This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft File: wRq5FoIcWjFIzhJSungByqKrSRQ.mft (raw, json) Hash identifier: cu3qH2ceVaUXquY/xFxnE+Gh25Sjb6DXxhMalEjmWd0= Subject key identifier: 27:D8:8D:39:3B:8F:1A:35:2D:76:31:D7:0F:F2:D5:69:C6:BA:F8:2C Authority key identifier: C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14 Certificate issuer: /CN=c11ab916821c5a3148ce1252ba7801caa2ab4914 Certificate serial: 019AF2097F7AE8D3DF25986752883B177875 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 05:01:40 +0000 Manifest this update: Sat 06 Dec 2025 05:01:40 +0000 Manifest next update: Sun 07 Dec 2025 05:01:40 +0000 Files and hashes: 1: jmxXPs-eFsLMyQfsEqQE-gTcJzg.roa (hash: JMdb9ncK/VZi/Drly8ri6tbObrJ2pnr+vB9E79datFA=) 2: wRq5FoIcWjFIzhJSungByqKrSRQ.crl (hash: BGelnnpUqGnQ7h6waxBcejl6boKqsi3YQKleKOyxFYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7f:7a:e8:d3:df:25:98:67:52:88:3b:17:78:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c11ab916821c5a3148ce1252ba7801caa2ab4914 Validity Not Before: Dec 6 05:01:40 2025 GMT Not After : Dec 7 05:01:40 2025 GMT Subject: CN=27d88d393b8f1a352d7631d70ff2d569c6baf82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:77:31:d5:3d:39:f3:ad:26:33:f0:c3:5c:30: 65:fb:23:e4:2e:4c:2c:44:c1:d7:67:b9:0a:ee:f4: 61:79:92:96:d3:79:88:d4:cf:ee:d9:5f:4a:08:6a: 0d:ae:18:2c:fb:ad:09:d5:b0:79:a0:ed:08:4b:e8: 5c:c4:62:fb:fb:e1:53:98:ce:11:d4:fa:39:ea:54: 5e:59:e3:e2:60:47:fa:4e:a6:f0:eb:ee:df:6b:3e: ca:22:4d:76:86:59:a9:fa:6c:42:84:dc:03:e3:73: 6c:45:45:5a:4a:1a:0e:f2:79:58:4d:1c:c5:a9:94: 47:ce:4b:97:0f:e6:d7:cf:d2:24:3c:6b:e2:0f:83: 4b:a0:48:a2:99:c5:f1:6b:a8:b4:08:12:6f:ef:d9: d8:fe:ad:1c:e9:cb:c9:b8:e1:13:31:aa:de:73:f4: bb:53:ae:37:5f:e0:3a:c3:f6:e5:4c:73:4f:65:ff: ba:02:ee:46:92:99:44:a8:d8:c1:a9:4b:8d:bd:b8: 22:4c:b0:5a:f3:ad:c1:43:02:f0:18:ba:73:30:3e: a7:9a:08:aa:e6:8f:a7:fa:24:77:b8:8d:46:4f:cf: 50:57:a3:c0:9e:17:a0:3b:51:33:5a:51:65:47:9d: 7e:f9:66:ab:be:b0:50:00:d8:5f:fd:26:e0:e2:82: 86:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D8:8D:39:3B:8F:1A:35:2D:76:31:D7:0F:F2:D5:69:C6:BA:F8:2C X509v3 Authority Key Identifier: keyid:C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:9a:42:2c:84:20:6f:4c:df:97:be:57:e3:1a:ab:63:a2:79: 95:81:9d:ea:35:b5:31:75:84:1e:43:8d:95:fe:a8:17:69:94: