This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft File: wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft (raw, json) Hash identifier: 7qFyDUjYmeFwse2fCrN7HFkKK4tlt2Hh7cFq4HGctQA= Subject key identifier: 0F:CA:AE:28:E3:EC:F8:5D:93:C6:C9:11:10:DE:D9:56:A1:0C:0B:24 Authority key identifier: C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91 Certificate issuer: /CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091 Certificate serial: 019AF31BFC11277205C0A1C1E10AB742E5FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft Manifest number: 0E44 Signing time: Sat 06 Dec 2025 10:01:28 +0000 Manifest this update: Sat 06 Dec 2025 10:01:28 +0000 Manifest next update: Sun 07 Dec 2025 10:01:28 +0000 Files and hashes: 1: GzFkstv5wkhfRB-938uIDYh-Wxo.roa (hash: 4jcDDGU9h854aDRD3uRk10AMRg0wkYSddBT/bLLaKOg=) 2: wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl (hash: m+awhgsaVAgdx/0mYSBnHUVCYStB1H15PY0wWZA+XPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:fc:11:27:72:05:c0:a1:c1:e1:0a:b7:42:e5:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091 Validity Not Before: Dec 6 10:01:28 2025 GMT Not After : Dec 7 10:01:28 2025 GMT Subject: CN=0fcaae28e3ecf85d93c6c91110ded956a10c0b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:93:df:90:9f:76:e6:92:e1:ff:28:61:bc:df: c8:cb:09:d2:fe:30:54:fe:35:fa:91:b3:36:f6:8c: b5:a6:ff:1a:c6:5a:31:0b:ba:86:b5:c9:1c:ba:c1: 41:56:38:44:20:f2:9f:3d:a7:4d:7f:dc:57:55:a2: 96:fc:1f:62:b3:15:b5:bf:7a:98:ab:87:59:b7:c6: e6:91:94:01:77:31:02:42:5f:86:61:17:3a:18:8c: 6d:b1:3c:f7:06:4c:05:cd:3b:48:ba:65:ec:65:8c: 2b:92:7b:e5:b8:78:75:9b:a0:a3:f4:2c:57:3a:87: df:64:74:4b:43:fa:eb:e1:bd:8f:b9:47:95:d2:a6: 91:a2:76:10:48:b0:dc:ce:ec:09:e6:35:96:a8:35: 68:f7:6d:41:7c:4c:c0:a0:e1:9c:f1:5e:b6:0d:ba: 1e:c4:a3:55:40:a7:03:5d:ce:57:37:59:96:52:9c: 27:09:32:ae:f1:71:3a:cf:b2:54:2b:09:f2:db:63: 55:46:42:34:64:a5:10:b7:e6:70:ea:e6:b1:c7:ae: d8:b7:da:14:bb:5d:ee:c8:cf:47:bc:1f:60:6b:57: a0:d5:30:f2:c9:e4:35:e9:72:79:de:de:7c:85:25: 60:03:23:b2:6f:16:a0:2e:72:49:21:4c:01:61:55: ff:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CA:AE:28:E3:EC:F8:5D:93:C6:C9:11:10:DE:D9:56:A1:0C:0B:24 X509v3 Authority Key Identifier: keyid:C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ad:49:03:e2:09:f7:da:b7:d5:19:b2:4e:a5:f3:a8:f3:02: 34:75:5e:28:6a:ea:e4:80:78:ab:94:e1:b7:57:08:90:b4:71: 