This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft File: wBWqbOyG3yEV4qEOkgnYqi35i78.mft (raw, json) Hash identifier: MdibxeL8xbQQ3r6LX9rjiam8C8LD3CdGu4ed6YrD4YQ= Subject key identifier: 17:AC:A8:E9:72:42:EF:71:0E:94:A1:20:11:F2:3A:BD:6E:98:5E:3F Authority key identifier: C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF Certificate issuer: /CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf Certificate serial: 019B1203947B98A482FD55E3445E9AAB1842 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft Manifest number: 0232 Signing time: Fri 12 Dec 2025 10:03:03 +0000 Manifest this update: Fri 12 Dec 2025 10:03:03 +0000 Manifest next update: Sat 13 Dec 2025 10:03:03 +0000 Files and hashes: 1: u0y20R9QTPyQ909oZwz8h1z4D_c.roa (hash: JOHDDdtCt33NzefI4pce2GppbGjse6UDJKzNAqgwUuA=) 2: wBWqbOyG3yEV4qEOkgnYqi35i78.crl (hash: Y6uEyiY2nsukJ+jlCLGNPGQaetXRtBxB9vCJ5J+VCno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 10:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:03:94:7b:98:a4:82:fd:55:e3:44:5e:9a:ab:18:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf Validity Not Before: Dec 12 10:03:03 2025 GMT Not After : Dec 13 10:03:03 2025 GMT Subject: CN=17aca8e97242ef710e94a12011f23abd6e985e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e8:29:43:60:6a:ac:8d:70:11:78:08:f7:bf: 60:44:10:24:99:61:98:3d:e4:a4:b4:7a:39:cb:42: b6:ed:03:84:93:e9:4c:f4:bd:fe:6c:b1:92:11:b9: 5b:ec:cb:24:21:a1:49:e0:cd:84:a7:fc:83:fa:a8: 1d:d2:e7:d8:51:f0:70:d1:fc:30:3d:2d:fc:95:21: aa:b3:75:54:1e:0b:8a:ab:e4:34:57:28:52:2d:64: 21:8f:9d:ab:00:e6:21:ef:ae:14:44:a6:15:0c:d0: 75:33:89:a9:b3:98:4f:fb:f8:b1:bc:6a:dc:61:75: 3b:d4:24:75:7e:5d:33:15:3f:8e:dc:c0:0a:ac:16: 49:5b:f9:23:f9:01:8b:1f:6c:01:ce:4f:86:e7:7d: 7e:a3:af:ef:d6:64:9f:28:49:52:1a:62:53:d6:18: b2:d9:50:66:a2:58:44:e2:40:17:82:4a:e2:c2:73: ab:40:b1:1c:d9:b3:a5:cb:25:b4:a0:2f:2e:4d:fd: d3:b8:de:c4:82:5f:56:0a:54:09:76:49:12:b3:75: 72:30:23:fd:69:d5:e2:c5:fc:48:f9:60:51:fd:3d: 46:a2:32:94:61:45:92:e8:1c:f5:f0:83:85:6f:69: 04:54:76:45:6b:d1:93:8f:e2:e1:d9:47:f3:7d:2e: 05:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AC:A8:E9:72:42:EF:71:0E:94:A1:20:11:F2:3A:BD:6E:98:5E:3F X509v3 Authority Key Identifier: keyid:C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e4:30:cd:aa:b4:aa:e6:6e:00:ba:b8:15:03:9f:de:2a:13: 23:2f:d2:05:70:02:d0:70:d3:7d:04:d2:eb:d6:3c:2a:35:2f: 