This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft File: wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft (raw, json) Hash identifier: 0K3nnRciohNY/Cx/Od2tKXUjdj1y3x3xKwjQHa0+6E4= Subject key identifier: CD:C0:A1:7A:7A:A3:56:35:87:B3:DA:A8:6B:3B:85:31:DF:0C:EC:C7 Authority key identifier: C0:37:95:80:83:B6:41:B7:73:12:3C:EA:DA:7B:EF:27:55:8E:59:40 Certificate issuer: /CN=c037958083b641b773123ceada7bef27558e5940 Certificate serial: 019B5C08F195EC1E7CD2FD87E105505564C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 19:00:48 +0000 Manifest this update: Fri 26 Dec 2025 19:00:48 +0000 Manifest next update: Sat 27 Dec 2025 19:00:48 +0000 Files and hashes: 1: G04lQHkrBdpuXzaWHZ8TU8JabhU.roa (hash: Pf3n2aY4cgJyph0KOBPCn/jMgorMxrNstlYjIBjVB/Q=) 2: wDeVgIO2QbdzEjzq2nvvJ1WOWUA.crl (hash: W9icDfYVvPoW+HdXHwb7Llje+0OtwYpikUneAAkwRNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft rsync://rpki.ripe.net/repository/DEFAULT/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 19:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:08:f1:95:ec:1e:7c:d2:fd:87:e1:05:50:55:64:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c037958083b641b773123ceada7bef27558e5940 Validity Not Before: Dec 26 19:00:48 2025 GMT Not After : Dec 27 19:00:48 2025 GMT Subject: CN=cdc0a17a7aa3563587b3daa86b3b8531df0cecc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:57:7b:18:1f:f3:50:af:93:4e:93:00:cc:f9: 15:cc:9f:b0:e0:16:e6:ba:4f:8a:38:ed:fe:a2:63: 4b:71:77:c5:c0:21:43:5c:e1:22:5b:27:0d:fb:ec: 71:f6:bb:71:4c:b2:dc:df:77:cf:6e:aa:dc:b5:00: c7:46:e3:e0:b9:08:11:a2:57:16:b7:2a:e8:0f:60: 3c:22:3c:80:43:62:8b:24:c9:2f:98:81:39:8e:ac: ee:bc:84:24:9f:ba:56:fe:89:8f:01:63:84:5c:63: 27:73:71:ae:36:0a:fb:cd:9a:94:ab:06:14:2e:27: 7e:bd:54:ed:dc:bc:49:7b:8d:f9:b5:00:f3:8f:5f: 8b:04:5e:a3:8a:ca:58:78:76:e9:17:67:1e:7c:ef: 6a:2d:fe:3d:8a:2e:6f:14:7f:5a:5f:a4:53:72:fa: 06:ac:73:cd:24:d4:1b:b9:af:8b:13:9a:a5:b3:a4: 79:81:be:42:4c:49:8a:fd:2a:28:85:89:6a:84:2f: 6c:df:ff:76:7d:85:1b:cd:2f:c6:36:43:70:c9:3f: 64:8f:9b:41:e3:5b:ac:0c:12:2d:14:0a:10:cb:20: 14:2e:2c:60:2b:2c:12:34:7a:e9:38:79:81:a8:b3: 33:69:54:2c:72:91:5c:a0:5a:7a:7e:57:29:e2:f4: 2c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C0:A1:7A:7A:A3:56:35:87:B3:DA:A8:6B:3B:85:31:DF:0C:EC:C7 X509v3 Authority Key Identifier: keyid:C0:37:95:80:83:B6:41:B7:73:12:3C:EA:DA:7B:EF:27:55:8E:59:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:80:cc:a5:08:69:23:81:90:37:e5:a4:1c:90:32:fa:a2:46: 