48:23:2a:fd:f2:79:c1:cd:af:46:db:d1:32:c8:b6:1f:be:34: 39:11:c1:3b:a1:dc:67:92:aa:2e:50:51:79:11:45:5b:92:29: e7:b6:43:13:8b:43:64:6c:24:15:39:73:d5:e6:dd:b1:8d:ee: 2b:f5:b4:7b:4d:80:2e:7a:88:3f:e7:e1:c2:65:0d:43:e9:58: 28:fa:94:d1:54:7b:36:e2:c0:eb:f5:10:b2:9f:a1:51:3f:e3: 6a:2b:e0:03:7e:e1:31:d4:b8:9c:02:38:91:e0:3b:9f:50:38: 42:52:f7:ff:5d:e6:02:4e:02:7a:72:89:fb:26:61:8a:c6:87: ea:17:1e:f4:8f:fd:9e:bf:cc:1d:0e:a5:e6:08:47:c8:e0:9d: 9e:0a:c5:5b:23:86:a2:52:06:0d:a5:5e:08:ae:01:c8:fb:aa: 02:e2:ed:b6:da:19:ee:7a:f0:5f:f0:1f:fb:46:d1:13:83:23: 14:b6:5c:d6:b6:4d:e6:5b:2a:85:f0:2f:d5:0e:61:96:5e:4b: b0:2c:b3:65:4e:22:4d:94:ff:7d:2c:f6:d8:55:76:ec:ad:12: 2b:f9:0c:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG/wRJ3IFwKHB4Qq3QuX7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMWJiNDRlZGUyYWZlMGJmYTlkNzhiYTI5MzI0OTU1Zjdm YzYwOTEwHhcNMjUxMjA2MTAwMTI4WhcNMjUxMjA3MTAwMTI4WjAzMTEwLwYDVQQD EygwZmNhYWUyOGUzZWNmODVkOTNjNmM5MTExMGRlZDk1NmExMGMwYjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJPfkJ925pLh/yhhvN/IywnS/jBU /jX6kbM29oy1pv8axloxC7qGtckcusFBVjhEIPKfPadNf9xXVaKW/B9isxW1v3qY q4dZt8bmkZQBdzECQl+GYRc6GIxtsTz3BkwFzTtIumXsZYwrknvluHh1m6Cj9CxX OoffZHRLQ/rr4b2PuUeV0qaRonYQSLDczuwJ5jWWqDVo921BfEzAoOGc8V62Dboe xKNVQKcDXc5XN1mWUpwnCTKu8XE6z7JUKwny22NVRkI0ZKUQt+Zw6uaxx67Yt9oU u13uyM9HvB9ga1eg1TDyyeQ16XJ53t58hSVgAyOybxagLnJJIUwBYVX/kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/Krijj7Phdk8bJERDe2VahDAskMB8GA1UdIwQY MBaAFMMbtE7eKv4L+p14uikySVX3/GCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3h1MFR0NHFfZ3Y2blhpNktUSkpWZmY4WUpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS83MDNmMDAtN2YzOS00ZDk1LThjNTgt NGJiYjgzOGEyNzc5LzEvd3h1MFR0NHFfZ3Y2blhpNktUSkpWZmY4WUpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS83MDNmMDAtN2YzOS00ZDk1LThjNTgtNGJiYjgzOGEyNzc5 LzEvd3h1MFR0NHFfZ3Y2blhpNktUSkpWZmY4WUpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATK1JA+IJ 99q31RmyTqXzqPMCNHVeKGrq5IB4q5Tht1cIkLRxSCMq/fJ5wc2vRtvRMsi2H740 ORHBO6HcZ5KqLlBReRFFW5Ip57ZDE4tDZGwkFTlz1ebdsY3uK/W0e02ALnqIP+fh wmUNQ+lYKPqU0VR7NuLA6/UQsp+hUT/jaivgA37hMdS4nAI4keA7n1A4QlL3/13m Ak4CenKJ+yZhisaH6hce9I/9nr/MHQ6l5ghHyOCdngrFWyOGolIGDaVeCK4ByPuq AuLtttoZ7nrwX/Af+0bRE4MjFLZc1rZN5lsqhfAv1Q5hll5LsCyzZU4iTZT/fSz2 2FV27K0SK/kMfw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:00:50 2025 by rpki-client