This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft File: wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft (raw, json) Hash identifier: Bm3WAUyvl+NG2KDd4+0NeAsZnseKyzK/ajkxcWyn/ws= Subject key identifier: EF:60:85:A9:B6:70:D4:03:4C:69:3A:29:58:7E:4C:26:F0:79:1E:BC Authority key identifier: C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E Certificate issuer: /CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e Certificate serial: 019B1803A5B337AA65384BF55B0D1FE73A7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft Manifest number: 1778 Signing time: Sat 13 Dec 2025 14:00:50 +0000 Manifest this update: Sat 13 Dec 2025 14:00:50 +0000 Manifest next update: Sun 14 Dec 2025 14:00:50 +0000 Files and hashes: 1: 6-ydJeMMctB8c_kcu4H6al3x9lI.roa (hash: gkHYAXqWoGGFpT0nUFUwvYsxIUFHF9fDa7NiP95iNN8=) 2: wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl (hash: a40HruAYSooN1HYw/bE7T2E9GCl4bus2A4h1TYzgQRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:03:a5:b3:37:aa:65:38:4b:f5:5b:0d:1f:e7:3a:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e Validity Not Before: Dec 13 14:00:50 2025 GMT Not After : Dec 14 14:00:50 2025 GMT Subject: CN=ef6085a9b670d4034c693a29587e4c26f0791ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7d:e4:af:47:0b:98:7e:c7:0b:f3:c6:fa:9c: 8a:d9:06:5f:4d:ba:a8:43:ac:97:7f:2c:8d:8e:25: 5d:e5:c9:ec:99:8e:46:2c:fa:5d:f7:49:3f:9d:3c: 13:c0:93:4a:0d:33:b1:f3:be:42:db:52:7a:6e:5b: b6:93:b2:27:3a:01:71:ac:40:fb:96:75:d6:1a:f2: 13:86:22:07:8f:a0:ed:5a:7c:79:3c:14:39:58:63: e2:bb:2a:8e:17:3c:e9:48:23:9a:2e:40:2a:e7:cc: e5:7a:6b:6c:e3:9b:20:c7:bc:39:cc:c5:01:67:2e: 58:60:f7:40:c3:07:ba:1c:d7:03:e8:b2:de:c8:b4: af:9d:33:6a:19:53:53:5b:85:26:6d:b0:37:2d:07: 9a:96:db:4d:5e:df:98:bb:8c:59:5a:08:77:c9:a4: 76:a2:0d:3e:45:c3:76:65:0c:40:a5:6f:d1:e2:13: 40:18:18:51:9b:49:df:cb:2b:79:fc:39:c1:ef:6a: 10:77:d5:db:bc:f2:4c:ab:f1:b9:9d:47:cb:e9:53: 49:d2:25:71:0c:f1:6a:1c:55:0e:7c:ab:48:68:03: 0f:cb:58:f3:c7:9a:74:63:95:db:8f:5c:d5:11:18: 15:b0:a8:80:8d:2e:ea:52:7c:3e:a4:0c:a3:52:9a: e3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:60:85:A9:B6:70:D4:03:4C:69:3A:29:58:7E:4C:26:F0:79:1E:BC X509v3 Authority Key Identifier: keyid:C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:9a:91:9d:25:9d:97:71:ce:ea:01:c5:c7:86:b2:8c:09:4a: fc:c5:21:ac:81:dd:22:13:b8:8e:8b:c3:c6:82:4e:e6:bb:73: