This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json) Hash identifier: Ke0s1/lcWFyRC+57G95Boi9BBh/ecF/pJzKVACnu+dE= Subject key identifier: 09:A1:9E:1A:18:DD:76:5B:F9:52:55:EF:16:20:3D:DA:0C:EC:62:45 Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88 Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288 Certificate serial: 019AF79CCD10D3CECECEA6A1C23642E32F5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft Manifest number: 0536 Signing time: Sun 07 Dec 2025 07:00:39 +0000 Manifest this update: Sun 07 Dec 2025 07:00:39 +0000 Manifest next update: Mon 08 Dec 2025 07:00:39 +0000 Files and hashes: 1: 84jYv05HnlXjbNLOmoRHkF8n8LQ.roa (hash: /X9ewNFlsp/9ZFMAjrGm5l3SwfH8c42hlaaVDkUgEww=) 2: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: G/yUjoXfHuBdwP7ANppvWesA5WFuLMwE2ipS+DQqgtc=) 3: y8uNxN4Qz-KJWpwgdJjEk856rFg.roa (hash: gCH8Gmi7LtX/qDiok3OTFvIkgdYcX5Le/2ybuhXBvN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:9c:cd:10:d3:ce:ce:ce:a6:a1:c2:36:42:e3:2f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288 Validity Not Before: Dec 7 07:00:39 2025 GMT Not After : Dec 8 07:00:39 2025 GMT Subject: CN=09a19e1a18dd765bf95255ef16203dda0cec6245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4d:d5:84:75:32:0c:91:df:6a:03:42:aa:59: 6a:de:82:07:a5:1d:43:a1:b3:ee:23:d5:62:16:e7: da:23:65:96:2f:03:1c:0d:bc:d4:dd:ae:3f:27:d8: 2c:60:30:f9:a7:86:64:19:4f:49:fd:14:60:de:eb: 5a:33:8d:21:3e:f1:2d:cb:f0:58:be:80:74:73:7b: ac:ec:7b:77:1a:22:30:0a:a6:f3:21:82:df:be:f9: 9f:2d:2f:1b:de:c4:6c:92:53:4f:05:1f:ac:33:5e: 8f:bf:bb:4e:7e:09:e0:ce:96:ee:9a:fc:75:f8:e5: 22:bb:c5:d9:31:03:65:e3:e8:51:2b:f0:6a:4b:a3: 89:91:3d:e7:e2:f3:10:4b:95:63:52:7d:78:d9:d7: df:e8:0a:42:b4:31:51:9b:36:83:1f:1e:65:93:2d: 0d:54:62:1b:e4:61:92:07:8b:56:1f:6a:b7:dc:79: 9d:a2:88:3e:0a:c8:2a:45:a2:44:b6:46:cd:e9:78: 7c:3d:06:b9:7e:8c:fd:ef:1f:45:3e:1c:d3:46:92: 26:c9:dc:af:08:14:dc:c3:d5:b5:49:01:d2:64:f4: c1:85:35:40:53:ed:db:1a:20:2d:f7:0c:68:72:c9: ec:4b:36:81:63:3d:dc:00:60:bb:ce:9c:06:83:c0: e2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A1:9E:1A:18:DD:76:5B:F9:52:55:EF:16:20:3D:DA:0C:EC:62:45 X509v3 Authority Key Identifier: keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:30:88:4d:65:ca:8d:16:ed:e9:cc:41:49:89:58:f4:54:c6: 6c:2a:bb:0a:ca:76:26:98:84:55:cc:31:eb:c5:f5:4c:20:bb: 1d:ca:59:6d:47:4a:02:04:f7:18:0a:39:09:73:61:a4:7e:48: 8f:ab:39:b1:6f:33:4a:e1:4a:09:96:3e:83:f1:f0:76:61:37: 17:4f:70:dc:f1:56:96:ee:52:61:ad:38:49:e2:6f:7a:87:64: 73:65:80:3e:30:48:e8:33:e7:78:e6:65:8c:d3:c1:74:1f:fd: b7:00:77:9d:4d:cb:8d:6c:cc:be:a0:97:8b:dc:62:97:d5:0a: d2:3e:c6:d3:2a:f9:85:dd:be:21:3c:8e:8e:00:7f:4a:1f:c6: 88:f1:29:8b:5f:39:77:89:77:72:82:21:a5:ae:62:dd:0e:5d: d1:f3:01:52:c5:ca:91:3b:8b:cb:85:36:b0:e6:16:04:a3:c7: eb:ea:ff:34:c5:94:a9:c4:47:58:25:dd:9e:a2:02:22:7f:55: 6e:fd:a6:9a:86:19:b6:0d:d9:08:63:9f:ef:84:2e:99:d6:db: c7:56:de:10:f9:b7:d8:3a:2d:e7:b6:87:3f:99:09:33:ca:3c: 05:2c:18:85:3d:1f:18:40:b2:1d:de:34:b2:c7:eb:61:69:f1: 67:10:a7:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3nM0Q087OzqahwjZC4y9aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMjMyYWUzOGE5MjMzYWI3ZmMxYjQyOWE1MDI5MjIwYWZh N2IyODgwHhcNMjUxMjA3MDcwMDM5WhcNMjUxMjA4MDcwMDM5WjAzMTEwLwYDVQQD EygwOWExOWUxYTE4ZGQ3NjViZjk1MjU1ZWYxNjIwM2RkYTBjZWM2MjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy03VhHUyDJHfagNCqllq3oIHpR1D obPuI9ViFufaI2WWLwMcDbzU3a4/J9gsYDD5p4ZkGU9J/RRg3utaM40hPvEty/BY voB0c3us7Ht3GiIwCqbzIYLfvvmfLS8b3sRsklNPBR+sM16Pv7tOfgngzpbumvx1 +OUiu8XZMQNl4+hRK/BqS6OJkT3n4vMQS5VjUn142dff6ApCtDFRmzaDHx5lky0N VGIb5GGSB4tWH2q33Hmdoog+CsgqRaJEtkbN6Xh8PQa5foz97x9FPhzTRpImydyv CBTcw9W1SQHSZPTBhTVAU+3bGiAt9wxocsnsSzaBYz3cAGC7zpwGg8DiPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmhnhoY3XZb+VJV7xYgPdoM7GJFMB8GA1UdIwQY MBaAFFojKuOKkjOrf8G0KaUCkiCvp7KIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82YWVmOWUtZmU0ZC00M2U3LWExY2It MTBhNDg1YzBiMGYyLzEvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS82YWVmOWUtZmU0ZC00M2U3LWExY2ItMTBhNDg1YzBiMGYy LzEvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTCITWXK jRbt6cxBSYlY9FTGbCq7Csp2JpiEVcwx68X1TCC7HcpZbUdKAgT3GAo5CXNhpH5I j6s5sW8zSuFKCZY+g/HwdmE3F09w3PFWlu5SYa04SeJveodkc2WAPjBI6DPneOZl jNPBdB/9twB3nU3LjWzMvqCXi9xil9UK0j7G0yr5hd2+ITyOjgB/Sh/GiPEpi185 d4l3coIhpa5i3Q5d0fMBUsXKkTuLy4U2sOYWBKPH6+r/NMWUqcRHWCXdnqICIn9V bv2mmoYZtg3ZCGOf74Qumdbbx1beEPm32Dot57aHP5kJM8o8BSwYhT0fGECyHd40 ssfrYWnxZxCn4Q== -----END CERTIFICATE-----Generated at Sun Dec 7 13:15:05 2025 by rpki-client