This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft File: wPQvc_8rzEiFsSAL0C7n4p9gjis.mft (raw, json) Hash identifier: OlBqy9nRfIzukTHNknQhhO6RIlkbSfz/DeR1pxgOhcg= Subject key identifier: 41:16:48:4D:6D:BB:15:41:74:8F:2A:C4:E4:2B:61:E7:2E:55:4C:A1 Authority key identifier: C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B Certificate issuer: /CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b Certificate serial: 019B72FF155BC7BB546AB34A387B5B0F83C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft Manifest number: 021D Signing time: Wed 31 Dec 2025 06:01:18 +0000 Manifest this update: Wed 31 Dec 2025 06:01:18 +0000 Manifest next update: Thu 01 Jan 2026 06:01:18 +0000 Files and hashes: 1: DhYlOELQmejsuqE0q-lFm-NVMP0.roa (hash: mf0P0l64vNrzlnAnRIlTkqO53r1pyoZwPlURmjISdFU=) 2: S0h9COCL9yDPAz3dul4Z5VK_88Q.roa (hash: xAF8HzsYzOEotQ+1gvdFYGccAU/IelrIejunqeu7D98=) 3: wPQvc_8rzEiFsSAL0C7n4p9gjis.crl (hash: s11zlq4YtVb0HAUUEe+uuzQGy09RoDbZQwfsFthbA1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:ff:15:5b:c7:bb:54:6a:b3:4a:38:7b:5b:0f:83:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b Validity Not Before: Dec 31 06:01:18 2025 GMT Not After : Jan 1 06:01:18 2026 GMT Subject: CN=4116484d6dbb1541748f2ac4e42b61e72e554ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b5:1e:ff:36:7c:f0:f0:7f:c7:45:6b:cf:26: bf:ed:37:38:73:47:3d:f3:52:21:1b:11:da:cc:1a: 9b:27:de:fc:48:95:1e:f9:80:9f:5c:fa:cf:2e:01: b8:83:ec:9c:15:0b:a2:6d:51:2e:ad:6b:b3:f4:16: 7a:f9:d6:a1:72:8a:2b:c5:df:29:fe:ab:f2:df:d6: c8:e1:17:1a:02:7c:e6:17:8e:c2:a3:d2:03:63:11: 58:75:5f:a1:b1:ca:27:39:96:e3:d2:50:e4:e7:08: d7:b4:67:f0:08:82:51:ae:6f:f5:ab:dc:df:5f:d6: 1b:29:40:08:84:9b:66:3a:98:49:da:8a:5d:fb:ac: 68:d4:a8:1c:c2:d8:bf:2f:a4:ab:ed:47:9a:ad:44: cd:02:32:47:6b:dc:c3:66:78:0b:e9:1b:56:38:46: c7:51:ba:63:c8:5e:96:03:8c:27:d6:c3:e3:7a:11: 6b:3b:b2:ef:4c:3d:5b:7f:f1:8f:db:b7:37:7b:ff: dc:30:23:bd:7c:de:d0:19:b8:c3:fb:5d:c2:39:c7: f4:ef:ed:08:6b:43:4d:ff:c1:d6:40:ca:6f:af:f9: 0a:da:81:6b:2c:09:de:3d:98:ac:a7:4f:20:df:33: d6:3a:e5:6e:e8:99:6e:c1:b7:eb:f7:0d:13:0f:04: b9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:16:48:4D:6D:BB:15:41:74:8F:2A:C4:E4:2B:61:E7:2E:55:4C:A1 X509v3 Authority Key Identifier: keyid:C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:74:45:d5:1a:4b:2e:e3:9f:06:1f:8c:e5:eb:f2:d0:dd:3e: 