This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft File: wg8AjBzMpi5vw1bWNCBVpifcbPI.mft (raw, json) Hash identifier: PsBvc0c6wEhdsSqiU94ou1cymR+eW8ntxAY3OIXQ51I= Subject key identifier: 39:AE:EA:0E:4C:FA:F3:06:9B:F5:65:43:17:FD:03:E8:B6:52:F3:A4 Authority key identifier: C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2 Certificate issuer: /CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2 Certificate serial: 019B3EA3856CAF1F1D1A256DE36460A848D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft Manifest number: 057C Signing time: Sun 21 Dec 2025 02:01:02 +0000 Manifest this update: Sun 21 Dec 2025 02:01:02 +0000 Manifest next update: Mon 22 Dec 2025 02:01:02 +0000 Files and hashes: 1: daVp811knSp1vAQ4VaSwB16wNuQ.roa (hash: iy8xMmMHNxJK9Q7iUdfrNXSZrKuA7PPo2zxoT8FZYdE=) 2: wg8AjBzMpi5vw1bWNCBVpifcbPI.crl (hash: XhK8SAJ18T+YUawgn7JsPrNO05c4oRiSKgrWiXtxrc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:85:6c:af:1f:1d:1a:25:6d:e3:64:60:a8:48:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2 Validity Not Before: Dec 21 02:01:02 2025 GMT Not After : Dec 22 02:01:02 2025 GMT Subject: CN=39aeea0e4cfaf3069bf5654317fd03e8b652f3a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ff:bb:78:40:b6:8e:4e:b4:de:32:f3:38:14: 0f:c5:e8:a8:11:50:33:ac:b3:03:aa:57:9c:71:ff: ac:c3:04:a7:2f:bd:8b:60:fa:f1:45:b0:46:7d:dd: 04:cc:d8:3f:85:36:b3:71:1d:17:42:3f:53:ed:a7: 56:8e:6f:0b:8b:1f:85:af:d7:ec:2b:82:ce:66:3b: 09:f6:87:32:3f:5e:75:60:07:eb:60:d9:11:2a:dc: 0e:6a:a7:1e:2f:38:c9:10:56:4a:38:6d:f5:d7:d6: 98:74:6b:99:a2:95:60:6d:5d:b0:5d:90:06:23:e5: 9e:ed:a1:8b:20:76:cd:74:f9:65:ca:a6:71:32:85: a5:ea:04:bc:94:d1:89:16:fc:0a:9b:92:98:bd:64: 61:65:5c:a6:56:59:87:e3:dc:2e:76:d4:d3:a4:0b: 3a:12:bc:42:84:c4:32:a4:6c:f4:f6:00:62:81:98: 48:d3:d7:a5:92:e4:c0:fb:84:bf:1d:ae:72:00:d4: b2:50:f9:d7:7e:9c:dd:98:13:7f:f6:3a:ff:87:83: 98:9e:a1:01:ba:10:0f:8b:9c:39:49:18:9f:29:15: 09:d7:ce:af:e5:7c:fb:94:4d:46:70:7f:2f:26:73: 42:53:7d:1a:39:cb:ca:5f:ba:11:be:be:ee:de:da: 20:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AE:EA:0E:4C:FA:F3:06:9B:F5:65:43:17:FD:03:E8:B6:52:F3:A4 X509v3 Authority Key Identifier: keyid:C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:71:78:02:bf:78:0e:13:f7:7a:70:af:93:96:e8:52:77:4c: 0d:28:09:0c:92:fc:96:0b:c0:db:85:56:b0:00:ae:05:42:88: