This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft File: wv6ZPR8xDoFzwXzpJ48en44i48I.mft (raw, json) Hash identifier: HkwzsmQwqWsgghhi2+c2wv7nQdnzcaRTh4RzDfUMt7Y= Subject key identifier: EB:A0:95:26:35:64:16:21:C7:D0:FF:81:F8:69:CC:2B:9B:8D:02:FF Authority key identifier: C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2 Certificate issuer: /CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2 Certificate serial: 019B747F6EBAB35577A83A666FA74C0FB628 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft Manifest number: 17A4 Signing time: Wed 31 Dec 2025 13:01:06 +0000 Manifest this update: Wed 31 Dec 2025 13:01:06 +0000 Manifest next update: Thu 01 Jan 2026 13:01:06 +0000 Files and hashes: 1: Mp1fGdgDn3PJKQzmX0OXaKwztw8.roa (hash: r365CtsIuSw4zwNKBRELvDJ1xes0I/H0wB5Xk0xJ+cE=) 2: wv6ZPR8xDoFzwXzpJ48en44i48I.crl (hash: ju9gG785bNikc4ExVhfQtu+IH71D16Yj1ze0SrtcLOQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:7f:6e:ba:b3:55:77:a8:3a:66:6f:a7:4c:0f:b6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2 Validity Not Before: Dec 31 13:01:06 2025 GMT Not After : Jan 1 13:01:06 2026 GMT Subject: CN=eba0952635641621c7d0ff81f869cc2b9b8d02ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d7:96:2b:21:68:d7:ec:ea:4e:06:fc:9b:d9: 16:df:8d:e0:c4:17:a9:d6:a9:4f:c4:c8:f6:5a:5b: 83:88:98:bf:23:91:83:f4:65:24:3b:a7:4e:92:6f: b7:ac:ee:5f:a5:7c:b7:81:0c:5c:d2:a3:82:8c:3c: a2:f1:15:94:c7:e9:ef:ff:e0:14:e3:dd:89:43:81: a8:c2:9a:19:85:0b:ab:44:96:3d:10:ff:26:7d:07: e8:31:70:ec:5e:a0:bf:4f:97:ce:7c:5e:ba:e0:21: c0:de:3f:fd:ec:0f:b0:a4:6a:c6:e3:40:8c:f5:51: d8:9c:cb:a5:fc:85:f7:ae:a3:fe:1e:f6:9d:b8:e9: 81:e1:58:fa:84:fc:78:0d:ed:f0:2c:25:58:de:97: 5d:9e:a9:f6:c6:84:c3:7b:99:72:20:be:99:d3:ad: 06:9a:ef:a9:23:53:83:30:72:3a:28:d9:34:89:99: 57:b9:ed:f5:d8:e2:9f:9b:a4:64:c3:71:d7:17:d3: 72:65:f3:d8:56:ba:73:21:a8:b2:79:1c:cc:5a:80: 27:71:39:f3:ac:c8:3f:22:52:fb:f8:aa:0d:2f:69: ba:66:6c:fc:08:40:ce:69:bd:38:5c:a1:84:42:28: 46:18:01:3b:ee:ad:fb:8b:fa:7b:90:63:3f:03:c5: 1c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A0:95:26:35:64:16:21:C7:D0:FF:81:F8:69:CC:2B:9B:8D:02:FF X509v3 Authority Key Identifier: keyid:C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:2f:e1:b3:bc:e5:93:73:7e:87:23:ae:be:0c:8b:d5:73:b8: f0:ab:7a:58:b0:84:00:fc:de:22:e3:ea:5d:7b:f5:dc:df:b9: 