This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/wJeeIP_tn4nQfOpYxMQQaBnOZi0.mft File: wJeeIP_tn4nQfOpYxMQQaBnOZi0.mft (raw, json) Hash identifier: kJMdhKnE6D+KD5UOYnqRfhq7v5B18cIGQmtUX42EIiU= Subject key identifier: D8:FF:A8:3C:31:67:90:C7:43:0C:7E:D9:A0:43:0B:D9:56:0E:00:8F Authority key identifier: C0:97:9E:20:FF:ED:9F:89:D0:7C:EA:58:C4:C4:10:68:19:CE:66:2D Certificate issuer: /CN=c0979e20ffed9f89d07cea58c4c4106819ce662d Certificate serial: 019AF31C6D9D034A69ADC5D0FCCE413CD2FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJeeIP_tn4nQfOpYxMQQaBnOZi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/wJeeIP_tn4nQfOpYxMQQaBnOZi0.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:01:57 +0000 Manifest this update: Sat 06 Dec 2025 10:01:57 +0000 Manifest next update: Sun 07 Dec 2025 10:01:57 +0000 Files and hashes: 1: OFZ7OM7STvn819zwpp9pHzVUjwk.roa (hash: Eidn50fbH6MVmQqAx/ZT1g48QZZQpQ8iS/V1m51/Eao=) 2: wJeeIP_tn4nQfOpYxMQQaBnOZi0.crl (hash: bTMc7dQfcEg6FrQmNN5ygic78k/FDZcoz98LVqZkWCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/wJeeIP_tn4nQfOpYxMQQaBnOZi0.crl rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/wJeeIP_tn4nQfOpYxMQQaBnOZi0.mft rsync://rpki.ripe.net/repository/DEFAULT/wJeeIP_tn4nQfOpYxMQQaBnOZi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:6d:9d:03:4a:69:ad:c5:d0:fc:ce:41:3c:d2:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0979e20ffed9f89d07cea58c4c4106819ce662d Validity Not Before: Dec 6 10:01:57 2025 GMT Not After : Dec 7 10:01:57 2025 GMT Subject: CN=d8ffa83c316790c7430c7ed9a0430bd9560e008f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ca:5d:2e:31:9d:d4:a0:3f:0c:6e:17:1b:1f: 10:ab:a3:21:be:93:5a:cf:e2:17:0b:01:8a:49:81: 8e:d1:63:fa:24:4e:dc:19:b4:8d:9d:20:cf:d1:92: 07:6f:8f:3a:e9:15:a3:0e:38:e3:a5:27:87:b8:36: 31:db:57:ce:6b:b1:50:80:e6:4d:34:6f:03:43:da: 51:4e:8b:13:0a:e5:8c:d4:03:5c:25:1c:ac:d8:57: bd:2a:da:5d:15:ae:ce:9f:3d:b1:64:c3:89:93:8e: 11:90:9c:a0:cf:3f:8b:26:69:8f:11:5e:cc:cb:a6: e0:8e:15:f9:2e:a9:87:88:6b:f8:51:cc:91:2c:0a: 55:f1:25:be:c4:9b:5b:8f:9f:36:4d:e3:1f:30:9e: 1e:89:1d:5d:4b:66:7f:6f:65:b6:9c:b2:60:d2:d8: 0c:62:e2:00:9a:a5:04:8c:21:13:a0:71:a1:0c:e2: 67:0e:cb:7f:56:f2:f8:3a:2b:19:06:6b:71:6f:35: ca:e2:3a:ce:ad:47:d7:ec:27:6c:7d:db:42:1e:90: 85:6f:90:59:d5:1f:72:eb:16:9f:f0:61:d9:f8:98: 07:be:b2:25:29:dd:52:77:84:5e:7e:f6:39:2d:6a: bc:ed:0c:59:2c:fe:b9:d6:54:3f:7b:97:2e:e9:a7: 38:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FF:A8:3C:31:67:90:C7:43:0C:7E:D9:A0:43:0B:D9:56:0E:00:8F X509v3 Authority Key Identifier: