This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft File: wv6ZPR8xDoFzwXzpJ48en44i48I.mft (raw, json) Hash identifier: OSzLn2oOB1jZDGUaK6kKxXiyonI/131nKJCc+QkWrsk= Subject key identifier: B5:97:99:4E:30:23:C9:2F:CC:D7:46:F4:A4:FE:B8:30:23:45:EC:BF Authority key identifier: C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2 Certificate issuer: /CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2 Certificate serial: 019B085BAEF7E8F91AA53E7D3CB904745EEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft Manifest number: 176C Signing time: Wed 10 Dec 2025 13:03:04 +0000 Manifest this update: Wed 10 Dec 2025 13:03:04 +0000 Manifest next update: Thu 11 Dec 2025 13:03:04 +0000 Files and hashes: 1: Mp1fGdgDn3PJKQzmX0OXaKwztw8.roa (hash: r365CtsIuSw4zwNKBRELvDJ1xes0I/H0wB5Xk0xJ+cE=) 2: wv6ZPR8xDoFzwXzpJ48en44i48I.crl (hash: 5p8/7LheHPSaXKV1v6bcqgl/B3QAlBI3U/+yHY3iTIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:5b:ae:f7:e8:f9:1a:a5:3e:7d:3c:b9:04:74:5e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2 Validity Not Before: Dec 10 13:03:04 2025 GMT Not After : Dec 11 13:03:04 2025 GMT Subject: CN=b597994e3023c92fccd746f4a4feb8302345ecbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:fb:0c:2b:5a:60:4c:c1:c1:fe:d0:ff:29: 55:ba:c8:6b:4c:2a:c2:40:5f:15:cf:a5:61:fe:51: d5:f2:24:6f:a0:86:fe:c3:4a:04:c9:ad:c5:3e:ac: e2:ce:c6:e1:e8:8c:a8:86:7a:de:bd:cb:a6:5b:69: c0:1e:ee:81:f4:d5:5a:36:69:26:4b:45:54:61:2d: dd:94:6d:04:bb:24:f3:0e:71:22:8a:80:f4:50:68: 5d:fe:60:76:3d:c2:cd:45:d8:95:ce:21:32:fd:5d: 18:20:95:80:f8:c5:63:bd:b5:59:32:87:bd:15:2c: 1f:75:ca:79:33:57:f8:74:c2:33:2e:02:4a:eb:10: 82:22:97:46:7f:04:82:1c:74:ac:10:47:9c:b4:6c: 94:1f:cc:e2:dd:c3:fd:8a:c7:3c:3d:b5:f0:2d:ca: 95:66:4b:da:62:71:08:83:78:22:f7:e9:66:c6:d6: af:20:5c:e1:9b:02:bb:6b:4d:89:08:ba:b7:d0:5a: d8:77:db:22:4f:e0:f5:b3:4a:a5:cb:55:c4:4c:ff: a7:7a:cd:bd:fe:c6:a4:f6:dd:fc:c9:4e:d9:22:0e: 55:b5:a7:ca:43:aa:49:ae:56:32:b5:4a:66:14:09: 5e:55:6d:92:98:93:f2:78:af:a2:3b:18:cf:b3:2a: 1e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:97:99:4E:30:23:C9:2F:CC:D7:46:F4:A4:FE:B8:30:23:45:EC:BF X509v3 Authority Key Identifier: keyid:C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:11:fa:97:2b:29:5f:86:64:4e:2d:53:26:1f:42:2e:77:a3: ed:a3:09:61:24:31:f6:09:46:20:28:f3:0b:0d:58:2a:a0:eb: af:65:1b:26:4a:5b:54:6a:96:e7:48:09:a6:85:42:13:93:69: 3a:52:e2:4a:45:dc:2c:24:64:e6:77:e0:28:17:e2:d9:23:89: 52:f3:3a:3c:ad:4c:b6:44:a4:4a:ac:96:85:8b:dc:2d:2b:61: 8b:fc:77:3e:de:e7:97:d8:f3:bf:e3:5a:1e:98:5f:e9:00:e8: 2a:cf:31:76:87:bf:3d:6e:4e:a9:c5:9b:79:b0:45:27:3b:24: 36:99:67:5d:71:d5:5a:aa:30:5d:a5:e7:9f:cf:cd:2d:cd:a1: 4f:b1:ab:e8:9e:42:3f:12:1a:65:e6:93:fa:8d:12:18:a4:f9: 76:01:55:53:50:7d:c7:56:3a:00:4b:90:9b:98:f0:64:cd:4d: 78:e1:45:5e:1f:81:43:f4:34:0d:92:9b:58:ce:a2:e1:b3:a8: c8:01:5d:12:be:80:23:59:a4:b8:25:7d:41:f6:62:4a:f0:e9: dd:df:e8:cc:ab:d1:a4:5f:4f:bf:c0:8d:1f:90:5d:10:42:e8: 6e:68:12:fb:39:c8:df:86:19:94:46:e7:c4:f4:dd:f5:97:6d: af:cc:84:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIW6736PkapT59PLkEdF7sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZmU5OTNkMWYzMTBlODE3M2MxN2NlOTI3OGYxZTlmOGUy MmUzYzIwHhcNMjUxMjEwMTMwMzA0WhcNMjUxMjExMTMwMzA0WjAzMTEwLwYDVQQD EyhiNTk3OTk0ZTMwMjNjOTJmY2NkNzQ2ZjRhNGZlYjgzMDIzNDVlY2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9v7DCtaYEzBwf7Q/ylVushrTCrC QF8Vz6Vh/lHV8iRvoIb+w0oEya3FPqzizsbh6IyohnrevcumW2nAHu6B9NVaNmkm S0VUYS3dlG0EuyTzDnEiioD0UGhd/mB2PcLNRdiVziEy/V0YIJWA+MVjvbVZMoe9 FSwfdcp5M1f4dMIzLgJK6xCCIpdGfwSCHHSsEEectGyUH8zi3cP9isc8PbXwLcqV ZkvaYnEIg3gi9+lmxtavIFzhmwK7a02JCLq30FrYd9siT+D1s0qly1XETP+nes29 /sak9t38yU7ZIg5VtafKQ6pJrlYytUpmFAleVW2SmJPyeK+iOxjPsyoeWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWXmU4wI8kvzNdG9KT+uDAjRey/MB8GA1UdIwQY MBaAFML+mT0fMQ6Bc8F86SePHp+OIuPCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3Y2WlBSOHhEb0Z6d1h6cEo0OGVuNDRpNDhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNTMxMmItODQzOS00YmI0LTg2ZDIt NjliNDMyNzk5MzcyLzEvd3Y2WlBSOHhEb0Z6d1h6cEo0OGVuNDRpNDhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lNTMxMmItODQzOS00YmI0LTg2ZDItNjliNDMyNzk5Mzcy LzEvd3Y2WlBSOHhEb0Z6d1h6cEo0OGVuNDRpNDhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRH6lysp X4ZkTi1TJh9CLnej7aMJYSQx9glGICjzCw1YKqDrr2UbJkpbVGqW50gJpoVCE5Np OlLiSkXcLCRk5nfgKBfi2SOJUvM6PK1MtkSkSqyWhYvcLSthi/x3Pt7nl9jzv+Na Hphf6QDoKs8xdoe/PW5OqcWbebBFJzskNplnXXHVWqowXaXnn8/NLc2hT7Gr6J5C PxIaZeaT+o0SGKT5dgFVU1B9x1Y6AEuQm5jwZM1NeOFFXh+BQ/Q0DZKbWM6i4bOo yAFdEr6AI1mkuCV9QfZiSvDp3d/ozKvRpF9Pv8CNH5BdEELobmgS+znI34YZlEbn xPTd9Zdtr8yE6g== -----END CERTIFICATE-----Generated at Wed Dec 10 18:41:14 2025 by rpki-client