This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft File: wDJJW4nc6BsMf4ht38NgS94G2KY.mft (raw, json) Hash identifier: UyrgHqENXYIE2NHcm/U4CXUb5QKyl8Dsbb3GyJgbWNE= Subject key identifier: B3:D0:11:9D:57:9F:60:22:45:70:B9:38:52:21:8B:E5:F8:C9:CF:BA Authority key identifier: C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6 Certificate issuer: /CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6 Certificate serial: 019B4DE042704953C5C1BC843B805803E7FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 01:01:41 +0000 Manifest this update: Wed 24 Dec 2025 01:01:41 +0000 Manifest next update: Thu 25 Dec 2025 01:01:41 +0000 Files and hashes: 1: mHKZZdX4P1dK57yB0hCJdDCS-A8.roa (hash: sgKlWaet9A3w8v934Vjaqn1vJ0nwSp4V/6BEjtLuqMM=) 2: wDJJW4nc6BsMf4ht38NgS94G2KY.crl (hash: o9SOMG1gn0TY1TyKqOigyt7savo0fLqP9zv3dcqGJZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:42:70:49:53:c5:c1:bc:84:3b:80:58:03:e7:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6 Validity Not Before: Dec 24 01:01:41 2025 GMT Not After : Dec 25 01:01:41 2025 GMT Subject: CN=b3d0119d579f60224570b93852218be5f8c9cfba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:19:66:3d:7c:fc:bb:4e:61:e6:7b:af:2d:74: c5:9d:ea:a4:f8:88:5f:7d:55:ea:0c:18:d3:95:b5: 0f:97:44:0f:d8:38:ed:c8:fb:a5:b0:c3:2e:6b:b8: 61:96:14:4f:37:7b:fe:42:a6:04:3b:8a:77:ff:e2: fa:cb:4d:38:5a:f8:b4:cd:13:8b:22:71:70:2a:ef: 09:31:38:f6:2a:89:f9:94:e4:63:50:a1:98:ce:21: dc:aa:55:d5:cb:33:8b:f3:2f:4a:ea:e4:0d:9c:01: b1:70:6b:af:58:77:74:70:90:99:69:e7:4e:26:c3: 86:ae:4f:62:1d:f6:e7:3f:bf:d5:4f:8e:06:c7:bd: 72:2d:92:2d:c0:0a:f8:34:b9:93:d4:e7:fc:48:bd: e9:22:ec:5f:d3:c3:c5:c3:a6:04:6d:e2:35:87:22: 74:a0:0f:33:60:a9:19:6d:9f:20:bb:33:b1:f2:a7: e3:12:d0:c4:86:5a:c0:5e:2c:65:7f:50:fc:8c:37: e1:ce:1a:2e:aa:a5:5f:70:00:00:01:59:7a:84:c9: 33:38:14:bd:42:7f:93:9c:87:36:13:19:1c:b8:17: cc:9f:b2:36:b4:6c:55:2c:84:07:52:cd:89:08:d7: d3:7e:60:3d:79:4a:54:96:49:8f:f8:db:b6:94:c2: dd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D0:11:9D:57:9F:60:22:45:70:B9:38:52:21:8B:E5:F8:C9:CF:BA X509v3 Authority Key Identifier: keyid:C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:53:17:32:92:1f:9d:60:7a:ef:9c:d5:33:7d:2f:b4:2f:ee: e6:67:9c:46:5f:a3:6b:a7:c5:e7:78:a7:47:b9:41:10:58:4f: 72:15:c1:5f:33:53:c3:d4:ef:b6:65:14:61:f2:22:b0:ab:2b: 