This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft File: wSrJsU_SYajSdjqtQXQyvrxJoNY.mft (raw, json) Hash identifier: UoHiCkjfRDME54jjVMMB9Esn8XlRlJUE1NGoAJmi48A= Subject key identifier: E3:B4:BB:2F:32:44:CA:45:A5:D7:94:37:AC:C2:DB:FD:A5:AC:9E:CA Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 019B2F307D0BAB6F858B14B2CD0486FF5C26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft Manifest number: 14AB Signing time: Thu 18 Dec 2025 02:01:05 +0000 Manifest this update: Thu 18 Dec 2025 02:01:05 +0000 Manifest next update: Fri 19 Dec 2025 02:01:05 +0000 Files and hashes: 1: 9qmcHM-VcZ83QpuDDXRDTZzjRPA.roa (hash: T9bQyp4qC173zpUrvp23zRV6IJ2BWrYnmOmyqxCjQto=) 2: L5uizbtROk6GB-R7fgrPSdF9458.roa (hash: TQEmzD8dtp5XF7xVELdssPYaS3183qisGdaHaztP3Ns=) 3: PF3fO-eTWo6-cPGvdPVhKKttSws.roa (hash: f6FdvkS18ddS/HJEFfzmPq90ce/EiZOtTBozEQTvOIE=) 4: PmQwjeWPX1uc6kgeCDNacsuKkvM.roa (hash: a5MkN/N9VDjUV72wDiMVAY0/sIKzPUhqOt4JzBP4rPc=) 5: gu1qAVxYV1JNHUi7sma3zTVhxOY.roa (hash: 35rYj48R9KZMpiK938BtDR3yOfaylU/kY6qRQtuDujg=) 6: h6hIuizM5NfGODakvbCHb0dbPy8.roa (hash: xkEHjrBFDDiSHn/sjBQGlKLjsMLThbhwgH9fRua5IZs=) 7: lbe3R6qsC7flHOItm2HZ_rtUMYs.roa (hash: v1yUIN+YIJofBB2LuxpKb3viTsG7VddaXzM7Y68aNOE=) 8: pOAHo_xz8DPS-PlS6NdmOeIWwMQ.roa (hash: 19j4bFy6Qzt1lfA2YhipAm48g4iEQA4VOYkVWjiA/os=) 9: t662D9vApr8ZiFSjITs7a3oVIQY.roa (hash: ysoT6z2U1fG/7XYJruqmcsqEJYDDWfQicEyYt1W7TQQ=) 10: wSrJsU_SYajSdjqtQXQyvrxJoNY.crl (hash: H57V7tKLJhtxkR7Az9PlTPwFkQ6iaHPc//kF9ssCXdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:7d:0b:ab:6f:85:8b:14:b2:cd:04:86:ff:5c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Dec 18 02:01:05 2025 GMT Not After : Dec 19 02:01:05 2025 GMT Subject: CN=e3b4bb2f3244ca45a5d79437acc2dbfda5ac9eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ac:14:af:fe:4b:7f:d5:1e:c0:4b:2b:37:a3: 2f:1b:d5:dd:78:9c:8e:f0:61:ef:a9:b0:59:c8:f3: 68:33:87:08:a0:5a:6a:42:22:60:ee:2d:b3:f0:3e: 8b:72:54:ac:fd:d1:46:a1:6c:f9:d7:4e:e2:bb:9f: 11:75:2b:f8:51:12:97:2f:10:ab:39:b6:40:cb:4d: 9e:5c:cf:68:f7:60:5c:0d:25:e7:4b:6c:0d:3b:81: 81:db:04:6a:ae:d5:44:56:20:82:70:62:4e:23:03: a9:65:12:95:b6:cf:9c:97:7c:f4:6a:a2:e1:81:72: 4b:5b:7e:70:fa:44:00:e9:44:6a:b7:5b:fc:19:53: 1a:89:89:be:3d:24:c9:38:cd:b0:67:ad:48:2e:2a: 31:fc:78:09:1f:9d:7f:12:37:7b:dd:b4:ed:96:ef: dd:fc:41:af:71:77:cc:bc:67:4c:61:4d:a6:90:ca: b8:7f:b6:d6:45:69:aa:83:c4:e4:e4:0b:5a:f2:b3: 35:ed:d9:aa:58:e9:a3:97:3f:71:e2:e8:9a:14:fa: a1:86:55:09:e5:fc:52:81:5e:65:81:7f:a6:87:69: 3b:11:f3:2b:ad:87:62:17:d1:a2:f1:d6:59:32:7d: 59:1b:74:ba:18:57:20:95:8c:98:fe:43:46:88:6a: 5c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B4:BB:2F:32:44:CA:45:A5:D7:94:37:AC:C2:DB:FD:A5:AC:9E:CA X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:61:d3:03:71:b0:68:a0:c1:4f:a1:ad:f1:05:21:41:1c:db: 7a:1c:24:22:7f:62:da:73:23:cc:c2:0f:f8:7b:7e:0e:b7:89: b6:86:5c:93:53:1a:d2:de:37:59:0c:6f:05:14:02:6b:6e:b7: d5:98:02:0b:c7:bb:0f:18:2b:67:66:9c:75:e9:58:e2:dc:9c: 4f:7c:6a:d1:52:2b:71:b4:86:d7:35:78:36:70:e2:dc:a1:ed: 4b:69:13:d7:6d:da:07:28:40:3e:bd:97:27:ff:49:fc:28:46: e0:52:86:46:c7:a3:e7:87:32:fe:58:38:9f:93:4c:51:9e:46: ab:88:53:28:9c:0b:db:a1:f6:24:0f:83:27:67:86:f8:7c:8e: 82:e1:55:49:a6:88:8b:73:18:2f:af:de:e1:2d:2e:06:f4:59: 7e:07:40:f4:78:f0:2c:4d:7d:1a:b1:a7:3a:f9:85:0a:03:d0: 0e:5e:39:24:a0:03:f2:44:cd:46:b7:ca:c8:b5:0e:05:58:c2: f5:5b:a1:dc:74:6d:cc:03:3a:64:fd:24:39:6f:68:b1:e3:58: 71:96:5b:b9:79:d7:33:47:d5:65:ec:ff:89:0e:0f:12:d8:ed: 21:89:f8:73:4e:66:96:c8:56:00:dc:00:6d:a2:ec:b5:c9:0e: 7b:2a:93:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMH0Lq2+FixSyzQSG/1wmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjUxMjE4MDIwMTA1WhcNMjUxMjE5MDIwMTA1WjAzMTEwLwYDVQQD EyhlM2I0YmIyZjMyNDRjYTQ1YTVkNzk0MzdhY2MyZGJmZGE1YWM5ZWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6wUr/5Lf9UewEsrN6MvG9XdeJyO 8GHvqbBZyPNoM4cIoFpqQiJg7i2z8D6LclSs/dFGoWz5107iu58RdSv4URKXLxCr ObZAy02eXM9o92BcDSXnS2wNO4GB2wRqrtVEViCCcGJOIwOpZRKVts+cl3z0aqLh gXJLW35w+kQA6URqt1v8GVMaiYm+PSTJOM2wZ61ILiox/HgJH51/Ejd73bTtlu/d /EGvcXfMvGdMYU2mkMq4f7bWRWmqg8Tk5Ata8rM17dmqWOmjlz9x4uiaFPqhhlUJ 5fxSgV5lgX+mh2k7EfMrrYdiF9Gi8dZZMn1ZG3S6GFcglYyY/kNGiGpcQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOO0uy8yRMpFpdeUN6zC2/2lrJ7KMB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMWHTA3Gw aKDBT6Gt8QUhQRzbehwkIn9i2nMjzMIP+Ht+DreJtoZck1Ma0t43WQxvBRQCa263 1ZgCC8e7DxgrZ2acdelY4tycT3xq0VIrcbSG1zV4NnDi3KHtS2kT123aByhAPr2X J/9J/ChG4FKGRsej54cy/lg4n5NMUZ5Gq4hTKJwL26H2JA+DJ2eG+HyOguFVSaaI i3MYL6/e4S0uBvRZfgdA9HjwLE19GrGnOvmFCgPQDl45JKAD8kTNRrfKyLUOBVjC 9Vuh3HRtzAM6ZP0kOW9oseNYcZZbuXnXM0fVZez/iQ4PEtjtIYn4c05mlshWANwA baLstckOeyqTvw== -----END CERTIFICATE-----Generated at Thu Dec 18 09:56:01 2025 by rpki-client