This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft File: wN3S1PAw-jY4wEvmNu-T0oknFlI.mft (raw, json) Hash identifier: bAtneJ57NxJAwbH812wPE+rBlDI976lw8+z0mfGFl9w= Subject key identifier: 60:FD:C0:55:55:E3:7F:1C:69:FC:E8:8D:F5:9B:EC:E6:FA:2E:FF:AD Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52 Certificate issuer: /CN=c0ddd2d4f030fa3638c04be636ef93d289271652 Certificate serial: 019AF31BE57D4B38B62F7D5B84B16A6E1A70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft Manifest number: 05A3 Signing time: Sat 06 Dec 2025 10:01:22 +0000 Manifest this update: Sat 06 Dec 2025 10:01:22 +0000 Manifest next update: Sun 07 Dec 2025 10:01:22 +0000 Files and hashes: 1: 7XfhLun6Ve5uRxXwPsgdrE6D-fI.roa (hash: b8AATSifx7/LvpsKfDCuwWcrOC9fgkYZg2ZM6+VpEfM=) 2: iuHoct3zHKPAQY0zJWbgQODPfEo.roa (hash: Un9DAj/KSTfz3PzRpucfMK4GqYVgsTE2tiPdLJ964Po=) 3: wN3S1PAw-jY4wEvmNu-T0oknFlI.crl (hash: MeDobhkdiNNfpMN4YCjEZguZ0JazMESLEjdqiGVrvEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:e5:7d:4b:38:b6:2f:7d:5b:84:b1:6a:6e:1a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652 Validity Not Before: Dec 6 10:01:22 2025 GMT Not After : Dec 7 10:01:22 2025 GMT Subject: CN=60fdc05555e37f1c69fce88df59bece6fa2effad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:57:c4:f3:4e:8d:60:39:56:0d:5d:cb:c0:ab: ab:25:9c:24:f5:33:08:d1:c3:2e:73:e5:72:c7:87: 14:ff:6f:46:da:d6:df:f5:60:14:34:04:a0:01:34: e6:70:c5:d2:20:36:07:92:fe:f8:f3:ed:bf:1d:39: 0a:66:aa:04:e6:e9:3c:23:c9:18:19:b2:fa:da:86: 56:80:b8:bb:0a:0b:ed:44:3e:bf:1f:e5:a8:85:43: 9c:9f:6b:21:79:74:dc:3c:35:e3:d0:e9:c7:a9:c4: 7f:b5:6c:ce:a1:9f:49:60:48:96:dc:78:6b:6f:a0: 63:3d:b8:eb:b7:a4:e2:8f:f1:ac:f4:63:0a:6a:52: 75:a8:ee:d7:b8:a5:d4:3b:44:01:47:bd:93:85:36: 6e:97:24:1e:a9:2f:be:c0:cc:03:be:d2:c8:2e:ca: 4f:a5:f5:17:4b:da:d6:08:77:dc:5e:1f:93:ac:56: 4a:b7:2e:19:67:b1:81:47:df:c1:46:2f:d1:f9:ab: 0a:90:63:4a:ef:d4:93:5a:89:28:bb:35:c0:e6:e6: 76:f8:fc:1a:e1:d9:f6:47:a7:92:e1:03:97:b5:a7: a8:19:ab:a2:a3:11:56:76:7c:f8:a0:46:ce:86:5d: 6a:48:b5:cd:43:cc:99:d2:71:6e:e3:10:77:28:01: 81:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FD:C0:55:55:E3:7F:1C:69:FC:E8:8D:F5:9B:EC:E6:FA:2E:FF:AD X509v3 Authority Key Identifier: keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:77:e5:ba:3f:41:4f:0a:02:fa:f1:9d:c3:8f:bc:a1:04:6d: 