This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft File: wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft (raw, json) Hash identifier: NEyDMP1xuCHZiSLc4QS3m8V5gSM8DbI6p2ejJkbIwMo= Subject key identifier: D8:6A:51:E9:A6:77:79:E3:73:40:25:80:72:E7:11:02:69:82:EE:4C Authority key identifier: C1:4F:05:BC:18:F5:3B:80:FC:29:C0:AD:1B:28:38:92:BD:FE:36:CF Certificate issuer: /CN=c14f05bc18f53b80fc29c0ad1b283892bdfe36cf Certificate serial: 019AF31CBF2179C30153777BAC089F746C3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft Manifest number: 0252 Signing time: Sat 06 Dec 2025 10:02:18 +0000 Manifest this update: Sat 06 Dec 2025 10:02:18 +0000 Manifest next update: Sun 07 Dec 2025 10:02:18 +0000 Files and hashes: 1: _M9B2KOz2UeSzhUegvYxGA2BwYo.roa (hash: D0dhCF5CGV5Me0OwA23AKaMmK0KyGQzZrCqAnO1Fksg=) 2: wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl (hash: lJEvf+12KGb/VfkrORnDqD17HD0uB/HJIVPR97kiXdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:bf:21:79:c3:01:53:77:7b:ac:08:9f:74:6c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c14f05bc18f53b80fc29c0ad1b283892bdfe36cf Validity Not Before: Dec 6 10:02:18 2025 GMT Not After : Dec 7 10:02:18 2025 GMT Subject: CN=d86a51e9a67779e37340258072e711026982ee4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2c:95:01:69:68:98:e5:cd:81:35:0c:d8:dd: 56:70:f2:2d:ed:7c:33:db:5a:b3:37:08:46:69:68: fb:df:c5:94:b5:bd:e2:3b:f3:22:43:4c:f6:05:30: cf:28:e9:8a:bf:13:ca:be:cf:9b:aa:dc:9f:6b:c8: e3:a4:02:f9:33:69:6b:b7:9a:ce:12:a9:05:6d:21: 57:55:b0:e0:ff:f4:22:34:10:b8:10:bb:38:7b:2f: b8:03:78:fd:3a:be:4f:10:2b:a7:02:ce:0b:e3:7e: 96:1e:ed:3c:ae:e7:e8:31:b6:19:0b:7a:c9:d8:b8: 01:bc:f4:3d:24:70:ba:25:be:df:4c:2b:98:ca:a3: 62:5c:e6:ec:3b:0e:07:51:71:80:0c:31:35:66:d1: f2:67:8b:81:0a:24:2f:5d:fd:1c:3a:57:ce:9f:ae: 8c:69:bd:22:b4:c9:4f:58:0d:8f:6c:c8:4b:20:f3: 26:32:2b:18:19:45:c7:55:05:7d:7f:26:bb:aa:73: e5:cd:67:b0:70:43:77:9c:4b:76:86:37:77:f3:ba: 0c:55:0e:bd:30:e4:2c:80:4e:fb:81:b1:5a:f2:fd: 48:17:56:a3:90:47:e4:ad:3a:a0:38:94:44:55:33: 48:83:b9:eb:f6:0e:4e:9b:6b:48:87:74:e3:26:45: 11:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6A:51:E9:A6:77:79:E3:73:40:25:80:72:E7:11:02:69:82:EE:4C X509v3 Authority Key Identifier: keyid:C1:4F:05:BC:18:F5:3B:80:FC:29:C0:AD:1B:28:38:92:BD:FE:36:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:92:df:66:cd:d0:52:73:62:97:1f:94:7c:88:75:bb:1b:ef: 