This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft File: wpN7lGGj0mbpNYNOUEehgiODYsg.mft (raw, json) Hash identifier: uyw0Yxd0GL+yMI3SJU5V03gkczlFUdus6sbkZpQDjww= Subject key identifier: FC:3E:F1:3C:7A:12:79:B7:F0:2E:DB:5D:A3:B9:1F:D1:CC:EF:CC:19 Authority key identifier: C2:93:7B:94:61:A3:D2:66:E9:35:83:4E:50:47:A1:82:23:83:62:C8 Certificate issuer: /CN=c2937b9461a3d266e935834e5047a182238362c8 Certificate serial: 019B59AC841433EB966F92AE979D7C2D086B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 08:00:36 +0000 Manifest this update: Fri 26 Dec 2025 08:00:36 +0000 Manifest next update: Sat 27 Dec 2025 08:00:36 +0000 Files and hashes: 1: kDT6d1olq2g9PhBud1lpevtgwMM.roa (hash: GVT4b+j1f9W7ipFuYf2UE8OPchdOvhrHWTWGtiol0Gg=) 2: wpN7lGGj0mbpNYNOUEehgiODYsg.crl (hash: sNhfwY492szC/FcyLxp3Dazg7KBUPrSFWo61Xyh2sTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:84:14:33:eb:96:6f:92:ae:97:9d:7c:2d:08:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2937b9461a3d266e935834e5047a182238362c8 Validity Not Before: Dec 26 08:00:36 2025 GMT Not After : Dec 27 08:00:36 2025 GMT Subject: CN=fc3ef13c7a1279b7f02edb5da3b91fd1ccefcc19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1e:07:e5:65:f7:4d:fb:19:0f:9c:29:cb:5e: 02:71:c8:d2:93:58:29:cb:63:7a:92:2a:d0:c7:93: ed:94:fe:2b:9e:f4:0e:fc:20:c5:8c:bf:cf:26:14: 97:fc:db:35:75:81:28:1b:79:c5:28:c0:00:dc:65: 8f:a7:6b:73:38:63:b9:22:00:54:40:95:35:ff:f8: 38:4b:62:37:13:fc:f3:4c:f0:ca:0d:c8:00:f4:8a: 61:a6:25:30:5a:76:2f:e2:a5:d5:21:05:f8:c9:fa: 88:09:b7:7d:ef:7f:e1:54:7f:99:3f:b2:38:95:a0: 5c:50:28:1e:e5:17:4b:1e:ce:27:67:8c:5a:0b:1a: 6b:12:17:a3:db:7e:48:48:c0:6b:15:33:08:bf:9b: 15:c8:29:b7:45:32:09:d3:e7:a5:5a:51:cf:db:c4: b2:1b:5c:c9:2f:d0:02:8f:b7:ba:4f:e6:b9:8e:8a: 4a:96:f7:08:c1:6a:cd:ac:f6:19:8c:de:a6:31:8d: fa:a0:0d:00:37:a6:61:28:3c:74:6b:23:13:a1:85: a8:46:d9:1f:af:2b:87:5d:33:e2:d4:a1:58:f2:2f: 87:40:c3:37:5f:15:df:b4:32:09:d8:59:32:c7:bb: 4f:5b:e8:9d:ed:d3:92:e0:e6:ef:4d:5c:69:00:24: 69:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3E:F1:3C:7A:12:79:B7:F0:2E:DB:5D:A3:B9:1F:D1:CC:EF:CC:19 X509v3 Authority Key Identifier: keyid:C2:93:7B:94:61:A3:D2:66:E9:35:83:4E:50:47:A1:82:23:83:62:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:36:ef:52:5c:e2:58:e1:7a:c0:97:2d:5e:f2:59:52:e9:a7: b3:3b:8f:e6:39:bc:37:29:ed:2d:18:a5:59:84:27:4b:04:06: 