This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft File: wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft (raw, json) Hash identifier: qHHjLOqpOnE2ST2Aw6/vipsnbvJ0f9PJSM46w5B2MS0= Subject key identifier: 39:AD:6C:D0:82:4B:0C:F6:78:BC:BE:81:87:C1:AC:63:21:D0:91:0C Authority key identifier: C2:E2:4A:6E:3B:37:5E:82:7E:BD:6E:28:8D:9E:55:32:B3:A1:B6:84 Certificate issuer: /CN=c2e24a6e3b375e827ebd6e288d9e5532b3a1b684 Certificate serial: 019AF464D3306C24B83B9E8C8041E3648280 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 16:00:39 +0000 Manifest this update: Sat 06 Dec 2025 16:00:39 +0000 Manifest next update: Sun 07 Dec 2025 16:00:39 +0000 Files and hashes: 1: 1-sPggFgoLgEYQ3a9DEa-ikM_oT0.roa (hash: aDnt2VZtITmENjGl4t0nf2cwLhZtXyAhYwK+dLEZq10=) 2: wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl (hash: 8ewWd325CelN6JHwrNlXQcNnVeJ2MbhysYVkJ5JkEoc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:d3:30:6c:24:b8:3b:9e:8c:80:41:e3:64:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2e24a6e3b375e827ebd6e288d9e5532b3a1b684 Validity Not Before: Dec 6 16:00:39 2025 GMT Not After : Dec 7 16:00:39 2025 GMT Subject: CN=39ad6cd0824b0cf678bcbe8187c1ac6321d0910c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b7:db:c9:20:2b:2b:69:e2:37:f5:ff:7b:5a: ac:de:25:e5:15:a3:90:4d:f9:1f:5d:55:ed:9e:0d: 2b:54:f7:df:df:40:f1:e2:3f:ad:4b:0a:d3:0c:64: 91:ba:c6:8f:da:d3:b2:9c:09:04:36:ca:8a:b9:f8: 60:1a:d5:25:ca:b0:15:0f:7c:92:a8:b4:39:88:b2: d5:c0:c1:95:e5:de:65:98:bc:19:40:4b:e1:2e:a3: 06:5b:99:33:21:21:71:b0:85:c0:8f:25:3b:33:0c: 39:59:f5:15:6e:f7:c0:da:5a:8a:78:b8:bc:65:1c: 3f:f1:3a:51:85:05:fa:d4:83:a6:f4:40:3c:76:d6: 64:86:ff:46:6e:26:eb:ba:7f:6f:4e:6c:c7:4f:04: 4e:22:07:bb:46:3c:d3:90:1e:ed:2f:01:62:fe:9b: 3f:6b:93:1c:f9:bb:8b:4e:75:bf:a8:30:bf:29:f1: 89:91:25:5c:5e:e8:0e:69:36:f7:47:36:9d:86:64: 4e:a9:cb:46:48:ce:21:33:07:11:6b:6a:f5:69:8e: 1d:ba:81:06:51:ad:53:45:b0:cd:87:41:6d:63:42: 98:ce:53:17:b8:49:cc:56:b4:9a:81:6f:cd:e1:96: 6a:03:f6:00:5b:21:5d:ba:5e:53:d1:2f:b2:cd:97: 76:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AD:6C:D0:82:4B:0C:F6:78:BC:BE:81:87:C1:AC:63:21:D0:91:0C X509v3 Authority Key Identifier: keyid:C2:E2:4A:6E:3B:37:5E:82:7E:BD:6E:28:8D:9E:55:32:B3:A1:B6:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:6e:31:08:39:e0:a5:a2:1b:d5:3e:78:0c:b0:1c:49:73:2f: 