This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft File: wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft (raw, json) Hash identifier: u47kDg6qtAYfpV4eN6BbYewGyMWqBjvZM8XZ5xfYfFc= Subject key identifier: C3:AE:5F:E0:6D:84:60:DD:FD:56:19:FF:70:47:A7:C9:F7:1E:8A:C0 Authority key identifier: C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34 Certificate issuer: /CN=c2bf81ab950a18034630c25830749e650eb4e634 Certificate serial: 019AF3C08712228218473960EA6D8021D804 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft Manifest number: 06D1 Signing time: Sat 06 Dec 2025 13:01:12 +0000 Manifest this update: Sat 06 Dec 2025 13:01:12 +0000 Manifest next update: Sun 07 Dec 2025 13:01:12 +0000 Files and hashes: 1: nlp-yymaqYzgw12m1QvoCWjeZIw.roa (hash: Yssi7rDTBVMdou6reFU3+Vkw3D/c6F2oI+HGCYZH4Sw=) 2: wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl (hash: chOW/XMKwsXOxFIZPHmsKF/mfmD21hOHo1zsOkqjIHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:87:12:22:82:18:47:39:60:ea:6d:80:21:d8:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2bf81ab950a18034630c25830749e650eb4e634 Validity Not Before: Dec 6 13:01:12 2025 GMT Not After : Dec 7 13:01:12 2025 GMT Subject: CN=c3ae5fe06d8460ddfd5619ff7047a7c9f71e8ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2b:7b:b9:40:e5:7f:57:2e:9d:e7:5b:12:f1: f1:a5:1e:22:2b:9d:8d:14:f2:c6:d2:ce:66:bc:4e: 87:60:cb:3e:72:87:a8:59:09:83:3e:37:40:ec:7a: 26:72:7d:4f:d3:74:2d:b3:70:b6:0b:1f:5e:aa:76: 2b:ce:5b:16:d8:50:dc:a0:47:dc:8e:5f:5e:8c:4a: 6c:4c:c8:68:4c:d5:a9:7d:b9:0b:0b:24:5e:15:9d: 09:dc:b2:09:c0:f0:c0:36:33:8c:25:2c:dd:64:91: f5:be:56:c6:82:2d:b7:20:98:2d:5d:09:82:3a:be: 34:e5:00:cb:50:b7:53:9d:06:b9:a3:d9:95:d4:ab: af:95:0e:07:61:e5:eb:d7:31:d4:e5:52:e1:de:f3: 2b:71:4e:07:f7:d9:0d:c1:ba:84:46:c0:84:31:ce: 80:af:c1:f1:ab:b6:e4:1a:97:e2:1d:2e:07:b2:48: 2b:e3:c6:8f:07:62:f6:c8:ea:3c:b8:12:aa:02:f0: ec:10:02:b5:47:10:c4:f2:4e:6b:de:e7:03:91:5c: 68:18:2b:bb:67:a5:ca:b7:b2:82:60:8f:81:bd:f1: a0:b5:a4:64:06:ef:d9:76:11:8e:e9:7e:ba:5e:ec: 34:36:80:f3:7d:9b:d6:ae:ab:74:9c:d3:f5:40:52: 94:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AE:5F:E0:6D:84:60:DD:FD:56:19:FF:70:47:A7:C9:F7:1E:8A:C0 X509v3 Authority Key Identifier: keyid:C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:f0:6b:92:6b:3f:31:2f:c4:da:29:b9:e0:54:6a:b3:25:0f: