This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft File: wSrJsU_SYajSdjqtQXQyvrxJoNY.mft (raw, json) Hash identifier: l7ZiapOBHCElSGHEBBqZwoth+CI+DFjf3KHBLRVQemI= Subject key identifier: C7:90:4B:73:2F:A5:28:F0:CA:FE:C7:DD:38:76:27:BB:18:12:89:AA Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 019AF163F978169944799A19F7BCF8726681 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft Manifest number: 148B Signing time: Sat 06 Dec 2025 02:00:52 +0000 Manifest this update: Sat 06 Dec 2025 02:00:52 +0000 Manifest next update: Sun 07 Dec 2025 02:00:52 +0000 Files and hashes: 1: 9qmcHM-VcZ83QpuDDXRDTZzjRPA.roa (hash: T9bQyp4qC173zpUrvp23zRV6IJ2BWrYnmOmyqxCjQto=) 2: L5uizbtROk6GB-R7fgrPSdF9458.roa (hash: TQEmzD8dtp5XF7xVELdssPYaS3183qisGdaHaztP3Ns=) 3: PF3fO-eTWo6-cPGvdPVhKKttSws.roa (hash: f6FdvkS18ddS/HJEFfzmPq90ce/EiZOtTBozEQTvOIE=) 4: PmQwjeWPX1uc6kgeCDNacsuKkvM.roa (hash: a5MkN/N9VDjUV72wDiMVAY0/sIKzPUhqOt4JzBP4rPc=) 5: gu1qAVxYV1JNHUi7sma3zTVhxOY.roa (hash: 35rYj48R9KZMpiK938BtDR3yOfaylU/kY6qRQtuDujg=) 6: h6hIuizM5NfGODakvbCHb0dbPy8.roa (hash: xkEHjrBFDDiSHn/sjBQGlKLjsMLThbhwgH9fRua5IZs=) 7: lbe3R6qsC7flHOItm2HZ_rtUMYs.roa (hash: v1yUIN+YIJofBB2LuxpKb3viTsG7VddaXzM7Y68aNOE=) 8: pOAHo_xz8DPS-PlS6NdmOeIWwMQ.roa (hash: 19j4bFy6Qzt1lfA2YhipAm48g4iEQA4VOYkVWjiA/os=) 9: t662D9vApr8ZiFSjITs7a3oVIQY.roa (hash: ysoT6z2U1fG/7XYJruqmcsqEJYDDWfQicEyYt1W7TQQ=) 10: wSrJsU_SYajSdjqtQXQyvrxJoNY.crl (hash: fKJuYuHeUE0DPfvvTDFT4Yph7zNKmBawmZZbvYot31c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f9:78:16:99:44:79:9a:19:f7:bc:f8:72:66:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Dec 6 02:00:52 2025 GMT Not After : Dec 7 02:00:52 2025 GMT Subject: CN=c7904b732fa528f0cafec7dd387627bb181289aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:db:d2:d3:a2:62:8b:9d:5e:f1:ad:ea:34:c8: 14:1a:56:6e:8f:0c:7a:0f:02:58:67:dc:c3:ec:c2: 12:e1:35:bb:6a:bb:ab:31:bb:d4:7b:62:b0:fd:d0: 2e:e0:67:1f:f9:f8:a3:fc:6d:27:51:1b:1d:00:fb: f5:a6:ba:95:de:68:f6:36:49:95:28:f0:7d:9e:dd: 51:b0:29:9c:89:34:27:da:54:be:f3:7c:ee:18:93: 6f:1d:9b:e0:80:0b:76:1d:78:5b:35:13:e4:e3:59: 40:19:35:1a:3c:0f:fd:2a:9d:0d:86:6a:5d:9c:0e: e4:d0:af:56:a9:dd:0f:f3:74:88:64:56:dc:cb:93: 4b:f2:13:9f:39:d4:00:5d:35:1c:bc:f9:af:dc:1d: 4b:ae:5e:f5:9a:54:95:e7:97:f0:c6:d9:fd:18:c4: 1f:61:cc:22:60:07:ac:09:09:11:d3:ea:5b:a7:34: 