fe:9e:29:63:b5:bc:f2:6b:97:93:90:0a:cb:5c:2e:7d:8b:57: c1:4e:b6:20:eb:8e:11:b0:ee:3d:86:59:d9:9a:90:ef:48:4a: be:7e:6c:47:a2:e0:5c:08:e2:ad:54:e9:d4:9b:1c:89:3c:ff: 46:7b:e3:33:00:e3:cb:c7:e1:3b:6a:6f:fa:fb:ca:bc:a9:2c: b2:c7:d3:2e:24:4a:10:12:19:83:00:a1:ab:7f:6b:c2:9b:c1: a8:09:79:d9:e5:97:56:65:2b:e8:35:5d:ed:c9:e3:01:de:ce: ac:95:5c:1c:8c:cb:ee:43:19:db:42:c4:43:3e:fc:ca:c8:c4: 5a:0b:89:bf:10:ab:b9:d5:4b:66:86:b7:c4:6c:c2:11:c0:f8: 3c:94:f2:d0:c1:b5:ac:3f:c9:2a:0c:24:28:01:d7:86:53:24: f3:4f:4a:2a:c7:3f:b8:dc:66:a5:6d:8e:da:69:7c:9a:0d:14: 0a:d1:d6:e8:ad:b8:1f:1a:1c:21:80:dc:0a:54:94:fd:74:ce: f4:2f:48:3b:d2:84:51:bb:b5:a7:b8:04:f8:62:37:54:af:12: 17:af:b8:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o4Vsrx8dGiVt42RgqEjSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMGYwMDhjMWNjY2E2MmU2ZmMzNTZkNjM0MjA1NWE2Mjdk YzZjZjIwHhcNMjUxMjIxMDIwMTAyWhcNMjUxMjIyMDIwMTAyWjAzMTEwLwYDVQQD EygzOWFlZWEwZTRjZmFmMzA2OWJmNTY1NDMxN2ZkMDNlOGI2NTJmM2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/+7eEC2jk603jLzOBQPxeioEVAz rLMDqleccf+swwSnL72LYPrxRbBGfd0EzNg/hTazcR0XQj9T7adWjm8Lix+Fr9fs K4LOZjsJ9ocyP151YAfrYNkRKtwOaqceLzjJEFZKOG3119aYdGuZopVgbV2wXZAG I+We7aGLIHbNdPllyqZxMoWl6gS8lNGJFvwKm5KYvWRhZVymVlmH49wudtTTpAs6 ErxChMQypGz09gBigZhI09elkuTA+4S/Ha5yANSyUPnXfpzdmBN/9jr/h4OYnqEB uhAPi5w5SRifKRUJ186v5Xz7lE1GcH8vJnNCU30aOcvKX7oRvr7u3tognwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmu6g5M+vMGm/VlQxf9A+i2UvOkMB8GA1UdIwQY MBaAFMIPAIwczKYub8NW1jQgVaYn3GzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2c4QWpCek1waTV2dzFiV05DQlZwaWZjYlBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81ODBlNTEtNGMwZC00MTYyLWE5YWUt N2Q3ZmNlNWRiMDVjLzEvd2c4QWpCek1waTV2dzFiV05DQlZwaWZjYlBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS81ODBlNTEtNGMwZC00MTYyLWE5YWUtN2Q3ZmNlNWRiMDVj LzEvd2c4QWpCek1waTV2dzFiV05DQlZwaWZjYlBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnF4Ar94 DhP3enCvk5boUndMDSgJDJL8lgvA24VWsACuBUKI/p4pY7W88muXk5AKy1wufYtX wU62IOuOEbDuPYZZ2ZqQ70hKvn5sR6LgXAjirVTp1JsciTz/RnvjMwDjy8fhO2pv +vvKvKksssfTLiRKEBIZgwChq39rwpvBqAl52eWXVmUr6DVd7cnjAd7OrJVcHIzL 7kMZ20LEQz78ysjEWguJvxCrudVLZoa3xGzCEcD4PJTy0MG1rD/JKgwkKAHXhlMk 809KKsc/uNxmpW2O2ml8mg0UCtHW6K24HxocIYDcClSU/XTO9C9IO9KEUbu1p7gE +GI3VK8SF6+4XQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:28:11 2025 by rpki-client