This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft File: PUx4cBk93824kLZkfMi1bBGW_wg.mft (raw, json) Hash identifier: 32BoyUjc9/YZgxRhLjv7lBo0E/mDgbuY8oIhuVv8Zyw= Subject key identifier: 2C:4E:38:50:32:E1:4F:65:E7:A3:8F:2A:E5:EB:AF:93:30:54:D3:91 Authority key identifier: 3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08 Certificate issuer: /CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08 Certificate serial: 019AF50AE110F41439B20CD5ECA7FD71D15C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft Manifest number: 12B4 Signing time: Sat 06 Dec 2025 19:02:02 +0000 Manifest this update: Sat 06 Dec 2025 19:02:02 +0000 Manifest next update: Sun 07 Dec 2025 19:02:02 +0000 Files and hashes: 1: 35NCpv0Oz6uQPI44W6WG3M5yYs4.roa (hash: JBTWGmE2iSKylKwI1WUPUhWSA2P7T3aiR9SueNbm1BQ=) 2: PUx4cBk93824kLZkfMi1bBGW_wg.crl (hash: 7xuSS+cJfBRimBgw7VTVEcDeZgx5JnvDNXBRXktpLfw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:e1:10:f4:14:39:b2:0c:d5:ec:a7:fd:71:d1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08 Validity Not Before: Dec 6 19:02:02 2025 GMT Not After : Dec 7 19:02:02 2025 GMT Subject: CN=2c4e385032e14f65e7a38f2ae5ebaf933054d391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cd:e7:13:96:88:a2:80:27:bd:c3:ab:c6:4a: 5b:31:dc:67:7f:dc:51:fd:5b:dc:dd:03:0f:a1:50: 3e:a2:28:9b:a5:bb:c4:52:7b:d8:f8:62:c6:ad:60: 2f:dd:6a:81:fb:22:e7:0b:91:47:3d:d2:05:6b:d5: f6:45:46:cd:46:7e:f4:63:9c:5e:6c:d9:e4:db:83: 71:04:1e:d6:0a:d5:0e:b4:1b:cf:41:43:4f:21:db: b4:cd:1b:93:e7:4f:f9:d2:a9:e7:a1:e9:0b:17:fe: 56:a9:44:9f:05:3e:40:3d:1c:f9:3a:e1:b4:5f:47: 17:4d:77:08:67:6c:c0:f7:2e:41:7d:e0:53:ff:2c: bf:8f:94:72:a3:52:c3:9f:d6:b2:9a:fd:08:64:19: f9:eb:19:d8:07:2b:10:b1:19:ac:8e:5c:e1:90:ff: 8d:aa:9d:4f:f7:2c:5b:92:39:a7:d1:eb:d4:70:9a: 89:a1:11:95:fd:d9:4f:97:bb:1d:3c:d3:dc:6c:81: 9f:c6:73:bd:dc:5b:4d:1b:fb:15:16:56:05:2e:58: 3b:b0:3e:5c:0a:aa:49:8e:87:78:da:e8:05:26:49: eb:df:c0:5a:f4:71:0d:1c:28:fb:1d:af:b6:31:cc: 4b:5b:59:2b:2d:d7:0f:c9:92:ca:b0:41:cf:d1:d1: 8a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4E:38:50:32:E1:4F:65:E7:A3:8F:2A:E5:EB:AF:93:30:54:D3:91 X509v3 Authority Key Identifier: keyid:3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:a3:62:8f:cf:a5:12:14:4a:7a:f4:6c:9d:bc:6d:70:a5:03: 2c:15:8e:1d:8e:ed:11:05:1e:eb:3e:9f:6c:41:8d:60:fe:78: c0:34:6b:6b:b6:22:e2:d1:ea:7c:bb:7a:2a:0e:88:dc:d9:e1: d5:d2:1c:80:ad:4c:c7:5a:00:3d:fb:9b:d8:4e:ac:43:65:99: 82:7d:b6:9f:55:9f:0c:3d:f8:c3:11:0d:aa:fd:23:59:78:cb: 96:dc:d3:1a:b8:eb:4f:10:a2:72:d8:a1:93:4f:a4:73:83:d0: dd:b7:23:c7:53:8c:3a:10:7f:6b:f5:5e:47:f7:4c:97:4c:f9: bc:92:23:8e:b3:5b:72:0b:2d:af:d6:f9:7f:0a:50:be:b1:f3: 32:c0:ed:8d:7e:b3:bf:fd:8a:ca:5a:ae:9a:bc:8b:88:68:c5: a6:da:02:59:20:72:c4:e7:a6:ee:ea:9b:f8:a6:20:ce:39:68: c2:3d:1c:ce:b9:33:15:ef:77:e0:13:ae:80:3f:3e:11:1e:c0: d9:8c:06:d4:5e:87:61:54:41:fe:43:7d:c5:36:7d:e0:7c:16: b0:07:ba:64:c5:d2:7c:27:0c:11:a0:d0:4f:19:46:21:4c:7c: 60:df:8e:32:ee:e7:9e:2f:ee:45:eb:ee:0c:cb:20:86:fd:4d: 9f:eb:81:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CuEQ9BQ5sgzV7Kf9cdFcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNGM3ODcwMTkzZGRmY2RiODkwYjY2NDdjYzhiNTZjMTE5 NmZmMDgwHhcNMjUxMjA2MTkwMjAyWhcNMjUxMjA3MTkwMjAyWjAzMTEwLwYDVQQD EygyYzRlMzg1MDMyZTE0ZjY1ZTdhMzhmMmFlNWViYWY5MzMwNTRkMzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM3nE5aIooAnvcOrxkpbMdxnf9xR /Vvc3QMPoVA+oiibpbvEUnvY+GLGrWAv3WqB+yLnC5FHPdIFa9X2RUbNRn70Y5xe bNnk24NxBB7WCtUOtBvPQUNPIdu0zRuT50/50qnnoekLF/5WqUSfBT5APRz5OuG0 X0cXTXcIZ2zA9y5BfeBT/yy/j5Ryo1LDn9aymv0IZBn56xnYBysQsRmsjlzhkP+N qp1P9yxbkjmn0evUcJqJoRGV/dlPl7sdPNPcbIGfxnO93FtNG/sVFlYFLlg7sD5c CqpJjod42ugFJknr38Ba9HENHCj7Ha+2McxLW1krLdcPyZLKsEHP0dGKOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxOOFAy4U9l56OPKuXrr5MwVNORMB8GA1UdIwQY MBaAFD1MeHAZPd/NuJC2ZHzItWwRlv8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFV4NGNCazkzODI0a0xaa2ZNaTFiQkdXX3dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lZGRhYmMtNTEzNS00ZTRiLWI0MTEt MWViYTZmZjc3ZWFjLzEvUFV4NGNCazkzODI0a0xaa2ZNaTFiQkdXX3dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9lZGRhYmMtNTEzNS00ZTRiLWI0MTEtMWViYTZmZjc3ZWFj LzEvUFV4NGNCazkzODI0a0xaa2ZNaTFiQkdXX3dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6Nij8+l EhRKevRsnbxtcKUDLBWOHY7tEQUe6z6fbEGNYP54wDRra7Yi4tHqfLt6Kg6I3Nnh 1dIcgK1Mx1oAPfub2E6sQ2WZgn22n1WfDD34wxENqv0jWXjLltzTGrjrTxCictih k0+kc4PQ3bcjx1OMOhB/a/VeR/dMl0z5vJIjjrNbcgstr9b5fwpQvrHzMsDtjX6z v/2KylqumryLiGjFptoCWSByxOem7uqb+KYgzjlowj0czrkzFe934BOugD8+ER7A 2YwG1F6HYVRB/kN9xTZ94HwWsAe6ZMXSfCcMEaDQTxlGIUx8YN+OMu7nni/uRevu DMsghv1Nn+uByQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:33:37 2025 by rpki-client