This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft File: wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft (raw, json) Hash identifier: vctNUKxSlue4AuA+EArupWs7zyAFrOG7yioYbjPLX8A= Subject key identifier: C8:28:9F:98:C1:6E:FC:20:FF:05:94:A7:D9:2E:9D:29:35:5E:75:9C Authority key identifier: C0:F8:DB:B2:14:A6:14:9F:3D:4D:42:A0:C4:13:2D:57:25:99:27:52 Certificate issuer: /CN=c0f8dbb214a6149f3d4d42a0c4132d5725992752 Certificate serial: 019B5A1A7DE31A69D9B4D91B83A21AF433E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft Manifest number: 027A Signing time: Fri 26 Dec 2025 10:00:44 +0000 Manifest this update: Fri 26 Dec 2025 10:00:44 +0000 Manifest next update: Sat 27 Dec 2025 10:00:44 +0000 Files and hashes: 1: 2qyhqFKpARK1F2ET6I7_YKaOPc0.roa (hash: qGM3ZFQucsF8/9E/V05Xc9DkgTgt/0zHmMZ5RCHxskE=) 2: wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl (hash: Ey/zMbJNBzt98SPLq34mN93SUQUO4StTh8u7ekOK3cE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 10:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:7d:e3:1a:69:d9:b4:d9:1b:83:a2:1a:f4:33:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0f8dbb214a6149f3d4d42a0c4132d5725992752 Validity Not Before: Dec 26 10:00:44 2025 GMT Not After : Dec 27 10:00:44 2025 GMT Subject: CN=c8289f98c16efc20ff0594a7d92e9d29355e759c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8d:b7:35:f7:8f:0a:a0:63:87:41:0a:f4:53: 41:83:b3:eb:38:41:33:8b:26:7c:24:e9:3f:a5:b6: d5:a6:69:4d:d7:21:8e:8d:b5:59:12:00:7d:96:64: cc:ed:26:70:d2:17:64:5d:8e:e6:9c:ef:e4:59:63: 7e:80:43:2f:35:87:8c:42:ab:95:a7:56:14:45:98: ee:e1:f2:d7:dc:0e:4a:98:da:89:af:ad:79:cc:93: d3:25:93:55:cd:fc:36:0f:06:86:bb:38:b2:94:a2: 98:64:30:b0:3b:53:e7:db:6d:93:25:36:6d:12:79: 3d:40:9c:b4:27:c1:bc:d0:94:e8:88:cf:5d:c1:7b: fd:c0:1a:57:c9:5d:5c:f8:96:86:4e:75:01:5f:46: 4b:f5:6d:27:0e:13:8a:76:3a:a7:da:d2:e0:b5:db: 76:a6:95:d5:2d:82:0b:1b:81:2d:f7:69:77:c2:a7: 67:5a:78:63:b1:31:de:89:82:6b:fc:33:e4:98:87: 89:0b:7b:fd:a1:f9:32:39:b1:dc:f2:4d:f9:54:11: 5c:56:ba:08:86:a1:ce:05:4f:73:19:af:0d:4a:f2: 3c:a2:ca:6e:46:2e:37:b2:a7:24:d0:54:0e:f4:3b: 5f:f1:12:cf:d9:16:f1:f8:3e:9e:9c:ae:aa:dc:5a: bf:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:28:9F:98:C1:6E:FC:20:FF:05:94:A7:D9:2E:9D:29:35:5E:75:9C X509v3 Authority Key Identifier: keyid:C0:F8:DB:B2:14:A6:14:9F:3D:4D:42:A0:C4:13:2D:57:25:99:27:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:58:18:c6:78:44:e6:28:84:40:9e:d6:9f:ed:d7:f5:51:64: 