d0:19:88:1c:55:76:96:be:4f:bb:f3:a8:da:d4:98:68:7a:da: 49:f4:15:37:35:09:5f:8e:67:74:92:a7:85:15:7d:98:4e:f3: ae:2d:48:cb:e9:d6:a3:a7:09:d1:22:4f:a8:ea:c7:36:11:0a: e9:33:1d:f3:df:1b:f7:40:b1:7d:72:4c:a7:f7:60:7b:50:13: a2:de:8c:e7:4b:fd:a4:a7:29:98:0e:54:ff:90:4b:95:45:ee: 80:8f:0e:d1:31:e5:33:38:dc:85:ec:09:fb:f6:62:c8:8b:21: c2:67:00:ff:29:5e:42:e1:ff:0c:13:2c:e7:94:f6:6f:74:d3: b0:b2:99:f4:44:85:34:3c:07:fd:a5:38:51:c3:72:95:7e:5a: 20:61:64:7d:f5:6d:7c:b3:91:7d:66:ea:ae:09:0f:67:71:f4: b3:90:7a:dc:c3:44:45:03:04:67:31:41:30:66:17:86:30:c6: 13:7c:54:4a:6b:41:db:4f:ab:4c:5b:17:0b:4f:1b:bd:b5:c7: 5d:fd:3b:e2:b4:46:81:55:b9:8a:df:9f:e4:af:44:56:61:2c: f8:bb:02:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCX966NPfJZhnUog7F3h1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMWFiOTE2ODIxYzVhMzE0OGNlMTI1MmJhNzgwMWNhYTJh YjQ5MTQwHhcNMjUxMjA2MDUwMTQwWhcNMjUxMjA3MDUwMTQwWjAzMTEwLwYDVQQD EygyN2Q4OGQzOTNiOGYxYTM1MmQ3NjMxZDcwZmYyZDU2OWM2YmFmODJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHcx1T05860mM/DDXDBl+yPkLkws RMHXZ7kK7vRheZKW03mI1M/u2V9KCGoNrhgs+60J1bB5oO0IS+hcxGL7++FTmM4R 1Po56lReWePiYEf6Tqbw6+7faz7KIk12hlmp+mxChNwD43NsRUVaShoO8nlYTRzF qZRHzkuXD+bXz9IkPGviD4NLoEiimcXxa6i0CBJv79nY/q0c6cvJuOETMarec/S7 U643X+A6w/blTHNPZf+6Au5GkplEqNjBqUuNvbgiTLBa863BQwLwGLpzMD6nmgiq 5o+n+iR3uI1GT89QV6PAnhegO1EzWlFlR51++WarvrBQANhf/Sbg4oKGvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfYjTk7jxo1LXYx1w/y1WnGuvgsMB8GA1UdIwQY MBaAFMEauRaCHFoxSM4SUrp4Acqiq0kUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1JxNUZvSWNXakZJemhKU3VuZ0J5cUtyU1JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kMjM2MmUtMzI1Ni00MjQ0LTg1OGEt ZWU1NmYxYWZjMzY2LzEvd1JxNUZvSWNXakZJemhKU3VuZ0J5cUtyU1JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9kMjM2MmUtMzI1Ni00MjQ0LTg1OGEtZWU1NmYxYWZjMzY2 LzEvd1JxNUZvSWNXakZJemhKU3VuZ0J5cUtyU1JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZpCLIQg b0zfl75X4xqrY6J5lYGd6jW1MXWEHkONlf6oF2mU0BmIHFV2lr5Pu/Oo2tSYaHra SfQVNzUJX45ndJKnhRV9mE7zri1Iy+nWo6cJ0SJPqOrHNhEK6TMd898b90CxfXJM p/dge1ATot6M50v9pKcpmA5U/5BLlUXugI8O0THlMzjchewJ+/ZiyIshwmcA/yle QuH/DBMs55T2b3TTsLKZ9ESFNDwH/aU4UcNylX5aIGFkffVtfLORfWbqrgkPZ3H0 s5B63MNERQMEZzFBMGYXhjDGE3xUSmtB20+rTFsXC08bvbXHXf074rRGgVW5it+f 5K9EVmEs+LsCJw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:47:25 2025 by rpki-client