8f:63:fd:c0:f0:3d:a1:97:56:66:3f:64:ad:16:95:3b:90:11: f8:7d:84:9e:63:96:22:77:ba:29:e9:c8:65:1c:a1:6e:82:6f: 31:48:3f:5b:fa:0b:5c:51:40:98:ba:49:73:d4:17:f6:34:7c: 5f:1c:5a:cb:59:9d:93:95:e0:01:fa:d9:c2:5a:d1:23:dc:33: 6c:27:46:36:11:bb:21:88:db:14:47:83:35:27:c0:33:e3:ca: f1:c1:98:b2:81:1c:15:70:71:71:47:1c:5d:42:85:ae:da:f7: c4:24:4d:47:15:ba:96:25:dd:dd:64:d8:06:00:fa:e7:3f:1e: 35:d4:e0:ce:d0:bf:8f:f8:42:81:bd:9b:c5:e2:0b:31:f1:d4: 9c:09:7a:c7:29:e9:b6:47:67:32:f0:77:f6:5f:79:a2:d7:4d: 48:0f:df:0d:0b:a7:9a:41:05:f7:29:b7:61:56:34:45:3e:c0: 46:ca:85:42:8e:5a:cf:22:72:6b:da:66:a4:c8:a5:1a:c1:c0: e3:e9:4b:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4EJwSVPFwbyEO4BYA+f7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMzI0OTViODlkY2U4MWIwYzdmODg2ZGRmYzM2MDRiZGUw NmQ4YTYwHhcNMjUxMjI0MDEwMTQxWhcNMjUxMjI1MDEwMTQxWjAzMTEwLwYDVQQD EyhiM2QwMTE5ZDU3OWY2MDIyNDU3MGI5Mzg1MjIxOGJlNWY4YzljZmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhlmPXz8u05h5nuvLXTFneqk+Ihf fVXqDBjTlbUPl0QP2DjtyPulsMMua7hhlhRPN3v+QqYEO4p3/+L6y004Wvi0zROL InFwKu8JMTj2Kon5lORjUKGYziHcqlXVyzOL8y9K6uQNnAGxcGuvWHd0cJCZaedO JsOGrk9iHfbnP7/VT44Gx71yLZItwAr4NLmT1Of8SL3pIuxf08PFw6YEbeI1hyJ0 oA8zYKkZbZ8guzOx8qfjEtDEhlrAXixlf1D8jDfhzhouqqVfcAAAAVl6hMkzOBS9 Qn+TnIc2ExkcuBfMn7I2tGxVLIQHUs2JCNfTfmA9eUpUlkmP+Nu2lMLdwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPQEZ1Xn2AiRXC5OFIhi+X4yc+6MB8GA1UdIwQY MBaAFMAySVuJ3OgbDH+Ibd/DYEveBtimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0RKSlc0bmM2QnNNZjRodDM4TmdTOTRHMktZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMmRkMmMtNGQwYy00MjBhLTk4YTUt MDJlNjQyMmM0MTgxLzEvd0RKSlc0bmM2QnNNZjRodDM4TmdTOTRHMktZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8xMmRkMmMtNGQwYy00MjBhLTk4YTUtMDJlNjQyMmM0MTgx LzEvd0RKSlc0bmM2QnNNZjRodDM4TmdTOTRHMktZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVMXMpIf nWB675zVM30vtC/u5mecRl+ja6fF53inR7lBEFhPchXBXzNTw9TvtmUUYfIisKsr j2P9wPA9oZdWZj9krRaVO5AR+H2EnmOWIne6KenIZRyhboJvMUg/W/oLXFFAmLpJ c9QX9jR8Xxxay1mdk5XgAfrZwlrRI9wzbCdGNhG7IYjbFEeDNSfAM+PK8cGYsoEc FXBxcUccXUKFrtr3xCRNRxW6liXd3WTYBgD65z8eNdTgztC/j/hCgb2bxeILMfHU nAl6xynptkdnMvB39l95otdNSA/fDQunmkEF9ym3YVY0RT7ARsqFQo5azyJya9pm pMilGsHA4+lLnw== -----END CERTIFICATE-----Generated at Wed Dec 24 10:33:11 2025 by rpki-client