95:4f:19:1d:8a:4a:5d:d9:b3:cf:cc:31:12:d1:ed:2e:11:b0: d9:ca:2f:0c:82:44:85:4c:04:19:ee:dd:f4:d3:1f:bf:5c:56: 06:0a:bb:ba:28:72:3c:f8:49:ee:7d:10:3b:86:a5:36:e1:16: 47:0d:53:a8:dc:67:13:77:95:4e:f2:91:b8:e8:0f:6c:f5:cf: 16:26:38:1a:ce:93:fa:93:d3:66:7d:f7:cb:ed:76:6c:5c:7a: 10:d9:d0:0b:8a:dd:4b:fa:99:f2:25:56:5d:e3:e4:7c:8e:92: 33:1c:04:96:84:a0:15:c7:7c:2b:b7:47:5b:a6:20:ca:61:36: 64:3d:38:da:1b:8a:92:fb:9a:9b:d2:76:04:31:87:1d:62:ed: 8c:6c:3a:1f:f5:c2:2d:bd:a3:b7:9e:0e:cd:5b:a0:2e:09:c3: 7e:63:a9:4a:ca:c8:51:a2:a9:9e:21:d4:88:ad:d2:e1:25:d2: a7:f3:95:22:68:9e:4e:09:54:99:3a:90:a9:90:a8:3b:ed:2e: 5c:9d:55:04:68:12:c7:04:07:dd:d3:96:e5:d4:96:31:ab:00: 01:6d:00:19:63:6a:c3:dd:70:96:8e:80:87:c0:0c:c8:19:25: 8c:8d:a6:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGn3jGmnZtNkbg6Ia9DPiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZjhkYmIyMTRhNjE0OWYzZDRkNDJhMGM0MTMyZDU3MjU5 OTI3NTIwHhcNMjUxMjI2MTAwMDQ0WhcNMjUxMjI3MTAwMDQ0WjAzMTEwLwYDVQQD EyhjODI4OWY5OGMxNmVmYzIwZmYwNTk0YTdkOTJlOWQyOTM1NWU3NTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY23NfePCqBjh0EK9FNBg7PrOEEz iyZ8JOk/pbbVpmlN1yGOjbVZEgB9lmTM7SZw0hdkXY7mnO/kWWN+gEMvNYeMQquV p1YURZju4fLX3A5KmNqJr615zJPTJZNVzfw2DwaGuziylKKYZDCwO1Pn222TJTZt Enk9QJy0J8G80JToiM9dwXv9wBpXyV1c+JaGTnUBX0ZL9W0nDhOKdjqn2tLgtdt2 ppXVLYILG4Et92l3wqdnWnhjsTHeiYJr/DPkmIeJC3v9ofkyObHc8k35VBFcVroI hqHOBU9zGa8NSvI8ospuRi43sqck0FQO9Dtf8RLP2Rbx+D6enK6q3Fq/UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgon5jBbvwg/wWUp9kunSk1XnWcMB8GA1UdIwQY MBaAFMD427IUphSfPU1CoMQTLVclmSdSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1BqYnNoU21GSjg5VFVLZ3hCTXRWeVdaSjFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wNzQ5YzAtZGVjMy00ZjAxLTliZDct MzQ0OGE4ODljZTc1LzEvd1BqYnNoU21GSjg5VFVLZ3hCTXRWeVdaSjFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8wNzQ5YzAtZGVjMy00ZjAxLTliZDctMzQ0OGE4ODljZTc1 LzEvd1BqYnNoU21GSjg5VFVLZ3hCTXRWeVdaSjFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVgYxnhE 5iiEQJ7Wn+3X9VFklU8ZHYpKXdmzz8wxEtHtLhGw2covDIJEhUwEGe7d9NMfv1xW Bgq7uihyPPhJ7n0QO4alNuEWRw1TqNxnE3eVTvKRuOgPbPXPFiY4Gs6T+pPTZn33 y+12bFx6ENnQC4rdS/qZ8iVWXePkfI6SMxwEloSgFcd8K7dHW6YgymE2ZD042huK kvuam9J2BDGHHWLtjGw6H/XCLb2jt54OzVugLgnDfmOpSsrIUaKpniHUiK3S4SXS p/OVImieTglUmTqQqZCoO+0uXJ1VBGgSxwQH3dOW5dSWMasAAW0AGWNqw91wlo6A h8AMyBkljI2mYA== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:31 2025 by rpki-client