ae:eb:67:a6:93:42:dd:f2:df:89:4b:87:b1:4c:ce:95:39:71: d8:85:9c:86:9b:a8:b6:88:bd:6d:d1:14:99:97:1f:90:f7:5d: 42:df:2a:69:11:f2:b4:44:a8:9f:ae:d9:54:fa:1c:6e:4b:8f: b5:3d:bf:ac:43:0d:02:98:e4:55:25:3b:7a:39:3e:83:74:95: 6d:21:ea:fa:56:18:d2:ca:18:90:dc:ca:10:9a:84:e3:a9:4f: 80:60:ee:7b:77:7c:e0:74:bd:f8:7b:47:67:2b:d9:ba:8c:69: 7d:0f:b8:35:9f:a5:88:85:c6:2e:22:f8:f5:de:d5:26:97:0f: 92:dd:15:75:26:1f:94:ee:b6:9b:62:15:f4:3f:bd:eb:c2:5c: 24:44:1d:03:ee:1a:9e:6d:f3:c0:76:5b:23:eb:c5:c9:03:a5: 08:40:28:1d:10:f4:19:b0:6c:74:4b:f2:33:49:eb:e6:44:c5: 6c:e8:60:bb:c0:df:07:24:8d:2d:99:ea:40:9b:eb:d6:21:73: cb:10:eb:31:b1:b6:7e:fe:60:45:88:4e:99:9e:b6:d7:51:ba: e5:a3:80:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYA6WzN6plOEv1Ww0f5zp7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMjRiZGJkZWQ2ZTVkMmZlMGZiNTI2NTAwYjNmZjg3NjY1 YjYwMGUwHhcNMjUxMjEzMTQwMDUwWhcNMjUxMjE0MTQwMDUwWjAzMTEwLwYDVQQD EyhlZjYwODVhOWI2NzBkNDAzNGM2OTNhMjk1ODdlNGMyNmYwNzkxZWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX3kr0cLmH7HC/PG+pyK2QZfTbqo Q6yXfyyNjiVd5cnsmY5GLPpd90k/nTwTwJNKDTOx875C21J6blu2k7InOgFxrED7 lnXWGvIThiIHj6DtWnx5PBQ5WGPiuyqOFzzpSCOaLkAq58zlemts45sgx7w5zMUB Zy5YYPdAwwe6HNcD6LLeyLSvnTNqGVNTW4UmbbA3LQealttNXt+Yu4xZWgh3yaR2 og0+RcN2ZQxApW/R4hNAGBhRm0nfyyt5/DnB72oQd9XbvPJMq/G5nUfL6VNJ0iVx DPFqHFUOfKtIaAMPy1jzx5p0Y5Xbj1zVERgVsKiAjS7qUnw+pAyjUprjYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9gham2cNQDTGk6KVh+TCbweR68MB8GA1UdIwQY MBaAFMAkvb3tbl0v4PtSZQCz/4dmW2AOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0NTOXZlMXVYU19nLTFKbEFMUF9oMlpiWUE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9jYzhmZmUtMzZiNC00YzgwLWE5MDct YWVhYTlkZjAxYTlkLzEvd0NTOXZlMXVYU19nLTFKbEFMUF9oMlpiWUE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9jYzhmZmUtMzZiNC00YzgwLWE5MDctYWVhYTlkZjAxYTlk LzEvd0NTOXZlMXVYU19nLTFKbEFMUF9oMlpiWUE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJqRnSWd l3HO6gHFx4ayjAlK/MUhrIHdIhO4jovDxoJO5rtzrutnppNC3fLfiUuHsUzOlTlx 2IWchpuotoi9bdEUmZcfkPddQt8qaRHytESon67ZVPocbkuPtT2/rEMNApjkVSU7 ejk+g3SVbSHq+lYY0soYkNzKEJqE46lPgGDue3d84HS9+HtHZyvZuoxpfQ+4NZ+l iIXGLiL49d7VJpcPkt0VdSYflO62m2IV9D+968JcJEQdA+4anm3zwHZbI+vFyQOl CEAoHRD0GbBsdEvyM0nr5kTFbOhgu8DfBySNLZnqQJvr1iFzyxDrMbG2fv5gRYhO mZ6211G65aOAbg== -----END CERTIFICATE-----Generated at Sun Dec 14 00:03:16 2025 by rpki-client