This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft File: WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft (raw, json) Hash identifier: Qbxbdrb6mpYpa/+8tWrYMv40WK0moaYpzThxG3aWlFA= Subject key identifier: 2E:30:31:8D:8C:69:71:DE:F5:91:0A:09:FA:65:64:A1:92:8F:D0:04 Authority key identifier: 5B:35:02:CD:BD:33:25:62:8C:D6:15:60:6B:7C:74:33:EE:5B:22:04 Certificate issuer: /CN=5b3502cdbd3325628cd615606b7c7433ee5b2204 Certificate serial: 019AF19A973098F018AF023DAEC7DDB9F1FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft Manifest number: 03F9 Signing time: Sat 06 Dec 2025 03:00:31 +0000 Manifest this update: Sat 06 Dec 2025 03:00:31 +0000 Manifest next update: Sun 07 Dec 2025 03:00:31 +0000 Files and hashes: 1: WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl (hash: arAj82Znkg4uSMkvAila2mMZqli/BtBkrJ72EQoiTVE=) 2: uKvJupUJsNWoo5ivCG67FugGN0w.roa (hash: GwajJ7n21P+w7t9dfCC8gYHu25fAVce6h/mSVAkHqyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:97:30:98:f0:18:af:02:3d:ae:c7:dd:b9:f1:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b3502cdbd3325628cd615606b7c7433ee5b2204 Validity Not Before: Dec 6 03:00:31 2025 GMT Not After : Dec 7 03:00:31 2025 GMT Subject: CN=2e30318d8c6971def5910a09fa6564a1928fd004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:01:f7:e0:10:9a:22:e0:c9:9b:a5:87:9d:40: 04:a6:f8:e8:3d:c3:14:1f:55:5f:ba:c6:9c:33:91: f3:0d:0d:05:d8:af:8d:00:71:77:63:f4:8e:93:79: e1:dc:92:95:5d:21:20:ad:42:0d:49:6a:7c:9a:af: 2d:ae:3d:c3:7c:7f:69:ee:64:f8:df:c5:97:9f:d6: 1e:c7:b0:04:e1:4b:2a:f7:55:c3:12:4e:66:58:2d: fa:93:11:a1:01:2e:e6:f9:64:30:c7:69:69:01:7e: b6:b6:53:c0:19:0a:a2:ec:64:95:11:52:d1:69:70: 80:ee:20:33:71:37:7c:13:e9:09:c8:fe:87:80:8d: bf:5b:01:62:bf:6e:b5:27:0d:20:99:27:4d:5f:6e: 53:9d:be:37:06:ff:fc:ca:3b:bb:9e:7a:f9:cc:dc: 7c:db:31:8c:b3:ab:92:f5:17:fc:67:f0:67:b1:cd: c8:b1:4c:cf:a7:1a:a5:ab:10:16:e0:b4:19:1f:f4: 93:29:21:e9:ce:20:6e:68:97:23:46:b3:39:ed:02: 88:b1:a0:f3:75:e5:1f:6f:75:33:51:64:d0:c8:fe: b9:f6:66:2c:95:09:6a:7b:c3:17:fe:fd:2d:67:2b: d9:61:8d:15:b9:13:99:ab:a9:d1:bf:cd:65:fa:d7: f2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:30:31:8D:8C:69:71:DE:F5:91:0A:09:FA:65:64:A1:92:8F:D0:04 X509v3 Authority Key Identifier: keyid:5B:35:02:CD:BD:33:25:62:8C:D6:15:60:6B:7C:74:33:EE:5B:22:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:2b:9a:04:64:be:76:07:ee:76:dc:2d:ed:da:5b:e6:e8:87: