This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft File: w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft (raw, json) Hash identifier: T8M5EdEcxGXzM7AXGSvb+169cBaSZBUgvqChiSpuov0= Subject key identifier: 1D:D4:8C:AD:4B:04:8A:AC:CB:F3:DB:BC:85:59:17:06:C2:31:9E:45 Authority key identifier: C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63 Certificate issuer: /CN=c34bdff88e8e8989871e13408111ad1433b30c63 Certificate serial: 019B3CEBA3649D2772A293FB83FAFF3DD1AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft Manifest number: 0BF2 Signing time: Sat 20 Dec 2025 18:00:34 +0000 Manifest this update: Sat 20 Dec 2025 18:00:34 +0000 Manifest next update: Sun 21 Dec 2025 18:00:34 +0000 Files and hashes: 1: ugMcDv1gcgsXhUTa2vBxQzpCLaI.roa (hash: rt0w1lyTwHj5nTBBa43BIhts6ikl3ovgbdGlD8LZ7VQ=) 2: w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl (hash: LDHgWIegEJiKYQRiwgeS3EJmcXgMi8iQHkzfSSQ7Ap8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:a3:64:9d:27:72:a2:93:fb:83:fa:ff:3d:d1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c34bdff88e8e8989871e13408111ad1433b30c63 Validity Not Before: Dec 20 18:00:34 2025 GMT Not After : Dec 21 18:00:34 2025 GMT Subject: CN=1dd48cad4b048aaccbf3dbbc85591706c2319e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b7:b1:82:95:d4:de:32:3e:5a:d2:c0:9b:5a: aa:5c:3c:26:4e:7f:70:2b:4f:d7:88:4d:7d:98:96: 96:3f:fc:35:40:87:28:ab:e0:b5:62:01:51:0b:1d: 3b:65:1f:11:0c:0f:92:90:52:c4:4a:be:fc:5c:62: 14:ac:15:04:76:f4:2a:cb:04:19:ed:2c:51:f7:6d: 8b:77:77:d3:3f:7f:2e:b1:c0:7a:ac:27:4c:f0:24: ff:5d:18:e4:8e:4d:92:76:f7:b4:eb:27:50:fb:95: 77:5f:4a:61:b8:04:cd:ac:7b:9e:65:d8:25:fc:f9: 65:85:2b:60:70:3f:e2:46:15:b8:60:7e:42:ba:6c: 77:cf:f2:d9:9f:cf:56:6e:a6:fe:2c:61:94:36:6c: c8:02:ab:52:66:4a:f6:bb:42:a9:3f:6a:f3:22:b8: bb:71:1f:d9:10:39:db:2f:28:b6:c9:af:f3:27:a6: 1d:21:66:37:80:72:f9:9a:a4:ba:65:a4:1a:22:31: 94:20:51:0f:e9:58:74:21:22:68:fe:e3:f0:88:fb: fc:e9:7f:d9:74:b7:96:67:ce:a4:76:06:59:61:7d: b1:8b:3d:79:d4:88:44:76:38:82:9d:1b:af:5b:db: ba:56:47:42:7b:36:4c:23:99:c6:ba:71:f0:96:b0: 48:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D4:8C:AD:4B:04:8A:AC:CB:F3:DB:BC:85:59:17:06:C2:31:9E:45 X509v3 Authority Key Identifier: keyid:C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b2:06:c7:56:2f:ef:fb:03:84:b8:f9:31:bd:30:a4:bb:f0: