This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.mft File: wBgy1Ug13BTpEp4LprJRSzlLydM.mft (raw, json) Hash identifier: 3HRxu9+ri5ssfOirMRBvDtQyQGnlTYwJo8oLnXYxtFA= Subject key identifier: 97:41:31:9D:9E:DA:AA:27:59:95:A5:CB:63:C8:42:CF:3D:D3:62:56 Authority key identifier: C0:18:32:D5:48:35:DC:14:E9:12:9E:0B:A6:B2:51:4B:39:4B:C9:D3 Certificate issuer: /CN=c01832d54835dc14e9129e0ba6b2514b394bc9d3 Certificate serial: 019AF12D3C516BF57A1DF1D2155DA20E4FBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBgy1Ug13BTpEp4LprJRSzlLydM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:01:04 +0000 Manifest this update: Sat 06 Dec 2025 01:01:04 +0000 Manifest next update: Sun 07 Dec 2025 01:01:04 +0000 Files and hashes: 1: wBgy1Ug13BTpEp4LprJRSzlLydM.crl (hash: lGfbeFrtUTpE9VDm8drN6L6NTIfo1nnbc1oqfpOSh2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.crl rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.mft rsync://rpki.ripe.net/repository/DEFAULT/wBgy1Ug13BTpEp4LprJRSzlLydM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:3c:51:6b:f5:7a:1d:f1:d2:15:5d:a2:0e:4f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c01832d54835dc14e9129e0ba6b2514b394bc9d3 Validity Not Before: Dec 6 01:01:04 2025 GMT Not After : Dec 7 01:01:04 2025 GMT Subject: CN=9741319d9edaaa275995a5cb63c842cf3dd36256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c6:28:b9:99:34:63:72:cd:0f:35:5c:87:3a: 7a:b1:30:06:fb:87:8a:27:ac:09:eb:37:96:41:3f: 95:7b:22:cd:1f:99:34:73:18:5b:71:cd:6c:38:01: 00:23:bf:e2:ba:5c:5c:0c:3b:3a:a2:ed:fc:79:84: 9e:f2:5a:84:43:25:67:7b:f4:6a:d3:06:0e:0a:d3: 78:ea:6b:8e:4c:dc:06:2b:ff:d7:2e:ef:f1:17:7c: dd:2e:91:f6:c5:91:aa:b5:b9:e1:b6:d3:96:2e:38: 14:94:4b:5c:68:69:4d:24:e6:f4:68:5b:d2:b6:92: 5b:df:7d:39:2e:62:23:f9:2a:a1:01:c5:4d:3c:10: 3c:00:cf:c4:62:70:82:18:2f:74:5b:b5:12:b0:08: b5:5c:e5:21:4b:16:f7:56:df:f8:97:f1:a0:47:92: 57:51:84:a6:d4:c0:8c:ab:fa:8d:cd:ff:8d:ef:fc: 3e:00:32:fe:4b:24:94:84:2d:7b:b2:72:1f:a5:35: 50:f7:6f:01:e5:96:02:5e:22:b3:e5:cf:fd:83:5e: 95:8d:b1:d7:0f:5a:07:de:de:6b:28:61:65:ea:05: 86:50:03:28:bd:8c:2f:52:7a:43:45:f7:d5:d5:7c: 8d:7f:11:7c:c5:85:10:f7:97:6f:4d:79:81:9b:c6: d6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:41:31:9D:9E:DA:AA:27:59:95:A5:CB:63:C8:42:CF:3D:D3:62:56 X509v3 Authority Key Identifier: keyid:C0:18:32:D5:48:35:DC:14:E9:12:9E:0B:A6:B2:51:4B:39:4B:C9:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBgy1Ug13BTpEp4LprJRSzlLydM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f5e26b-787a-4013-b635-8582810208c6/1/wBgy1Ug13BTpEp4LprJRSzlLydM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:fb:bc:c4:3a:08:5e:8a:db:48:87:56:b3:4e:54:7b:a0:9d: 