This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft File: wei4jx4wVzoOIOR51boAtOkYJ7Y.mft (raw, json) Hash identifier: LEJsYBe9A8mv0LYpF7UyCWSKEICcN6uAJy722/ieUoQ= Subject key identifier: F8:99:0B:47:1C:10:63:F2:D2:B3:8C:31:E2:74:6A:0C:CF:93:EF:F4 Authority key identifier: C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6 Certificate issuer: /CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6 Certificate serial: 019AF0BEEBBAACF29B99E697347F42992FF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 23:00:35 +0000 Manifest this update: Fri 05 Dec 2025 23:00:35 +0000 Manifest next update: Sat 06 Dec 2025 23:00:35 +0000 Files and hashes: 1: X1Gl7pI0OMRR6ajfA3cvno5vstw.roa (hash: zVVJwLgXELHLdhQ+YSrbw1EHdsK7mWsiuWthVrRspkM=) 2: wei4jx4wVzoOIOR51boAtOkYJ7Y.crl (hash: kQunQiFoz97EH601m6HB2/Rln/kfcuKE5h+1EvNbERw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:eb:ba:ac:f2:9b:99:e6:97:34:7f:42:99:2f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6 Validity Not Before: Dec 5 23:00:35 2025 GMT Not After : Dec 6 23:00:35 2025 GMT Subject: CN=f8990b471c1063f2d2b38c31e2746a0ccf93eff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4d:ce:04:80:61:fa:f0:c4:de:1c:fa:86:b9: 9c:40:d8:c2:35:f1:06:a4:47:dc:d6:76:02:54:ce: 97:f0:c5:7b:b5:e1:7e:03:e9:60:c9:36:8d:4e:91: b6:9f:1a:f1:a8:85:cd:51:c0:a3:d7:57:76:69:b3: 9d:5b:29:99:9e:12:2c:db:78:ea:61:a9:60:25:63: 67:7f:cf:d2:5b:46:5d:75:7a:b4:d8:f2:8a:7e:7c: 44:93:57:a3:63:ef:bc:c2:88:ca:89:0f:78:92:ff: 82:83:a6:5f:74:26:c2:1b:1e:36:f4:cf:4a:20:27: d1:96:64:02:99:b8:e3:5c:01:2e:87:c5:e0:d9:eb: 78:b1:4a:af:7e:fd:a1:74:46:d7:6a:11:2f:96:67: e0:7f:6f:aa:02:7d:11:3e:68:ef:76:42:29:8d:da: 9d:fa:f4:f9:2c:3f:d8:e5:9d:e0:6d:80:53:08:88: a5:57:ca:6f:10:56:4d:11:a4:a0:98:ac:2a:5b:a9: 31:1d:47:69:09:b4:b3:e4:77:4e:55:75:62:d1:9d: 87:33:48:d1:de:af:e7:ba:e8:3d:30:49:6e:db:09: a6:f5:fb:f2:c6:11:5c:9a:eb:4c:5a:b1:f3:46:13: 3c:4d:16:94:d5:43:47:94:d1:b1:14:e4:08:4f:7c: 15:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:99:0B:47:1C:10:63:F2:D2:B3:8C:31:E2:74:6A:0C:CF:93:EF:F4 X509v3 Authority Key Identifier: keyid:C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a3:4a:1c:37:2e:2a:38:71:86:a3:c2:fc:d3:2a:c2:25:e4: 20:84:6a:09:5f:41:93:c0:65:06:6b:6d:a5:5c:15:62:b5:35: 01:57:df:3a:14:6a:b4:85:c4:b3:8e:d5:e2:05:ff:08:d8:cd: 