:4b:e6:c6:9f:a4:21:e5:cf:01:41:4e:2a:20:f4:f2: ac:58:0d:70:6a:22:b5:0f:64:7e:4a:25:0a:4b:eb:53:a8:ba: 77:aa:84:c1:fa:a0:d1:d1:23:1b:f4:2c:04:da:52:2e:af:7a: 38:4f:04:ea:98:e7:d3:8e:ad:52:04:4c:36:45:a1:2f:92:86: 19:6a:b2:0d:0d:20:a7:35:e1:e3:69:b5:21:eb:8f:2e:49:12: df:3c:e6:d3:54:bc:73:a7:80:f7:df:7d:79:de:aa:12:7a:66: 20:d5:4c:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwo2Z8aejdklIFAa2nsJyuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNWVlMmQ5MDljOWI3NWM2ZDIwODRlMzM3OWJmMDMyNzRi Nzc2ZjQwHhcNMjUxMjMwMTkwMTU1WhcNMjUxMjMxMTkwMTU1WjAzMTEwLwYDVQQD EygxZGQyMTRjYzVkOTQxZjlhNjk1ZDk4OWJjYTM3YTgzZWQ4ZGMzMWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUCZ9ZJJUdZavOEbqU8xc1VbvLYE 05Ij4KO3AFCPK6LRP/jmmFREEPq+TTRLopuaRBU9b7sN54mLAmWhfUNiIUTYJ/Gy 3zXM6iJQypGQWDHY9rUjLd71VS64Lx+Ua26jw/QI8qib0B6rvBBJC+0jk4qhVGKF eokzGgfiOdGVJMUl8DbhjYMciidKVBEQ4EUF1EDhIU9SCPrpMNsOriLBO40o60G3 voewyPhLwEGJZFdOWXVsFEbZgM8NXQ9F4rjzbIj3lyPK7h/tPQykIIQJac2vETc5 HGCpaPE8AHLHqZuyUxeu2YlCdiAM4mL7bLIuoTRnxmsPcTg+OegS8hltmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3SFMxdlB+aaV2Ym8o3qD7Y3DHxMB8GA1UdIwQY MBaAFMFe4tkJybdcbSCE4zeb8DJ0t3b0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1Y3aTJRbkp0MXh0SUlUak41dndNblMzZHZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hNzY1ZGEtNGFhMS00N2EyLThiNWQt ZWJlNDM5MDVlYjgxLzEvd1Y3aTJRbkp0MXh0SUlUak41dndNblMzZHZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9hNzY1ZGEtNGFhMS00N2EyLThiNWQtZWJlNDM5MDVlYjgx LzEvd1Y3aTJRbkp0MXh0SUlUak41dndNblMzZHZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAugYPquAr 58KIW7pCAk7VQUV4AT25lBA905ZohM5IYkVHBIcf/rDliT5mscElU7Ix5eCa1GDz QosvLa53vzOYZTltlEWI8WV+T7VMQmLyPT6265vW1vK/UOcv5aMkrk9ZNRtOKCjx 3a14Dyv5GtNFhJAYcEkUQdePnYm3kVFUI0hx5ELQQH8ostx70lw9GXFd+ytAS+bG n6Qh5c8BQU4qIPTyrFgNcGoitQ9kfkolCkvrU6i6d6qEwfqg0dEjG/QsBNpSLq96 OE8E6pjn046tUgRMNkWhL5KGGWqyDQ0gpzXh42m1IeuPLkkS3zzm01S8c6eA9999 ed6qEnpmINVM0g== -----END CERTIFICATE-----Generated at Wed Dec 31 01:59:06 2025 by rpki-client