This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft File: wBekqCFysgav7hwT0pbuJgOFtXE.mft (raw, json) Hash identifier: vKs4Mm8vysZhhMqg7Lv001cHin7SHiTwKCADS9IU4LY= Subject key identifier: 73:2B:46:5C:80:81:A7:29:CF:57:37:85:B0:77:CB:FB:05:80:64:9B Authority key identifier: C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71 Certificate issuer: /CN=c017a4a82172b206afee1c13d296ee260385b571 Certificate serial: 019AF389BD4306823379CB50153B70EA3C64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 12:01:21 +0000 Manifest this update: Sat 06 Dec 2025 12:01:21 +0000 Manifest next update: Sun 07 Dec 2025 12:01:21 +0000 Files and hashes: 1: dCiNIBkWF2RsTfBzLCoJZdfeZWw.roa (hash: YbTpFGUkZZd0ope4WSof9klg7VlGCuc2kGLkcWvVqI4=) 2: wBekqCFysgav7hwT0pbuJgOFtXE.crl (hash: qIfJ0axJ1bGGwartbHlzRsd7LXRFSAxCPY4jcMxaE6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:bd:43:06:82:33:79:cb:50:15:3b:70:ea:3c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c017a4a82172b206afee1c13d296ee260385b571 Validity Not Before: Dec 6 12:01:21 2025 GMT Not After : Dec 7 12:01:21 2025 GMT Subject: CN=732b465c8081a729cf573785b077cbfb0580649b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0c:03:89:85:e3:db:99:ff:cb:31:4a:10:59: 65:bd:24:02:2f:a2:bb:63:61:2f:cf:73:93:33:f2: b3:56:8b:1d:ff:dc:bd:fd:81:0b:be:7a:de:ea:25: 0d:10:28:eb:14:85:3b:be:c8:43:fc:c1:16:ed:89: 8d:eb:d3:59:cd:81:64:01:39:97:f6:d9:e1:89:5f: b8:e8:07:11:d4:46:21:2e:02:a3:dd:92:1b:52:c5: 96:40:8a:a1:a7:c7:f0:3f:8a:0b:64:03:81:71:78: f4:e7:23:7d:5c:61:d7:0f:56:80:9e:22:77:54:41: 17:7d:a8:ef:e4:d8:b6:a9:32:a2:07:90:26:78:7c: e8:3e:1a:ad:8d:b9:fa:4d:4f:5f:9a:07:01:19:bd: d8:50:30:f4:39:61:d8:88:3b:e3:c1:0a:bc:99:65: 33:5b:ea:3a:cd:0c:59:00:36:5b:79:74:ce:52:e6: 17:0e:ec:9a:47:b1:19:2d:c9:91:e8:11:5d:5a:c3: 4a:94:2e:00:95:6f:2d:bb:3e:e7:e7:2b:31:bc:e4: f9:60:99:74:1d:c2:63:03:92:c2:d1:97:5e:af:0b: 8f:32:25:b1:85:60:d7:68:7c:06:6a:98:c0:8f:7d: d9:4c:3a:82:a6:27:c2:06:29:9f:0f:bc:6a:b9:60: 5a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2B:46:5C:80:81:A7:29:CF:57:37:85:B0:77:CB:FB:05:80:64:9B X509v3 Authority Key Identifier: keyid:C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:48:ab:b4:dd:e7:9b:7f:ab:48:d5:07:51:f7:7f:92:c2:0e: ef:49:bb:3c:ea:fd:a9:49:9f:df:83:bc:04:71:23:46:00:9b: b0:ef:47:7d:7b:4b:92:f9:1c:92:cc:40:d0:ed:98:03:e2:b6: 38:8c:b3:42:41:15:89:1c:93:9a:ca:f9:73:8e:a0:a6:33:70: eb:92:a7:90:6d:9b:81:52:aa:64:1a:19:a2:ca:df:5e:66:91: 7e:23:7f:f1:1c:92:37:20:b9:fb:57:25:db:7f:65:4e:29:5f: 30:be:07:6f:d1:1a:c8:47:73:6f:63:03:5c:22:c3:6a:60:94: 2c:3e:80:c8:b9:ed:cc:86:5d:3d:66:1c:cd:7f:8f:c2:88:eb: 13:36:fe:ff:17:2b:69:b6:4f:d7:d0:2c:36:ac:ff:98:a9:c7: 0d:bc:cf:f0:67:cb:d1:0c:52:04:f6:bf:00:c1:90:80:02:71: eb:ee:e5:68:f2:75:88:f1:95:db:3a:cb:d1:9a:30:b3:66:c0: 58:20:bc:2b:a7:40:fd:0f:b5:b7:ab:8d:a1:41:75:df:5a:97: 78:1c:6c:cd:1e:97:3c:37:37:65:ce:f7:78:c1:64:95:b5:b1: 59:67:a5:93:27:41:1c:2f:36:13:a7:ba:d8:17:8b:78:40:03: 5a:75:56:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzib1DBoIzectQFTtw6jxkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTdhNGE4MjE3MmIyMDZhZmVlMWMxM2QyOTZlZTI2MDM4 NWI1NzEwHhcNMjUxMjA2MTIwMTIxWhcNMjUxMjA3MTIwMTIxWjAzMTEwLwYDVQQD Eyg3MzJiNDY1YzgwODFhNzI5Y2Y1NzM3ODViMDc3Y2JmYjA1ODA2NDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigwDiYXj25n/yzFKEFllvSQCL6K7 Y2Evz3OTM/KzVosd/9y9/YELvnre6iUNECjrFIU7vshD/MEW7YmN69NZzYFkATmX 9tnhiV+46AcR1EYhLgKj3ZIbUsWWQIqhp8fwP4oLZAOBcXj05yN9XGHXD1aAniJ3 VEEXfajv5Ni2qTKiB5AmeHzoPhqtjbn6TU9fmgcBGb3YUDD0OWHYiDvjwQq8mWUz W+o6zQxZADZbeXTOUuYXDuyaR7EZLcmR6BFdWsNKlC4AlW8tuz7n5ysxvOT5YJl0 HcJjA5LC0ZderwuPMiWxhWDXaHwGapjAj33ZTDqCpifCBimfD7xquWBa9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMrRlyAgacpz1c3hbB3y/sFgGSbMB8GA1UdIwQY MBaAFMAXpKghcrIGr+4cE9KW7iYDhbVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0Jla3FDRnlzZ2F2N2h3VDBwYnVKZ09GdFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8zMzA1MWQtYzJhMC00YWM3LWI3ZjMt OTBhZGVjODVkZDg1LzEvd0Jla3FDRnlzZ2F2N2h3VDBwYnVKZ09GdFhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8zMzA1MWQtYzJhMC00YWM3LWI3ZjMtOTBhZGVjODVkZDg1 LzEvd0Jla3FDRnlzZ2F2N2h3VDBwYnVKZ09GdFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEirtN3n m3+rSNUHUfd/ksIO70m7POr9qUmf34O8BHEjRgCbsO9HfXtLkvkcksxA0O2YA+K2 OIyzQkEViRyTmsr5c46gpjNw65KnkG2bgVKqZBoZosrfXmaRfiN/8RySNyC5+1cl 239lTilfML4Hb9EayEdzb2MDXCLDamCULD6AyLntzIZdPWYczX+PwojrEzb+/xcr abZP19AsNqz/mKnHDbzP8GfL0QxSBPa/AMGQgAJx6+7laPJ1iPGV2zrL0Zows2bA WCC8K6dA/Q+1t6uNoUF131qXeBxszR6XPDc3Zc73eMFklbWxWWelkydBHC82E6e6 2BeLeEADWnVW2w== -----END CERTIFICATE-----Generated at Sat Dec 6 17:27:32 2025 by rpki-client