0b:c8:a1:5c:72:57:b6:cf:fd:28:2f:ba:12:17:f5:20:dc:5c: e1:7c:37:41:2f:48:2c:c7:b2:8c:85:f2:b9:12:07:85:c5:3a: f6:af:07:2d:2d:c8:26:1c:73:60:2f:6f:6a:6d:bd:1d:82:e5: c6:7d:e6:bd:e0:a4:1b:a0:ed:5d:b9:10:2a:dd:6d:df:51:65: ed:e0:7c:41:41:d3:bd:63:c5:a6:85:ec:49:15:9a:56:f4:8c: 77:5b:bf:3b:90:e6:ba:f9:af:a1:d3:03:19:7b:58:5a:92:ee: 53:25:7d:ab:bc:f3:98:87:48:f6:b0:f3:46:8d:35:31:f7:1a: e9:21:05:d4:0b:14:e2:ed:0b:9b:8c:27:09:3b:c4:91:e4:e4: 67:b7:01:73:70:1f:7f:86:e1:b4:e4:b0:98:a1:c1:81:bc:aa: c8:00:12:59:12:33:ef:3a:9e:46:c7:0c:a2:9b:30:98:f3:56: 32:84:5c:31:b1:fc:29:0c:85:d6:9f:95:8e:7a:a4:c3:77:bc: 1d:dc:99:ad:cb:35:58:0b:2e:22:43:d6:5c:ed:2a:bc:32:5f: 42:88:fb:c5:45:47:d7:be:ab:4e:a9:85:99:15:a1:33:71:9b: 5a:b0:8d:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZNMwbCS4O56MgEHjZIKAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZTI0YTZlM2IzNzVlODI3ZWJkNmUyODhkOWU1NTMyYjNh MWI2ODQwHhcNMjUxMjA2MTYwMDM5WhcNMjUxMjA3MTYwMDM5WjAzMTEwLwYDVQQD EygzOWFkNmNkMDgyNGIwY2Y2NzhiY2JlODE4N2MxYWM2MzIxZDA5MTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rfbySArK2niN/X/e1qs3iXlFaOQ TfkfXVXtng0rVPff30Dx4j+tSwrTDGSRusaP2tOynAkENsqKufhgGtUlyrAVD3yS qLQ5iLLVwMGV5d5lmLwZQEvhLqMGW5kzISFxsIXAjyU7Mww5WfUVbvfA2lqKeLi8 ZRw/8TpRhQX61IOm9EA8dtZkhv9Gbibrun9vTmzHTwROIge7RjzTkB7tLwFi/ps/ a5Mc+buLTnW/qDC/KfGJkSVcXugOaTb3RzadhmROqctGSM4hMwcRa2r1aY4duoEG Ua1TRbDNh0FtY0KYzlMXuEnMVrSagW/N4ZZqA/YAWyFdul5T0S+yzZd2CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmtbNCCSwz2eLy+gYfBrGMh0JEMMB8GA1UdIwQY MBaAFMLiSm47N16Cfr1uKI2eVTKzobaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3VKS2JqczNYb0otdlc0b2paNVZNck9odG9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9mOTE2YmMtMjliMS00ZjA5LTgzZGUt ZDU0NGFjMDYyZDFmLzEvd3VKS2JqczNYb0otdlc0b2paNVZNck9odG9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9mOTE2YmMtMjliMS00ZjA5LTgzZGUtZDU0NGFjMDYyZDFm LzEvd3VKS2JqczNYb0otdlc0b2paNVZNck9odG9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhm4xCDng paIb1T54DLAcSXMvC8ihXHJXts/9KC+6Ehf1INxc4Xw3QS9ILMeyjIXyuRIHhcU6 9q8HLS3IJhxzYC9vam29HYLlxn3mveCkG6DtXbkQKt1t31Fl7eB8QUHTvWPFpoXs SRWaVvSMd1u/O5DmuvmvodMDGXtYWpLuUyV9q7zzmIdI9rDzRo01Mfca6SEF1AsU 4u0Lm4wnCTvEkeTkZ7cBc3Aff4bhtOSwmKHBgbyqyAASWRIz7zqeRscMopswmPNW MoRcMbH8KQyF1p+Vjnqkw3e8HdyZrcs1WAsuIkPWXO0qvDJfQoj7xUVH176rTqmF mRWhM3GbWrCNtw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:15:47 2025 by rpki-client