95:98:9f:23:3b:8f:c2:24:67:90:f5:98:e2:65:d4:e4:54:03: 3f:58:f9:3b:22:14:fe:6a:e4:e5:db:fd:40:a4:1f:6d:33:dd: a0:e7:09:91:96:8f:6d:2a:9e:39:5d:8a:3f:35:fc:79:13:80: 74:4d:c4:e7:ef:fd:47:55:fd:1b:46:d5:00:1f:98:68:d8:2c: 67:50:f3:00:24:93:4f:f0:1b:60:15:9a:5e:23:19:82:a6:50: 30:bb:7a:9e:71:ad:b3:bd:79:fe:30:32:d6:8a:f6:61:4b:2a: 23:7d:02:da:25:d6:2f:4d:89:36:5f:31:b9:87:89:b1:60:cf: f4:ff:e9:0a:87:f5:33:f6:a6:1c:0e:9b:b3:4e:32:e6:7f:57: 75:27:fb:ea:db:60:41:c4:23:2a:0d:65:7d:17:81:b7:6c:33: 4a:5a:b8:ab:a6:10:ff:91:bc:cd:d3:c5:30:92:33:ee:df:1a: 57:40:df:09:fe:d0:a4:11:2c:a4:23:34:14:52:33:a5:f5:35: c4:42:43:f9:5f:da:7f:ff:4f:37:3c:2a:51:ab:64:68:63:54: 90:16:c9:32:f9:1d:6d:c9:d3:1e:d7:28:5d:86:af:8b:2a:f0: 35:8f:95:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZty/xVbx7tUarNKOHtbD4PFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZjQyZjczZmYyYmNjNDg4NWIxMjAwYmQwMmVlN2UyOWY2 MDhlMmIwHhcNMjUxMjMxMDYwMTE4WhcNMjYwMTAxMDYwMTE4WjAzMTEwLwYDVQQD Eyg0MTE2NDg0ZDZkYmIxNTQxNzQ4ZjJhYzRlNDJiNjFlNzJlNTU0Y2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLUe/zZ88PB/x0Vrzya/7Tc4c0c9 81IhGxHazBqbJ978SJUe+YCfXPrPLgG4g+ycFQuibVEurWuz9BZ6+dahcoorxd8p /qvy39bI4RcaAnzmF47Co9IDYxFYdV+hsconOZbj0lDk5wjXtGfwCIJRrm/1q9zf X9YbKUAIhJtmOphJ2opd+6xo1Kgcwti/L6Sr7UearUTNAjJHa9zDZngL6RtWOEbH UbpjyF6WA4wn1sPjehFrO7LvTD1bf/GP27c3e//cMCO9fN7QGbjD+13COcf07+0I a0NN/8HWQMpvr/kK2oFrLAnePZisp08g3zPWOuVu6Jluwbfr9w0TDwS51QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEWSE1tuxVBdI8qxOQrYecuVUyhMB8GA1UdIwQY MBaAFMD0L3P/K8xIhbEgC9Au5+KfYI4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1BRdmNfOHJ6RWlGc1NBTDBDN240cDlnamlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81OWY4OTUtNWM1MC00MzZhLTk3MDct N2RkNTdlNzM2NzQ2LzEvd1BRdmNfOHJ6RWlGc1NBTDBDN240cDlnamlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC81OWY4OTUtNWM1MC00MzZhLTk3MDctN2RkNTdlNzM2NzQ2 LzEvd1BRdmNfOHJ6RWlGc1NBTDBDN240cDlnamlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzXRF1RpL LuOfBh+M5evy0N0+lZifIzuPwiRnkPWY4mXU5FQDP1j5OyIU/mrk5dv9QKQfbTPd oOcJkZaPbSqeOV2KPzX8eROAdE3E5+/9R1X9G0bVAB+YaNgsZ1DzACSTT/AbYBWa XiMZgqZQMLt6nnGts715/jAy1or2YUsqI30C2iXWL02JNl8xuYeJsWDP9P/pCof1 M/amHA6bs04y5n9XdSf76ttgQcQjKg1lfReBt2wzSlq4q6YQ/5G8zdPFMJIz7t8a V0DfCf7QpBEspCM0FFIzpfU1xEJD+V/af/9PNzwqUatkaGNUkBbJMvkdbcnTHtco XYaviyrwNY+VQA== -----END CERTIFICATE-----Generated at Wed Dec 31 09:35:07 2025 by rpki-client