This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft File: wrUuo8q9FGpXffzfuHX_WjV1ctc.mft (raw, json) Hash identifier: JA4fvjm/SNhNJJeoNI3J1lZ3JLRSZ5aySld91TXX04Y= Subject key identifier: 65:EC:43:B8:18:B7:29:45:B6:2B:12:DC:E1:65:11:58:17:A2:BF:A3 Authority key identifier: C2:B5:2E:A3:CA:BD:14:6A:57:7D:FC:DF:B8:75:FF:5A:35:75:72:D7 Certificate issuer: /CN=c2b52ea3cabd146a577dfcdfb875ff5a357572d7 Certificate serial: 019AF19AE6A00FE48920F051CF79AAED9EDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft Manifest number: 06E6 Signing time: Sat 06 Dec 2025 03:00:51 +0000 Manifest this update: Sat 06 Dec 2025 03:00:51 +0000 Manifest next update: Sun 07 Dec 2025 03:00:51 +0000 Files and hashes: 1: MG_LemiZ4GgmFKwuBUT8GzFCS9o.roa (hash: OHMWKPBCF82oEvnytVAEpjmK3rUs3XOc7SKkHkxU2KQ=) 2: wrUuo8q9FGpXffzfuHX_WjV1ctc.crl (hash: EaQcrKMkAAvQau4tZsMDtmyCU1SMHLWVUmwbFIiuFJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.crl rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e6:a0:0f:e4:89:20:f0:51:cf:79:aa:ed:9e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2b52ea3cabd146a577dfcdfb875ff5a357572d7 Validity Not Before: Dec 6 03:00:51 2025 GMT Not After : Dec 7 03:00:51 2025 GMT Subject: CN=65ec43b818b72945b62b12dce165115817a2bfa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d9:e9:41:e2:e8:76:82:b6:b7:57:ae:32:de: c8:d6:e7:ec:37:95:7f:1d:a2:d0:1f:8d:2b:ed:fa: c1:62:cb:9f:8b:e7:21:d8:82:8c:7a:00:a3:e1:e9: 5e:c5:16:d6:2e:bb:9c:76:bb:e7:6e:c7:eb:21:55: 60:da:9f:63:e5:6d:13:65:39:ab:e9:da:59:af:b0: e2:d9:c6:a5:ca:2a:60:c2:8d:2e:20:e4:e0:f6:db: 7d:45:79:52:59:85:64:56:10:68:b9:4c:76:bd:64: 6f:60:ad:38:92:9b:45:02:df:57:5b:c8:e2:48:37: 28:a8:41:83:a1:b7:d8:86:67:bc:75:a6:88:1d:31: cc:19:11:35:a2:d8:62:a8:d0:61:d1:45:c0:44:30: 24:83:e2:e0:c0:47:33:a2:f3:74:50:cf:08:17:69: 68:b6:6d:d2:c4:4c:c8:7f:e5:86:90:84:62:c7:4d: 3f:1a:e6:80:8e:2a:37:ef:32:32:b7:2f:eb:ce:ad: 2d:17:9f:7c:0e:a5:c0:fe:00:fe:6d:df:fc:72:77: 62:76:98:44:3a:b6:f6:b0:1e:67:e9:ff:02:69:16: cc:26:33:73:41:f4:cd:aa:18:d6:ea:bc:0d:c3:88: 40:05:86:17:ea:3b:62:e6:00:b2:e6:e1:0d:e1:7d: eb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:EC:43:B8:18:B7:29:45:B6:2B:12:DC:E1:65:11:58:17:A2:BF:A3 X509v3 Authority Key Identifier: keyid:C2:B5:2E:A3:CA:BD:14:6A:57:7D:FC:DF:B8:75:FF:5A:35:75:72:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:5e:f2:59:d0:5b:d7:35:0c:6a:b9:c4:63:2b:14:cf:1c:6a: 