This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft File: wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft (raw, json) Hash identifier: DZtVe6vCBO5dPE7rRe0+jEDcxVysrxvQQv9Tkn5nRpU= Subject key identifier: 19:4A:67:5C:0F:5B:9A:B9:1E:B4:63:63:C9:8B:3C:A9:B1:F4:BC:58 Authority key identifier: C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4 Certificate issuer: /CN=c30aef396394ea5950dc7956ab1bf491364622a4 Certificate serial: 019B3CB4DE9D60FC4B15D2312F40B1696B90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft Manifest number: 16E2 Signing time: Sat 20 Dec 2025 17:00:44 +0000 Manifest this update: Sat 20 Dec 2025 17:00:44 +0000 Manifest next update: Sun 21 Dec 2025 17:00:44 +0000 Files and hashes: 1: rZbNK2xJ4XhKao8afy4CimeXVSk.roa (hash: DH234KafhTlCh4Rrjfu8Y3PnZSWa2Wt2QfsLpMy42vQ=) 2: wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl (hash: UJ6JMr7vBl6T7fNFsCp/DSJ+UH0r+hTC4phGl9H48Vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:de:9d:60:fc:4b:15:d2:31:2f:40:b1:69:6b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c30aef396394ea5950dc7956ab1bf491364622a4 Validity Not Before: Dec 20 17:00:44 2025 GMT Not After : Dec 21 17:00:44 2025 GMT Subject: CN=194a675c0f5b9ab91eb46363c98b3ca9b1f4bc58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:27:03:ec:62:6f:38:f8:7c:2f:f2:8f:27:84: 92:96:f2:f7:44:f0:b1:dc:cf:0c:e8:4f:56:24:e3: c2:7a:d7:11:43:04:9e:77:c8:9a:79:51:b4:56:a3: de:67:87:d6:67:7f:99:27:bc:73:97:a2:48:f8:e4: b2:b9:e4:10:27:40:7d:42:f0:ae:ce:b8:0f:b4:f4: 89:60:aa:9b:38:a0:2f:bf:bf:b2:60:bb:0d:3b:98: 48:e2:7c:a3:c1:9d:76:53:1a:91:c8:47:33:bf:17: 89:43:7b:41:37:3d:ed:a7:c2:5c:2d:37:6d:5c:e9: 38:5e:34:0f:bc:f6:b3:e7:45:69:2d:27:a2:1f:c1: fa:fe:71:76:cc:09:5c:84:0c:53:f9:0a:02:03:41: ef:d6:e7:d9:db:2b:67:a3:45:73:0b:58:7b:9c:38: 2a:20:98:a8:f4:b7:06:27:9a:30:4a:47:88:27:d4: 73:97:8b:40:10:17:83:aa:65:9d:c9:0e:d2:fb:6b: 70:da:d6:82:af:ef:7a:de:e7:83:d5:cc:5c:ca:ae: e0:ef:f7:27:d9:e3:8d:3b:4e:6c:55:96:cb:2f:76: da:32:ba:c8:09:1a:46:a1:46:72:d2:9d:5a:52:09: 4d:d5:47:63:ce:ee:4f:31:ea:b2:19:f1:88:fe:a7: f2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4A:67:5C:0F:5B:9A:B9:1E:B4:63:63:C9:8B:3C:A9:B1:F4:BC:58 X509v3 Authority Key Identifier: keyid:C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:71:08:5b:70:33:9e:f7:db:7e:9c:0d:f8:e9:fa:3f:46:38: 