This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft File: wc2HDWChpsQgZxWK7rzA4_1t2B8.mft (raw, json) Hash identifier: xgPkdBkhJozNiF7NizsloTbSnyMgA/sVdAO/kGRpNGw= Subject key identifier: 70:B4:A2:4A:9E:C6:E6:BB:C2:A7:28:27:EB:07:8C:60:4C:65:0D:F2 Authority key identifier: C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F Certificate issuer: /CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f Certificate serial: 019B345678DCA363AEBF435926E92D53F903 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft Manifest number: 0467 Signing time: Fri 19 Dec 2025 02:00:40 +0000 Manifest this update: Fri 19 Dec 2025 02:00:40 +0000 Manifest next update: Sat 20 Dec 2025 02:00:40 +0000 Files and hashes: 1: BqHb_zqnMM3dIgBF_BTfgVY5a5k.roa (hash: uhtJUVXZSGPPQKjYqbLF+Cz5CPTBTCYfz/c5yIRK4Ss=) 2: wc2HDWChpsQgZxWK7rzA4_1t2B8.crl (hash: gbYFiIKMOOm+900F8B2cTkmOs7rJsjGFG+SsUfr6JoE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:78:dc:a3:63:ae:bf:43:59:26:e9:2d:53:f9:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f Validity Not Before: Dec 19 02:00:40 2025 GMT Not After : Dec 20 02:00:40 2025 GMT Subject: CN=70b4a24a9ec6e6bbc2a72827eb078c604c650df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e7:b8:df:28:ce:d7:48:89:21:a7:64:da:ff: a0:2b:fe:ea:1b:ca:00:f8:65:78:53:e5:fb:ea:ce: 0f:48:f9:07:59:62:43:c3:94:34:e4:55:e0:30:81: 77:4c:36:af:62:7e:59:c8:1c:22:82:f8:a2:5e:cd: 5e:ce:de:f3:5b:b4:eb:63:cd:5d:99:8b:ed:24:b9: ff:ba:4a:b1:2e:8d:d8:5f:15:82:be:e3:c3:40:fd: 78:0e:dd:88:71:eb:11:eb:ec:ef:5d:da:76:33:14: 66:cd:68:ca:2f:20:10:66:4e:fe:87:d9:6e:9d:91: 59:a2:38:88:77:2b:bc:e5:8a:45:e9:8e:12:25:00: e5:c4:81:b8:81:2d:42:2c:18:a4:bd:97:d8:de:6f: e8:bf:e4:30:83:67:f4:9f:87:c9:5e:e5:64:0b:e2: e0:20:62:a2:44:ba:0d:fe:8f:d6:e2:83:f6:db:fd: 3e:2e:c8:fc:d8:81:66:46:cc:bd:76:61:7d:85:d7: f1:6d:3c:b6:2c:22:ea:e8:22:1d:fc:4d:6b:36:33: d8:93:22:f5:fa:61:6e:16:6f:0b:b5:31:ca:3a:88: 41:38:6d:84:ee:52:2d:9a:9f:ae:da:3b:c3:30:85: 9c:59:eb:45:17:97:c2:12:ba:ed:01:79:17:54:66: 3f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B4:A2:4A:9E:C6:E6:BB:C2:A7:28:27:EB:07:8C:60:4C:65:0D:F2 X509v3 Authority Key Identifier: keyid:C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:99:55:46:3b:7f:5b:9c:bb:cb:80:e4:2e:13:14:03:de:9d: a2:65:8f:d7:76:46:51:59:9b:00:90:82:cd:39:61:fd:b3:f0: 84:df:8d:e3:a3:23:43:6f:d0:e2:28:cb:7a:c6:6a:ce:65:fd: a4:f1:78:fe:27:6e:6b:a1:6f:e2:d2:21:1a:b1:3b:90:a2:30: 0e:4a:96:bb:14:59:93:82:fe:7f:2b:9b:09:d2:39:18:d0:ef: e3:5d:df:47:41:84:a8:a5:97:1a:04:ab:f7:d7:0f:17:69:63: 24:23:3d:f2:59:21:95:5b:39:3e:3a:45:f4:03:50:eb:43:28: db:bd:11:1d:9f:2f:5d:1c:d5:79:f0:13:47:59:10:fa:a5:69: 8d:bd:95:86:3d:1c:d7:dc:1d:09:a4:0f:2f:bd:0b:a6:66:e7: 16:c2:30:f6:de:34:08:0b:7c:18:25:e6:4d:2e:44:cb:b8:6e: 06:2e:e1:5c:20:68:2a:5b:32:d4:74:1e:36:56:b1:11:ed:41: e8:85:46:57:a8:dc:0c:3f:99:e6:fa:7c:3b:07:8a:19:c9:20: 09:4c:cd:d3:71:1c:93:81:db:bf:db:54:43:4d:52:a9:41:22: c6:2e:84:f1:50:a4:90:6b:49:56:b1:33:4c:9b:ac:b1:ea:12: 08:fa:50:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0Vnjco2Ouv0NZJuktU/kDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxY2Q4NzBkNjBhMWE2YzQyMDY3MTU4YWVlYmNjMGUzZmQ2 ZGQ4MWYwHhcNMjUxMjE5MDIwMDQwWhcNMjUxMjIwMDIwMDQwWjAzMTEwLwYDVQQD Eyg3MGI0YTI0YTllYzZlNmJiYzJhNzI4MjdlYjA3OGM2MDRjNjUwZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ee43yjO10iJIadk2v+gK/7qG8oA +GV4U+X76s4PSPkHWWJDw5Q05FXgMIF3TDavYn5ZyBwigviiXs1ezt7zW7TrY81d mYvtJLn/ukqxLo3YXxWCvuPDQP14Dt2IcesR6+zvXdp2MxRmzWjKLyAQZk7+h9lu nZFZojiIdyu85YpF6Y4SJQDlxIG4gS1CLBikvZfY3m/ov+Qwg2f0n4fJXuVkC+Lg IGKiRLoN/o/W4oP22/0+Lsj82IFmRsy9dmF9hdfxbTy2LCLq6CId/E1rNjPYkyL1 +mFuFm8LtTHKOohBOG2E7lItmp+u2jvDMIWcWetFF5fCErrtAXkXVGY/VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHC0okqexua7wqcoJ+sHjGBMZQ3yMB8GA1UdIwQY MBaAFMHNhw1goabEIGcViu68wOP9bdgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy84MzVhODItOGJiZS00MGIyLWIyZDQt MDQ4MWM2NmMyYjVhLzEvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy84MzVhODItOGJiZS00MGIyLWIyZDQtMDQ4MWM2NmMyYjVh LzEvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5lVRjt/ W5y7y4DkLhMUA96domWP13ZGUVmbAJCCzTlh/bPwhN+N46MjQ2/Q4ijLesZqzmX9 pPF4/idua6Fv4tIhGrE7kKIwDkqWuxRZk4L+fyubCdI5GNDv413fR0GEqKWXGgSr 99cPF2ljJCM98lkhlVs5PjpF9ANQ60Mo270RHZ8vXRzVefATR1kQ+qVpjb2Vhj0c 19wdCaQPL70LpmbnFsIw9t40CAt8GCXmTS5Ey7huBi7hXCBoKlsy1HQeNlaxEe1B 6IVGV6jcDD+Z5vp8OweKGckgCUzN03Eck4Hbv9tUQ01SqUEixi6E8VCkkGtJVrEz TJusseoSCPpQrA== -----END CERTIFICATE-----Generated at Fri Dec 19 09:59:14 2025 by rpki-client