This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft File: wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft (raw, json) Hash identifier: Pp+nKO+qRsjPYY9BrWY2j8P11mQYArjDQzqD9oZ/YmU= Subject key identifier: C3:B0:EE:FC:CF:DD:6F:EE:E4:52:B1:76:37:63:1A:C2:66:32:CD:7D Authority key identifier: C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84 Certificate issuer: /CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84 Certificate serial: 019B1D2A18501C7E2B0F65D2E137407B7776 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft Manifest number: 0F70 Signing time: Sun 14 Dec 2025 14:00:56 +0000 Manifest this update: Sun 14 Dec 2025 14:00:56 +0000 Manifest next update: Mon 15 Dec 2025 14:00:56 +0000 Files and hashes: 1: 5R5QxNHPxmr20xOEdihdn49Gqm0.roa (hash: 2rt++DxlRXOs+zCMhZPZtbhcL9D247iOIf522F37NiI=) 2: wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl (hash: 9chSyUEjujZOU3BFW9NYixsWkz4F/Xi87n9K9afy75o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:2a:18:50:1c:7e:2b:0f:65:d2:e1:37:40:7b:77:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84 Validity Not Before: Dec 14 14:00:56 2025 GMT Not After : Dec 15 14:00:56 2025 GMT Subject: CN=c3b0eefccfdd6feee452b17637631ac26632cd7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:34:09:f6:20:46:51:b5:65:c5:53:7f:ab:02: 7f:88:e1:69:45:3e:70:50:59:26:5e:36:b9:8a:9d: 08:75:f5:92:da:d9:ea:8e:4d:19:4f:23:48:48:63: 6d:d4:41:89:0a:38:19:6a:6f:28:20:4c:ba:86:a3: 00:8d:64:db:1a:32:33:d0:d0:f6:d5:b4:d3:02:5c: 02:53:4b:61:83:ae:9f:99:71:98:ae:0e:1c:74:91: f6:e7:c3:eb:87:cb:37:7c:19:e6:0c:32:e2:e0:e2: 7f:30:69:68:52:ac:5d:15:ad:2a:59:01:fb:50:31: 80:3e:8e:45:18:6c:1c:4a:85:8a:12:5d:0c:8a:24: e2:b4:66:85:3f:18:38:50:f6:3e:b5:c3:20:bd:1d: 6b:04:dd:9d:1a:71:41:31:3e:91:15:4b:4d:3b:6a: 0b:33:d2:e1:96:0d:08:a7:dc:98:3d:7d:f6:f8:60: 57:89:ab:8c:5d:0d:d5:14:6a:5e:88:88:15:a5:f2: 21:6d:7e:35:e8:30:05:39:41:27:e0:9b:9b:7e:54: d9:7d:b3:d1:f1:c6:47:e2:cb:52:10:70:5f:c0:86: 44:3e:8d:e3:e3:1e:f9:1a:9b:c6:ba:ab:82:b5:1b: 82:42:7a:9e:9a:20:ab:79:c1:66:03:e0:34:82:b4: 01:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B0:EE:FC:CF:DD:6F:EE:E4:52:B1:76:37:63:1A:C2:66:32:CD:7D X509v3 Authority Key Identifier: keyid:C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:a4:0e:a6:90:07:f1:f2:bd:5c:1b:7b:21:0c:4e:a0:ec:9c: 19:0b:d0:ba:ae:4d:69:af:92:2c:55:ea:26:85:de:27:f0:5b: a6:af:a9:36:9c:86:6e:f7:7b:f7:6c:d1:fc:f6:5e:11:08:9c: 0f:09:a7:43:50:94:24:5f:5d:d3:96:39:12:00:ba:71:52:56: e1:87:59:c0:cf:24:67:41:f7:c5:03:cd:f2:9e:0c:88:29:1e: 7f:7f:49:61:c9:37:87:bf:89:31:71:7e:66:67:c1:88:35:a8: 61:6e:43:d7:af:70:3d:10:2a:1c:ac:14:74:a0:61:4f:28:b1: 76:1e:af:b0:c8:18:69:16:13:4e:7b:91:60:76:34:74:61:97: b7:fc:b7:ea:aa:6c:11:4a:44:b6:ef:18:fb:4a:c6:fa:aa:6f: f1:f1:d4:b1:f2:74:40:fe:b2:1a:59:f6:13:3e:70:a2:d5:37: bf:f5:ba:63:75:86:da:81:c0:5d:4d:eb:71:a2:1d:15:f6:95: d8:24:18:60:db:39:62:82:75:58:b5:2e:d2:97:98:f8:fe:9c: 19:ed:8a:71:b5:b8:fc:0d:d5:8f:00:77:6a:1e:2f:dc:eb:31: 2b:8d:4b:48:9b:31:19:a3:bf:39:f9:0e:71:29:43:31:e7:3d: 98:4c:ea:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdKhhQHH4rD2XS4TdAe3d2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzQ4NDU5MGNjZmYwOWEzZGQ1ZGQ4MDg1YmVlZGI0MmZj NGFkODQwHhcNMjUxMjE0MTQwMDU2WhcNMjUxMjE1MTQwMDU2WjAzMTEwLwYDVQQD EyhjM2IwZWVmY2NmZGQ2ZmVlZTQ1MmIxNzYzNzYzMWFjMjY2MzJjZDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDQJ9iBGUbVlxVN/qwJ/iOFpRT5w UFkmXja5ip0IdfWS2tnqjk0ZTyNISGNt1EGJCjgZam8oIEy6hqMAjWTbGjIz0ND2 1bTTAlwCU0thg66fmXGYrg4cdJH258Prh8s3fBnmDDLi4OJ/MGloUqxdFa0qWQH7 UDGAPo5FGGwcSoWKEl0MiiTitGaFPxg4UPY+tcMgvR1rBN2dGnFBMT6RFUtNO2oL M9Lhlg0Ip9yYPX32+GBXiauMXQ3VFGpeiIgVpfIhbX416DAFOUEn4JubflTZfbPR 8cZH4stSEHBfwIZEPo3j4x75GpvGuquCtRuCQnqemiCrecFmA+A0grQBsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOw7vzP3W/u5FKxdjdjGsJmMs19MB8GA1UdIwQY MBaAFMM0hFkMz/CaPdXdgIW+7bQvxK2EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iOGE1MGEtODZhMC00YmY0LThlZmYt ZjY0N2M1MGMyMWE1LzEvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iOGE1MGEtODZhMC00YmY0LThlZmYtZjY0N2M1MGMyMWE1 LzEvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqQOppAH 8fK9XBt7IQxOoOycGQvQuq5Naa+SLFXqJoXeJ/Bbpq+pNpyGbvd792zR/PZeEQic DwmnQ1CUJF9d05Y5EgC6cVJW4YdZwM8kZ0H3xQPN8p4MiCkef39JYck3h7+JMXF+ ZmfBiDWoYW5D169wPRAqHKwUdKBhTyixdh6vsMgYaRYTTnuRYHY0dGGXt/y36qps EUpEtu8Y+0rG+qpv8fHUsfJ0QP6yGln2Ez5wotU3v/W6Y3WG2oHAXU3rcaIdFfaV 2CQYYNs5YoJ1WLUu0peY+P6cGe2KcbW4/A3VjwB3ah4v3OsxK41LSJsxGaO/OfkO cSlDMec9mEzqJQ== -----END CERTIFICATE-----Generated at Sun Dec 14 22:53:04 2025 by rpki-client