67:98:80:3c:5d:bd:e3:44:64:88:ee:4f:de:84:c9:a4:66:56: 57:f9:b4:47:fc:fb:82:f3:22:0a:0c:9a:4d:2b:95:b5:d5:5d: 0c:28:3f:7a:87:d5:58:cf:e7:c7:28:f3:10:91:25:96:e0:f7: 7f:f8:b1:92:21:c2:6e:a0:2a:8d:dd:2f:1b:ba:8e:5b:bd:56: 74:87:34:dc:36:b7:41:7f:ea:43:cf:05:03:17:d6:0a:ab:35: 8e:85:18:47:a8:07:da:7b:30:ef:8c:e8:83:36:10:73:8c:87: 80:b2:3f:41:05:e5:67:5b:8e:05:0d:09:36:c2:a8:fe:64:8a: 25:fe:fd:1d:d8:be:29:a2:f8:a5:f6:10:1d:ca:5c:b3:58:2b: d4:f4:e4:12:56:86:a0:28:7c:62:23:9f:af:8b:19:b2:69:19: 88:4c:30:8d:ae:81:10:67:7e:ca:1d:d3:af:69:69:95:0d:d8: e3:88:84:19:56:9f:84:bc:e1:9c:f2:1f:07:ef:4f:9d:15:d0: 40:29:09:b7:86:fc:f8:8f:b4:30:29:e4:41:2a:82:96:65:d5: c2:a9:73:a3:b2:d5:c1:ba:3b:19:2a:24:45:a7:48:3d:0c:6d: b9:3a:57:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tN6dYPxLFdIxL0CxaWuQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMGFlZjM5NjM5NGVhNTk1MGRjNzk1NmFiMWJmNDkxMzY0 NjIyYTQwHhcNMjUxMjIwMTcwMDQ0WhcNMjUxMjIxMTcwMDQ0WjAzMTEwLwYDVQQD EygxOTRhNjc1YzBmNWI5YWI5MWViNDYzNjNjOThiM2NhOWIxZjRiYzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxScD7GJvOPh8L/KPJ4SSlvL3RPCx 3M8M6E9WJOPCetcRQwSed8iaeVG0VqPeZ4fWZ3+ZJ7xzl6JI+OSyueQQJ0B9QvCu zrgPtPSJYKqbOKAvv7+yYLsNO5hI4nyjwZ12UxqRyEczvxeJQ3tBNz3tp8JcLTdt XOk4XjQPvPaz50VpLSeiH8H6/nF2zAlchAxT+QoCA0Hv1ufZ2ytno0VzC1h7nDgq IJio9LcGJ5owSkeIJ9Rzl4tAEBeDqmWdyQ7S+2tw2taCr+963ueD1cxcyq7g7/cn 2eONO05sVZbLL3baMrrICRpGoUZy0p1aUglN1Udjzu5PMeqyGfGI/qfyaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlKZ1wPW5q5HrRjY8mLPKmx9LxYMB8GA1UdIwQY MBaAFMMK7zljlOpZUNx5Vqsb9JE2RiKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3dydk9XT1U2bGxRM0hsV3F4djBrVFpHSXFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kZGM5YTEtNTg5Mi00NGQxLWI0OTAt MjY3ZGE5MWZiZmY4LzEvd3dydk9XT1U2bGxRM0hsV3F4djBrVFpHSXFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kZGM5YTEtNTg5Mi00NGQxLWI0OTAtMjY3ZGE5MWZiZmY4 LzEvd3dydk9XT1U2bGxRM0hsV3F4djBrVFpHSXFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApXEIW3Az nvfbfpwN+On6P0Y4Z5iAPF2940RkiO5P3oTJpGZWV/m0R/z7gvMiCgyaTSuVtdVd DCg/eofVWM/nxyjzEJElluD3f/ixkiHCbqAqjd0vG7qOW71WdIc03Da3QX/qQ88F AxfWCqs1joUYR6gH2nsw74zogzYQc4yHgLI/QQXlZ1uOBQ0JNsKo/mSKJf79Hdi+ KaL4pfYQHcpcs1gr1PTkElaGoCh8YiOfr4sZsmkZiEwwja6BEGd+yh3Tr2lplQ3Y 44iEGVafhLzhnPIfB+9PnRXQQCkJt4b8+I+0MCnkQSqClmXVwqlzo7LVwbo7GSok RadIPQxtuTpXgg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:04:16 2025 by rpki-client