25:fd:62:c1:06:8d:9d:7f:2f:47:48:1a:86:2b:4a:a5:fb:8c: 26:08:32:c6:ae:70:c4:34:14:9e:5a:cf:91:d6:75:3e:56:5a: 6b:24:dd:a8:20:95:16:46:7f:0a:2e:6e:45:c7:83:3a:2d:f9: b9:d3:05:44:7b:60:97:56:13:3e:5b:ff:4c:b0:9d:73:b6:34: f5:de:7f:43:00:05:ae:30:70:8d:4a:47:73:8a:52:28:8c:7b: d1:e0:06:b5:c9:ec:c4:4f:6f:bd:46:80:db:8f:d7:fc:73:45: 42:ab:db:69:fd:2b:55:5a:08:8b:5b:aa:2c:cc:09:e7:1f:f0: 29:ce:55:fa:a3:c7:3d:0c:74:4e:52:c2:76:f4:56:5c:39:73: 57:ea:97:b1:36:6d:ed:3f:af:f6:79:53:3c:3b:2e:1c:74:54: 17:3e:a1:d4:5f:3d:9e:b5:48:1a:b6:93:49:d7:27:93:c9:c8: 9f:a1:8b:ad:e2:32:18:14:19:39:11:c6:c4:27:9f:e5:2e:a1: b5:20:13:34:31:12:05:0b:6b:f1:6b:72:3c:c9:c7:21:ae:00: 3d:62:2f:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSA5R7mKSC/VXjRF6aqxhCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTVhYTZjZWM4NmRmMjExNWUyYTEwZTkyMDlkOGFhMmRm OThiYmYwHhcNMjUxMjEyMTAwMzAzWhcNMjUxMjEzMTAwMzAzWjAzMTEwLwYDVQQD EygxN2FjYThlOTcyNDJlZjcxMGU5NGExMjAxMWYyM2FiZDZlOTg1ZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApegpQ2BqrI1wEXgI979gRBAkmWGY PeSktHo5y0K27QOEk+lM9L3+bLGSEblb7MskIaFJ4M2Ep/yD+qgd0ufYUfBw0fww PS38lSGqs3VUHguKq+Q0VyhSLWQhj52rAOYh764URKYVDNB1M4mps5hP+/ixvGrc YXU71CR1fl0zFT+O3MAKrBZJW/kj+QGLH2wBzk+G531+o6/v1mSfKElSGmJT1hiy 2VBmolhE4kAXgkriwnOrQLEc2bOlyyW0oC8uTf3TuN7Egl9WClQJdkkSs3VyMCP9 adXixfxI+WBR/T1GojKUYUWS6Bz18IOFb2kEVHZFa9GTj+Lh2UfzfS4FFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBesqOlyQu9xDpShIBHyOr1umF4/MB8GA1UdIwQY MBaAFMAVqmzsht8hFeKhDpIJ2Kot+Yu/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0JXcWJPeUczeUVWNHFFT2tnbllxaTM1aTc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83NGUwODUtM2EyOS00YzE5LTg0ODUt YjdmOWI3MDJlZDQ4LzEvd0JXcWJPeUczeUVWNHFFT2tnbllxaTM1aTc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS83NGUwODUtM2EyOS00YzE5LTg0ODUtYjdmOWI3MDJlZDQ4 LzEvd0JXcWJPeUczeUVWNHFFT2tnbllxaTM1aTc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOQwzaq0 quZuALq4FQOf3ioTIy/SBXAC0HDTfQTS69Y8KjUvJf1iwQaNnX8vR0gahitKpfuM Jggyxq5wxDQUnlrPkdZ1PlZaayTdqCCVFkZ/Ci5uRceDOi35udMFRHtgl1YTPlv/ TLCdc7Y09d5/QwAFrjBwjUpHc4pSKIx70eAGtcnsxE9vvUaA24/X/HNFQqvbaf0r VVoIi1uqLMwJ5x/wKc5V+qPHPQx0TlLCdvRWXDlzV+qXsTZt7T+v9nlTPDsuHHRU Fz6h1F89nrVIGraTSdcnk8nIn6GLreIyGBQZORHGxCef5S6htSATNDESBQtr8Wty PMnHIa4APWIvPA== -----END CERTIFICATE-----Generated at Fri Dec 12 18:48:27 2025 by rpki-client