This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft File: WujHjxYTl64dvQrDIlhPYvt0AJc.mft (raw, json) Hash identifier: 5E37voCzL6MVZwVT1C7BKK56L/9cgM/SOK5APpx0h3A= Subject key identifier: 2D:E5:A2:7B:60:0A:94:0A:A2:46:22:D6:14:AD:E9:C8:3E:A9:EE:9D Authority key identifier: 5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97 Certificate issuer: /CN=5ae8c78f161397ae1dbd0ac322584f62fb740097 Certificate serial: 019AF31B7215FFE8CF80C410C9F0F1D1F068 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 10:00:53 +0000 Manifest this update: Sat 06 Dec 2025 10:00:53 +0000 Manifest next update: Sun 07 Dec 2025 10:00:53 +0000 Files and hashes: 1: WujHjxYTl64dvQrDIlhPYvt0AJc.crl (hash: sxwB/53LvZO81l7mNrl5CrXz2So1n4+XsTZzi9657Mk=) 2: daHEI4pwK9MCoKlOIJSUBvhI06c.roa (hash: /jr1EJCG0Q64uCvZ5hBO4FDYHAmlotvlgjK0tDnckkE=) 3: eyQdGysIhp_r6-1FHIzSXU5efx8.roa (hash: huANc1mdWopecpKqoSK4uR5EG7Pph6cXGyXeN73ZyWA=) 4: haxTlRYy2yO-0mAOlc4jzaKbbWo.roa (hash: yUxYpdVjNsLpxhJtWSKKbU7j/fl7MSe7J+Jl/FZPDcE=) 5: qEBSULOSMZqvdv0jIfml2f7tabs.roa (hash: nH9uGd3tMpksCUbkWl3JLVG6iE75o6qgmjF/U2MlHRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:72:15:ff:e8:cf:80:c4:10:c9:f0:f1:d1:f0:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ae8c78f161397ae1dbd0ac322584f62fb740097 Validity Not Before: Dec 6 10:00:53 2025 GMT Not After : Dec 7 10:00:53 2025 GMT Subject: CN=2de5a27b600a940aa24622d614ade9c83ea9ee9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fc:87:0c:ce:f4:24:2d:25:3e:6c:cb:81:69: a4:78:87:69:7f:61:02:23:a2:ea:4b:d5:4a:72:55: c1:65:ad:cd:7f:37:63:70:a5:bf:44:d0:3e:3e:17: a2:b8:ba:76:4d:54:a7:f1:34:2a:34:21:61:eb:04: d5:1f:d3:ea:41:7f:66:3d:8f:29:b8:3c:1c:96:b7: 90:3f:ea:75:0f:56:e3:de:3f:49:42:bc:0e:00:81: aa:a5:48:e0:21:12:c8:c2:4a:96:e1:f1:b5:dc:df: 30:5d:e2:da:0e:fc:2c:0e:21:39:37:90:13:86:66: f9:95:6a:9c:f1:f4:fb:aa:aa:56:77:78:ac:47:93: e0:4c:6a:20:9e:bc:68:80:cd:8d:45:c7:5b:cb:cb: ec:eb:7f:11:1b:1a:b6:74:7a:97:59:0d:03:c8:a7: 58:df:aa:cf:7c:0e:5f:e1:7d:95:31:35:a6:64:1c: e0:50:b4:cb:00:e2:c2:4a:c5:94:03:88:ee:85:1b: 02:8b:78:3f:d0:b8:db:40:07:70:ba:40:04:98:67: fc:5a:ad:d2:91:6e:4a:e4:80:3b:6e:9a:bb:43:3b: 9d:92:c3:54:94:e3:92:04:aa:43:f1:59:67:c2:a2: 49:f5:50:dc:f2:1c:58:02:2b:14:40:8a:4a:c0:c9: 7c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E5:A2:7B:60:0A:94:0A:A2:46:22:D6:14:AD:E9:C8:3E:A9:EE:9D X509v3 Authority Key Identifier: keyid:5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:5b:7b:97:a0:3c:62:df:c5:45:7f:c1:83:82:be:ca:dc:26: 65:9d:f9:c0:e7:29:48:f1:bd:aa:59:32:24:45:68:5a:9b:4c: 03:e2:f7:06:1b:aa:27:fe:9b:c3:c7:bf:42:9d:d3:7c:8b:cc: 8b:b7:f7:d3:1c:a7:e9:58:59:86:d4:fc:63:a1:21:49:f8:e5: c1:d2:7a:e9:4e:59:fd:a6:63:8c:a5:e4:a5:6e:c7:03:02:37: a7:e5:7a:66:57:c0:cb:16:57:64:bf:94:84:27:9d:a1:46:6a: a0:ed:bb:bc:3c:9c:03:be:b5:9d:76:e2:29:17:7b:c3:a9:ef: af:56:6d:4a:b5:53:16:ab:bf:7c:18:23:a1:0d:aa:89:68:e0: 4c:ff:f4:f1:1c:b4:4c:eb:07:34:d7:db:99:17:51:35:8e:9f: de:19:76:0c:f4:f2:fb:ba:40:30:db:09:5b:57:62:b1:95:80: d7:a1:ae:1a:9d:e6:16:6b:69:2e:fb:99:aa:cb:d5:61:7f:67: 29:ae:3f:d5:42:cd:02:cd:11:57:be:e9:3a:e0:99:77:46:9a: ca:d9:aa:46:8e:a9:7a:d6:43:b6:b8:c7:c1:2b:d3:47:b7:5b: eb:c4:98:0e:c5:31:da:5a:7c:39:1c:c9:6a:f1:c3:e6:09:d6: 2a:b8:84:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3IV/+jPgMQQyfDx0fBoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZThjNzhmMTYxMzk3YWUxZGJkMGFjMzIyNTg0ZjYyZmI3 NDAwOTcwHhcNMjUxMjA2MTAwMDUzWhcNMjUxMjA3MTAwMDUzWjAzMTEwLwYDVQQD EygyZGU1YTI3YjYwMGE5NDBhYTI0NjIyZDYxNGFkZTljODNlYTllZTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvyHDM70JC0lPmzLgWmkeIdpf2EC I6LqS9VKclXBZa3NfzdjcKW/RNA+PheiuLp2TVSn8TQqNCFh6wTVH9PqQX9mPY8p uDwclreQP+p1D1bj3j9JQrwOAIGqpUjgIRLIwkqW4fG13N8wXeLaDvwsDiE5N5AT hmb5lWqc8fT7qqpWd3isR5PgTGognrxogM2NRcdby8vs638RGxq2dHqXWQ0DyKdY 36rPfA5f4X2VMTWmZBzgULTLAOLCSsWUA4juhRsCi3g/0LjbQAdwukAEmGf8Wq3S kW5K5IA7bpq7QzudksNUlOOSBKpD8VlnwqJJ9VDc8hxYAisUQIpKwMl8jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3lontgCpQKokYi1hSt6cg+qe6dMB8GA1UdIwQY MBaAFFrox48WE5euHb0KwyJYT2L7dACXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3VqSGp4WVRsNjRkdlFyRElsaFBZdnQwQUpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80ZDI3YmItZjg1Yy00YmZkLWIxYzMt NDdiY2QzOWMzZDg2LzEvV3VqSGp4WVRsNjRkdlFyRElsaFBZdnQwQUpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni80ZDI3YmItZjg1Yy00YmZkLWIxYzMtNDdiY2QzOWMzZDg2 LzEvV3VqSGp4WVRsNjRkdlFyRElsaFBZdnQwQUpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFt7l6A8 Yt/FRX/Bg4K+ytwmZZ35wOcpSPG9qlkyJEVoWptMA+L3BhuqJ/6bw8e/Qp3TfIvM i7f30xyn6VhZhtT8Y6EhSfjlwdJ66U5Z/aZjjKXkpW7HAwI3p+V6ZlfAyxZXZL+U hCedoUZqoO27vDycA761nXbiKRd7w6nvr1ZtSrVTFqu/fBgjoQ2qiWjgTP/08Ry0 TOsHNNfbmRdRNY6f3hl2DPTy+7pAMNsJW1disZWA16GuGp3mFmtpLvuZqsvVYX9n Ka4/1ULNAs0RV77pOuCZd0aaytmqRo6petZDtrjHwSvTR7db68SYDsUx2lp8ORzJ avHD5gnWKriEGg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:06:40 2025 by rpki-client