bc:83:d7:6c:30:48:b4:58:3a:48:b7:07:90:cc:a8:62:aa:2f: d1:6b:1a:86:13:86:ed:cc:6c:30:4e:33:2b:64:51:2f:b3:13: 8d:fc:95:9e:49:ad:90:c6:96:f6:38:5d:80:6b:08:a3:81:8b: de:93:31:8a:d8:30:7c:dc:b5:e8:f3:55:5a:3e:08:62:42:18: 3b:33:64:92:c1:f4:ac:b0:0c:f0:d8:2e:9e:75:3b:b9:00:05: 1e:96:b0:73:6a:08:3d:3d:ff:42:12:a5:b6:06:88:ad:76:d3: a2:14:75:9f:9e:e6:ad:74:73:a3:cb:fb:98:17:d7:8e:01:81: bc:19:42:03:fe:e3:a0:2d:e5:dc:e3:b7:37:73:2a:4e:78:31: 92:e3:b5:ed:41:45:c3:bc:17:83:98:2b:cb:0c:71:f1:de:8a: d5:27:60:ca:56:e5:13:4e:c0:6f:96:0a:db:cf:86:31:d9:b0: ae:8a:c3:f7:21:1d:2f:5b:16:5c:2b:24:cc:94:c1:00:c4:8e: d0:8c:d8:f9:3c:20:0b:c5:fa:3b:48:3a:25:a5:5d:fa:c7:18: bb:e7:e5:3a:d3:ab:dd:6a:49:06:89:3d:0c:7b:e9:f2:1c:66: 7d:55:10:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpcwmPAYrwI9rsfdufH6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMzUwMmNkYmQzMzI1NjI4Y2Q2MTU2MDZiN2M3NDMzZWU1 YjIyMDQwHhcNMjUxMjA2MDMwMDMxWhcNMjUxMjA3MDMwMDMxWjAzMTEwLwYDVQQD EygyZTMwMzE4ZDhjNjk3MWRlZjU5MTBhMDlmYTY1NjRhMTkyOGZkMDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AH34BCaIuDJm6WHnUAEpvjoPcMU H1VfusacM5HzDQ0F2K+NAHF3Y/SOk3nh3JKVXSEgrUINSWp8mq8trj3DfH9p7mT4 38WXn9Yex7AE4Usq91XDEk5mWC36kxGhAS7m+WQwx2lpAX62tlPAGQqi7GSVEVLR aXCA7iAzcTd8E+kJyP6HgI2/WwFiv261Jw0gmSdNX25Tnb43Bv/8yju7nnr5zNx8 2zGMs6uS9Rf8Z/Bnsc3IsUzPpxqlqxAW4LQZH/STKSHpziBuaJcjRrM57QKIsaDz deUfb3UzUWTQyP659mYslQlqe8MX/v0tZyvZYY0VuROZq6nRv81l+tfyCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4wMY2MaXHe9ZEKCfplZKGSj9AEMB8GA1UdIwQY MBaAFFs1As29MyVijNYVYGt8dDPuWyIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3pVQ3piMHpKV0tNMWhWZ2EzeDBNLTViSWdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mMjI4YmUtYTNhNi00OGNhLWE0MWEt YjZiNjcwYjY4MDlhLzEvV3pVQ3piMHpKV0tNMWhWZ2EzeDBNLTViSWdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mMjI4YmUtYTNhNi00OGNhLWE0MWEtYjZiNjcwYjY4MDlh LzEvV3pVQ3piMHpKV0tNMWhWZ2EzeDBNLTViSWdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuiuaBGS+ dgfudtwt7dpb5uiHvIPXbDBItFg6SLcHkMyoYqov0WsahhOG7cxsME4zK2RRL7MT jfyVnkmtkMaW9jhdgGsIo4GL3pMxitgwfNy16PNVWj4IYkIYOzNkksH0rLAM8Ngu nnU7uQAFHpawc2oIPT3/QhKltgaIrXbTohR1n57mrXRzo8v7mBfXjgGBvBlCA/7j oC3l3OO3N3MqTngxkuO17UFFw7wXg5grywxx8d6K1SdgylblE07Ab5YK28+GMdmw rorD9yEdL1sWXCskzJTBAMSO0IzY+TwgC8X6O0g6JaVd+scYu+flOtOr3WpJBok9 DHvp8hxmfVUQOA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:59 2025 by rpki-client