bf:d4:31:5f:f7:a2:33:ae:11:31:a0:50:66:ad:bc:d2:cf:13: 3d:2c:97:7a:fc:d9:62:fe:af:54:76:99:b5:cc:da:7e:2b:82: 38:20:5f:00:66:0c:b1:ef:75:5d:e8:6e:f8:51:2a:3d:5a:c1: 54:3c:52:c5:ee:c6:43:af:f0:bf:56:d0:17:ea:46:83:38:93: 4b:1d:68:5b:6e:d0:55:a3:fe:0c:f7:2b:27:c5:ee:79:d3:1a: 65:7a:65:d7:a3:2c:86:fd:cd:47:d6:ae:df:da:b3:14:b2:06: 24:c8:be:40:41:7c:1a:56:10:aa:58:e4:e1:9b:43:ee:f2:ec: 60:7b:c9:c3:5a:50:80:00:25:6f:27:ba:34:61:2d:9a:de:e2: 16:fd:14:9b:56:9d:05:60:37:fa:f2:90:6c:a5:f2:59:70:b4: 26:48:64:cf:54:d9:65:9b:52:ee:8a:e7:ed:da:8d:4c:a3:49: 99:a4:9e:31:f8:6f:87:18:0d:cd:66:87:f4:62:92:a9:90:a5: dd:ba:51:d7:5d:c7:30:77:ae:30:7f:5a:91:58:25:92:aa:44: 8f:13:f7:27:df:b5:a4:f2:c4:6e:3f:9c:ed:71:c3:91:79:d8: 46:cd:ab:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwIcSIoIYRzlg6m2AIdgEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYmY4MWFiOTUwYTE4MDM0NjMwYzI1ODMwNzQ5ZTY1MGVi NGU2MzQwHhcNMjUxMjA2MTMwMTEyWhcNMjUxMjA3MTMwMTEyWjAzMTEwLwYDVQQD EyhjM2FlNWZlMDZkODQ2MGRkZmQ1NjE5ZmY3MDQ3YTdjOWY3MWU4YWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyt7uUDlf1cunedbEvHxpR4iK52N FPLG0s5mvE6HYMs+coeoWQmDPjdA7Homcn1P03Qts3C2Cx9eqnYrzlsW2FDcoEfc jl9ejEpsTMhoTNWpfbkLCyReFZ0J3LIJwPDANjOMJSzdZJH1vlbGgi23IJgtXQmC Or405QDLULdTnQa5o9mV1KuvlQ4HYeXr1zHU5VLh3vMrcU4H99kNwbqERsCEMc6A r8Hxq7bkGpfiHS4Hskgr48aPB2L2yOo8uBKqAvDsEAK1RxDE8k5r3ucDkVxoGCu7 Z6XKt7KCYI+BvfGgtaRkBu/ZdhGO6X66Xuw0NoDzfZvWrqt0nNP1QFKUWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOuX+BthGDd/VYZ/3BHp8n3HorAMB8GA1UdIwQY MBaAFMK/gauVChgDRjDCWDB0nmUOtOY0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3ItQnE1VUtHQU5HTU1KWU1IU2VaUTYwNWpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zOGI1MTEtNzU0Ny00YTQ4LThiYWYt Nzc2NDU4NDY3MGZkLzEvd3ItQnE1VUtHQU5HTU1KWU1IU2VaUTYwNWpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8zOGI1MTEtNzU0Ny00YTQ4LThiYWYtNzc2NDU4NDY3MGZk LzEvd3ItQnE1VUtHQU5HTU1KWU1IU2VaUTYwNWpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePBrkms/ MS/E2im54FRqsyUPv9QxX/eiM64RMaBQZq280s8TPSyXevzZYv6vVHaZtczafiuC OCBfAGYMse91Xehu+FEqPVrBVDxSxe7GQ6/wv1bQF+pGgziTSx1oW27QVaP+DPcr J8XuedMaZXpl16Mshv3NR9au39qzFLIGJMi+QEF8GlYQqljk4ZtD7vLsYHvJw1pQ gAAlbye6NGEtmt7iFv0Um1adBWA3+vKQbKXyWXC0Jkhkz1TZZZtS7orn7dqNTKNJ maSeMfhvhxgNzWaH9GKSqZCl3bpR113HMHeuMH9akVglkqpEjxP3J9+1pPLEbj+c 7XHDkXnYRs2rzw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:07:25 2025 by rpki-client