This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft File: wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft (raw, json) Hash identifier: KeRLc3uQI7MDkbRJIPAKfK8yLXmUZLPgRBXzuY+kFMs= Subject key identifier: 75:23:55:0D:83:17:D7:D3:9E:91:2D:D2:43:34:54:98:C4:A8:EF:D8 Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29 Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229 Certificate serial: 019B2B8B0D13F0036BFC0532CA7569DFE9F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft Manifest number: 1784 Signing time: Wed 17 Dec 2025 09:01:31 +0000 Manifest this update: Wed 17 Dec 2025 09:01:31 +0000 Manifest next update: Thu 18 Dec 2025 09:01:31 +0000 Files and hashes: 1: 2ckuuQNGelqhfIDU0HMZ3G_jIN4.roa (hash: Ly3hlzB/x5T87M29FpEs5LMZzWEyS3uYaMyLbALjnTU=) 2: wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl (hash: 9dQsbzHNHTGbb6UpxkZZC9sAx759rMeH0DOnRdTC6Kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8b:0d:13:f0:03:6b:fc:05:32:ca:75:69:df:e9:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229 Validity Not Before: Dec 17 09:01:31 2025 GMT Not After : Dec 18 09:01:31 2025 GMT Subject: CN=7523550d8317d7d39e912dd243345498c4a8efd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:36:05:b8:be:be:1d:b5:f1:cd:7f:5d:b0:b8: e2:32:e2:7e:3b:77:0c:04:f0:77:ce:ad:13:06:67: 4d:aa:c2:e0:c6:10:09:ce:0c:c1:30:aa:ad:f6:58: 09:53:c0:a7:5e:c4:32:58:28:16:91:4b:b1:22:c8: bb:0a:06:80:5a:5e:f2:db:aa:84:dc:89:cc:52:89: d1:71:3b:fa:8c:a0:d6:f6:98:5d:35:07:01:9d:35: 9b:21:33:67:b3:18:4e:c7:0d:c1:72:f8:f2:fc:b2: 23:0b:ad:83:68:88:88:c8:96:25:b9:8f:33:db:7b: 46:61:b7:c1:59:6d:eb:71:a3:53:a3:d7:1f:44:86: 09:5c:cc:8a:9c:1f:45:39:6b:5a:ae:15:3f:84:b8: 1a:a8:ef:18:da:3f:90:3d:35:99:fb:d5:d4:a5:87: 9b:d8:e7:a2:b7:ac:9d:f5:9e:a1:68:f0:78:3b:f7: 76:11:5b:43:55:c0:8c:74:ab:72:66:04:3f:6d:51: 51:30:23:cd:f7:7e:36:21:68:84:d8:ae:91:4d:71: 62:6c:d0:bd:21:71:9a:99:fc:88:d9:f5:f9:04:01: af:dd:b5:91:d3:6f:dd:7d:74:e4:a9:f0:9b:56:75: 8f:85:41:c9:1e:18:80:fa:31:c7:f7:85:78:83:70: 98:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:23:55:0D:83:17:D7:D3:9E:91:2D:D2:43:34:54:98:C4:A8:EF:D8 X509v3 Authority Key Identifier: keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:39:12:bc:ec:8a:a6:ca:0f:53:39:88:85:87:9f:7f:c4:e6: 97:66:1a:a0:89:fc:ce:b9:51:28:38:90:9d:4a:e3:0f:ea:96: 7e:ab:58:be:a6:62:d5:4b:bb:b5:22:5c:11:bf:63:f2:4e:0e: 10:ee:95:72:28:0f:46:a5:02:54:69:ff:35:62:59:58:4e:f6: 37:48:42:b7:da:1b:1a:b6:c8:d6:4f:67:49:7a:6b:59:09:8e: 63:ba:a4:cd:6f:d8:ea:d5:e0:71:d4:44:7b:c9:d5:87:87:b3: 23:09:1d:f1:96:1e:6d:82:88:84:4b:b9:09:76:23:69:a1:b4: a5:76:cc:0a:da:2a:d0:34:db:84:5d:27:39:37:6f:d7:f4:1d: c8:32:9b:c5:0b:a5:14:33:23:31:1c:7d:93:5c:ea:bc:46:12: e1:a0:8f:e1:05:b2:7e:61:72:da:c3:af:a1:75:87:5d:6d:b2: a8:29:11:44:0a:f2:37:5f:88:15:69:e4:60:26:d7:81:53:17: 8b:29:49:75:ae:8f:5a:64:74:71:a9:1a:78:13:cf:ee:e4:f1: 63:5d:2d:19:0c:1d:ca:0b:f8:73:d1:04:5f:6f:6d:f8:89:6c: 72:53:35:85:03:2b:df:3c:e2:f1:da:39:dc:53:42:c0:e2:67: 43:0d:89:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriw0T8ANr/AUyynVp3+n4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYTIzMzU5MGRlNTg2ZTBjNTU4MjFjNmY2ZDU3MzJhZmM4 NDEyMjkwHhcNMjUxMjE3MDkwMTMxWhcNMjUxMjE4MDkwMTMxWjAzMTEwLwYDVQQD Eyg3NTIzNTUwZDgzMTdkN2QzOWU5MTJkZDI0MzM0NTQ5OGM0YThlZmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTYFuL6+HbXxzX9dsLjiMuJ+O3cM BPB3zq0TBmdNqsLgxhAJzgzBMKqt9lgJU8CnXsQyWCgWkUuxIsi7CgaAWl7y26qE 3InMUonRcTv6jKDW9phdNQcBnTWbITNnsxhOxw3Bcvjy/LIjC62DaIiIyJYluY8z 23tGYbfBWW3rcaNTo9cfRIYJXMyKnB9FOWtarhU/hLgaqO8Y2j+QPTWZ+9XUpYeb 2Oeit6yd9Z6haPB4O/d2EVtDVcCMdKtyZgQ/bVFRMCPN9342IWiE2K6RTXFibNC9 IXGamfyI2fX5BAGv3bWR02/dfXTkqfCbVnWPhUHJHhiA+jHH94V4g3CYEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUjVQ2DF9fTnpEt0kM0VJjEqO/YMB8GA1UdIwQY MBaAFMCiM1kN5YbgxVghxvbVcyr8hBIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85N2IwYjctMDEzZC00MzNlLWI1Mzgt YTg0ZWI0MTFlZjhhLzEvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85N2IwYjctMDEzZC00MzNlLWI1MzgtYTg0ZWI0MTFlZjhh LzEvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjkSvOyK psoPUzmIhYeff8Tml2YaoIn8zrlRKDiQnUrjD+qWfqtYvqZi1Uu7tSJcEb9j8k4O EO6VcigPRqUCVGn/NWJZWE72N0hCt9obGrbI1k9nSXprWQmOY7qkzW/Y6tXgcdRE e8nVh4ezIwkd8ZYebYKIhEu5CXYjaaG0pXbMCtoq0DTbhF0nOTdv1/QdyDKbxQul FDMjMRx9k1zqvEYS4aCP4QWyfmFy2sOvoXWHXW2yqCkRRAryN1+IFWnkYCbXgVMX iylJda6PWmR0cakaeBPP7uTxY10tGQwdygv4c9EEX29t+IlsclM1hQMr3zzi8do5 3FNCwOJnQw2J/Q== -----END CERTIFICATE-----Generated at Wed Dec 17 19:02:33 2025 by rpki-client