71:9c:08:30:1a:d3:92:32:cf:24:dd:b3:8f:7b:3e:c6:bd:13: 11:a0:e1:c6:e8:f5:e0:d9:11:3f:83:43:af:18:f1:61:8e:f5: 96:38:63:ec:de:93:80:2e:7b:c5:d9:32:7b:33:3c:d7:41:39: 95:56:2d:c8:56:88:c6:8b:26:4e:0f:db:af:db:8b:d5:13:61: b9:01:1a:fd:fb:38:e6:c1:49:22:07:fb:90:7e:7f:5b:ec:5b: 4c:a1:e1:ce:32:4d:49:ff:38:5c:f4:73:36:4f:44:61:23:89: f3:b8:f0:5f:bd:7b:99:c7:b0:9e:f9:32:1a:0c:41:3a:65:fb: c8:7f:cb:f4:f8:29:3f:ce:de:f6:25:61:d9:ef:77:4e:01:44: 5c:0a:78:76:7e:09:79:4e:c3:0e:96:36:08:04:5f:87:a9:5d: 03:e8:e4:3f:04:0c:b5:94:6b:bb:07:30:83:05:1a:9e:48:f2: 63:1b:ba:1c:e9:32:2b:28:cc:2b:07:fc:c3:08:74:2f:df:48: 94:52:9b:73:4b:22:c0:cf:22:f3:91:1a:e6:e0:11:2d:94:cb: 1a:11:6f:38:4f:94:95:1b:00:fc:ce:39:b4:a4:6d:b3:fe:c8: 8b:63:bb:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHL8hecMBU3d7rAifdGw7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNGYwNWJjMThmNTNiODBmYzI5YzBhZDFiMjgzODkyYmRm ZTM2Y2YwHhcNMjUxMjA2MTAwMjE4WhcNMjUxMjA3MTAwMjE4WjAzMTEwLwYDVQQD EyhkODZhNTFlOWE2Nzc3OWUzNzM0MDI1ODA3MmU3MTEwMjY5ODJlZTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiyVAWlomOXNgTUM2N1WcPIt7Xwz 21qzNwhGaWj738WUtb3iO/MiQ0z2BTDPKOmKvxPKvs+bqtyfa8jjpAL5M2lrt5rO EqkFbSFXVbDg//QiNBC4ELs4ey+4A3j9Or5PECunAs4L436WHu08rufoMbYZC3rJ 2LgBvPQ9JHC6Jb7fTCuYyqNiXObsOw4HUXGADDE1ZtHyZ4uBCiQvXf0cOlfOn66M ab0itMlPWA2PbMhLIPMmMisYGUXHVQV9fya7qnPlzWewcEN3nEt2hjd387oMVQ69 MOQsgE77gbFa8v1IF1ajkEfkrTqgOJREVTNIg7nr9g5Om2tIh3TjJkURRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhqUemmd3njc0AlgHLnEQJpgu5MMB8GA1UdIwQY MBaAFMFPBbwY9TuA/CnArRsoOJK9/jbPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1U4RnZCajFPNEQ4S2NDdEd5ZzRrcjMtTnM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lZmMwYmQtM2NjYi00N2I1LThkMzQt MjQ3NjMwMTFkMDI0LzEvd1U4RnZCajFPNEQ4S2NDdEd5ZzRrcjMtTnM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9lZmMwYmQtM2NjYi00N2I1LThkMzQtMjQ3NjMwMTFkMDI0 LzEvd1U4RnZCajFPNEQ4S2NDdEd5ZzRrcjMtTnM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZLfZs3Q UnNilx+UfIh1uxvvcZwIMBrTkjLPJN2zj3s+xr0TEaDhxuj14NkRP4NDrxjxYY71 ljhj7N6TgC57xdkyezM810E5lVYtyFaIxosmTg/br9uL1RNhuQEa/fs45sFJIgf7 kH5/W+xbTKHhzjJNSf84XPRzNk9EYSOJ87jwX717mcewnvkyGgxBOmX7yH/L9Pgp P87e9iVh2e93TgFEXAp4dn4JeU7DDpY2CARfh6ldA+jkPwQMtZRruwcwgwUankjy Yxu6HOkyKyjMKwf8wwh0L99IlFKbc0siwM8i85Ea5uARLZTLGhFvOE+UlRsA/M45 tKRts/7Ii2O7uA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:19 2025 by rpki-client