This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft File: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft (raw, json) Hash identifier: LjO7IOK3MIasN1hisvXBvAYdJTGt4pUkLulpPZ6RJ94= Subject key identifier: 7F:7E:E8:E4:89:60:2E:51:D4:36:DF:1A:14:46:6C:EA:BA:AE:49:89 Authority key identifier: F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F Certificate issuer: /CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f Certificate serial: 019AF0513B118F5CEC97DB35BFABFDCB6561 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft Manifest number: 026E Signing time: Fri 05 Dec 2025 21:00:46 +0000 Manifest this update: Fri 05 Dec 2025 21:00:46 +0000 Manifest next update: Sat 06 Dec 2025 21:00:46 +0000 Files and hashes: 1: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl (hash: 4tVYDFueuB2z9KAh3iOC6bYKloC9/tY7B3haKer4Bbw=) 2: 42HdpJSIuZQYNL_T503F7T6tVtg.roa (hash: 2oMCOR0uoZknejKNMlu0g0SgSeLr17Imm1o0mXmKjiE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:3b:11:8f:5c:ec:97:db:35:bf:ab:fd:cb:65:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f Validity Not Before: Dec 5 21:00:46 2025 GMT Not After : Dec 6 21:00:46 2025 GMT Subject: CN=7f7ee8e489602e51d436df1a14466ceabaae4989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4f:de:e0:f2:de:8b:3d:00:76:2c:24:46:fc: 0e:25:c0:a4:23:36:25:bb:3a:96:97:70:87:74:2b: b2:e5:0f:43:76:21:2a:16:82:51:33:34:5a:0a:1e: 3f:53:4d:d2:93:e6:15:1d:78:9e:a3:ea:9d:b1:1a: c7:f6:a1:6b:30:99:ff:f1:df:81:3d:c7:9d:48:e6: f0:dd:ef:e7:63:5c:7f:e5:a4:22:c6:62:a8:ce:f1: c3:13:0b:c2:ed:cb:6c:99:9f:3d:a9:1f:d2:58:df: c1:c4:2d:48:32:98:ee:14:c2:0f:71:91:46:4c:89: 5b:77:aa:d3:30:02:89:a4:23:5e:db:dc:17:f6:d1: 78:04:dc:1b:09:5c:30:d2:08:e6:41:08:27:0f:21: fd:52:04:fa:c2:b8:0a:44:d7:1b:6d:ec:eb:ae:80: f7:8f:d0:19:d0:4e:24:9a:64:ad:69:59:7a:bb:ab: 58:01:b9:16:b8:23:5e:56:50:f9:81:00:e3:19:90: 71:e5:49:35:97:78:7c:cf:2f:d6:1c:41:3d:b8:f3: ea:6d:a0:a7:5c:70:ba:23:14:aa:38:ce:cc:6c:d6: 18:78:21:62:31:5b:f2:e0:da:3c:e3:48:eb:b2:07: 00:a1:0f:4f:31:e0:5f:b0:9a:d5:bb:1b:a2:e2:2c: 2d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:7E:E8:E4:89:60:2E:51:D4:36:DF:1A:14:46:6C:EA:BA:AE:49:89 X509v3 Authority Key Identifier: keyid:F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:13:10:67:ec:b8:16:57:df:0b:64:e6:59:30:58:04:c1:ec: f6:1f:46:0c:aa:22:74:a1:b5:b8:a9:74:4f:79:ad:9d:d8:87: 