This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft File: wHCBpvcho3qeHXmTFbs-onWLiHc.mft (raw, json) Hash identifier: KAfLvyCfJXd3+wSA83Wqvt73ZW8IZkypK95COli+6Rc= Subject key identifier: 2A:2C:87:3E:7D:73:C3:03:B6:05:35:CB:E8:F2:2B:58:32:56:ED:2A Authority key identifier: C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77 Certificate issuer: /CN=c07081a6f721a37a9e1d799315bb3ea2758b8877 Certificate serial: 019B2E54FEC24293083C342A9D34DDC0A86D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft Manifest number: 06D5 Signing time: Wed 17 Dec 2025 22:01:20 +0000 Manifest this update: Wed 17 Dec 2025 22:01:20 +0000 Manifest next update: Thu 18 Dec 2025 22:01:20 +0000 Files and hashes: 1: iBvouIeGNb-tETlrG7R7kd8KLJk.roa (hash: ZFh8TKmia8sW44WOw2BVZ15xBNpA9QpJzWskGjFsYMo=) 2: wHCBpvcho3qeHXmTFbs-onWLiHc.crl (hash: nIpMtaMe5c4kdY3T5ldj7pAjoxgprkIjirafVum4Ges=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:fe:c2:42:93:08:3c:34:2a:9d:34:dd:c0:a8:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c07081a6f721a37a9e1d799315bb3ea2758b8877 Validity Not Before: Dec 17 22:01:20 2025 GMT Not After : Dec 18 22:01:20 2025 GMT Subject: CN=2a2c873e7d73c303b60535cbe8f22b583256ed2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c3:50:94:90:6d:42:bd:c6:d7:b6:eb:fb:81: 96:a9:80:4c:9f:92:54:5a:a5:f1:b7:42:1b:53:63: 34:83:ba:65:4a:33:c1:7f:a0:9a:c1:81:2e:08:9b: 60:4b:f1:b4:c1:1b:87:fe:cf:b3:43:02:4b:3c:08: 18:db:d5:a9:da:85:70:e1:d0:2b:c5:4a:41:2d:83: a2:04:85:39:81:3c:f8:2f:d2:d7:1f:3d:e4:b2:a4: 83:a3:b6:90:27:15:10:24:b4:46:7c:55:88:09:a9: 09:e2:24:07:72:93:b3:a2:aa:21:86:7d:4b:bb:e3: d2:ab:d9:50:54:bc:d4:46:d3:f3:02:49:81:a0:84: b5:f8:9a:23:9a:86:28:5f:aa:40:ec:c2:bd:d4:99: da:cf:69:7e:fb:f2:02:16:16:64:bb:4c:6b:35:fd: 7a:bb:da:ea:7c:ff:0f:f0:d0:b2:87:ca:1b:2f:0f: ec:69:51:c9:3c:e9:3a:e1:70:e0:70:a4:2f:96:61: b4:52:4c:df:e6:7a:34:c2:62:db:cd:a1:c2:76:41: 75:12:5c:69:93:8f:e0:41:80:a1:ef:3d:63:23:f7: 04:b3:ca:e0:62:1f:ce:64:41:d1:90:80:49:42:39: 1e:d2:bf:45:93:92:39:86:a6:0f:ce:3d:79:4e:1e: 83:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2C:87:3E:7D:73:C3:03:B6:05:35:CB:E8:F2:2B:58:32:56:ED:2A X509v3 Authority Key Identifier: keyid:C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ca:c5:08:82:26:64:01:f4:32:5a:3f:e6:29:bc:1f:aa:f8: 7e:2e:b8:92:ef:ce:3e:4b:83:4c:3b:35:a7:c7:3b:68:25:1c: 