This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft File: we6wu7y21HqENM9BEVHy4kh4CBU.mft (raw, json) Hash identifier: DXrGJQf23K3eCB+0vWj9YQSAF5BY3gZuW8Szf6qxUx4= Subject key identifier: FC:43:B7:0F:A4:2B:46:AC:16:03:6B:98:13:A1:10:27:E3:21:E2:D2 Authority key identifier: C1:EE:B0:BB:BC:B6:D4:7A:84:34:CF:41:11:51:F2:E2:48:78:08:15 Certificate issuer: /CN=c1eeb0bbbcb6d47a8434cf411151f2e248780815 Certificate serial: 019AFCC40175C86A6C33F3B5212CE3F51C71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft Manifest number: 0347 Signing time: Mon 08 Dec 2025 07:01:35 +0000 Manifest this update: Mon 08 Dec 2025 07:01:35 +0000 Manifest next update: Tue 09 Dec 2025 07:01:35 +0000 Files and hashes: 1: iCajC07N1wXhLZhUBQa5qaDtpkc.roa (hash: TBjsHC2hLzzwIzsyf+O4ISG2vQbLL5AsHhFZzfGik5g=) 2: we6wu7y21HqENM9BEVHy4kh4CBU.crl (hash: S2ceeAr71ULqLvUx86A16EJg/WapNsMdBttDiDvUwAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c4:01:75:c8:6a:6c:33:f3:b5:21:2c:e3:f5:1c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1eeb0bbbcb6d47a8434cf411151f2e248780815 Validity Not Before: Dec 8 07:01:35 2025 GMT Not After : Dec 9 07:01:35 2025 GMT Subject: CN=fc43b70fa42b46ac16036b9813a11027e321e2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:ba:5a:b4:6a:d9:1f:25:72:b6:c3:3a:f6: 8f:50:76:9f:ba:23:87:b0:79:1c:db:5e:07:c9:7b: 67:3a:c7:a5:6a:c2:7b:cb:92:c3:3f:21:99:d7:62: 0f:41:de:54:75:47:54:d8:2a:07:6c:2d:b1:0c:bd: a0:f9:43:d2:ef:ea:e1:63:c0:04:f0:f0:0e:41:54: 42:bc:31:8b:9e:74:41:35:bf:fe:72:ac:9b:89:c8: 2a:87:22:34:15:06:42:9d:5b:db:22:6a:13:96:3f: 5b:65:8b:19:39:f9:d9:4b:14:1c:17:1d:0b:15:bd: d2:7d:ee:f9:98:7a:0b:3f:ff:7c:ca:e1:6c:93:a9: af:67:08:e3:8c:98:64:b8:8e:dd:79:36:2c:28:61: 43:a4:6c:c8:35:50:87:ee:47:4a:9c:db:17:d0:1d: c3:42:bc:c0:da:30:e9:47:43:40:75:11:43:c6:1e: 9e:4b:44:44:45:85:00:e1:bf:55:91:4f:df:eb:ed: 7d:a9:e1:db:bf:e8:4f:92:33:7a:04:52:8d:e1:58: b9:97:3f:50:d7:6a:32:ee:7b:d6:89:5a:d6:1b:c8: bb:83:aa:19:4f:86:42:bd:d2:00:96:90:39:ab:f6: fe:75:89:f5:59:d5:24:65:9d:82:21:f5:b2:6e:db: 18:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:43:B7:0F:A4:2B:46:AC:16:03:6B:98:13:A1:10:27:E3:21:E2:D2 X509v3 Authority Key Identifier: keyid:C1:EE:B0:BB:BC:B6:D4:7A:84:34:CF:41:11:51:F2:E2:48:78:08:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:21:53:71:0d:0c:a2:82:33:5c:f4:b9:e8:9d:1d:31:f5:f9: 