This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft File: wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft (raw, json) Hash identifier: tvSt6FqkGrI7yzjGnJ5VWQE3+qIvnb6n+yZDSquUnlo= Subject key identifier: 5B:B7:65:9E:2B:54:C3:47:A6:6C:B0:66:E4:37:47:4F:80:31:0C:C3 Authority key identifier: C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5 Certificate issuer: /CN=c11f603de409a710fdae62cac1c55393a953b5b5 Certificate serial: 019AF3529EB5BF8550FC4FC782109E94FCA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft Manifest number: 0457 Signing time: Sat 06 Dec 2025 11:01:09 +0000 Manifest this update: Sat 06 Dec 2025 11:01:09 +0000 Manifest next update: Sun 07 Dec 2025 11:01:09 +0000 Files and hashes: 1: UsAeeJKz5x5UM9R7HFO2Dgzi0jA.roa (hash: FFiDVfqG1v30MyW/O7JaJbrLiihT2L0idYJ853z7lV4=) 2: wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl (hash: lngi/HRkC0Cq4FJ1IkXbLQ+0ITUyEs0P3lgWHd4HXto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:9e:b5:bf:85:50:fc:4f:c7:82:10:9e:94:fc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c11f603de409a710fdae62cac1c55393a953b5b5 Validity Not Before: Dec 6 11:01:09 2025 GMT Not After : Dec 7 11:01:09 2025 GMT Subject: CN=5bb7659e2b54c347a66cb066e437474f80310cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:83:73:ad:95:0e:39:9f:f9:49:cf:6a:83:52: 55:91:3a:61:18:e3:87:58:0b:2a:23:f6:ba:2e:96: 99:ae:f8:be:7b:f0:9b:3b:2a:7a:db:70:6e:2e:12: a4:09:09:fa:d1:77:fe:7b:fb:a7:24:85:81:b1:53: 8d:10:47:8e:fc:91:c1:b8:26:55:90:cd:ae:33:68: 6d:c5:2c:06:c3:3e:a5:23:76:28:e3:fd:c6:85:38: bf:0d:04:a7:f3:2f:4a:56:32:88:14:2c:d4:fe:0b: 44:e0:38:59:9a:94:03:91:8f:3b:f6:5e:c2:8a:f3: 77:b9:82:6a:c7:7d:b2:7a:59:e0:52:cc:10:d3:75: 28:6a:9d:fb:48:25:81:f0:57:2f:20:20:ae:4c:46: 54:eb:6a:e8:e2:3a:83:29:0b:bf:1e:38:14:ed:da: bf:b3:2c:d7:07:2b:c6:b7:c6:3e:87:cd:fd:71:d8: 89:e4:64:36:2e:87:48:6c:e3:e0:27:f5:ea:40:0b: fb:72:9b:b5:60:70:ff:e8:bd:63:ac:fc:69:71:94: 68:33:41:e5:52:ec:8b:cf:eb:7c:c8:8e:8a:86:e4: 85:1e:c6:8d:ab:39:e7:a2:1c:d4:42:5d:9f:af:fa: 69:f4:ad:f8:19:af:f5:b5:0a:e8:6e:8a:d9:1f:7e: cb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B7:65:9E:2B:54:C3:47:A6:6C:B0:66:E4:37:47:4F:80:31:0C:C3 X509v3 Authority Key Identifier: keyid:C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:eb:29:7f:38:f5:fa:0d:46:96:75:c3:c4:ee:dc:05:05:49: 