34:7d:86:ea:bc:cd:42:5f:9c:5c:20:ca:5a:16:61:27:60:f8: b9:a9:63:cc:c0:23:34:0e:33:75:dd:79:7a:fd:ba:4d:df:a4: 3b:71:e2:fa:5d:a0:f2:d9:a1:24:75:f6:25:c0:85:0b:3e:bb: bc:86:cc:cd:da:65:be:47:6b:10:8d:b9:8a:dc:79:c1:7d:a6: e1:7e:54:43:2a:dc:30:c5:b4:e7:d5:da:e1:32:22:be:45:b4: 1d:d3:c0:4b:71:09:28:7d:49:56:9e:1f:be:41:50:1a:9c:0b: bd:31:fd:4c:5f:f4:ad:b9:28:19:33:52:20:68:0e:b2:97:f2: df:9c:2b:4e:ca:c4:d7:ba:b3:ce:2f:da:76:d7:06:aa:94:78: 39:c0:9f:34:22:a0:fb:68:0e:26:1b:e1:df:4c:ce:4a:08:38: 22:8e:8f:b1:fc:34:4a:f2:cf:47:da:04:bd:1c:8c:11:94:67: 52:3c:e0:ff:fa:c4:7f:4c:ce:7d:d5:8d:2d:75:02:37:ed:a3: e6:28:fb:3c:80:c4:df:dc:81:0d:7b:2c:3d:66:d0:39:18:45: 02:9c:af:ac:4e:23:df:76:3c:90:17:57:fa:c3:09:c7:da:a3: 04:af:9a:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+V9Szi2L31bhLFqbhpwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZGRkMmQ0ZjAzMGZhMzYzOGMwNGJlNjM2ZWY5M2QyODky NzE2NTIwHhcNMjUxMjA2MTAwMTIyWhcNMjUxMjA3MTAwMTIyWjAzMTEwLwYDVQQD Eyg2MGZkYzA1NTU1ZTM3ZjFjNjlmY2U4OGRmNTliZWNlNmZhMmVmZmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulfE806NYDlWDV3LwKurJZwk9TMI 0cMuc+Vyx4cU/29G2tbf9WAUNASgATTmcMXSIDYHkv748+2/HTkKZqoE5uk8I8kY GbL62oZWgLi7CgvtRD6/H+WohUOcn2sheXTcPDXj0OnHqcR/tWzOoZ9JYEiW3Hhr b6BjPbjrt6Tij/Gs9GMKalJ1qO7XuKXUO0QBR72ThTZulyQeqS++wMwDvtLILspP pfUXS9rWCHfcXh+TrFZKty4ZZ7GBR9/BRi/R+asKkGNK79STWokouzXA5uZ2+Pwa 4dn2R6eS4QOXtaeoGauioxFWdnz4oEbOhl1qSLXNQ8yZ0nFu4xB3KAGBtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGD9wFVV438cafzojfWb7Ob6Lv+tMB8GA1UdIwQY MBaAFMDd0tTwMPo2OMBL5jbvk9KJJxZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84NjgwMmUtM2Y0My00YmNhLTljYzIt NGZiNDA0ODVmZjdiLzEvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My84NjgwMmUtM2Y0My00YmNhLTljYzItNGZiNDA0ODVmZjdi LzEvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHfluj9B TwoC+vGdw4+8oQRtNH2G6rzNQl+cXCDKWhZhJ2D4ualjzMAjNA4zdd15ev26Td+k O3Hi+l2g8tmhJHX2JcCFCz67vIbMzdplvkdrEI25itx5wX2m4X5UQyrcMMW059Xa 4TIivkW0HdPAS3EJKH1JVp4fvkFQGpwLvTH9TF/0rbkoGTNSIGgOspfy35wrTsrE 17qzzi/adtcGqpR4OcCfNCKg+2gOJhvh30zOSgg4Io6Psfw0SvLPR9oEvRyMEZRn Ujzg//rEf0zOfdWNLXUCN+2j5ij7PIDE39yBDXssPWbQORhFApyvrE4j33Y8kBdX +sMJx9qjBK+a/g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:29 2025 by rpki-client