64:bc:c5:84:94:30:c8:52:69:00:bb:da:b4:8a:00:67:08:a4: 39:2b:21:a3:ce:ab:b7:45:fa:80:1f:f3:b1:f1:e1:eb:5f:da: 82:18:4f:68:64:7f:6a:7d:d6:59:d0:a3:ea:6e:97:7e:75:90: 51:c0:57:f7:a8:ff:38:19:45:c7:6c:72:a9:5d:b3:2e:e6:9c: 89:c1:4b:a4:ca:51:a8:d3:fc:a1:8b:7e:2a:e9:25:a9:37:99: 81:89:ac:31:1f:bc:da:94:32:5d:bb:d9:79:66:70:70:d7:00: 22:da:ce:4e:59:dc:ae:85:1c:65:75:f0:9f:73:48:d9:c1:16: 12:1a:ef:93:d4:be:1a:a1:7d:3e:15:4e:aa:cb:22:b5:ee:85: 4b:b7:a4:d4:e7:a1:7c:fd:46:d4:d6:db:46:9f:08:11:49:68: f4:a0:7d:3a:80:15:ad:ee:8f:af:ee:5e:dd:a4:22:ac:85:26: 17:81:97:ae:bb:47:63:d1:cf:f8:98:88:f6:a5:83:12:a7:f3: b3:c0:1e:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvuu6rPKbmeaXNH9CmS/zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZThiODhmMWUzMDU3M2EwZTIwZTQ3OWQ1YmEwMGI0ZTkx ODI3YjYwHhcNMjUxMjA1MjMwMDM1WhcNMjUxMjA2MjMwMDM1WjAzMTEwLwYDVQQD EyhmODk5MGI0NzFjMTA2M2YyZDJiMzhjMzFlMjc0NmEwY2NmOTNlZmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk3OBIBh+vDE3hz6hrmcQNjCNfEG pEfc1nYCVM6X8MV7teF+A+lgyTaNTpG2nxrxqIXNUcCj11d2abOdWymZnhIs23jq YalgJWNnf8/SW0ZddXq02PKKfnxEk1ejY++8wojKiQ94kv+Cg6ZfdCbCGx429M9K ICfRlmQCmbjjXAEuh8Xg2et4sUqvfv2hdEbXahEvlmfgf2+qAn0RPmjvdkIpjdqd +vT5LD/Y5Z3gbYBTCIilV8pvEFZNEaSgmKwqW6kxHUdpCbSz5HdOVXVi0Z2HM0jR 3q/nuug9MElu2wmm9fvyxhFcmutMWrHzRhM8TRaU1UNHlNGxFOQIT3wVQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiZC0ccEGPy0rOMMeJ0agzPk+/0MB8GA1UdIwQY MBaAFMHouI8eMFc6DiDkedW6ALTpGCe2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2VpNGp4NHdWem9PSU9SNTFib0F0T2tZSjdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NTcxOTctYzYyOC00OGIxLTk1NmQt ZWZmZTk1NWE1ZDY0LzEvd2VpNGp4NHdWem9PSU9SNTFib0F0T2tZSjdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82NTcxOTctYzYyOC00OGIxLTk1NmQtZWZmZTk1NWE1ZDY0 LzEvd2VpNGp4NHdWem9PSU9SNTFib0F0T2tZSjdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbaNKHDcu KjhxhqPC/NMqwiXkIIRqCV9Bk8BlBmttpVwVYrU1AVffOhRqtIXEs47V4gX/CNjN ZLzFhJQwyFJpALvatIoAZwikOSsho86rt0X6gB/zsfHh61/aghhPaGR/an3WWdCj 6m6XfnWQUcBX96j/OBlFx2xyqV2zLuacicFLpMpRqNP8oYt+KuklqTeZgYmsMR+8 2pQyXbvZeWZwcNcAItrOTlncroUcZXXwn3NI2cEWEhrvk9S+GqF9PhVOqssite6F S7ek1OehfP1G1NbbRp8IEUlo9KB9OoAVre6Pr+5e3aQirIUmF4GXrrtHY9HP+JiI 9qWDEqfzs8Ae2w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:27 2025 by rpki-client