keyid:C0:97:9E:20:FF:ED:9F:89:D0:7C:EA:58:C4:C4:10:68:19:CE:66:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJeeIP_tn4nQfOpYxMQQaBnOZi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/wJeeIP_tn4nQfOpYxMQQaBnOZi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/wJeeIP_tn4nQfOpYxMQQaBnOZi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:20:e7:24:68:b0:b0:cb:61:ab:61:12:5e:b8:45:af:cc:b4: 1e:e9:2e:d7:8f:a0:51:30:60:6d:8f:cc:1d:4b:1a:b4:15:dc: e1:9c:0d:01:b9:79:95:8c:a1:7a:f1:3b:f5:95:10:28:e0:e6: b8:df:a7:cc:89:22:35:1c:57:99:07:67:c9:eb:a6:33:a6:10: 51:58:d3:e4:ba:4c:6c:a2:f6:b5:b9:d7:c4:29:90:dc:d4:ae: ed:f5:96:43:44:65:cc:70:f2:64:ae:b2:64:98:bd:2e:2d:1b: c0:73:b5:40:20:a3:93:ef:62:34:60:45:fd:c8:a9:39:de:a2: ad:f4:d1:70:f0:76:55:e8:23:d4:a2:11:e6:a8:f2:8c:24:1f: 4a:1a:4b:49:ab:a8:ef:b5:e8:fa:89:b6:ce:7c:41:e1:06:d0: 12:18:a5:80:97:41:ad:57:08:9f:eb:37:22:d2:f2:6f:e8:f2: ac:2c:b1:85:ba:53:ce:b5:87:7a:8c:af:3a:57:9d:94:cb:0d: 3c:fc:5b:55:eb:de:04:37:8d:63:3d:1a:98:d4:ae:a5:eb:95: c9:0c:62:75:dd:15:b8:c3:ea:fd:db:c2:97:1b:45:37:d9:07: fa:6f:2e:8a:a7:65:7f:3d:bb:59:39:04:7a:81:bd:c2:1d:aa: e2:27:4b:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHG2dA0pprcXQ/M5BPNL9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwOTc5ZTIwZmZlZDlmODlkMDdjZWE1OGM0YzQxMDY4MTlj ZTY2MmQwHhcNMjUxMjA2MTAwMTU3WhcNMjUxMjA3MTAwMTU3WjAzMTEwLwYDVQQD EyhkOGZmYTgzYzMxNjc5MGM3NDMwYzdlZDlhMDQzMGJkOTU2MGUwMDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcpdLjGd1KA/DG4XGx8Qq6MhvpNa z+IXCwGKSYGO0WP6JE7cGbSNnSDP0ZIHb4866RWjDjjjpSeHuDYx21fOa7FQgOZN NG8DQ9pRTosTCuWM1ANcJRys2Fe9KtpdFa7Onz2xZMOJk44RkJygzz+LJmmPEV7M y6bgjhX5LqmHiGv4UcyRLApV8SW+xJtbj582TeMfMJ4eiR1dS2Z/b2W2nLJg0tgM YuIAmqUEjCEToHGhDOJnDst/VvL4OisZBmtxbzXK4jrOrUfX7CdsfdtCHpCFb5BZ 1R9y6xaf8GHZ+JgHvrIlKd1Sd4RefvY5LWq87QxZLP651lQ/e5cu6ac46QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNj/qDwxZ5DHQwx+2aBDC9lWDgCPMB8GA1UdIwQY MBaAFMCXniD/7Z+J0HzqWMTEEGgZzmYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0plZUlQX3RuNG5RZk9wWXhNUVFhQm5PWmkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny81MGEzNTItNmRhMS00OGUyLTliODMt NWQ0YzlmZWM3Y2UzLzEvd0plZUlQX3RuNG5RZk9wWXhNUVFhQm5PWmkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny81MGEzNTItNmRhMS00OGUyLTliODMtNWQ0YzlmZWM3Y2Uz LzEvd0plZUlQX3RuNG5RZk9wWXhNUVFhQm5PWmkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiDnJGiw sMthq2ESXrhFr8y0Huku14+gUTBgbY/MHUsatBXc4ZwNAbl5lYyhevE79ZUQKODm uN+nzIkiNRxXmQdnyeumM6YQUVjT5LpMbKL2tbnXxCmQ3NSu7fWWQ0RlzHDyZK6y ZJi9Li0bwHO1QCCjk+9iNGBF/cipOd6irfTRcPB2Vegj1KIR5qjyjCQfShpLSauo 77Xo+om2znxB4QbQEhilgJdBrVcIn+s3ItLyb+jyrCyxhbpTzrWHeoyvOledlMsN PPxbVeveBDeNYz0amNSupeuVyQxidd0VuMPq/dvClxtFN9kH+m8uiqdlfz27WTkE eoG9wh2q4idLMg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:17:58 2025 by rpki-client