This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft File: wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft (raw, json) Hash identifier: /QPjAwoyuJ7AHX/2WSMo+3MlHggiqNPFuAV259GwZAw= Subject key identifier: B8:28:BD:A9:67:C5:22:D4:C7:44:70:5C:01:36:E3:61:07:8A:4F:85 Authority key identifier: C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6 Certificate issuer: /CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6 Certificate serial: 019AF12E6364FE19F8D7021AB4D4F353EADE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft Manifest number: 0986 Signing time: Sat 06 Dec 2025 01:02:20 +0000 Manifest this update: Sat 06 Dec 2025 01:02:20 +0000 Manifest next update: Sun 07 Dec 2025 01:02:20 +0000 Files and hashes: 1: 0iMFk8Lfng7XvalPLjNNFDCKCXk.roa (hash: RGgyt63YX02pCUWXH4nSFvIeyVgvG587fQXMrvVwyd0=) 2: wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl (hash: LScvQy7eLLmkc1REUoM1Wp2GqMiZbZ6DWhtHrOyC0CE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:63:64:fe:19:f8:d7:02:1a:b4:d4:f3:53:ea:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6 Validity Not Before: Dec 6 01:02:20 2025 GMT Not After : Dec 7 01:02:20 2025 GMT Subject: CN=b828bda967c522d4c744705c0136e361078a4f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:99:5e:3b:f7:eb:21:cd:6e:ec:08:71:3b:7e: bf:ea:5d:dd:80:b4:b2:10:df:73:07:95:0c:59:b5: 5e:2f:25:e9:8a:6f:3b:15:f0:ef:de:3d:ae:cd:db: 7f:06:ec:22:63:b0:fa:9c:df:a2:64:0c:8d:61:2c: 9d:b4:ae:e1:69:4f:30:d9:bd:59:36:43:c6:85:ae: 41:6d:56:03:14:01:01:06:5e:6b:c8:45:2a:c5:fd: 64:72:11:f7:28:4c:99:43:4c:4c:3b:be:59:c2:2b: 3f:2f:c7:f3:20:0e:f0:d0:cc:83:2c:ba:70:22:ef: 4a:d5:aa:74:22:98:b3:2c:4e:2a:63:11:17:96:a8: 14:6d:ec:72:68:db:a3:77:c8:c9:ba:59:34:8a:b5: 26:49:94:60:03:4d:8a:f1:41:5c:1c:83:c9:da:e9: 1b:a2:cf:4b:ec:ce:64:e7:11:60:20:9d:54:1d:f2: bb:4c:d3:6b:6a:de:22:e1:1f:0b:0f:6a:b8:f5:d1: 26:75:24:45:df:42:04:69:2b:21:13:f4:4a:61:d1: 84:29:cb:b9:0d:f4:8c:88:8c:0c:12:b4:c6:12:2c: d8:51:8f:90:75:a6:e8:56:c7:56:2c:f9:6c:19:06: 5a:64:48:3b:2c:0b:e7:42:ba:c5:ab:80:1a:92:3d: 32:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:28:BD:A9:67:C5:22:D4:C7:44:70:5C:01:36:E3:61:07:8A:4F:85 X509v3 Authority Key Identifier: keyid:C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:9e:3a:44:61:bd:c2:f7:ba:b3:5f:8e:be:53:32:5c:49:9b: a5:00:15:fe:bd:7d:e8:77:ae:b7:85:e6:4b:ed:5f:34:fb:64: b0:f5:00:ee:f7:4d:1d:5b:05:e8:2d:4a:b8:a2:64:82:4b:60: 1e:f6:b1:2b:91:b4:a2:ab:c9:07:d6:69:b7:de:f7:a0:15:2f: 27:6b:db:18:f6:f8:73:b7:4b:7c:de:df:c1:3d:34:a9:c6:e0: d5:2a:79:94:31:3b:28:d7:68:03:16:5a:ab:84:a1:fa:bb:f0: 21:da:2c:1a:3e:71:a0:2b:8e:c4:a9:66:f7:1a:fa:5a:17:f2: d5:b7:c4:e4:97:05:b9:93:3e:6b:31:d7:a6:fb:b8:e7:ca:47: a4:2e:4f:d8:da:da:b9:9b:35:96:1a:69:16:b8:3e:8d:d7:69: 42:96:04:41:61:34:c4:1a:c9:2e:6f:96:c6:45:db:80:c6:85: 4b:0b:70:54:4b:fb:b5:8a:fd:b1:d4:3c:65:bd:35:92:98:a4: fd:aa:28:14:04:4a:95:16:ef:24:a1:b4:45:68:f7:d8:78:97: fe:a6:62:3d:68:e0:87:82:c9:89:67:fe:99:87:84:60:d9:70: 0a:e4:24:e1:67:2b:2d:7e:8f:9b:75:eb:95:c7:1b:32:1d:bb: c3:26:b1:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmNk/hn41wIatNTzU+reMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNGY3ZmM4ODNjOWQ1ZTAyMzFhNTg1YjBhZTEzOWU3ODY1 NDNiYjYwHhcNMjUxMjA2MDEwMjIwWhcNMjUxMjA3MDEwMjIwWjAzMTEwLwYDVQQD EyhiODI4YmRhOTY3YzUyMmQ0Yzc0NDcwNWMwMTM2ZTM2MTA3OGE0Zjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspleO/frIc1u7AhxO36/6l3dgLSy EN9zB5UMWbVeLyXpim87FfDv3j2uzdt/BuwiY7D6nN+iZAyNYSydtK7haU8w2b1Z NkPGha5BbVYDFAEBBl5ryEUqxf1kchH3KEyZQ0xMO75Zwis/L8fzIA7w0MyDLLpw Iu9K1ap0IpizLE4qYxEXlqgUbexyaNujd8jJulk0irUmSZRgA02K8UFcHIPJ2ukb os9L7M5k5xFgIJ1UHfK7TNNrat4i4R8LD2q49dEmdSRF30IEaSshE/RKYdGEKcu5 DfSMiIwMErTGEizYUY+QdaboVsdWLPlsGQZaZEg7LAvnQrrFq4Aakj0ywQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgovalnxSLUx0RwXAE242EHik+FMB8GA1UdIwQY MBaAFMBPf8iDydXgIxpYWwrhOeeGVDu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0U5X3lJUEoxZUFqR2xoYkN1RTU1NFpVTzdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMWI4YzQtZGVlNy00ZWVlLWEwZTAt OTg0ZTgyZDRiODA2LzEvd0U5X3lJUEoxZUFqR2xoYkN1RTU1NFpVTzdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8zMWI4YzQtZGVlNy00ZWVlLWEwZTAtOTg0ZTgyZDRiODA2 LzEvd0U5X3lJUEoxZUFqR2xoYkN1RTU1NFpVTzdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJ46RGG9 wve6s1+OvlMyXEmbpQAV/r196Heut4XmS+1fNPtksPUA7vdNHVsF6C1KuKJkgktg HvaxK5G0oqvJB9Zpt973oBUvJ2vbGPb4c7dLfN7fwT00qcbg1Sp5lDE7KNdoAxZa q4Sh+rvwIdosGj5xoCuOxKlm9xr6Whfy1bfE5JcFuZM+azHXpvu458pHpC5P2Nra uZs1lhppFrg+jddpQpYEQWE0xBrJLm+WxkXbgMaFSwtwVEv7tYr9sdQ8Zb01kpik /aooFARKlRbvJKG0RWj32HiX/qZiPWjgh4LJiWf+mYeEYNlwCuQk4WcrLX6Pm3Xr lccbMh27wyax+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:04 2025 by rpki-client