74:09:f3:61:46:a0:bb:47:c4:c5:3f:d0:e8:e5:ad: f5:54:74:ee:59:a1:a3:30:d3:f6:f7:67:a1:b2:9d: f5:fd:73:02:c2:19:7f:01:86:f3:10:d9:ee:12:46: 8e:01:b2:bc:f3:eb:26:63:22:94:58:20:9c:8e:7e: 1f:85:f9:0a:60:ec:2f:2d:06:74:6c:a4:8e:e7:fb: 77:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:90:4B:73:2F:A5:28:F0:CA:FE:C7:DD:38:76:27:BB:18:12:89:AA X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c4:52:32:bb:a0:af:50:71:7a:7f:b5:86:49:05:ab:ab:6d: 52:5f:87:a0:ad:bb:1a:1f:b0:5f:ef:ca:e4:f1:47:c7:72:0e: ea:58:ad:f3:b2:f7:94:15:e9:3c:8d:3c:50:59:e6:4c:53:c5: 78:90:3b:59:ba:96:07:31:ba:52:95:48:64:cd:9d:de:e7:db: 7c:40:8b:c6:37:cc:ae:73:0d:26:7f:6e:d0:bf:4f:08:09:3f: 9d:7d:55:8f:5c:6f:05:23:88:d9:4c:81:61:3f:28:21:3f:72: 95:ab:25:a1:43:dd:08:a2:3f:c1:98:b9:0a:31:57:c3:24:3b: b0:3f:6e:fe:84:2c:9b:55:a5:30:70:5a:85:46:57:6b:f6:58: f1:50:56:6c:8e:36:94:3e:34:d6:00:3d:35:db:1c:9d:d7:b6: 75:97:63:98:76:ce:10:98:ba:88:45:d5:89:7b:59:80:1d:6e: 6c:f0:ba:05:19:53:3b:bc:8b:2a:91:30:0e:2d:78:fd:75:c6: 04:52:fc:5b:7a:3c:f9:24:3b:a4:76:b2:ff:0a:ef:a5:de:e0: d6:62:a9:8f:77:ca:10:65:a4:27:63:83:5d:92:b7:83:8e:41: c4:58:33:e2:3f:82:26:c5:65:df:60:23:e5:de:68:4d:ba:64: 61:e2:94:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/l4FplEeZoZ97z4cmaBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjUxMjA2MDIwMDUyWhcNMjUxMjA3MDIwMDUyWjAzMTEwLwYDVQQD EyhjNzkwNGI3MzJmYTUyOGYwY2FmZWM3ZGQzODc2MjdiYjE4MTI4OWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9vS06Jii51e8a3qNMgUGlZujwx6 DwJYZ9zD7MIS4TW7arurMbvUe2Kw/dAu4Gcf+fij/G0nURsdAPv1prqV3mj2NkmV KPB9nt1RsCmciTQn2lS+83zuGJNvHZvggAt2HXhbNRPk41lAGTUaPA/9Kp0Nhmpd nA7k0K9Wqd0P83SIZFbcy5NL8hOfOdQAXTUcvPmv3B1Lrl71mlSV55fwxtn9GMQf YcwiYAesCQkR0+pbpzR0CfNhRqC7R8TFP9Do5a31VHTuWaGjMNP292ehsp31/XMC whl/AYbzENnuEkaOAbK88+smYyKUWCCcjn4fhfkKYOwvLQZ0bKSO5/t3IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeQS3MvpSjwyv7H3Th2J7sYEomqMB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsRSMrug r1Bxen+1hkkFq6ttUl+HoK27Gh+wX+/K5PFHx3IO6lit87L3lBXpPI08UFnmTFPF eJA7WbqWBzG6UpVIZM2d3ufbfECLxjfMrnMNJn9u0L9PCAk/nX1Vj1xvBSOI2UyB YT8oIT9ylasloUPdCKI/wZi5CjFXwyQ7sD9u/oQsm1WlMHBahUZXa/ZY8VBWbI42 lD401gA9Ndscnde2dZdjmHbOEJi6iEXViXtZgB1ubPC6BRlTO7yLKpEwDi14/XXG BFL8W3o8+SQ7pHay/wrvpd7g1mKpj3fKEGWkJ2ODXZK3g45BxFgz4j+CJsVl32Aj 5d5oTbpkYeKUKw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:59 2025 by rpki-client