7e:ad:0a:89:43:d8:61:25:3c:6d:d7:ec:2d:84:4a:2b:71:78: d2:48:f7:4c:20:5c:95:ab:59:01:71:29:57:2b:f1:db:e9:e2: c2:6a:cb:58:b0:01:19:a2:77:91:28:93:0e:48:d0:71:d1:73: 88:1f:d7:42:03:31:ef:4f:cc:aa:8d:e7:e8:12:15:e8:11:5e: 0f:b5:14:b0:13:73:ba:55:eb:87:ce:5e:ce:35:b8:8a:2a:1f: 82:82:0a:be:ff:c8:b9:80:9d:38:f5:7e:37:d6:5c:40:cf:80: 98:0b:e1:d9:d8:31:bd:df:f7:f1:52:76:c7:f2:00:ae:c6:6a: 3a:bf:de:d9:fa:75:c8:f6:cc:c4:76:84:ca:59:57:7a:ca:66: ae:bf:3d:56:87:d8:21:bf:33:bd:6b:b1:37:dc:c1:2d:70:a1: 92:75:65:71:92:d2:83:4f:80:91:fb:46:d0:7b:8b:30:36:4b: a2:a4:bf:a6:28:08:c7:a6:86:2d:20:0d:7f:36:34:58:ea:61: 31:e9:7b:47:45:68:1c:39:2f:51:7b:90:ea:10:48:55:ad:b7: b0:96:f3:ed:4d:16:2c:3f:08:e5:f4:ba:ba:80:6e:4a:16:54: 66:70:5d:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUp61v4VQ/E/HghCelPygMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMWY2MDNkZTQwOWE3MTBmZGFlNjJjYWMxYzU1MzkzYTk1 M2I1YjUwHhcNMjUxMjA2MTEwMTA5WhcNMjUxMjA3MTEwMTA5WjAzMTEwLwYDVQQD Eyg1YmI3NjU5ZTJiNTRjMzQ3YTY2Y2IwNjZlNDM3NDc0ZjgwMzEwY2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YNzrZUOOZ/5Sc9qg1JVkTphGOOH WAsqI/a6LpaZrvi+e/CbOyp623BuLhKkCQn60Xf+e/unJIWBsVONEEeO/JHBuCZV kM2uM2htxSwGwz6lI3Yo4/3GhTi/DQSn8y9KVjKIFCzU/gtE4DhZmpQDkY879l7C ivN3uYJqx32yelngUswQ03Uoap37SCWB8FcvICCuTEZU62ro4jqDKQu/HjgU7dq/ syzXByvGt8Y+h839cdiJ5GQ2LodIbOPgJ/XqQAv7cpu1YHD/6L1jrPxpcZRoM0Hl UuyLz+t8yI6KhuSFHsaNqznnohzUQl2fr/pp9K34Ga/1tQroborZH37LFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFu3ZZ4rVMNHpmywZuQ3R0+AMQzDMB8GA1UdIwQY MBaAFMEfYD3kCacQ/a5iysHFU5OpU7W1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1I5Z1BlUUpweEQ5cm1MS3djVlRrNmxUdGJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jN2U0N2QtYzA4ZS00NzY5LTg2ZDIt YzdmOGIwNTdhZWQwLzEvd1I5Z1BlUUpweEQ5cm1MS3djVlRrNmxUdGJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9jN2U0N2QtYzA4ZS00NzY5LTg2ZDItYzdmOGIwNTdhZWQw LzEvd1I5Z1BlUUpweEQ5cm1MS3djVlRrNmxUdGJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOspfzj1 +g1GlnXDxO7cBQVJfq0KiUPYYSU8bdfsLYRKK3F40kj3TCBclatZAXEpVyvx2+ni wmrLWLABGaJ3kSiTDkjQcdFziB/XQgMx70/Mqo3n6BIV6BFeD7UUsBNzulXrh85e zjW4iiofgoIKvv/IuYCdOPV+N9ZcQM+AmAvh2dgxvd/38VJ2x/IArsZqOr/e2fp1 yPbMxHaEyllXespmrr89VofYIb8zvWuxN9zBLXChknVlcZLSg0+AkftG0HuLMDZL oqS/pigIx6aGLSANfzY0WOphMel7R0VoHDkvUXuQ6hBIVa23sJbz7U0WLD8I5fS6 uoBuShZUZnBdyg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:34:50 2025 by rpki-client