This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft File: wvMmbgYS2DFPTp-So9uLyyU-2rw.mft (raw, json) Hash identifier: Y42f6vo7BtZaWPf7HOaVQU7tlk51F8nijpcmVXHphWI= Subject key identifier: D9:5B:63:40:FB:3D:0B:F2:E4:AA:9D:60:43:77:3C:64:C2:B2:89:34 Authority key identifier: C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC Certificate issuer: /CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc Certificate serial: 019B25520CE54F4EE24F86D24ED5BB2EEA9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft Manifest number: 0BDB Signing time: Tue 16 Dec 2025 04:01:32 +0000 Manifest this update: Tue 16 Dec 2025 04:01:32 +0000 Manifest next update: Wed 17 Dec 2025 04:01:32 +0000 Files and hashes: 1: 9QfEv6VDYJHwg-_mBcw3nPg902w.roa (hash: bDGQkiI5avL3G45Js05YIuwiQofAZ2dxukXBkwwmDkY=) 2: wvMmbgYS2DFPTp-So9uLyyU-2rw.crl (hash: 8A9Q8xG21cgxWyw+EM+/0p7/cPz806q1BItezw++/mo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:0c:e5:4f:4e:e2:4f:86:d2:4e:d5:bb:2e:ea:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2f3266e0612d8314f4e9f92a3db8bcb253edabc Validity Not Before: Dec 16 04:01:32 2025 GMT Not After : Dec 17 04:01:32 2025 GMT Subject: CN=d95b6340fb3d0bf2e4aa9d6043773c64c2b28934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:7c:a6:06:b7:97:d5:81:df:bb:99:7e:1a:75: 8d:02:78:97:a5:f4:b3:74:27:97:b9:ee:00:90:88: 17:17:9f:ec:84:79:c6:43:50:e8:f9:f7:7f:94:d8: 45:84:3a:c6:2e:6f:cf:ca:a9:f0:c2:18:0f:0a:f5: b2:81:2e:c1:10:26:e0:62:42:87:b8:63:8f:4f:ca: 54:aa:62:02:38:af:d8:fd:e4:19:94:69:a3:b9:e4: 7e:23:26:c6:89:5e:cd:89:0c:04:7d:6f:a1:2d:5d: 78:55:05:31:88:0b:ed:40:b1:60:45:cb:e9:22:4e: b2:e4:72:d2:19:61:bc:18:2a:d9:d2:f8:15:c6:17: 65:88:01:ba:a5:54:f5:25:af:8c:7a:40:47:cf:e2: 52:8d:4e:c3:59:36:6a:8b:c6:33:1b:7b:0a:5a:7e: 43:7b:d4:dd:b9:ef:bb:d2:cb:35:0a:23:4f:4b:e0: 94:95:52:30:d7:53:32:78:b5:bf:69:9d:55:27:f2: a8:88:ab:7d:c8:2c:01:f4:62:ff:5e:e6:c6:d2:48: 12:46:46:bd:5e:02:53:ab:d3:9b:54:c8:6e:72:28: e1:f7:11:f1:9b:2e:68:9a:58:93:4e:e8:c4:7f:8e: 1f:cc:36:aa:86:51:65:2a:03:15:59:b3:67:92:ca: 38:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5B:63:40:FB:3D:0B:F2:E4:AA:9D:60:43:77:3C:64:C2:B2:89:34 X509v3 Authority Key Identifier: keyid:C2:F3:26:6E:06:12:D8:31:4F:4E:9F:92:A3:DB:8B:CB:25:3E:DA:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvMmbgYS2DFPTp-So9uLyyU-2rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dceacf-dae2-4763-b399-2fb99fe5e477/1/wvMmbgYS2DFPTp-So9uLyyU-2rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:54:9b:e0:c6:9f:6e:ce:43:b7:f7:7a:9b:7e:c8:fb:55:ed: b1:16:ec:c0:94:5b:25:48:ab:ec:33:6b:c7:f1:26:49:78:a6: de:ed:d4:bf:b0:39:d0:cb:fd:86:37:84:fb:8d:66:20:8a:34: 15:35:4e:23:a6:69:f9:ab:41:eb:2d:6a:f1:50:ba:8a:4f:45: 87:56:2f:ff:58:c4:1c:96:1e:52:97:7e:2d:60:9f:94:17:88: d9:88:1c:63:d4:79:5d:3e:76:7d:3d:b1:04:f4:6b:2c:04:e1: e9:c8:8d:84:a5:70:d3:9e:e3:89:2c:2c:f1:fb:8f:3f:b2:a8: f3:4a:b1:d4:f6:33:05:da:ec:1b:d7:9c:46:08:bd:12:ce:09: 94:ff:58:6f:30:fd:91:31:0d:aa:21:e3:e5:aa:9a:11:b8:2a: ca:c9:3f:36:d7:6e:50:9a:97:c7:f9:07:a8:79:78:29:c0:f2: 7a:9d:d5:64:2f:ae:94:28:88:3d:07:95:26:f0:01:33:11:16: 49:3d:7e:fd:a2:c3:a5:c9:b7:46:90:91:81:cb:82:da:66:6d: 5d:7e:8d:4a:bf:bb:56:1e:d1:10:a9:ae:e1:ce:db:e6:93:07: 65:30:26:b1:55:c8:15:42:3a:e3:62:08:64:6a:f9:7d:55:d0: 1f:f9:90:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUgzlT07iT4bSTtW7LuqdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZjMyNjZlMDYxMmQ4MzE0ZjRlOWY5MmEzZGI4YmNiMjUz ZWRhYmMwHhcNMjUxMjE2MDQwMTMyWhcNMjUxMjE3MDQwMTMyWjAzMTEwLwYDVQQD EyhkOTViNjM0MGZiM2QwYmYyZTRhYTlkNjA0Mzc3M2M2NGMyYjI4OTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nymBreX1YHfu5l+GnWNAniXpfSz dCeXue4AkIgXF5/shHnGQ1Do+fd/lNhFhDrGLm/PyqnwwhgPCvWygS7BECbgYkKH uGOPT8pUqmICOK/Y/eQZlGmjueR+IybGiV7NiQwEfW+hLV14VQUxiAvtQLFgRcvp Ik6y5HLSGWG8GCrZ0vgVxhdliAG6pVT1Ja+MekBHz+JSjU7DWTZqi8YzG3sKWn5D e9Tdue+70ss1CiNPS+CUlVIw11MyeLW/aZ1VJ/KoiKt9yCwB9GL/XubG0kgSRka9 XgJTq9ObVMhucijh9xHxmy5omliTTujEf44fzDaqhlFlKgMVWbNnkso4LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlbY0D7PQvy5KqdYEN3PGTCsok0MB8GA1UdIwQY MBaAFMLzJm4GEtgxT06fkqPbi8slPtq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3ZNbWJnWVMyREZQVHAtU285dUx5eVUtMnJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kY2VhY2YtZGFlMi00NzYzLWIzOTkt MmZiOTlmZTVlNDc3LzEvd3ZNbWJnWVMyREZQVHAtU285dUx5eVUtMnJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9kY2VhY2YtZGFlMi00NzYzLWIzOTktMmZiOTlmZTVlNDc3 LzEvd3ZNbWJnWVMyREZQVHAtU285dUx5eVUtMnJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1Sb4Maf bs5Dt/d6m37I+1XtsRbswJRbJUir7DNrx/EmSXim3u3Uv7A50Mv9hjeE+41mIIo0 FTVOI6Zp+atB6y1q8VC6ik9Fh1Yv/1jEHJYeUpd+LWCflBeI2YgcY9R5XT52fT2x BPRrLATh6ciNhKVw057jiSws8fuPP7Ko80qx1PYzBdrsG9ecRgi9Es4JlP9YbzD9 kTENqiHj5aqaEbgqysk/NtduUJqXx/kHqHl4KcDyep3VZC+ulCiIPQeVJvABMxEW ST1+/aLDpcm3RpCRgcuC2mZtXX6NSr+7Vh7REKmu4c7b5pMHZTAmsVXIFUI642II ZGr5fVXQH/mQWw== -----END CERTIFICATE-----Generated at Tue Dec 16 11:47:04 2025 by rpki-client