This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft File: wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft (raw, json) Hash identifier: /Xf9RoD53NGo6+Z8I87vvs5S8EW0/nherA+QUJ326oY= Subject key identifier: 63:B1:0C:CD:67:A7:53:08:0C:58:1F:A4:47:33:D4:05:04:17:34:76 Authority key identifier: C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4 Certificate issuer: /CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4 Certificate serial: 019B38A25AE453FD7495BE85277CF3D69643 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft Manifest number: 13AC Signing time: Fri 19 Dec 2025 22:02:02 +0000 Manifest this update: Fri 19 Dec 2025 22:02:02 +0000 Manifest next update: Sat 20 Dec 2025 22:02:02 +0000 Files and hashes: 1: 2tiVBKWJb3sKibII0w4_JEP8cX8.roa (hash: yXLW83i0e/6bCMs04Sj4WwVKDgNnsbMkg4zpZba2Js0=) 2: wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl (hash: 0MscbkGBtryPjL5Yawnnjm89IOXC96QtWMrx9uCxQNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:5a:e4:53:fd:74:95:be:85:27:7c:f3:d6:96:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4 Validity Not Before: Dec 19 22:02:02 2025 GMT Not After : Dec 20 22:02:02 2025 GMT Subject: CN=63b10ccd67a753080c581fa44733d40504173476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cb:f6:0b:b3:b0:0b:8d:60:34:4e:78:56:20: 29:59:d6:c9:36:7a:ab:17:10:3f:29:f1:b6:47:4d: 5d:29:36:ed:40:ae:ba:68:df:3f:00:99:ae:6b:a9: 47:06:a6:2e:4f:99:cc:50:6a:6f:cd:2b:d3:6f:66: a1:e3:10:93:2f:fc:a0:7c:ec:70:db:07:84:62:38: ce:30:a5:52:63:75:a0:1c:72:1e:c8:8e:42:bd:b8: 0d:76:04:0e:c9:f5:e8:06:e0:7c:a6:5a:7f:b4:3f: 50:9e:8a:d2:cd:06:98:72:d0:38:b1:e2:fa:93:84: 65:80:0d:00:b8:1d:de:2b:95:c8:0b:28:ff:a4:f5: 50:a5:e2:53:d2:24:2d:48:24:04:63:ac:e0:76:6f: 8c:33:1f:df:0b:b9:94:f3:7d:83:b1:6c:ca:34:b5: 5f:08:34:3b:90:60:ec:42:ba:76:5e:86:f8:11:75: ab:21:b2:cd:8d:51:7d:fd:7e:88:77:d1:79:e3:d4: a5:16:fa:8a:b5:ea:8d:3b:9c:cc:ca:b2:d1:c9:86: 39:43:1b:ad:2f:e7:b6:01:00:4a:0f:71:d6:c0:a8: db:7b:b0:c6:cd:37:36:10:b9:c0:06:6f:ea:98:14: 5f:9d:45:70:a7:98:6d:bd:f5:51:67:0b:29:f4:f7: 10:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B1:0C:CD:67:A7:53:08:0C:58:1F:A4:47:33:D4:05:04:17:34:76 X509v3 Authority Key Identifier: keyid:C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:cf:c2:b4:fa:ac:58:1f:a4:b3:76:a8:5c:5b:7e:d1:e0:8e: bc:44:72:e7:87:67:0d:b1:0c:ac:61:21:26:c3:f5:f2:04:ec: 