9b:74:88:4e:61:ce:f6:67:b1:a6:44:45:e1:9e:49:47:5d:69: 96:f3:a3:31:a7:3c:c2:57:ee:32:a8:25:b4:6b:73:b9:d5:00: e4:ae:77:5f:36:15:b0:ad:34:b8:de:bb:42:3e:4d:95:d3:6f: a0:3d:67:3d:bb:45:31:e1:bf:ed:de:50:a3:ae:b1:e0:a0:7a: ac:da:66:9a:e0:c6:e6:9c:2b:5c:02:82:4e:6b:67:e3:83:a1: 8c:5e:49:08:e3:b1:a1:40:77:30:cc:54:d5:71:eb:a3:c2:05: 45:bc:06:65:08:a9:5d:ff:5e:64:85:c8:79:1f:3b:a5:67:20: f7:36:48:b7:53:64:ba:73:2f:e9:dc:49:72:be:00:38:5e:34: d9:a9:bb:ac:de:98:4a:69:a9:52:a7:4f:96:aa:c1:58:23:a7: ba:48:c1:67:16:97:05:c4:d7:12:92:a6:28:bb:e5:bf:4d:cc: 69:2a:3d:1e:3e:80:ec:55:13:59:83:14:3b:66:4b:19:68:8c: b7:45:03:75:f3:6d:d2:47:75:49:bc:80:fd:d0:28:b9:2f:cb: 7c:eb:5a:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVP7CQpMIPDQqnTTdwKhtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNzA4MWE2ZjcyMWEzN2E5ZTFkNzk5MzE1YmIzZWEyNzU4 Yjg4NzcwHhcNMjUxMjE3MjIwMTIwWhcNMjUxMjE4MjIwMTIwWjAzMTEwLwYDVQQD EygyYTJjODczZTdkNzNjMzAzYjYwNTM1Y2JlOGYyMmI1ODMyNTZlZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38NQlJBtQr3G17br+4GWqYBMn5JU WqXxt0IbU2M0g7plSjPBf6CawYEuCJtgS/G0wRuH/s+zQwJLPAgY29Wp2oVw4dAr xUpBLYOiBIU5gTz4L9LXHz3ksqSDo7aQJxUQJLRGfFWICakJ4iQHcpOzoqohhn1L u+PSq9lQVLzURtPzAkmBoIS1+JojmoYoX6pA7MK91Jnaz2l++/ICFhZku0xrNf16 u9rqfP8P8NCyh8obLw/saVHJPOk64XDgcKQvlmG0Ukzf5no0wmLbzaHCdkF1Elxp k4/gQYCh7z1jI/cEs8rgYh/OZEHRkIBJQjke0r9Fk5I5hqYPzj15Th6DHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoshz59c8MDtgU1y+jyK1gyVu0qMB8GA1UdIwQY MBaAFMBwgab3IaN6nh15kxW7PqJ1i4h3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0hDQnB2Y2hvM3FlSFhtVEZicy1vbldMaUhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85YWZkMjMtZDI4MC00OTVjLWIyNTIt ZjYwMDMxN2IxOTc4LzEvd0hDQnB2Y2hvM3FlSFhtVEZicy1vbldMaUhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy85YWZkMjMtZDI4MC00OTVjLWIyNTItZjYwMDMxN2IxOTc4 LzEvd0hDQnB2Y2hvM3FlSFhtVEZicy1vbldMaUhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWsrFCIIm ZAH0Mlo/5im8H6r4fi64ku/OPkuDTDs1p8c7aCUcm3SITmHO9mexpkRF4Z5JR11p lvOjMac8wlfuMqgltGtzudUA5K53XzYVsK00uN67Qj5NldNvoD1nPbtFMeG/7d5Q o66x4KB6rNpmmuDG5pwrXAKCTmtn44OhjF5JCOOxoUB3MMxU1XHro8IFRbwGZQip Xf9eZIXIeR87pWcg9zZIt1NkunMv6dxJcr4AOF402am7rN6YSmmpUqdPlqrBWCOn ukjBZxaXBcTXEpKmKLvlv03MaSo9Hj6A7FUTWYMUO2ZLGWiMt0UDdfNt0kd1SbyA /dAouS/LfOtawg== -----END CERTIFICATE-----Generated at Thu Dec 18 07:58:15 2025 by rpki-client