This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft File: wc2HDWChpsQgZxWK7rzA4_1t2B8.mft (raw, json) Hash identifier: +ATXUIA2mxtDBwVZe68kY2MWz69iRjCyGh6c9o1gbKQ= Subject key identifier: 4D:65:0D:15:3B:C3:8E:A9:11:68:81:B1:FB:6E:1D:ED:0E:CF:13:27 Authority key identifier: C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F Certificate issuer: /CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f Certificate serial: 019B194D2BAF8BF41C1B051BDB08B34B03B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft Manifest number: 0459 Signing time: Sat 13 Dec 2025 20:00:46 +0000 Manifest this update: Sat 13 Dec 2025 20:00:46 +0000 Manifest next update: Sun 14 Dec 2025 20:00:46 +0000 Files and hashes: 1: BqHb_zqnMM3dIgBF_BTfgVY5a5k.roa (hash: uhtJUVXZSGPPQKjYqbLF+Cz5CPTBTCYfz/c5yIRK4Ss=) 2: wc2HDWChpsQgZxWK7rzA4_1t2B8.crl (hash: y7kzXQOVXfQYbzaR6L7B0WHYuafIkfs95qZFVcQPjss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:2b:af:8b:f4:1c:1b:05:1b:db:08:b3:4b:03:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f Validity Not Before: Dec 13 20:00:46 2025 GMT Not After : Dec 14 20:00:46 2025 GMT Subject: CN=4d650d153bc38ea9116881b1fb6e1ded0ecf1327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f7:f2:43:29:3b:2b:97:6e:0f:f0:8c:b6:ca: 08:ab:44:99:0b:6e:28:09:ce:94:92:0d:2f:1c:d3: 35:f1:ee:e3:cc:90:02:5b:ac:4c:84:31:49:f3:12: be:a9:a7:ce:fe:37:e1:b2:17:12:6f:a1:be:76:0e: 66:2a:7c:30:85:ff:72:b9:4c:77:6a:7c:dd:a4:52: ba:55:e0:a6:c5:16:03:84:90:11:91:ef:b4:2e:f6: 49:82:6e:8e:16:b5:05:17:1d:24:be:bf:b0:49:cf: 10:86:23:cf:f4:1b:ba:fd:49:90:97:5b:b1:97:94: b5:b2:49:5b:5a:b5:45:2e:2d:ef:76:60:7a:3c:7a: 29:4a:69:a3:5e:d0:96:37:3c:77:0b:07:80:17:f5: 88:06:22:88:fd:09:99:31:7b:a9:c3:cf:e1:18:20: 91:13:69:c9:a9:eb:51:78:9a:2e:c8:a3:f0:67:d6: 00:2c:e2:fb:14:50:bd:f3:d7:60:b6:2b:50:24:87: 69:22:f6:c2:03:51:2d:8a:fe:53:c8:f8:6e:17:23: bf:0e:15:21:39:77:b4:ad:58:3f:6c:c4:8f:1a:89: f1:bf:5a:75:3a:8a:2b:c3:83:ad:5c:09:9e:40:71: ac:ae:e0:12:77:48:78:04:ae:bb:eb:83:44:e1:b7: 6d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:65:0D:15:3B:C3:8E:A9:11:68:81:B1:FB:6E:1D:ED:0E:CF:13:27 X509v3 Authority Key Identifier: keyid:C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c6:ad:ab:f9:f5:61:2d:7c:17:f6:aa:8d:c3:d3:a3:c9:12: 89:b2:60:9a:03:60:23:79:83:57:cf:f2:be:05:cb:fc:0b:52: 2b:59:9a:d4:b3:c9:e8:5a:f2:69:b8:91:53:45:0b:0b:26:fc: 63:4f:08:b5:42:97:5e:ab:d8:5a:ce:fb:a1:6d:82:99:dd:a2: 8d:46:2a:38:b5:9a:9a:b5:c7:6b:09:80:bf:f8:20:55:c9:fc: 8b:93:64:c7:f6:55:70:5e:0a:88:cb:f8:d8:3f:63:16:6f:e1: 2d:ec:59:b8:fa:40:fe:30:14:53:8d:b2:f4:a1:16:14:a4:9c: 36:d1:a4:5f:fe:95:5d:6b:ac:a4:76:3e:c5:53:60:a8:b1:ba: 83:a1:b2:67:ea:9d:22:69:c6:49:db:51:48:e5:2d:38:91:2b: 4c:dc:f7:60:29:22:9f:ec:30:b4:92:24:f1:06:45:cd:9a:15: 15:de:02:72:63:4b:d3:08:12:82:89:ea:b3:48:f7:78:13:9c: c6:8c:6e:7d:33:74:ad:e5:4c:4a:4e:60:d1:75:04:05:4b:86: 8b:77:d6:62:f2:54:68:1a:fb:77:af:78:08:9e:3f:0c:26:bb: 45:04:56:65:59:f1:bf:c3:81:42:a1:38:80:60:c0:bf:14:30: 4a:5d:d9:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTSuvi/QcGwUb2wizSwO3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxY2Q4NzBkNjBhMWE2YzQyMDY3MTU4YWVlYmNjMGUzZmQ2 ZGQ4MWYwHhcNMjUxMjEzMjAwMDQ2WhcNMjUxMjE0MjAwMDQ2WjAzMTEwLwYDVQQD Eyg0ZDY1MGQxNTNiYzM4ZWE5MTE2ODgxYjFmYjZlMWRlZDBlY2YxMzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwffyQyk7K5duD/CMtsoIq0SZC24o Cc6Ukg0vHNM18e7jzJACW6xMhDFJ8xK+qafO/jfhshcSb6G+dg5mKnwwhf9yuUx3 anzdpFK6VeCmxRYDhJARke+0LvZJgm6OFrUFFx0kvr+wSc8QhiPP9Bu6/UmQl1ux l5S1sklbWrVFLi3vdmB6PHopSmmjXtCWNzx3CweAF/WIBiKI/QmZMXupw8/hGCCR E2nJqetReJouyKPwZ9YALOL7FFC989dgtitQJIdpIvbCA1Etiv5TyPhuFyO/DhUh OXe0rVg/bMSPGonxv1p1Ooorw4OtXAmeQHGsruASd0h4BK6764NE4bdtowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1lDRU7w46pEWiBsftuHe0OzxMnMB8GA1UdIwQY MBaAFMHNhw1goabEIGcViu68wOP9bdgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy84MzVhODItOGJiZS00MGIyLWIyZDQt MDQ4MWM2NmMyYjVhLzEvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy84MzVhODItOGJiZS00MGIyLWIyZDQtMDQ4MWM2NmMyYjVh LzEvd2MySERXQ2hwc1FnWnhXSzdyekE0XzF0MkI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8atq/n1 YS18F/aqjcPTo8kSibJgmgNgI3mDV8/yvgXL/AtSK1ma1LPJ6FryabiRU0ULCyb8 Y08ItUKXXqvYWs77oW2Cmd2ijUYqOLWamrXHawmAv/ggVcn8i5Nkx/ZVcF4KiMv4 2D9jFm/hLexZuPpA/jAUU42y9KEWFKScNtGkX/6VXWuspHY+xVNgqLG6g6GyZ+qd ImnGSdtRSOUtOJErTNz3YCkin+wwtJIk8QZFzZoVFd4CcmNL0wgSgonqs0j3eBOc xoxufTN0reVMSk5g0XUEBUuGi3fWYvJUaBr7d694CJ4/DCa7RQRWZVnxv8OBQqE4 gGDAvxQwSl3ZpA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:03:39 2025 by rpki-client