This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json) Hash identifier: NvSZZtr1o2oNCwz0ghqt7/zklZ+tpdxeDCmZBzsUCs4= Subject key identifier: DF:04:FF:7C:70:21:60:0C:45:1E:E4:CA:11:96:10:72:94:CE:A0:86 Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87 Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87 Certificate serial: 019AF2766888BC5BC291F6DF695559B489E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft Manifest number: 099C Signing time: Sat 06 Dec 2025 07:00:37 +0000 Manifest this update: Sat 06 Dec 2025 07:00:37 +0000 Manifest next update: Sun 07 Dec 2025 07:00:37 +0000 Files and hashes: 1: oXdvfaAw2HX5k9hgoYRskK2gnZ0.roa (hash: RsMteruai2QKgImCyNPBir6yRcbFaU5c9mP5yO+ruyE=) 2: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: SUb09uvUDObg8Fay6HE4M123Tw5TlOunSt/oDEi+ksw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:68:88:bc:5b:c2:91:f6:df:69:55:59:b4:89:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87 Validity Not Before: Dec 6 07:00:37 2025 GMT Not After : Dec 7 07:00:37 2025 GMT Subject: CN=df04ff7c7021600c451ee4ca1196107294cea086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:39:03:6f:78:0f:8f:7a:e2:e1:f2:69:31:42: cf:20:df:95:e2:da:e3:05:32:f6:76:01:e0:22:38: 0d:76:f1:d3:11:6e:34:7e:d1:1d:0f:0f:a8:d0:5c: d1:5a:8c:9c:f2:1b:23:32:d9:3e:fa:df:2f:a7:8e: 01:51:59:06:20:8a:62:c7:ea:ef:43:a9:24:6b:c3: e3:87:fd:c1:e2:6f:58:82:a5:43:12:65:6a:79:bd: 92:d8:b4:48:e0:e6:09:17:93:d6:f6:93:2f:b0:f7: a4:36:87:6c:72:3f:df:64:a7:2a:33:4a:82:5f:d0: fb:1e:5b:27:67:95:e9:ad:71:ed:ac:de:34:39:6b: 16:08:f1:dd:15:6b:5b:56:e9:72:3c:fd:15:78:5b: bf:42:b9:ae:dc:88:56:fe:e6:7a:b5:22:df:31:48: be:be:35:28:35:42:6d:ae:53:f4:ec:55:61:8c:12: 91:9a:89:d7:30:0c:fe:cc:f6:90:73:ce:08:6f:48: d7:a8:6f:99:ca:51:75:17:f5:ee:71:c1:4b:04:ff: 36:37:61:b0:04:0f:b6:a1:f0:5f:33:da:8a:07:69: 8e:5c:2e:07:c5:3e:ee:6e:dd:1f:6c:cd:ee:f9:b7: a2:27:22:1e:45:49:a0:e1:22:c8:72:bb:b5:5f:35: 71:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:04:FF:7C:70:21:60:0C:45:1E:E4:CA:11:96:10:72:94:CE:A0:86 X509v3 Authority Key Identifier: keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:00:65:ea:13:7e:cc:d9:b5:14:bc:42:8d:b6:c0:38:70:ba: 27:ac:76:bc:8d:07:a4:3b:83:b4:4f:ac:a8:09:ea:3b:37:8e: 66:fe:88:25:c4:59:18:c2:07:18:42:25:96:fb:15:47:40:e6: 11:f7:63:8e:33:75:22:c5:ec:54:95:ce:f1:77:d6:9e:49:5f: ce:1d:6c:46:64:14:c6:c1:76:48:81:67:0e:32:ab:63:8e:86: 94:b4:a3:19:8d:3f:65:77:74:f8:74:3b:ed:f1:35:65:0a:4d: 9d:86:36:21:0f:53:12:fa:51:a2:61:a2:b0:99:62:7d:2b:a2: ca:08:76:d4:38:79:d1:5b:99:2a:09:a4:af:3b:1d:97:ac:e1: 6a:02:eb:a6:de:05:12:c1:8c:99:82:9f:24:ba:ef:86:86:01: 6a:8f:95:e8:2f:e4:c2:3b:34:5e:61:6f:d3:d5:bd:dc:ee:b7: e5:98:4e:a5:7a:32:32:bb:23:b8:1c:f4:06:83:8a:41:52:b5: 2d:e4:ce:50:db:0e:c3:01:34:17:8b:bf:dd:e7:b2:a8:85:e5: 74:b0:7a:ef:98:d0:12:63:4a:b1:df:26:95:8c:22:40:6d:c5: 33:d4:aa:05:49:d9:15:1d:e3:95:70:98:17:bd:02:9c:eb:5d: 9d:20:8e:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmiIvFvCkfbfaVVZtInkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMjEyNTg5NzRlZThlMDU0NTYwYzcxNzZmODM0N2Q0MzU1 YjlhODcwHhcNMjUxMjA2MDcwMDM3WhcNMjUxMjA3MDcwMDM3WjAzMTEwLwYDVQQD EyhkZjA0ZmY3YzcwMjE2MDBjNDUxZWU0Y2ExMTk2MTA3Mjk0Y2VhMDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjkDb3gPj3ri4fJpMULPIN+V4trj BTL2dgHgIjgNdvHTEW40ftEdDw+o0FzRWoyc8hsjMtk++t8vp44BUVkGIIpix+rv Q6kka8Pjh/3B4m9YgqVDEmVqeb2S2LRI4OYJF5PW9pMvsPekNodscj/fZKcqM0qC X9D7HlsnZ5XprXHtrN40OWsWCPHdFWtbVulyPP0VeFu/Qrmu3IhW/uZ6tSLfMUi+ vjUoNUJtrlP07FVhjBKRmonXMAz+zPaQc84Ib0jXqG+ZylF1F/XuccFLBP82N2Gw BA+2ofBfM9qKB2mOXC4HxT7ubt0fbM3u+beiJyIeRUmg4SLIcru1XzVxawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8E/3xwIWAMRR7kyhGWEHKUzqCGMB8GA1UdIwQY MBaAFMIhJYl07o4FRWDHF2+DR9Q1W5qHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wODQ4MmYtYTdjNS00NjI3LWEwNjgt MjVmNzlkMmQ4YzE3LzEvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8wODQ4MmYtYTdjNS00NjI3LWEwNjgtMjVmNzlkMmQ4YzE3 LzEvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgBl6hN+ zNm1FLxCjbbAOHC6J6x2vI0HpDuDtE+sqAnqOzeOZv6IJcRZGMIHGEIllvsVR0Dm EfdjjjN1IsXsVJXO8XfWnklfzh1sRmQUxsF2SIFnDjKrY46GlLSjGY0/ZXd0+HQ7 7fE1ZQpNnYY2IQ9TEvpRomGisJlifSuiygh21Dh50VuZKgmkrzsdl6zhagLrpt4F EsGMmYKfJLrvhoYBao+V6C/kwjs0XmFv09W93O635ZhOpXoyMrsjuBz0BoOKQVK1 LeTOUNsOwwE0F4u/3eeyqIXldLB675jQEmNKsd8mlYwiQG3FM9SqBUnZFR3jlXCY F70CnOtdnSCOCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:01:41 2025 by rpki-client