This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft File: _wcypCMoB0cBFCIh49RqKfKWwpw.mft (raw, json) Hash identifier: bBCbwzpPkfE4bW0IffbRqpBpWnuoJTBCL+GVFsH985k= Subject key identifier: 30:34:9C:10:E7:D6:F1:0D:BD:CA:BD:25:97:4E:4A:8D:D2:7A:F3:D9 Authority key identifier: FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C Certificate issuer: /CN=ff0732a42328074701142221e3d46a29f296c29c Certificate serial: 019B1E7421D40050971F96C11F1A58769E83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft Manifest number: 0327 Signing time: Sun 14 Dec 2025 20:01:25 +0000 Manifest this update: Sun 14 Dec 2025 20:01:25 +0000 Manifest next update: Mon 15 Dec 2025 20:01:25 +0000 Files and hashes: 1: 1-dSj2fWJdUO6bz9sc2BYVK5JDQE.roa (hash: dsFKxx55TJI4durjTXMUPKnGnFdN9dd8cpckDwK4aTc=) 2: _wcypCMoB0cBFCIh49RqKfKWwpw.crl (hash: qF9lk12nIPveOjH9zIk9948zdyD8/9HW1lE+2Rq3vHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 20:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:74:21:d4:00:50:97:1f:96:c1:1f:1a:58:76:9e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff0732a42328074701142221e3d46a29f296c29c Validity Not Before: Dec 14 20:01:25 2025 GMT Not After : Dec 15 20:01:25 2025 GMT Subject: CN=30349c10e7d6f10dbdcabd25974e4a8dd27af3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4f:cf:4a:d8:dd:4e:3a:99:cf:1f:e0:71:3f: e6:02:d1:07:33:90:6d:2e:7e:44:c8:bd:01:a8:b2: c3:e2:fd:eb:27:31:a9:5f:87:34:d5:1e:cc:7f:45: 6f:3b:f4:60:58:74:02:75:8f:ba:13:3a:86:a1:af: dd:60:69:08:0d:69:08:09:65:ee:d5:0e:0f:19:af: c9:2d:67:ca:b6:1a:6a:21:90:4c:b2:d6:82:c1:48: 41:44:21:f2:7c:8b:d3:4f:d0:1e:c5:2d:46:2a:b0: ec:93:41:f8:40:08:a8:32:df:3f:2c:86:9d:22:99: 0d:e3:0c:fd:33:be:17:1f:cb:46:a8:e8:a4:6d:d0: 04:44:08:6a:e4:b5:a7:49:50:fc:6c:89:6a:e0:66: 31:d1:3e:a2:6e:54:a6:b7:7a:3c:a1:fc:60:ae:3d: 62:94:94:9c:cc:8b:61:7e:90:75:d1:f8:a3:a2:ba: e3:04:49:e1:7c:5a:fc:21:57:81:e5:9e:4c:50:2d: 96:5a:48:6b:47:98:1a:73:11:53:e6:3e:4b:0a:6c: 85:66:45:ff:92:2f:1e:31:48:ac:de:85:b6:29:4c: 5a:72:a9:32:54:67:9c:e6:a5:94:16:dd:13:ba:09: d6:2b:4d:06:2a:43:65:41:a8:b3:89:85:40:f3:cc: 63:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:34:9C:10:E7:D6:F1:0D:BD:CA:BD:25:97:4E:4A:8D:D2:7A:F3:D9 X509v3 Authority Key Identifier: keyid:FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:89:88:59:3c:3a:f7:03:ed:29:ff:22:ec:0d:1b:57:63:f5: 