This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft File: wv6ZPR8xDoFzwXzpJ48en44i48I.mft (raw, json) Hash identifier: fkZFcyRpY08uq4h6qABCChzLTsA97nkgM1Jd47OYUbE= Subject key identifier: 90:8D:DD:AF:11:59:D7:04:A0:98:42:23:15:1E:6E:F7:C1:CD:1B:70 Authority key identifier: C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2 Certificate issuer: /CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2 Certificate serial: 019B3C7E2DE6D2B63C31E380101EE73B3F10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 16:01:00 +0000 Manifest this update: Sat 20 Dec 2025 16:01:00 +0000 Manifest next update: Sun 21 Dec 2025 16:01:00 +0000 Files and hashes: 1: Mp1fGdgDn3PJKQzmX0OXaKwztw8.roa (hash: r365CtsIuSw4zwNKBRELvDJ1xes0I/H0wB5Xk0xJ+cE=) 2: wv6ZPR8xDoFzwXzpJ48en44i48I.crl (hash: odby2OIlJn6WHmww75/CnGKBBdk39MomTXc4tN07Psg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:2d:e6:d2:b6:3c:31:e3:80:10:1e:e7:3b:3f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2 Validity Not Before: Dec 20 16:01:00 2025 GMT Not After : Dec 21 16:01:00 2025 GMT Subject: CN=908dddaf1159d704a0984223151e6ef7c1cd1b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:53:b6:ff:95:8c:77:1f:0f:8c:3e:39:36:de: b2:4f:df:96:dd:28:b9:6a:3e:fc:41:ce:65:45:84: 33:49:bd:ae:c5:47:01:6c:2f:94:6f:4f:66:ae:da: 4a:f9:04:12:be:8d:e8:7c:04:d2:f6:2c:49:06:4d: b3:b8:90:2f:d0:d0:5e:5c:32:11:cc:19:93:e0:87: 10:c3:7d:b7:ee:0a:b0:93:2e:5f:06:80:19:09:83: 18:53:c0:ab:2f:a1:05:cc:63:cd:bc:18:fe:bb:11: ea:fe:0f:3a:5b:11:03:88:db:28:db:f6:83:e1:c7: bd:54:4d:27:0f:23:7c:d4:90:e4:47:74:89:6b:68: b9:7f:5e:30:6e:12:12:2c:a0:c1:9c:47:11:98:3d: c5:ea:7f:f7:06:d7:be:4d:39:9e:62:60:39:f5:bd: ba:42:30:b6:af:5c:d9:1c:a8:82:5b:06:3b:f9:a4: 96:ca:3a:d5:39:c7:53:87:43:00:0f:ad:08:cf:b6: 19:41:98:fe:b9:14:c2:02:50:40:61:1f:a7:b7:16: 6e:00:8f:db:9c:20:fc:7b:74:6b:86:b0:9b:f0:89: 11:1e:ce:f1:a9:61:db:be:9a:7d:c4:af:72:5b:2e: 3e:aa:11:03:d5:16:c9:96:3d:59:05:44:d9:15:4c: 5b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8D:DD:AF:11:59:D7:04:A0:98:42:23:15:1E:6E:F7:C1:CD:1B:70 X509v3 Authority Key Identifier: keyid:C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:27:be:8c:72:14:04:31:0f:f9:56:e0:83:1d:f6:47:59:f4: 75:af:18:98:77:9b:a1:c9:5a:26:97:fa:4c:9c:e8:1b:8e:ec: 74:3c:df:73:c2:e2:4f:a4:3a:78:42:b7:ee:80:f7:19:42:d3: