This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft File: wg8AjBzMpi5vw1bWNCBVpifcbPI.mft (raw, json) Hash identifier: 1xxT6VmU6J96+l6DrN/1PPUSCXhq91K8kmiiMMF+ETA= Subject key identifier: 22:35:3C:EA:08:20:10:DF:54:F2:44:BE:D4:82:B1:76:4C:D2:6A:C0 Authority key identifier: C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2 Certificate issuer: /CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2 Certificate serial: 019B59AD142995EB1248A743AE3B00ED6021 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft Manifest number: 058A Signing time: Fri 26 Dec 2025 08:01:13 +0000 Manifest this update: Fri 26 Dec 2025 08:01:13 +0000 Manifest next update: Sat 27 Dec 2025 08:01:13 +0000 Files and hashes: 1: daVp811knSp1vAQ4VaSwB16wNuQ.roa (hash: iy8xMmMHNxJK9Q7iUdfrNXSZrKuA7PPo2zxoT8FZYdE=) 2: wg8AjBzMpi5vw1bWNCBVpifcbPI.crl (hash: Its2HX6iAhnuJ90eTdBMOmi6CaeuRtjEvMgPZVx6rek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ad:14:29:95:eb:12:48:a7:43:ae:3b:00:ed:60:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2 Validity Not Before: Dec 26 08:01:13 2025 GMT Not After : Dec 27 08:01:13 2025 GMT Subject: CN=22353cea082010df54f244bed482b1764cd26ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:db:e1:60:c0:96:fe:a2:99:0b:4d:9a:21:4d: 59:fd:2b:1c:d8:31:3b:6c:1f:4e:62:77:70:d2:b7: 7a:d5:df:de:33:8e:eb:35:29:ea:e8:7f:eb:35:cc: 47:60:9a:12:19:ab:b8:da:f2:f4:d9:67:5d:94:f7: 35:63:6e:e3:08:22:ef:6e:5f:fc:53:9f:ac:d8:28: 8d:52:c7:e7:9a:9b:0e:b4:aa:31:08:10:e7:3c:ff: 74:4e:ce:78:fe:58:a8:ba:7c:c3:25:c7:6c:9a:fb: 50:02:39:d2:7b:c7:2c:fa:80:12:ee:fa:11:cb:ef: 63:63:78:ae:06:41:cc:51:e7:1c:3c:bf:e3:67:8e: 51:32:eb:86:c1:83:ae:2b:f9:08:5d:de:7f:17:3d: f0:9f:53:0a:61:2e:70:8f:80:d9:85:a5:78:36:df: b3:a2:9f:c5:43:c4:37:7d:bd:dc:e3:f4:33:a3:de: 91:4b:ae:a9:a2:fd:54:4e:41:e6:42:74:35:db:75: ea:65:de:9c:83:9a:f8:9a:f1:c2:25:09:5f:e5:ef: 97:c7:de:22:ba:3a:77:d9:4a:68:85:f2:af:ed:a0: 15:b9:fa:d7:5c:18:1c:92:12:69:7d:b8:89:9f:6b: e8:46:47:be:b8:02:db:41:64:ed:19:6f:e0:b0:a5: d8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:35:3C:EA:08:20:10:DF:54:F2:44:BE:D4:82:B1:76:4C:D2:6A:C0 X509v3 Authority Key Identifier: keyid:C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d3:0d:be:e7:79:38:a2:ef:8b:23:35:23:e5:56:98:1c:07: 09:9d:77:73:80:3c:12:0c:45:c8:5a:82:fb:87:83:6f:e0:1e: 