This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft File: wZXJC6JdDegZV1eMeMt7JOjJPsk.mft (raw, json) Hash identifier: Pg+E7r1vO3KAJj6HiDi4iX+G5aZwf30Np2CXPIKCabA= Subject key identifier: C0:35:79:E6:E8:03:9E:0C:22:69:8E:32:54:2B:5A:FD:58:A4:30:8D Authority key identifier: C1:95:C9:0B:A2:5D:0D:E8:19:57:57:8C:78:CB:7B:24:E8:C9:3E:C9 Certificate issuer: /CN=c195c90ba25d0de81957578c78cb7b24e8c93ec9 Certificate serial: 019B4249288A016F08B670586435B6089039 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft Manifest number: 02A7 Signing time: Sun 21 Dec 2025 19:00:49 +0000 Manifest this update: Sun 21 Dec 2025 19:00:49 +0000 Manifest next update: Mon 22 Dec 2025 19:00:49 +0000 Files and hashes: 1: wZXJC6JdDegZV1eMeMt7JOjJPsk.crl (hash: r8ky/b3gSPf48XHF709izcu7NSizBRE4L3s6zIuZfg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:28:8a:01:6f:08:b6:70:58:64:35:b6:08:90:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c195c90ba25d0de81957578c78cb7b24e8c93ec9 Validity Not Before: Dec 21 19:00:49 2025 GMT Not After : Dec 22 19:00:49 2025 GMT Subject: CN=c03579e6e8039e0c22698e32542b5afd58a4308d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:02:2d:db:7a:7b:29:aa:09:b5:58:70:96:7a: 43:a3:c6:8c:0b:37:4d:92:4e:0d:2d:3a:a8:a7:7b: c2:c9:c0:19:a3:95:ce:a4:7a:b5:8c:7e:36:42:60: 57:cc:5d:44:bc:43:ae:1c:fa:09:30:44:f3:51:fa: 26:24:10:69:1a:ab:fe:dd:7e:75:bf:66:80:0d:1d: b7:ef:5d:c2:d6:1a:60:7d:39:47:6f:83:cd:d1:0c: 36:c0:c6:f8:e7:8b:a2:7a:7e:91:89:42:15:33:8e: 43:b8:3c:0d:98:74:49:b0:60:bb:fa:ae:1d:54:30: 95:12:29:b3:ac:a7:4a:f4:ae:97:52:15:42:7c:91: 82:fc:be:9e:7d:b0:e2:4e:d3:ea:3d:dd:2b:56:58: 97:39:e6:f5:32:65:0b:92:9b:5f:37:b5:56:8a:dc: 7e:51:d2:27:fc:17:a1:8e:b3:12:fc:d3:d5:60:aa: c7:2d:82:b4:ae:d5:97:42:c6:4b:44:d2:42:43:88: 2d:aa:b1:be:f5:66:19:b0:de:6c:e1:5f:83:c0:06: 8d:3f:d3:ff:be:ee:67:a4:53:f0:4b:49:14:de:69: cb:f0:08:f7:46:75:8f:7f:fb:cb:48:32:3f:e2:3b: 3c:06:0c:d8:8c:a8:5d:60:57:a6:91:86:7b:bf:11: 42:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:35:79:E6:E8:03:9E:0C:22:69:8E:32:54:2B:5A:FD:58:A4:30:8D X509v3 Authority Key Identifier: keyid:C1:95:C9:0B:A2:5D:0D:E8:19:57:57:8C:78:CB:7B:24:E8:C9:3E:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:e4:19:13:b5:e3:3e:6c:16:26:c7:d9:a4:c7:93:82:4b:0f: 12:64:d2:dd:80:71:3f:9f:09:72:19:10:d5:34:c1:04:ac:c9: d4:3d:22:15:a0:1c:1a:85:ad:e3:6e:7c:e1:ab:ae:2a:d7:a2: b5:8f:e0:ed:be:fa:78:f4:02:d9:41:9d:a9:6f:be:35:2f:2c: 80:2c:68:f5:01:21:90:4d:1b:fc:f5:68:93:18:eb:97:37:4f: 75:6a:32:ad:77:4b:91:76:60:75:d1:b3:72:57:c5:50:54:04: d9:89:41:66:33:5d:58:08:47:e8:88:7b:b1:a0:8b:45:4d:80: ef:a1:4f:34:45:48:f4:4d:3b:73:ca:3c:1b:cb:5e:a7:24:89: b0:51:c5:d7:66:0c:27:85:5e:11:08:e6:63:3d:78:19:16:3c: 3e:44:9f:a4:1f:4e:36:5e:eb:d8:b1:9d:5e:8f:86:9b:32:f5: f1:25:0c:91:bc:44:ea:17:70:40:7c:18:7f:42:fc:25:b4:2c: 1e:db:bf:67:e6:e8:cd:98:3e:22:ce:38:8a:cd:53:59:af:1c: 8e:89:58:8f:0f:27:9c:a8:1b:16:81:34:d7:62:7e:d7:20:bc: 1e:42:40:13:09:15:b5:37:7c:f5:a6:d8:2c:09:01:c6:12:37: f7:09:19:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSSiKAW8ItnBYZDW2CJA5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxOTVjOTBiYTI1ZDBkZTgxOTU3NTc4Yzc4Y2I3YjI0ZThj OTNlYzkwHhcNMjUxMjIxMTkwMDQ5WhcNMjUxMjIyMTkwMDQ5WjAzMTEwLwYDVQQD EyhjMDM1NzllNmU4MDM5ZTBjMjI2OThlMzI1NDJiNWFmZDU4YTQzMDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAIt23p7KaoJtVhwlnpDo8aMCzdN kk4NLTqop3vCycAZo5XOpHq1jH42QmBXzF1EvEOuHPoJMETzUfomJBBpGqv+3X51 v2aADR23713C1hpgfTlHb4PN0Qw2wMb454uien6RiUIVM45DuDwNmHRJsGC7+q4d VDCVEimzrKdK9K6XUhVCfJGC/L6efbDiTtPqPd0rVliXOeb1MmULkptfN7VWitx+ UdIn/BehjrMS/NPVYKrHLYK0rtWXQsZLRNJCQ4gtqrG+9WYZsN5s4V+DwAaNP9P/ vu5npFPwS0kU3mnL8Aj3RnWPf/vLSDI/4js8BgzYjKhdYFemkYZ7vxFCiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMA1eeboA54MImmOMlQrWv1YpDCNMB8GA1UdIwQY MBaAFMGVyQuiXQ3oGVdXjHjLeyToyT7JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1pYSkM2SmREZWdaVjFlTWVNdDdKT2pKUHNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85YzY0ZTItNGI2NC00M2RhLWI5MDQt MTBiOTA3ZmZkMDhmLzEvd1pYSkM2SmREZWdaVjFlTWVNdDdKT2pKUHNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85YzY0ZTItNGI2NC00M2RhLWI5MDQtMTBiOTA3ZmZkMDhm LzEvd1pYSkM2SmREZWdaVjFlTWVNdDdKT2pKUHNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+QZE7Xj PmwWJsfZpMeTgksPEmTS3YBxP58JchkQ1TTBBKzJ1D0iFaAcGoWt42584auuKtei tY/g7b76ePQC2UGdqW++NS8sgCxo9QEhkE0b/PVokxjrlzdPdWoyrXdLkXZgddGz clfFUFQE2YlBZjNdWAhH6Ih7saCLRU2A76FPNEVI9E07c8o8G8tepySJsFHF12YM J4VeEQjmYz14GRY8PkSfpB9ONl7r2LGdXo+GmzL18SUMkbxE6hdwQHwYf0L8JbQs Htu/Z+bozZg+Is44is1TWa8cjolYjw8nnKgbFoE012J+1yC8HkJAEwkVtTd89abY LAkBxhI39wkZAw== -----END CERTIFICATE-----Generated at Sun Dec 21 22:27:17 2025 by rpki-client