32:5d:25:c4:eb:4c:9b:d8:8a:c2:de:78:f8:41:35:39:ac:64: fa:63:62:f1:eb:cc:d7:67:08:cc:ea:06:53:15:b0:40:04:90: b1:88:a2:6c:e7:9b:5c:09:df:f4:28:2e:42:7d:8f:7f:68:74: aa:ae:8c:ed:a8:79:a7:fc:09:d8:03:1e:4d:87:36:45:8d:e3: 5a:bb:81:79:71:f0:c5:62:32:4a:62:80:cc:7e:d7:79:b2:e7: 03:4e:e9:65:d7:81:e2:4c:dd:b3:4f:0b:2c:e2:cc:6b:62:9e: eb:3a:13:cb:60:cf:4e:f1:e4:df:32:61:d0:4d:9c:68:c1:ab: 82:5d:8c:2c:bf:e5:32:c3:98:91:f6:8a:98:2b:55:b7:b5:3e: 25:54:21:df:db:4c:b0:ed:f8:92:b0:62:91:4c:e4:5b:1f:6a: 7e:ee:8e:c5:12:68:94:14:e4:53:18:3e:27:c4:82:9e:10:f8: d1:b7:09:fc:d5:81:89:21:e7:dc:a1:88:7c:62:91:af:32:d9: 15:84:67:f8:16:5a:e4:62:53:50:e0:d4:6a:1a:e8:ee:67:b2: fd:62:0a:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt0f266s1V3qDpmb6dMD7YoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZmU5OTNkMWYzMTBlODE3M2MxN2NlOTI3OGYxZTlmOGUy MmUzYzIwHhcNMjUxMjMxMTMwMTA2WhcNMjYwMTAxMTMwMTA2WjAzMTEwLwYDVQQD EyhlYmEwOTUyNjM1NjQxNjIxYzdkMGZmODFmODY5Y2MyYjliOGQwMmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9eWKyFo1+zqTgb8m9kW343gxBep 1qlPxMj2WluDiJi/I5GD9GUkO6dOkm+3rO5fpXy3gQxc0qOCjDyi8RWUx+nv/+AU 492JQ4GowpoZhQurRJY9EP8mfQfoMXDsXqC/T5fOfF664CHA3j/97A+wpGrG40CM 9VHYnMul/IX3rqP+HvaduOmB4Vj6hPx4De3wLCVY3pddnqn2xoTDe5lyIL6Z060G mu+pI1ODMHI6KNk0iZlXue312OKfm6Rkw3HXF9NyZfPYVrpzIaiyeRzMWoAncTnz rMg/IlL7+KoNL2m6Zmz8CEDOab04XKGEQihGGAE77q37i/p7kGM/A8Uc/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuglSY1ZBYhx9D/gfhpzCubjQL/MB8GA1UdIwQY MBaAFML+mT0fMQ6Bc8F86SePHp+OIuPCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3Y2WlBSOHhEb0Z6d1h6cEo0OGVuNDRpNDhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNTMxMmItODQzOS00YmI0LTg2ZDIt NjliNDMyNzk5MzcyLzEvd3Y2WlBSOHhEb0Z6d1h6cEo0OGVuNDRpNDhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lNTMxMmItODQzOS00YmI0LTg2ZDItNjliNDMyNzk5Mzcy LzEvd3Y2WlBSOHhEb0Z6d1h6cEo0OGVuNDRpNDhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANS/hs7zl k3N+hyOuvgyL1XO48Kt6WLCEAPzeIuPqXXv13N+5Ml0lxOtMm9iKwt54+EE1Oaxk +mNi8evM12cIzOoGUxWwQASQsYiibOebXAnf9CguQn2Pf2h0qq6M7ah5p/wJ2AMe TYc2RY3jWruBeXHwxWIySmKAzH7XebLnA07pZdeB4kzds08LLOLMa2Ke6zoTy2DP TvHk3zJh0E2caMGrgl2MLL/lMsOYkfaKmCtVt7U+JVQh39tMsO34krBikUzkWx9q fu6OxRJolBTkUxg+J8SCnhD40bcJ/NWBiSHn3KGIfGKRrzLZFYRn+BZa5GJTUODU ahro7mey/WIKgA== -----END CERTIFICATE-----Generated at Wed Dec 31 21:06:21 2025 by rpki-client