34:20:5e:00:c6:c3:28:3c:40:cd:47:70:8a:6b:a9:a1:b4:4f: 3e:df:a7:28:14:84:9f:5d:98:24:c9:65:cb:17:cb:f7:73:10: e7:3a:fb:b7:de:d6:05:10:b0:d7:e8:5c:ec:a7:cd:73:60:bc: 37:38:2d:a3:68:1b:22:e5:9d:1c:43:d9:70:2f:45:25:c1:00: 47:f8:c0:5f:e1:df:be:b2:d1:72:21:c4:40:c8:69:35:d7:a6: 76:2a:af:c5:ff:be:5b:87:12:91:80:78:02:f3:b5:75:c5:80: 1f:d4:16:a8:a8:24:6e:4a:3e:84:dd:88:3f:d2:2b:a7:e7:a2: 47:44:4c:1c:19:2b:1d:c7:e8:d9:a1:91:8a:6f:74:1f:3b:9b: 58:a3:35:4e:f2:64:c0:f3:e3:70:06:21:03:25:ca:bb:43:c5: df:5d:22:05:1e:9a:95:f8:12:6c:61:92:78:f9:94:a8:a3:4a: 49:35:0e:b9:65:a1:4c:1f:e5:dd:92:92:ea:48:5b:51:78:91: 7d:3e:38:4e:ec:a0:d7:ff:e8:0b:02:a8:39:e8:83:90:3f:45: eb:37:dd:0d:6a:ac:71:00:15:ad:0f:d8:1e:b7:f0:df:17:b1: 1a:7b:1b:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCPGV7B580v2H4QVQVWTGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMzc5NTgwODNiNjQxYjc3MzEyM2NlYWRhN2JlZjI3NTU4 ZTU5NDAwHhcNMjUxMjI2MTkwMDQ4WhcNMjUxMjI3MTkwMDQ4WjAzMTEwLwYDVQQD EyhjZGMwYTE3YTdhYTM1NjM1ODdiM2RhYTg2YjNiODUzMWRmMGNlY2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1d7GB/zUK+TTpMAzPkVzJ+w4Bbm uk+KOO3+omNLcXfFwCFDXOEiWycN++xx9rtxTLLc33fPbqrctQDHRuPguQgRolcW tyroD2A8IjyAQ2KLJMkvmIE5jqzuvIQkn7pW/omPAWOEXGMnc3GuNgr7zZqUqwYU Lid+vVTt3LxJe435tQDzj1+LBF6jispYeHbpF2cefO9qLf49ii5vFH9aX6RTcvoG rHPNJNQbua+LE5qls6R5gb5CTEmK/SoohYlqhC9s3/92fYUbzS/GNkNwyT9kj5tB 41usDBItFAoQyyAULixgKywSNHrpOHmBqLMzaVQscpFcoFp6flcp4vQsRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3AoXp6o1Y1h7PaqGs7hTHfDOzHMB8GA1UdIwQY MBaAFMA3lYCDtkG3cxI86tp77ydVjllAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0RlVmdJTzJRYmR6RWp6cTJudnZKMVdPV1VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wN2NkYWEtOTlmZi00NDFlLTgwNTAt YjJkMmEyZjBjNzgyLzEvd0RlVmdJTzJRYmR6RWp6cTJudnZKMVdPV1VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wN2NkYWEtOTlmZi00NDFlLTgwNTAtYjJkMmEyZjBjNzgy LzEvd0RlVmdJTzJRYmR6RWp6cTJudnZKMVdPV1VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYoDMpQhp I4GQN+WkHJAy+qJGNCBeAMbDKDxAzUdwimupobRPPt+nKBSEn12YJMllyxfL93MQ 5zr7t97WBRCw1+hc7KfNc2C8Nzgto2gbIuWdHEPZcC9FJcEAR/jAX+HfvrLRciHE QMhpNdemdiqvxf++W4cSkYB4AvO1dcWAH9QWqKgkbko+hN2IP9Irp+eiR0RMHBkr Hcfo2aGRim90HzubWKM1TvJkwPPjcAYhAyXKu0PF310iBR6alfgSbGGSePmUqKNK STUOuWWhTB/l3ZKS6khbUXiRfT44Tuyg1//oCwKoOeiDkD9F6zfdDWqscQAVrQ/Y Hrfw3xexGnsb0w== -----END CERTIFICATE-----Generated at Sat Dec 27 02:16:32 2025 by rpki-client