20:01:ab:6d:1d:d1:2b:9e:a6:08:59:2d:6b:5e:28:db:e6:c5: d9:75:2c:99:9c:86:5c:e8:e8:4d:34:2d:2b:b4:f0:4c:3b:09: 3c:57:d3:fc:92:73:c0:85:a8:23:b6:37:01:7d:56:c4:49:eb: bf:10:47:1f:08:3e:24:ad:04:69:25:61:6f:42:f1:fe:f2:7b: 0f:e2:b1:bd:95:c9:d0:11:2b:65:e6:5a:9c:67:fd:86:94:3e: 19:c1:75:75:13:86:75:23:b4:54:6d:1c:61:6f:fe:ef:d6:23: 49:60:b7:fe:86:09:cf:45:39:77:5f:ff:b9:1f:a8:28:25:b6: eb:95:c8:af:a7:06:df:fc:79:65:67:8d:3b:99:65:e8:e3:8c: 6c:cf:e4:05:01:87:c1:54:a1:7c:d9:0f:51:c0:b7:9a:ee:cb: 08:d2:4e:5b:06:48:de:f7:c5:d4:71:46:32:7c:dc:12:fc:26: 8b:59:a7:1a:92:a7:36:2c:94:09:2b:fd:a1:f6:d0:15:1c:d4: 24:f7:7f:f6:af:36:07:6d:49:d7:46:2f:e6:c7:22:67:95:78: d1:18:55:e4 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrwUTsRj1zsl9s1v6v9y2VhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NjBjN2FiM2M0YmNjM2ZjYTgzZTQ5MzMxNjc3YjQ0YmI3 YTk0NmYwHhcNMjUxMjA1MjEwMDQ2WhcNMjUxMjA2MjEwMDQ2WjAzMTEwLwYDVQQD Eyg3ZjdlZThlNDg5NjAyZTUxZDQzNmRmMWExNDQ2NmNlYWJhYWU0OTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk/e4PLeiz0AdiwkRvwOJcCkIzYl uzqWl3CHdCuy5Q9DdiEqFoJRMzRaCh4/U03Sk+YVHXieo+qdsRrH9qFrMJn/8d+B PcedSObw3e/nY1x/5aQixmKozvHDEwvC7ctsmZ89qR/SWN/BxC1IMpjuFMIPcZFG TIlbd6rTMAKJpCNe29wX9tF4BNwbCVww0gjmQQgnDyH9UgT6wrgKRNcbbezrroD3 j9AZ0E4kmmStaVl6u6tYAbkWuCNeVlD5gQDjGZBx5Uk1l3h8zy/WHEE9uPPqbaCn XHC6IxSqOM7MbNYYeCFiMVvy4No840jrsgcAoQ9PMeBfsJrVuxui4iwtnwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFH9+6OSJYC5R1DbfGhRGbOq6rkmJMB8GA1UdIwQY MBaAFPlgx6s8S8w/yoPkkzFne0S7epRvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1XREhxenhMekRfS2ctU1RNV2Q3Ukx0NmxHOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZWU0N2RlLTMzNWEtNDk5OS1iNjEz LTI2OTBiNTVmNTBmZC8xLzEtV0RIcXp4THpEX0tnLVNUTVdkN1JMdDZsRzgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzYyL2VlNDdkZS0zMzVhLTQ5OTktYjYxMy0yNjkwYjU1ZjUw ZmQvMS8xLVdESHF6eEx6RF9LZy1TVE1XZDdSTHQ2bEc4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxMQ Z+y4FlffC2TmWTBYBMHs9h9GDKoidKG1uKl0T3mtndiHIAGrbR3RK56mCFkta14o 2+bF2XUsmZyGXOjoTTQtK7TwTDsJPFfT/JJzwIWoI7Y3AX1WxEnrvxBHHwg+JK0E aSVhb0Lx/vJ7D+KxvZXJ0BErZeZanGf9hpQ+GcF1dROGdSO0VG0cYW/+79YjSWC3 /oYJz0U5d1//uR+oKCW265XIr6cG3/x5ZWeNO5ll6OOMbM/kBQGHwVShfNkPUcC3 mu7LCNJOWwZI3vfF1HFGMnzcEvwmi1mnGpKnNiyUCSv9ofbQFRzUJPd/9q82B21J 10Yv5sciZ5V40RhV5A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:51 2025 by rpki-client