This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft File: wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft (raw, json) Hash identifier: 5c7bPbdoCfAYZt0V4wZPU2P5eGrQm8JDoWa9UpXyw3Q= Subject key identifier: EE:10:38:6B:FA:0C:70:86:3A:E7:7F:B2:B1:62:54:DD:BA:4E:A9:A3 Authority key identifier: C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F Certificate issuer: /CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f Certificate serial: 019AF20945584450E14D1E90136EE7FCAFE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft Manifest number: 15C0 Signing time: Sat 06 Dec 2025 05:01:25 +0000 Manifest this update: Sat 06 Dec 2025 05:01:25 +0000 Manifest next update: Sun 07 Dec 2025 05:01:25 +0000 Files and hashes: 1: ZDdnNxC-Iv1H5A5BkJloJqSNxf8.roa (hash: UCqx4EaKls5iWpImDrWYZpurlTDip+uji9Lqqm7JLEg=) 2: wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl (hash: bR1e4IXF+O0hVs05Gta50da69didjDCzfvKe3o6oFGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:45:58:44:50:e1:4d:1e:90:13:6e:e7:fc:af:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f Validity Not Before: Dec 6 05:01:25 2025 GMT Not After : Dec 7 05:01:25 2025 GMT Subject: CN=ee10386bfa0c70863ae77fb2b16254ddba4ea9a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:49:d4:7a:e3:b4:cd:36:19:c1:3a:c7:30:3e: d1:0a:5a:e4:7f:c4:8e:67:c0:2b:bb:5c:14:ee:a5: 17:bc:a8:ab:43:7a:fc:51:bf:65:1f:f3:cf:0f:fb: 66:fc:91:14:82:88:e3:88:73:fe:ab:b1:ed:53:0a: 3a:aa:3f:23:5e:9d:23:11:e0:f4:ad:c6:38:b3:b8: d1:29:68:c9:cd:08:af:07:f7:55:31:83:6f:9d:b9: 2b:fd:e4:07:66:b6:df:e5:38:c1:0c:8e:ea:3f:94: 51:05:a8:ad:2f:45:7d:b0:02:42:b1:2f:de:21:bd: 9f:aa:02:e2:90:a6:2e:66:77:1c:db:23:30:7d:b1: c0:3e:0a:72:b4:9d:16:41:c0:3e:32:a4:ea:d0:07: c2:a9:37:f3:e2:35:bd:cc:2f:77:d6:b2:3a:17:72: 37:33:8e:78:7e:de:7a:20:68:7a:83:b7:49:78:16: 8b:f0:7d:54:7a:19:da:11:82:39:a6:ec:56:03:aa: d8:41:d9:6f:11:a4:0d:7b:21:ec:ed:c1:be:83:52: fa:60:0d:96:75:bd:6c:9e:c9:af:d5:12:f3:dd:d2: 21:38:9c:d0:cd:d7:31:6c:66:e5:2a:33:38:ca:22: 45:8c:83:b3:b8:c0:75:45:92:7b:c9:92:b1:7c:db: 92:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:10:38:6B:FA:0C:70:86:3A:E7:7F:B2:B1:62:54:DD:BA:4E:A9:A3 X509v3 Authority Key Identifier: keyid:C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:f4:53:05:a5:f8:fb:33:02:1e:0b:39:f4:d6:5c:c2:30:40: 87:0b:ac:6d:b9:65:e0:07:cd:af:09:73:3e:4e:43:f2:f2:55: 2a:d1:23:dd:24:e4:b4:ac:56:e0:ea:31:7e:4b:de:62:e9:1a: e3:79:63:6f:b0:3e:6e:2e:e7:ba:c2:c5:6c:5f:ac:94:df:12: cf:f6:a7:57:a2:c6:44:d9:89:f7:f6:87:ff:23:05:10:37:c4: 60:d0:be:0d:a7:26:ba:a9:e7:95:84:41:b5:e6:59:54:28:8e: 01:8b:47:99:d5:75:ce:ec:1c:16:51:45:a1:9d:e9:29:6d:15: 99:b6:77:f6:59:ff:70:21:d7:21:51:75:01:0b:54:62:5c:df: cd:54:93:b4:df:ad:98:18:ec:47:31:f2:1e:ea:0b:eb:de:e0: f9:c3:68:3d:4a:e9:39:54:72:c1:84:51:84:49:f4:7d:f5:79: 0b:66:44:93:54:40:b9:ca:43:a9:69:c7:74:67:fe:50:83:d9: 9c:ce:37:8d:ab:47:69:cd:65:9a:6c:84:bf:bb:22:fc:93:45: 9f:1e:89:67:1d:19:dd:00:60:b6:49:88:06:3d:4d:a9:5a:89: c2:27:e2:36:96:5e:23:05:14:a9:c1:97:bd:33:12:01:db:6d: de:78:86:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUVYRFDhTR6QE27n/K/oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMzFkNDY1NjE3NDRhNjgxMDE2YzhkNmY5YTYxYjljMTdj YjdmMGYwHhcNMjUxMjA2MDUwMTI1WhcNMjUxMjA3MDUwMTI1WjAzMTEwLwYDVQQD EyhlZTEwMzg2YmZhMGM3MDg2M2FlNzdmYjJiMTYyNTRkZGJhNGVhOWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEnUeuO0zTYZwTrHMD7RClrkf8SO Z8Aru1wU7qUXvKirQ3r8Ub9lH/PPD/tm/JEUgojjiHP+q7HtUwo6qj8jXp0jEeD0 rcY4s7jRKWjJzQivB/dVMYNvnbkr/eQHZrbf5TjBDI7qP5RRBaitL0V9sAJCsS/e Ib2fqgLikKYuZncc2yMwfbHAPgpytJ0WQcA+MqTq0AfCqTfz4jW9zC931rI6F3I3 M454ft56IGh6g7dJeBaL8H1UehnaEYI5puxWA6rYQdlvEaQNeyHs7cG+g1L6YA2W db1snsmv1RLz3dIhOJzQzdcxbGblKjM4yiJFjIOzuMB1RZJ7yZKxfNuSlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4QOGv6DHCGOud/srFiVN26TqmjMB8GA1UdIwQY MBaAFMEx1GVhdEpoEBbI1vmmG5wXy38PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1RIVVpXRjBTbWdRRnNqVy1hWWJuQmZMZnc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84MmJhOWQtMzg4Mi00N2ZkLTkxZDUt NGI3ZTVjNWE5ZDRiLzEvd1RIVVpXRjBTbWdRRnNqVy1hWWJuQmZMZnc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi84MmJhOWQtMzg4Mi00N2ZkLTkxZDUtNGI3ZTVjNWE5ZDRi LzEvd1RIVVpXRjBTbWdRRnNqVy1hWWJuQmZMZnc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/RTBaX4 +zMCHgs59NZcwjBAhwusbbll4AfNrwlzPk5D8vJVKtEj3STktKxW4OoxfkveYuka 43ljb7A+bi7nusLFbF+slN8Sz/anV6LGRNmJ9/aH/yMFEDfEYNC+DacmuqnnlYRB teZZVCiOAYtHmdV1zuwcFlFFoZ3pKW0VmbZ39ln/cCHXIVF1AQtUYlzfzVSTtN+t mBjsRzHyHuoL697g+cNoPUrpOVRywYRRhEn0ffV5C2ZEk1RAucpDqWnHdGf+UIPZ nM43jatHac1lmmyEv7si/JNFnx6JZx0Z3QBgtkmIBj1NqVqJwifiNpZeIwUUqcGX vTMSAdtt3niGiA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:22:10 2025 by rpki-client