This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft File: wjZC0as50wnsXzPk6IFK3DWEgl8.mft (raw, json) Hash identifier: NwF8X6pTruVfmPUEffXzVp+aYNR4djHsYDeWucMwNBA= Subject key identifier: 91:9A:39:C8:91:C7:22:74:DF:19:DD:D5:31:58:A3:41:6B:E6:AB:70 Authority key identifier: C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F Certificate issuer: /CN=c23642d1ab39d309ec5f33e4e8814adc3584825f Certificate serial: 019AF19AB22E2B8D56B1B6A72708F80AE095 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft Manifest number: 0C13 Signing time: Sat 06 Dec 2025 03:00:38 +0000 Manifest this update: Sat 06 Dec 2025 03:00:38 +0000 Manifest next update: Sun 07 Dec 2025 03:00:38 +0000 Files and hashes: 1: XIE6pSr5Se_ddJ-sbF0LHvUWRNo.roa (hash: ksy2bMoShyEx+Z2LrrV0ovXdXkbwK/G4ElQgVhhEd+k=) 2: wjZC0as50wnsXzPk6IFK3DWEgl8.crl (hash: +wqniTtR4EgLj/+cm3amUyCFxacCUhUewo+n96E9Z44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b2:2e:2b:8d:56:b1:b6:a7:27:08:f8:0a:e0:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c23642d1ab39d309ec5f33e4e8814adc3584825f Validity Not Before: Dec 6 03:00:38 2025 GMT Not After : Dec 7 03:00:38 2025 GMT Subject: CN=919a39c891c72274df19ddd53158a3416be6ab70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:61:a8:d2:cc:4f:cf:19:5a:ce:57:cb:05:e5: 73:3b:69:74:77:9f:f9:0a:cd:47:6a:bb:42:52:ac: 25:9c:5c:9d:ad:40:2d:ed:bb:54:37:95:a8:0b:77: ca:bf:93:ca:97:81:11:aa:5e:ea:ed:ae:0b:08:84: 6c:ae:8d:55:35:b1:8e:a1:85:fa:5a:a0:8b:42:21: 55:66:53:c7:bb:41:66:51:82:ec:20:c6:af:52:e2: 0e:6d:9b:3c:d0:e5:80:24:fe:68:4d:51:8e:dc:09: f3:1f:f5:d6:1a:ea:e3:db:a7:d2:f6:b1:3c:9c:63: 60:8e:d8:67:c0:a7:b4:c0:b5:2d:1f:3a:22:fb:07: b1:f1:ae:18:b0:d8:78:19:87:73:d2:c9:4a:c8:14: bd:84:35:05:06:da:d8:24:52:7a:e1:df:e6:c5:06: f9:03:60:7f:4d:14:92:2a:03:94:ba:b2:47:58:71: 1f:8e:ef:f8:02:86:ff:50:0d:df:60:b3:ac:f9:1d: 9c:8b:97:fd:c9:a3:29:5c:04:0a:68:81:35:dc:2b: 8d:f4:54:4e:1f:08:da:c3:a0:79:4c:69:b0:8d:bc: c4:c8:4a:93:2e:08:4e:87:cc:84:b5:af:75:87:b0: 6b:47:13:27:14:76:6f:7e:9f:be:f4:92:98:5b:43: de:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9A:39:C8:91:C7:22:74:DF:19:DD:D5:31:58:A3:41:6B:E6:AB:70 X509v3 Authority Key Identifier: keyid:C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:6f:70:07:6c:42:5d:1e:40:2e:83:45:aa:b8:2a:8f:d8:f9: 43:c2:f3:43:a3:e4:89:c5:2e:dc:16:45:b6:c7:37:fc:d9:87: a4:4f:ec:55:c0:e8:3f:7d:e2:f4:17:36:f4:2c:25:05:c0:dc: 2a:01:30:5c:0b:b0:57:91:f1:e7:89:b2:e1:68:87:d5:c5:bc: 06:b1:02:b7:e1:6a:bb:7f:f2:83:73:cd:89:40:89:26:4c:b2: 9b:a3:b5:a4:1c:dc:eb:82:25:7d:ad:48:5d:11:4e:05:79:3e: 60:59:a7:18:84:e4:b2:87:ee:37:f9:0a:e1:bc:c1:c9:d7:89: 29:85:41:2d:1f:7a:75:15:e9:b0:15:ea:e5:75:e7:ec:d5:0d: 79:47:00:d2:c7:18:31:73:9b:13:30:48:02:6b:f5:eb:aa:95: e5:e5:8f:c9:96:99:54:d9:87:d1:30:71:b0:ea:f6:8d:b0:02: aa:2a:5b:c6:86:a7:e0:18:e7:b7:ea:43:9b:de:08:b5:09:13: 7d:46:0e:23:e5:b5:85:9f:17:7a:22:49:71:ab:37:8b:33:af: 68:32:e9:31:d9:27:5e:01:a8:cc:01:37:bf:77:40:a7:32:9f: 0c:61:82:ea:29:62:54:e5:e3:74:9b:89:38:00:b8:b6:0b:bf: d1:44:5f:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrIuK41WsbanJwj4CuCVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMzY0MmQxYWIzOWQzMDllYzVmMzNlNGU4ODE0YWRjMzU4 NDgyNWYwHhcNMjUxMjA2MDMwMDM4WhcNMjUxMjA3MDMwMDM4WjAzMTEwLwYDVQQD Eyg5MTlhMzljODkxYzcyMjc0ZGYxOWRkZDUzMTU4YTM0MTZiZTZhYjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2Go0sxPzxlazlfLBeVzO2l0d5/5 Cs1HartCUqwlnFydrUAt7btUN5WoC3fKv5PKl4ERql7q7a4LCIRsro1VNbGOoYX6 WqCLQiFVZlPHu0FmUYLsIMavUuIObZs80OWAJP5oTVGO3AnzH/XWGurj26fS9rE8 nGNgjthnwKe0wLUtHzoi+wex8a4YsNh4GYdz0slKyBS9hDUFBtrYJFJ64d/mxQb5 A2B/TRSSKgOUurJHWHEfju/4Aob/UA3fYLOs+R2ci5f9yaMpXAQKaIE13CuN9FRO Hwjaw6B5TGmwjbzEyEqTLghOh8yEta91h7BrRxMnFHZvfp++9JKYW0PetQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGaOciRxyJ03xnd1TFYo0Fr5qtwMB8GA1UdIwQY MBaAFMI2QtGrOdMJ7F8z5OiBStw1hIJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2paQzBhczUwd25zWHpQazZJRkszRFdFZ2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lNDE2OTgtZTdhYy00MThjLWI5MWQt MjI2Nzk2OGI2NTJmLzEvd2paQzBhczUwd25zWHpQazZJRkszRFdFZ2w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lNDE2OTgtZTdhYy00MThjLWI5MWQtMjI2Nzk2OGI2NTJm LzEvd2paQzBhczUwd25zWHpQazZJRkszRFdFZ2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdm9wB2xC XR5ALoNFqrgqj9j5Q8LzQ6PkicUu3BZFtsc3/NmHpE/sVcDoP33i9Bc29CwlBcDc KgEwXAuwV5Hx54my4WiH1cW8BrECt+Fqu3/yg3PNiUCJJkyym6O1pBzc64Ilfa1I XRFOBXk+YFmnGITksofuN/kK4bzBydeJKYVBLR96dRXpsBXq5XXn7NUNeUcA0scY MXObEzBIAmv166qV5eWPyZaZVNmH0TBxsOr2jbACqipbxoan4Bjnt+pDm94ItQkT fUYOI+W1hZ8XeiJJcas3izOvaDLpMdknXgGozAE3v3dApzKfDGGC6iliVOXjdJuJ OAC4tgu/0URfPw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:21 2025 by rpki-client