90:d4:c6:74:3e:50:d3:f8:13:70:a3:ed:e5:9b:84:ab:10:92: 7d:cb:45:5e:e3:47:a3:25:25:6e:2b:a5:9c:84:f5:37:7b:2f: 30:d5:c7:56:50:e6:79:d1:11:d8:83:1e:f5:9b:1a:5d:e0:2c: 3f:93:9e:1e:3f:51:b3:87:6c:9e:51:7e:aa:9a:35:66:bc:e3: d3:51:e2:d6:7c:c2:14:69:4a:0a:d6:08:05:94:56:92:5e:0f: 89:32:38:6d:9c:9e:f1:b1:ac:98:3b:c3:78:9e:c2:98:c3:3d: 32:48:b6:31:a0:ec:e0:6e:5c:eb:e2:a9:49:4d:07:fe:80:62: a6:47:1a:34:6c:58:1a:97:6a:2b:23:e7:bf:a2:98:97:5f:92: 82:86:a6:e1:67:55:69:f9:01:c3:7d:4b:23:ff:63:b2:5f:a0: f4:9b:aa:ef:c7:10:a1:c4:36:d9:46:c7:ce:77:f1:03:28:b8: 17:2d:f2:e8:9d:f3:6e:e7:52:3d:99:f6:7e:88:0c:df:f6:46: 35:1a:0a:eb:2b:13:9a:fc:e9:72:c4:1d:e1:86:28:02:4a:7d: 57:e2:b1:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4olrkU/10lb6FJ3zz1pZDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNWVlMmQ5MDljOWI3NWM2ZDIwODRlMzM3OWJmMDMyNzRi Nzc2ZjQwHhcNMjUxMjE5MjIwMjAyWhcNMjUxMjIwMjIwMjAyWjAzMTEwLwYDVQQD Eyg2M2IxMGNjZDY3YTc1MzA4MGM1ODFmYTQ0NzMzZDQwNTA0MTczNDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsv2C7OwC41gNE54ViApWdbJNnqr FxA/KfG2R01dKTbtQK66aN8/AJmua6lHBqYuT5nMUGpvzSvTb2ah4xCTL/ygfOxw 2weEYjjOMKVSY3WgHHIeyI5CvbgNdgQOyfXoBuB8plp/tD9QnorSzQaYctA4seL6 k4RlgA0AuB3eK5XICyj/pPVQpeJT0iQtSCQEY6zgdm+MMx/fC7mU832DsWzKNLVf CDQ7kGDsQrp2Xob4EXWrIbLNjVF9/X6Id9F549SlFvqKteqNO5zMyrLRyYY5Qxut L+e2AQBKD3HWwKjbe7DGzTc2ELnABm/qmBRfnUVwp5htvfVRZwsp9PcQ1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOxDM1np1MIDFgfpEcz1AUEFzR2MB8GA1UdIwQY MBaAFMFe4tkJybdcbSCE4zeb8DJ0t3b0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1Y3aTJRbkp0MXh0SUlUak41dndNblMzZHZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hNzY1ZGEtNGFhMS00N2EyLThiNWQt ZWJlNDM5MDVlYjgxLzEvd1Y3aTJRbkp0MXh0SUlUak41dndNblMzZHZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9hNzY1ZGEtNGFhMS00N2EyLThiNWQtZWJlNDM5MDVlYjgx LzEvd1Y3aTJRbkp0MXh0SUlUak41dndNblMzZHZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASs/CtPqs WB+ks3aoXFt+0eCOvERy54dnDbEMrGEhJsP18gTskNTGdD5Q0/gTcKPt5ZuEqxCS fctFXuNHoyUlbiulnIT1N3svMNXHVlDmedER2IMe9ZsaXeAsP5OeHj9Rs4dsnlF+ qpo1Zrzj01Hi1nzCFGlKCtYIBZRWkl4PiTI4bZye8bGsmDvDeJ7CmMM9Mki2MaDs 4G5c6+KpSU0H/oBipkcaNGxYGpdqKyPnv6KYl1+Sgoam4WdVafkBw31LI/9jsl+g 9Juq78cQocQ22UbHznfxAyi4Fy3y6J3zbudSPZn2fogM3/ZGNRoK6ysTmvzpcsQd 4YYoAkp9V+KxGw== -----END CERTIFICATE-----Generated at Sat Dec 20 00:16:57 2025 by rpki-client