This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft File: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft (raw, json) Hash identifier: h/X16uIqRunnrEmuQVaWXdp55UlC1RiScD/tGsr3IFA= Subject key identifier: 1F:DF:0C:D0:24:68:6F:6D:C0:B0:92:3E:07:AD:1F:EC:96:D9:5E:7E Authority key identifier: C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51 Certificate issuer: /CN=c0142e5d5cfaa452166bc7b55a65558f524d6751 Certificate serial: 019AF12E7763A177E1BBFBB9EE0920906064 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:02:25 +0000 Manifest this update: Sat 06 Dec 2025 01:02:25 +0000 Manifest next update: Sun 07 Dec 2025 01:02:25 +0000 Files and hashes: 1: sNmSuLPwop12596I--vLe1Fw_L8.roa (hash: rnnFcpfS8qT33aKuf/kRcr+W7tCgIM7nW6QVvMfILWQ=) 2: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl (hash: YfLeQst25wTOL6Xdtzx3UmJv/JzsG7Gor0J3rNwFeNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:77:63:a1:77:e1:bb:fb:b9:ee:09:20:90:60:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0142e5d5cfaa452166bc7b55a65558f524d6751 Validity Not Before: Dec 6 01:02:25 2025 GMT Not After : Dec 7 01:02:25 2025 GMT Subject: CN=1fdf0cd024686f6dc0b0923e07ad1fec96d95e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:22:be:c9:97:2f:8b:1f:30:51:f1:e2:94:fd: 49:e0:32:82:12:b9:ab:df:40:2d:4d:4a:de:39:4b: 96:03:33:7b:4e:00:39:51:56:98:c5:e3:49:2a:29: 24:4d:db:10:a7:99:dc:a7:c2:5a:83:07:8c:33:a8: c4:53:71:6c:63:bc:b7:a9:91:24:31:77:68:52:f7: 62:71:a0:7e:b7:75:df:ff:0a:ec:ab:a0:27:b0:4c: e7:08:06:b4:61:dc:db:b6:2f:43:da:66:3e:0e:d8: 76:83:37:e2:c9:9b:d2:93:0b:58:26:0d:97:58:80: 90:42:0c:bf:bb:ab:37:40:88:73:7d:15:31:06:d2: 3e:7f:5d:7d:4b:46:7f:39:31:d4:a6:c7:0d:3a:33: 6e:dc:3d:53:47:4c:7a:2a:02:43:2c:f0:8a:a3:2e: 57:65:9b:64:92:c7:66:9d:b3:1e:ee:68:1e:c7:dd: 0a:14:d2:93:8a:c3:d3:a0:a4:91:f6:2c:a0:74:32: 17:fb:78:75:99:08:4b:ec:8d:ec:89:33:db:22:98: 5d:63:c5:68:fe:ba:6e:4d:5e:f6:92:48:f1:45:b3: 1a:1c:da:3a:cf:98:cc:b4:5d:b3:45:4c:7f:cd:ff: 97:f8:3a:d8:0c:2d:9a:7d:7e:77:0d:e1:5b:0f:a7: b5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DF:0C:D0:24:68:6F:6D:C0:B0:92:3E:07:AD:1F:EC:96:D9:5E:7E X509v3 Authority Key Identifier: keyid:C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:59:e0:3c:26:84:cc:7d:45:71:d9:d3:0d:1f:08:c3:90:eb: e2:1c:cb:e9:9c:27:26:d9:83:a9:8a:0b:30:24:36:e0:08:4c: 2f:d7:68:48:8f:88:4d:5a:c7:80:23:5a:98:a0:e7:e7:6e:cb: 7d:c9:1f:32:f1:13:c8:7d:f6:df:69:69:ae:7c:39:cc:4a:38: 46:2d:60:bf:c1:fa:e2:61:a5:d0:35:b3:13:8f:38:7a:9d:15: 3b:a0:7a:60:e6:10:85:0b:6b:59:8f:17:1a:82:1c:30:d0:c1: 82:c7:d8:db:0e:20:8d:60:d0:b2:3d:25:ea:ea:3c:e3:a4:b0: 5d:5c:1e:90:83:01:bb:c3:45:cc:19:15:a9:78:94:41:db:40: 48:cf:95:b7:40:96:82:db:5a:75:43:55:ce:a6:4e:b7:13:fa: ae:a2:22:c9:6c:d9:3d:dc:39:ff:68:b4:68:de:84:6f:85:fc: 04:e1:5f:ca:ab:51:b1:ce:15:3d:96:41:32:6b:9b:e7:37:e3: 70:b5:24:9b:5f:ad:78:97:80:7f:58:64:44:85:1c:f9:b6:b4: cd:ac:a1:4d:54:f2:f2:22:21:38:0d:60:7d:74:6d:00:4e:ff: d3:91:72:f3:c6:f9:8b:13:92:1b:47:14:1f:cd:eb:97:ed:db: 2c:41:35:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLndjoXfhu/u57gkgkGBkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTQyZTVkNWNmYWE0NTIxNjZiYzdiNTVhNjU1NThmNTI0 ZDY3NTEwHhcNMjUxMjA2MDEwMjI1WhcNMjUxMjA3MDEwMjI1WjAzMTEwLwYDVQQD EygxZmRmMGNkMDI0Njg2ZjZkYzBiMDkyM2UwN2FkMWZlYzk2ZDk1ZTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyK+yZcvix8wUfHilP1J4DKCErmr 30AtTUreOUuWAzN7TgA5UVaYxeNJKikkTdsQp5ncp8JagweMM6jEU3FsY7y3qZEk MXdoUvdicaB+t3Xf/wrsq6AnsEznCAa0Ydzbti9D2mY+Dth2gzfiyZvSkwtYJg2X WICQQgy/u6s3QIhzfRUxBtI+f119S0Z/OTHUpscNOjNu3D1TR0x6KgJDLPCKoy5X ZZtkksdmnbMe7mgex90KFNKTisPToKSR9iygdDIX+3h1mQhL7I3siTPbIphdY8Vo /rpuTV72kkjxRbMaHNo6z5jMtF2zRUx/zf+X+DrYDC2afX53DeFbD6e15QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/fDNAkaG9twLCSPgetH+yW2V5+MB8GA1UdIwQY MBaAFMAULl1c+qRSFmvHtVplVY9STWdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0JRdVhWejZwRklXYThlMVdtVlZqMUpOWjFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iN2YxZGEtNDY3YS00MzYyLThiMmUt MTk3MGRlODRhMWYwLzEvd0JRdVhWejZwRklXYThlMVdtVlZqMUpOWjFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iN2YxZGEtNDY3YS00MzYyLThiMmUtMTk3MGRlODRhMWYw LzEvd0JRdVhWejZwRklXYThlMVdtVlZqMUpOWjFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAplngPCaE zH1FcdnTDR8Iw5Dr4hzL6ZwnJtmDqYoLMCQ24AhML9doSI+ITVrHgCNamKDn527L fckfMvETyH3232lprnw5zEo4Ri1gv8H64mGl0DWzE484ep0VO6B6YOYQhQtrWY8X GoIcMNDBgsfY2w4gjWDQsj0l6uo846SwXVwekIMBu8NFzBkVqXiUQdtASM+Vt0CW gttadUNVzqZOtxP6rqIiyWzZPdw5/2i0aN6Eb4X8BOFfyqtRsc4VPZZBMmub5zfj cLUkm1+teJeAf1hkRIUc+ba0zayhTVTy8iIhOA1gfXRtAE7/05Fy88b5ixOSG0cU H83rl+3bLEE1mw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:30:36 2025 by rpki-client