1c:0f:12:a3:dd:d9:d4:7b:8e:e3:b8:41:df:0c:55:40:91:8a: a2:1f:81:97:7a:86:64:d0:fb:fa:9a:7c:f2:38:a1:7f:d5:1c: 6f:a0:68:3a:cd:51:af:7b:a0:93:b2:32:80:86:67:a2:04:10: 8b:da:23:aa:cd:55:62:87:32:2b:f1:26:f8:1c:3d:0a:98:8e: 38:5e:50:f0:8a:36:61:41:78:67:01:3e:42:58:ba:4c:68:dc: d9:20:a3:0f:f5:3c:34:f8:b7:d6:73:78:0a:e4:40:76:84:81: c4:f6:58:1e:a1:aa:2c:92:a6:42:b7:8e:ee:82:28:96:3e:25: 26:cc:2f:29:f1:f9:ed:44:11:e7:d9:78:2e:e4:2c:9c:f9:46: 4b:c3:04:cb:49:0c:c4:ea:f9:da:3e:9c:09:29:1a:3e:e1:a4: 3b:16:5f:16:73:a7:6e:da:e6:9b:4e:8b:11:13:ab:59:3b:36: fc:46:01:75:a4:fd:0f:89:95:16:73:6b:55:76:da:3c:21:de: 74:ff:09:b7:77:23:11:6f:69:f1:cb:5b:21:ca:0e:83:a4:a5: d0:d8:ea:15:6f:01:65:b8:3f:f4:2b:3f:df:66:f8:2e:04:94: 53:7e:85:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuagD+SJIPBRz3mq7Z7aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYjUyZWEzY2FiZDE0NmE1NzdkZmNkZmI4NzVmZjVhMzU3 NTcyZDcwHhcNMjUxMjA2MDMwMDUxWhcNMjUxMjA3MDMwMDUxWjAzMTEwLwYDVQQD Eyg2NWVjNDNiODE4YjcyOTQ1YjYyYjEyZGNlMTY1MTE1ODE3YTJiZmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdnpQeLodoK2t1euMt7I1ufsN5V/ HaLQH40r7frBYsufi+ch2IKMegCj4elexRbWLrucdrvnbsfrIVVg2p9j5W0TZTmr 6dpZr7Di2calyipgwo0uIOTg9tt9RXlSWYVkVhBouUx2vWRvYK04kptFAt9XW8ji SDcoqEGDobfYhme8daaIHTHMGRE1othiqNBh0UXARDAkg+LgwEczovN0UM8IF2lo tm3SxEzIf+WGkIRix00/GuaAjio37zIyty/rzq0tF598DqXA/gD+bd/8cndidphE Orb2sB5n6f8CaRbMJjNzQfTNqhjW6rwNw4hABYYX6jti5gCy5uEN4X3rgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXsQ7gYtylFtisS3OFlEVgXor+jMB8GA1UdIwQY MBaAFMK1LqPKvRRqV33837h1/1o1dXLXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3JVdW84cTlGR3BYZmZ6ZnVIWF9XalYxY3RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kODVhMjMtMTQ4YS00ZGJmLWIyYTMt NGMyNmQwMjBkNDI1LzEvd3JVdW84cTlGR3BYZmZ6ZnVIWF9XalYxY3RjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9kODVhMjMtMTQ4YS00ZGJmLWIyYTMtNGMyNmQwMjBkNDI1 LzEvd3JVdW84cTlGR3BYZmZ6ZnVIWF9XalYxY3RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOl7yWdBb 1zUMarnEYysUzxxqHA8So93Z1HuO47hB3wxVQJGKoh+Bl3qGZND7+pp88jihf9Uc b6BoOs1Rr3ugk7IygIZnogQQi9ojqs1VYocyK/Em+Bw9CpiOOF5Q8Io2YUF4ZwE+ Qli6TGjc2SCjD/U8NPi31nN4CuRAdoSBxPZYHqGqLJKmQreO7oIolj4lJswvKfH5 7UQR59l4LuQsnPlGS8MEy0kMxOr52j6cCSkaPuGkOxZfFnOnbtrmm06LEROrWTs2 /EYBdaT9D4mVFnNrVXbaPCHedP8Jt3cjEW9p8ctbIcoOg6Sl0NjqFW8BZbg/9Cs/ 32b4LgSUU36FQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:03 2025 by rpki-client