This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft File: wuJKnaa-B1Tt3BR41pTm2p4Volg.mft (raw, json) Hash identifier: nAb5gnGdyZuncuKK8jJec7L/HtphdRaMlgEak7MgQiI= Subject key identifier: 14:7F:D3:D5:A0:A9:62:6B:9C:E6:4E:26:E3:E2:4B:6A:44:1E:03:7F Authority key identifier: C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58 Certificate issuer: /CN=c2e24a9da6be0754eddc1478d694e6da9e15a258 Certificate serial: 019AF3C070649D4F7C97BAEC640A802465DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft Manifest number: 16F1 Signing time: Sat 06 Dec 2025 13:01:06 +0000 Manifest this update: Sat 06 Dec 2025 13:01:06 +0000 Manifest next update: Sun 07 Dec 2025 13:01:06 +0000 Files and hashes: 1: h69ZP3KGJST0X8t2H0a84vHIE78.roa (hash: J750FBzG47GmCm3WoGWQrJESMcKlRjC1SRSpKQ3Vchw=) 2: wuJKnaa-B1Tt3BR41pTm2p4Volg.crl (hash: qRhNBKM05I9lCLVf5FlxdjBpwNyVUpVhHzG6cH04NI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.crl rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:70:64:9d:4f:7c:97:ba:ec:64:0a:80:24:65:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2e24a9da6be0754eddc1478d694e6da9e15a258 Validity Not Before: Dec 6 13:01:06 2025 GMT Not After : Dec 7 13:01:06 2025 GMT Subject: CN=147fd3d5a0a9626b9ce64e26e3e24b6a441e037f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:80:a1:7d:4c:ac:3d:1b:4d:7c:31:f0:f0:16: 5f:da:ef:25:7e:a6:09:a3:8f:e1:9d:9b:c8:8b:3d: 69:0a:c1:81:16:94:a1:9a:0c:a1:19:4f:8a:e3:29: ab:ea:fa:f1:4d:29:f6:ec:c2:1c:55:ac:33:32:94: 02:6d:7c:39:f9:85:fc:3f:2c:31:21:32:a8:a7:b8: 2b:ab:28:a9:3a:95:cb:68:bc:1b:53:5f:ad:9c:7c: 73:c1:48:d3:a6:1f:46:f1:77:97:86:79:53:fc:49: 7e:31:65:26:09:c3:5a:c2:cd:cf:b1:23:f9:36:4b: 0e:70:1d:a4:4d:75:36:9b:d6:2c:6b:ec:f2:56:d4: e9:78:f5:dc:c2:62:fa:62:31:b8:0d:7d:c8:97:fc: 50:1b:c3:92:64:81:b0:91:41:89:ba:bf:3e:e4:ee: 92:f4:9e:5c:4b:74:47:e8:ac:d2:4d:56:dc:91:7e: c2:aa:a1:c7:b8:ea:f3:5d:67:07:3c:69:e8:d8:18: 86:17:85:53:39:15:e3:59:a9:ef:c8:92:fd:a2:5b: ed:26:b0:de:a1:fc:8e:cb:ad:97:a4:06:da:ff:e0: 3e:19:be:18:5c:7a:14:c9:d0:f9:43:13:57:0f:e1: 1f:e0:96:e9:0a:2e:2e:19:8f:d1:f8:b8:e9:12:d0: da:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7F:D3:D5:A0:A9:62:6B:9C:E6:4E:26:E3:E2:4B:6A:44:1E:03:7F X509v3 Authority Key Identifier: keyid:C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:c3:fd:e8:57:f8:60:dc:a6:82:e2:99:a4:d9:59:8c:83:1e: db:5d:6d:7c:d6:5f:98:f3:71:45:04:a0:c9:3b:b4:08:30:63: 76:b1:5c:18:b7:e3:5f:9a:65:f4:d7:0c:ff:6e:d8:33:fb:eb: 5e:b5:21:2f:98:6b:3c:b4:94:aa:c0:54:75:9b:cb:3f:b7:24: 64:77:35:88:af:88:ee:9d:2d:a6:ec:c5:7e:b6:66:02:1b:37: b7:f2:db:5a:73:9d:c2:78:9d:41:64:8b:b2:4b:17:73:83:d2: e8:03:be:17:19:45:59:e2:b0:31:fe:54:0a:57:23:4c:3e:a3: 4e:a0:e3:f8:31:75:4c:80:68:4c:c4:20:00:37:70:8e:59:53: c5:51:be:ca:49:d5:e2:1d:ad:45:ca:b4:ca:23:83:ad:52:2b: 15:b4:ed:97:16:19:4c:a9:0d:28:d0:df:9b:3f:66:72:93:2d: 98:47:ac:9e:a8:97:27:6f:42:af:e3:74:a1:28:31:ec:f4:b9: 39:81:7e:50:a4:c7:89:84:75:29:17:4f:20:b7:7d:a8:26:85: bc:7a:0e:8c:73:df:9f:48:84:ce:28:af:87:66:2a:4f:b5:d0: 86:a4:15:bc:79:1a:57:be:cd:d4:bc:3a:53:d5:26:b3:d3:28: fe:3c:0f:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwHBknU98l7rsZAqAJGXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZTI0YTlkYTZiZTA3NTRlZGRjMTQ3OGQ2OTRlNmRhOWUx NWEyNTgwHhcNMjUxMjA2MTMwMTA2WhcNMjUxMjA3MTMwMTA2WjAzMTEwLwYDVQQD EygxNDdmZDNkNWEwYTk2MjZiOWNlNjRlMjZlM2UyNGI2YTQ0MWUwMzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IChfUysPRtNfDHw8BZf2u8lfqYJ o4/hnZvIiz1pCsGBFpShmgyhGU+K4ymr6vrxTSn27MIcVawzMpQCbXw5+YX8Pywx ITKop7grqyipOpXLaLwbU1+tnHxzwUjTph9G8XeXhnlT/El+MWUmCcNaws3PsSP5 NksOcB2kTXU2m9Ysa+zyVtTpePXcwmL6YjG4DX3Il/xQG8OSZIGwkUGJur8+5O6S 9J5cS3RH6KzSTVbckX7CqqHHuOrzXWcHPGno2BiGF4VTORXjWanvyJL9olvtJrDe ofyOy62XpAba/+A+Gb4YXHoUydD5QxNXD+Ef4JbpCi4uGY/R+LjpEtDazQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBR/09WgqWJrnOZOJuPiS2pEHgN/MB8GA1UdIwQY MBaAFMLiSp2mvgdU7dwUeNaU5tqeFaJYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3VKS25hYS1CMVR0M0JSNDFwVG0ycDRWb2xnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80ZTU5ZjItYmU3YS00MmQ5LTllNjAt NTBlMjUzM2ZjZDRlLzEvd3VKS25hYS1CMVR0M0JSNDFwVG0ycDRWb2xnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny80ZTU5ZjItYmU3YS00MmQ5LTllNjAtNTBlMjUzM2ZjZDRl LzEvd3VKS25hYS1CMVR0M0JSNDFwVG0ycDRWb2xnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvMP96Ff4 YNymguKZpNlZjIMe211tfNZfmPNxRQSgyTu0CDBjdrFcGLfjX5pl9NcM/27YM/vr XrUhL5hrPLSUqsBUdZvLP7ckZHc1iK+I7p0tpuzFfrZmAhs3t/LbWnOdwnidQWSL sksXc4PS6AO+FxlFWeKwMf5UClcjTD6jTqDj+DF1TIBoTMQgADdwjllTxVG+yknV 4h2tRcq0yiODrVIrFbTtlxYZTKkNKNDfmz9mcpMtmEesnqiXJ29Cr+N0oSgx7PS5 OYF+UKTHiYR1KRdPILd9qCaFvHoOjHPfn0iEziivh2YqT7XQhqQVvHkaV77N1Lw6 U9Ums9Mo/jwPkw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:08:15 2025 by rpki-client