a2:fc:89:4c:d0:d7:87:1d:48:0a:3e:07:ef:ca:38:45:3d:5a: 1b:85:47:24:94:2b:79:f8:99:d1:fc:7b:de:61:fa:d5:00:09: dc:8d:3a:f7:e2:f8:97:90:e3:43:dd:10:a3:4a:fd:b9:4f:ce: 2e:9c:36:d9:24:f3:66:ba:74:aa:31:5c:71:a6:6a:a2:4f:e9: ad:ad:61:23:e4:d7:88:7d:2c:48:f2:9a:83:5b:20:38:1b:bd: 15:19:ea:ee:5e:58:42:ab:0a:6c:ec:71:0a:69:cc:ef:28:02: 6b:4c:17:50:34:a0:0a:0c:f3:b2:a8:5c:8d:68:4f:28:c3:51: bc:e4:77:6e:52:6e:11:e5:3e:3f:a3:d9:e2:0b:c9:6b:bf:e8: 57:19:d0:d8:77:c8:b9:97:fe:0e:6d:49:56:f4:53:63:04:d5: ab:dd:09:08:87:4a:51:d8:bd:d0:09:c2:b7:3d:2f:7f:c0:24: e2:38:9e:dd:d6:9d:ea:8e:df:e7:0b:62:8f:7b:77:d3:1e:c3: a6:e0:ad:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fi3m0rY8MeOAEB7nOz8QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZmU5OTNkMWYzMTBlODE3M2MxN2NlOTI3OGYxZTlmOGUy MmUzYzIwHhcNMjUxMjIwMTYwMTAwWhcNMjUxMjIxMTYwMTAwWjAzMTEwLwYDVQQD Eyg5MDhkZGRhZjExNTlkNzA0YTA5ODQyMjMxNTFlNmVmN2MxY2QxYjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVO2/5WMdx8PjD45Nt6yT9+W3Si5 aj78Qc5lRYQzSb2uxUcBbC+Ub09mrtpK+QQSvo3ofATS9ixJBk2zuJAv0NBeXDIR zBmT4IcQw3237gqwky5fBoAZCYMYU8CrL6EFzGPNvBj+uxHq/g86WxEDiNso2/aD 4ce9VE0nDyN81JDkR3SJa2i5f14wbhISLKDBnEcRmD3F6n/3Bte+TTmeYmA59b26 QjC2r1zZHKiCWwY7+aSWyjrVOcdTh0MAD60Iz7YZQZj+uRTCAlBAYR+ntxZuAI/b nCD8e3RrhrCb8IkRHs7xqWHbvpp9xK9yWy4+qhED1RbJlj1ZBUTZFUxbyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCN3a8RWdcEoJhCIxUebvfBzRtwMB8GA1UdIwQY MBaAFML+mT0fMQ6Bc8F86SePHp+OIuPCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3Y2WlBSOHhEb0Z6d1h6cEo0OGVuNDRpNDhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNTMxMmItODQzOS00YmI0LTg2ZDIt NjliNDMyNzk5MzcyLzEvd3Y2WlBSOHhEb0Z6d1h6cEo0OGVuNDRpNDhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lNTMxMmItODQzOS00YmI0LTg2ZDItNjliNDMyNzk5Mzcy LzEvd3Y2WlBSOHhEb0Z6d1h6cEo0OGVuNDRpNDhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcye+jHIU BDEP+Vbggx32R1n0da8YmHeboclaJpf6TJzoG47sdDzfc8LiT6Q6eEK37oD3GULT ovyJTNDXhx1ICj4H78o4RT1aG4VHJJQrefiZ0fx73mH61QAJ3I069+L4l5DjQ90Q o0r9uU/OLpw22STzZrp0qjFccaZqok/pra1hI+TXiH0sSPKag1sgOBu9FRnq7l5Y QqsKbOxxCmnM7ygCa0wXUDSgCgzzsqhcjWhPKMNRvOR3blJuEeU+P6PZ4gvJa7/o VxnQ2HfIuZf+Dm1JVvRTYwTVq90JCIdKUdi90AnCtz0vf8Ak4jie3dad6o7f5wti j3t30x7DpuCtZw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:09:20 2025 by rpki-client