07:ba:11:51:e4:db:b8:56:4b:1b:ec:a4:b4:b0:d5:d1:df:44: 0c:1e:d9:d0:8c:fe:5d:cb:c3:e3:5c:e1:00:9c:41:64:b9:c8: 84:1b:f2:c1:e9:12:1b:fe:99:93:3d:8d:af:73:df:e9:c0:fb: 77:1b:e7:c9:cb:27:6d:57:92:37:0b:6f:f5:ce:66:75:a7:b1: 81:5a:18:af:32:67:13:6c:51:4d:e2:05:96:75:71:9c:f5:7a: 52:68:d0:5c:e7:b1:7d:53:b6:7d:68:16:c0:f6:fd:c5:42:04: 3f:d4:a6:3c:27:23:e5:be:dd:88:39:eb:dc:74:b6:98:99:85: fc:0c:a9:f5:92:ff:64:d8:24:a5:81:0c:da:58:37:72:ea:47: 69:66:4b:24:5d:64:c1:fd:b1:c1:06:aa:8d:82:06:a5:f5:a3: d8:45:7f:eb:d6:c8:4b:83:18:b5:16:de:d6:17:ea:3e:9c:80: bd:8a:03:25:46:5c:63:5f:3f:65:74:f1:2f:37:81:a6:dc:ca: 31:ba:5c:27:6b:94:6b:a0:79:9f:31:7a:85:82:44:a1:63:01: 27:06:fb:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrRQplesSSKdDrjsA7WAhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMGYwMDhjMWNjY2E2MmU2ZmMzNTZkNjM0MjA1NWE2Mjdk YzZjZjIwHhcNMjUxMjI2MDgwMTEzWhcNMjUxMjI3MDgwMTEzWjAzMTEwLwYDVQQD EygyMjM1M2NlYTA4MjAxMGRmNTRmMjQ0YmVkNDgyYjE3NjRjZDI2YWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNvhYMCW/qKZC02aIU1Z/Ssc2DE7 bB9OYndw0rd61d/eM47rNSnq6H/rNcxHYJoSGau42vL02WddlPc1Y27jCCLvbl/8 U5+s2CiNUsfnmpsOtKoxCBDnPP90Ts54/liounzDJcdsmvtQAjnSe8cs+oAS7voR y+9jY3iuBkHMUeccPL/jZ45RMuuGwYOuK/kIXd5/Fz3wn1MKYS5wj4DZhaV4Nt+z op/FQ8Q3fb3c4/Qzo96RS66pov1UTkHmQnQ123XqZd6cg5r4mvHCJQlf5e+Xx94i ujp32UpohfKv7aAVufrXXBgckhJpfbiJn2voRke+uALbQWTtGW/gsKXY+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCI1POoIIBDfVPJEvtSCsXZM0mrAMB8GA1UdIwQY MBaAFMIPAIwczKYub8NW1jQgVaYn3GzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2c4QWpCek1waTV2dzFiV05DQlZwaWZjYlBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81ODBlNTEtNGMwZC00MTYyLWE5YWUt N2Q3ZmNlNWRiMDVjLzEvd2c4QWpCek1waTV2dzFiV05DQlZwaWZjYlBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS81ODBlNTEtNGMwZC00MTYyLWE5YWUtN2Q3ZmNlNWRiMDVj LzEvd2c4QWpCek1waTV2dzFiV05DQlZwaWZjYlBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtMNvud5 OKLviyM1I+VWmBwHCZ13c4A8EgxFyFqC+4eDb+AeB7oRUeTbuFZLG+yktLDV0d9E DB7Z0Iz+XcvD41zhAJxBZLnIhBvywekSG/6Zkz2Nr3Pf6cD7dxvnycsnbVeSNwtv 9c5mdaexgVoYrzJnE2xRTeIFlnVxnPV6UmjQXOexfVO2fWgWwPb9xUIEP9SmPCcj 5b7diDnr3HS2mJmF/Ayp9ZL/ZNgkpYEM2lg3cupHaWZLJF1kwf2xwQaqjYIGpfWj 2EV/69bIS4MYtRbe1hfqPpyAvYoDJUZcY18/ZXTxLzeBptzKMbpcJ2uUa6B5nzF6 hYJEoWMBJwb71w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:06 2025 by rpki-client