52:54:a9:48:a8:48:5e:af:6e:96:0b:a0:29:a9:30:53:dc:52: 5c:c2:85:d8:5e:67:33:b9:c8:3a:0e:6d:66:bc:59:2d:a3:43: 48:ed:de:a8:b0:6c:d5:4e:75:bf:f4:79:37:97:66:6e:01:d3: 31:82:97:4a:11:97:bb:0f:c6:ef:56:89:d0:84:fa:2e:76:d5: 71:38:c8:34:68:f6:9f:05:02:fe:f7:c2:25:6e:53:ba:76:88: 85:3d:0b:66:02:37:e2:d3:be:ca:08:ca:e0:96:df:ed:46:44: cd:90:d0:12:65:18:ad:61:c1:47:b9:7c:dc:04:1f:70:a2:74: ed:85:c2:c9:71:b0:9b:3d:3d:5f:3f:18:13:5c:62:cf:b8:d6: a2:92:40:9b:47:bd:f9:a1:43:07:17:bf:75:80:e1:6e:95:d2: 16:6f:40:08:87:b4:fc:22:40:bf:28:e8:70:5c:6d:c3:99:89: c4:61:65:b8:34:43:63:cb:ce:b6:95:bc:58:f5:2d:dc:2b:db: c8:e8:67:73:a5:df:b7:5c:d2:75:11:43:c3:f3:82:5b:7d:c0: d9:59:f0:9d:0b:bd:3d:9b:e7:0b:31:bd:8c:30:e8:52:13:b6: 67:f3:af:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsedCHUAFCXH5bBHxpYdp6DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMDczMmE0MjMyODA3NDcwMTE0MjIyMWUzZDQ2YTI5ZjI5 NmMyOWMwHhcNMjUxMjE0MjAwMTI1WhcNMjUxMjE1MjAwMTI1WjAzMTEwLwYDVQQD EygzMDM0OWMxMGU3ZDZmMTBkYmRjYWJkMjU5NzRlNGE4ZGQyN2FmM2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU/PStjdTjqZzx/gcT/mAtEHM5Bt Ln5EyL0BqLLD4v3rJzGpX4c01R7Mf0VvO/RgWHQCdY+6EzqGoa/dYGkIDWkICWXu 1Q4PGa/JLWfKthpqIZBMstaCwUhBRCHyfIvTT9AexS1GKrDsk0H4QAioMt8/LIad IpkN4wz9M74XH8tGqOikbdAERAhq5LWnSVD8bIlq4GYx0T6iblSmt3o8ofxgrj1i lJSczIthfpB10fijorrjBEnhfFr8IVeB5Z5MUC2WWkhrR5gacxFT5j5LCmyFZkX/ ki8eMUis3oW2KUxacqkyVGec5qWUFt0TugnWK00GKkNlQaiziYVA88xjWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDA0nBDn1vENvcq9JZdOSo3SevPZMB8GA1UdIwQY MBaAFP8HMqQjKAdHARQiIePUainylsKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3djeXBDTW9CMGNCRkNJaDQ5UnFLZktXd3B3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jNDk3NWYtZWE5NC00M2E3LTkzMjYt N2NhMjJiYTE0MWIzLzEvX3djeXBDTW9CMGNCRkNJaDQ5UnFLZktXd3B3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9jNDk3NWYtZWE5NC00M2E3LTkzMjYtN2NhMjJiYTE0MWIz LzEvX3djeXBDTW9CMGNCRkNJaDQ5UnFLZktXd3B3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYImIWTw6 9wPtKf8i7A0bV2P1UlSpSKhIXq9ulgugKakwU9xSXMKF2F5nM7nIOg5tZrxZLaND SO3eqLBs1U51v/R5N5dmbgHTMYKXShGXuw/G71aJ0IT6LnbVcTjINGj2nwUC/vfC JW5TunaIhT0LZgI34tO+ygjK4Jbf7UZEzZDQEmUYrWHBR7l83AQfcKJ07YXCyXGw mz09Xz8YE1xiz7jWopJAm0e9+aFDBxe/dYDhbpXSFm9ACIe0/CJAvyjocFxtw5mJ xGFluDRDY8vOtpW8WPUt3CvbyOhnc6Xft1zSdRFDw/OCW33A2VnwnQu9PZvnCzG9 jDDoUhO2Z/OvTA== -----END CERTIFICATE-----Generated at Mon Dec 15 04:54:32 2025 by rpki-client