75:c6:fa:d8:a8:f5:d8:c7:f0:97:c5:aa:7b:a5:07:b7:d8:61: 47:e4:a4:72:85:a6:73:40:73:db:39:22:4f:2d:49:35:0a:aa: 1d:a0:cb:35:20:de:37:1e:85:ba:cf:bc:e0:1a:56:46:66:f4: c9:5f:60:e1:5c:ac:09:02:75:82:27:d2:ff:27:5c:72:00:a8: 73:c5:4b:36:c3:74:b6:45:af:22:31:10:c3:69:0b:b6:7a:e3: 5f:be:52:59:32:89:55:e2:d8:b5:07:ed:34:68:d3:4f:2b:9e: a1:d2:18:a6:3f:84:02:f1:29:91:e6:bb:ae:6a:04:f7:cd:ec: 6c:0e:a3:c3:25:22:fd:20:00:ec:fe:c1:a4:eb:d7:f1:45:b4: 56:25:2a:7c:20:3c:0b:02:d6:13:a4:cb:16:9e:0a:b2:40:0a: f9:b7:92:24:8d:48:18:2e:ea:5d:b7:fa:83:87:4b:e8:55:c0: 32:50:35:5b:ef:fd:94:33:3b:81:19:4c:dc:c1:4d:ef:bc:62: 4d:b2:07:6b:a2:de:fa:5a:cf:8f:04:c3:ed:e5:34:15:be:17: 54:38:74:b9:59:bd:3a:cc:a1:9e:57:4c:c6:f1:fb:85:81:86: b5:cf:f1:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8xAF1yGpsM/O1ISzj9RxxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZWViMGJiYmNiNmQ0N2E4NDM0Y2Y0MTExNTFmMmUyNDg3 ODA4MTUwHhcNMjUxMjA4MDcwMTM1WhcNMjUxMjA5MDcwMTM1WjAzMTEwLwYDVQQD EyhmYzQzYjcwZmE0MmI0NmFjMTYwMzZiOTgxM2ExMTAyN2UzMjFlMmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAa6WrRq2R8lcrbDOvaPUHafuiOH sHkc214HyXtnOselasJ7y5LDPyGZ12IPQd5UdUdU2CoHbC2xDL2g+UPS7+rhY8AE 8PAOQVRCvDGLnnRBNb/+cqybicgqhyI0FQZCnVvbImoTlj9bZYsZOfnZSxQcFx0L Fb3Sfe75mHoLP/98yuFsk6mvZwjjjJhkuI7deTYsKGFDpGzINVCH7kdKnNsX0B3D QrzA2jDpR0NAdRFDxh6eS0RERYUA4b9VkU/f6+19qeHbv+hPkjN6BFKN4Vi5lz9Q 12oy7nvWiVrWG8i7g6oZT4ZCvdIAlpA5q/b+dYn1WdUkZZ2CIfWybtsYkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxDtw+kK0asFgNrmBOhECfjIeLSMB8GA1UdIwQY MBaAFMHusLu8ttR6hDTPQRFR8uJIeAgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2U2d3U3eTIxSHFFTk05QkVWSHk0a2g0Q0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8yN2U4NzAtM2U4ZC00MmIwLWIzMGMt YmJjZGNkYTYxNjEyLzEvd2U2d3U3eTIxSHFFTk05QkVWSHk0a2g0Q0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8yN2U4NzAtM2U4ZC00MmIwLWIzMGMtYmJjZGNkYTYxNjEy LzEvd2U2d3U3eTIxSHFFTk05QkVWSHk0a2g0Q0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCFTcQ0M ooIzXPS56J0dMfX5dcb62Kj12Mfwl8Wqe6UHt9hhR+SkcoWmc0Bz2zkiTy1JNQqq HaDLNSDeNx6Fus+84BpWRmb0yV9g4VysCQJ1gifS/ydccgCoc8VLNsN0tkWvIjEQ w2kLtnrjX75SWTKJVeLYtQftNGjTTyueodIYpj+EAvEpkea7rmoE983sbA6jwyUi /SAA7P7BpOvX8UW0ViUqfCA8CwLWE6TLFp4KskAK+beSJI1IGC7qXbf6g4dL6FXA MlA1W+/9lDM7gRlM3MFN77xiTbIHa6Le+lrPjwTD7eU0Fb4XVDh0uVm9OsyhnldM xvH7hYGGtc/xkQ== -----END CERTIFICATE-----Generated at Mon Dec 8 11:18:46 2025 by rpki-client