47:51:c8:49:a0:98:46:ec:af:e7:5e:99:5e:eb:39:9a:df:25: 1f:b7:0f:7c:3c:28:95:b3:b1:ab:a5:e2:79:be:79:83:28:6d: 3d:1f:64:fd:24:2b:2a:3b:cb:d6:b9:3c:a6:26:cb:ea:e9:71: 1b:6d:22:9a:85:b8:68:ed:f8:7b:20:f6:20:55:15:fa:eb:44: 4b:33:96:41:63:51:6a:74:fe:83:da:1e:57:2c:c4:d9:ae:95: ed:a1:f4:e0:76:2f:cc:50:14:bb:c0:fb:6d:fe:82:52:d8:6f: 18:b3:e6:e9:25:5d:29:d5:41:8f:f2:aa:5f:96:15:00:9f:ff: a9:5e:76:a1:8b:93:5b:4c:9c:ec:3f:a8:9f:ca:10:59:8d:3e: 0a:ea:66:7d:4a:29:2c:3e:7d:27:50:15:f1:22:7f:6a:fc:c7: fd:55:73:54:01:b6:7b:31:25:1f:5d:d6:03:a6:e3:16:f8:63: 9c:f8:63:7d:06:6e:50:c2:88:36:5b:e1:24:33:36:70:0c:25: dd:30:3d:78:20:f6:e7:d3:d4:52:ed:eb:fa:ea:c4:a4:18:f1: 7a:11:2d:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrIQUM+uWb5Kul518LQhrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyOTM3Yjk0NjFhM2QyNjZlOTM1ODM0ZTUwNDdhMTgyMjM4 MzYyYzgwHhcNMjUxMjI2MDgwMDM2WhcNMjUxMjI3MDgwMDM2WjAzMTEwLwYDVQQD EyhmYzNlZjEzYzdhMTI3OWI3ZjAyZWRiNWRhM2I5MWZkMWNjZWZjYzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh4H5WX3TfsZD5wpy14CccjSk1gp y2N6kirQx5PtlP4rnvQO/CDFjL/PJhSX/Ns1dYEoG3nFKMAA3GWPp2tzOGO5IgBU QJU1//g4S2I3E/zzTPDKDcgA9IphpiUwWnYv4qXVIQX4yfqICbd973/hVH+ZP7I4 laBcUCge5RdLHs4nZ4xaCxprEhej235ISMBrFTMIv5sVyCm3RTIJ0+elWlHP28Sy G1zJL9ACj7e6T+a5jopKlvcIwWrNrPYZjN6mMY36oA0AN6ZhKDx0ayMToYWoRtkf ryuHXTPi1KFY8i+HQMM3XxXftDIJ2Fkyx7tPW+id7dOS4ObvTVxpACRpBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPw+8Tx6Enm38C7bXaO5H9HM78wZMB8GA1UdIwQY MBaAFMKTe5Rho9Jm6TWDTlBHoYIjg2LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3BON2xHR2owbWJwTllOT1VFZWhnaU9EWXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85ZGVkMmUtMzk3My00YmNmLTk1NjIt Mzc3NDg4MWU3ZTFlLzEvd3BON2xHR2owbWJwTllOT1VFZWhnaU9EWXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC85ZGVkMmUtMzk3My00YmNmLTk1NjItMzc3NDg4MWU3ZTFl LzEvd3BON2xHR2owbWJwTllOT1VFZWhnaU9EWXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDbvUlzi WOF6wJctXvJZUumnszuP5jm8NyntLRilWYQnSwQGR1HISaCYRuyv516ZXus5mt8l H7cPfDwolbOxq6Xieb55gyhtPR9k/SQrKjvL1rk8pibL6ulxG20imoW4aO34eyD2 IFUV+utESzOWQWNRanT+g9oeVyzE2a6V7aH04HYvzFAUu8D7bf6CUthvGLPm6SVd KdVBj/KqX5YVAJ//qV52oYuTW0yc7D+on8oQWY0+CupmfUopLD59J1AV8SJ/avzH /VVzVAG2ezElH13WA6bjFvhjnPhjfQZuUMKINlvhJDM2cAwl3TA9eCD259PUUu3r +urEpBjxehEt5g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:40 2025 by rpki-client