ff:68:b7:01:75:16:cd:2f:70:d8:80:61:2b:06:42:e9:f7:43: 40:48:26:61:9d:2a:92:7d:b6:b4:5b:5c:c7:75:13:ba:f3:ac: ce:73:1b:a3:93:8b:13:a9:84:92:41:2c:7a:bf:a4:f5:dd:ce: 9e:04:77:1f:e3:1f:13:73:d0:08:e1:d8:83:8c:63:98:b0:3d: fc:7e:59:36:17:a6:17:67:d6:dc:8d:e2:03:31:fc:08:dc:c5: f9:24:ec:3b:93:9b:0b:1a:1b:f4:27:00:fd:2d:7d:eb:2c:18: 3e:44:4b:6a:49:9c:fb:9f:c4:20:a2:0a:b4:0c:01:a7:03:08: b2:e7:f8:fb:47:84:f4:ee:d3:4d:6b:15:c6:6d:97:cb:fe:c2: 1e:e7:b5:ed:52:46:81:69:0c:2e:6e:f6:15:e2:00:cb:52:4d: 44:f2:17:77:65:da:51:ca:25:fc:9e:40:a3:61:fe:69:96:24: 40:42:86:ce:ca:da:9c:8d:b6:09:d7:d6:53:05:12:91:41:4f: a3:a5:da:e2:bc:a2:eb:4a:0d:86:dd:e8:7e:0e:50:35:40:78: 3f:67:47:b4:0d:3a:8b:97:12:ec:2c:4c:59:4e:17:80:ca:bd: 5e:8a:de:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs866NknSdyopP7g/r/PdGuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNGJkZmY4OGU4ZTg5ODk4NzFlMTM0MDgxMTFhZDE0MzNi MzBjNjMwHhcNMjUxMjIwMTgwMDM0WhcNMjUxMjIxMTgwMDM0WjAzMTEwLwYDVQQD EygxZGQ0OGNhZDRiMDQ4YWFjY2JmM2RiYmM4NTU5MTcwNmMyMzE5ZTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7exgpXU3jI+WtLAm1qqXDwmTn9w K0/XiE19mJaWP/w1QIcoq+C1YgFRCx07ZR8RDA+SkFLESr78XGIUrBUEdvQqywQZ 7SxR922Ld3fTP38uscB6rCdM8CT/XRjkjk2Sdve06ydQ+5V3X0phuATNrHueZdgl /PllhStgcD/iRhW4YH5Cumx3z/LZn89Wbqb+LGGUNmzIAqtSZkr2u0KpP2rzIri7 cR/ZEDnbLyi2ya/zJ6YdIWY3gHL5mqS6ZaQaIjGUIFEP6Vh0ISJo/uPwiPv86X/Z dLeWZ86kdgZZYX2xiz151IhEdjiCnRuvW9u6VkdCezZMI5nGunHwlrBIWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3UjK1LBIqsy/PbvIVZFwbCMZ5FMB8GA1UdIwQY MBaAFMNL3/iOjomJhx4TQIERrRQzswxjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzB2Zi1JNk9pWW1ISGhOQWdSR3RGRE96REdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84MjQ3YTYtMmIxMi00ODNmLWIxYWMt NmFjMWQxNTU1NGFiLzEvdzB2Zi1JNk9pWW1ISGhOQWdSR3RGRE96REdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi84MjQ3YTYtMmIxMi00ODNmLWIxYWMtNmFjMWQxNTU1NGFi LzEvdzB2Zi1JNk9pWW1ISGhOQWdSR3RGRE96REdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLIGx1Yv 7/sDhLj5Mb0wpLvw/2i3AXUWzS9w2IBhKwZC6fdDQEgmYZ0qkn22tFtcx3UTuvOs znMbo5OLE6mEkkEser+k9d3OngR3H+MfE3PQCOHYg4xjmLA9/H5ZNhemF2fW3I3i AzH8CNzF+STsO5ObCxob9CcA/S196ywYPkRLakmc+5/EIKIKtAwBpwMIsuf4+0eE 9O7TTWsVxm2Xy/7CHue17VJGgWkMLm72FeIAy1JNRPIXd2XaUcol/J5Ao2H+aZYk QEKGzsranI22CdfWUwUSkUFPo6Xa4ryi60oNht3ofg5QNUB4P2dHtA06i5cS7CxM WU4XgMq9XoreWQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:05:23 2025 by rpki-client