17:41:14:e2:27:07:68:15:b6:ae:7d:3f:fe:eb:97:60:1d:fa: ad:56:83:bb:f5:9a:05:ec:2c:5d:c1:44:01:75:a3:06:b6:67: 4c:11:b2:db:d0:53:2b:1d:f3:75:9f:af:68:4b:18:f1:5f:97: c1:3c:46:cb:8d:a8:60:24:6b:67:c0:08:74:31:28:f3:a2:ed: 2b:23:ab:b3:ac:33:32:5e:c4:8f:5e:e1:ad:3f:32:33:56:e0: 07:ee:cf:88:bb:0a:71:86:f0:53:c1:37:1d:a8:fc:54:fe:78: a8:46:d9:d4:8a:9e:4d:bb:ef:fa:67:13:94:69:67:42:ab:b3: af:41:1a:13:da:67:50:fe:b4:49:4c:ee:67:d9:b4:86:c5:eb: 2d:0c:3c:3a:f2:c2:38:ac:0d:a1:2a:fc:53:32:76:5c:6b:fc: 39:aa:fa:8d:4f:47:86:d4:6e:c0:5b:c0:4f:db:09:84:a3:15: fd:cd:c2:2e:2a:e0:cb:a8:07:52:79:e6:b1:64:3e:a6:88:bf: 1f:51:ad:e1:60:ea:56:79:76:56:9a:86:62:f1:ca:a0:ab:61: 3a:b2:ef:9b:5f:c9:b9:a6:c5:46:2a:8e:f5:e1:fe:84:fb:f4: a0:20:22:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTxRa/V6HfHSFV2iDk+/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTgzMmQ1NDgzNWRjMTRlOTEyOWUwYmE2YjI1MTRiMzk0 YmM5ZDMwHhcNMjUxMjA2MDEwMTA0WhcNMjUxMjA3MDEwMTA0WjAzMTEwLwYDVQQD Eyg5NzQxMzE5ZDllZGFhYTI3NTk5NWE1Y2I2M2M4NDJjZjNkZDM2MjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMYouZk0Y3LNDzVchzp6sTAG+4eK J6wJ6zeWQT+VeyLNH5k0cxhbcc1sOAEAI7/iulxcDDs6ou38eYSe8lqEQyVne/Rq 0wYOCtN46muOTNwGK//XLu/xF3zdLpH2xZGqtbnhttOWLjgUlEtcaGlNJOb0aFvS tpJb3305LmIj+SqhAcVNPBA8AM/EYnCCGC90W7USsAi1XOUhSxb3Vt/4l/GgR5JX UYSm1MCMq/qNzf+N7/w+ADL+SySUhC17snIfpTVQ928B5ZYCXiKz5c/9g16VjbHX D1oH3t5rKGFl6gWGUAMovYwvUnpDRffV1XyNfxF8xYUQ95dvTXmBm8bWQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdBMZ2e2qonWZWly2PIQs8902JWMB8GA1UdIwQY MBaAFMAYMtVINdwU6RKeC6ayUUs5S8nTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0JneTFVZzEzQlRwRXA0THBySlJTemxMeWRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9mNWUyNmItNzg3YS00MDEzLWI2MzUt ODU4MjgxMDIwOGM2LzEvd0JneTFVZzEzQlRwRXA0THBySlJTemxMeWRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9mNWUyNmItNzg3YS00MDEzLWI2MzUtODU4MjgxMDIwOGM2 LzEvd0JneTFVZzEzQlRwRXA0THBySlJTemxMeWRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfu8xDoI XorbSIdWs05Ue6CdF0EU4icHaBW2rn0//uuXYB36rVaDu/WaBewsXcFEAXWjBrZn TBGy29BTKx3zdZ+vaEsY8V+XwTxGy42oYCRrZ8AIdDEo86LtKyOrs6wzMl7Ej17h rT8yM1bgB+7PiLsKcYbwU8E3Haj8VP54qEbZ1IqeTbvv+mcTlGlnQquzr0EaE9pn UP60SUzuZ9m0hsXrLQw8OvLCOKwNoSr8UzJ2XGv8Oar6jU9HhtRuwFvAT9sJhKMV /c3CLirgy6gHUnnmsWQ+poi/H1Gt4WDqVnl2VpqGYvHKoKthOrLvm1/JuabFRiqO 9eH+hPv0oCAiDA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:09:44 2025 by rpki-client