This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft File: Wq93TsnCcwJusRfkjnP-9CiN3sg.mft (raw, json) Hash identifier: UnXsWDau3aM727rd683P/4ae5Su4cXnNGA7ZH4tYNpI= Subject key identifier: 67:54:08:64:1C:CA:B1:CC:84:9B:FE:0D:0D:C0:E0:5B:FD:97:F8:E1 Authority key identifier: 5A:AF:77:4E:C9:C2:73:02:6E:B1:17:E4:8E:73:FE:F4:28:8D:DE:C8 Certificate issuer: /CN=5aaf774ec9c273026eb117e48e73fef4288ddec8 Certificate serial: 019AF5781626D24EAD0322314F3A6737D0BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 21:01:19 +0000 Manifest this update: Sat 06 Dec 2025 21:01:19 +0000 Manifest next update: Sun 07 Dec 2025 21:01:19 +0000 Files and hashes: 1: 1-hXj5YRn-WVx35eduoI7efVZjNc.roa (hash: g7NKwujdPr7Nz8jyHPpB050pI0MnKX60Je4aNLZ7Vwc=) 2: Wq93TsnCcwJusRfkjnP-9CiN3sg.crl (hash: V5oh9jMwP0EUfGqUGxkQK7zyiDAs5NQ+mR47UZnt92o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:16:26:d2:4e:ad:03:22:31:4f:3a:67:37:d0:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aaf774ec9c273026eb117e48e73fef4288ddec8 Validity Not Before: Dec 6 21:01:19 2025 GMT Not After : Dec 7 21:01:19 2025 GMT Subject: CN=675408641ccab1cc849bfe0d0dc0e05bfd97f8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f8:a8:6c:8c:ff:ab:14:b5:0e:47:ad:39:66: 75:f0:c9:ce:e7:50:14:ab:bc:b1:d0:ae:5a:22:9d: 9d:f0:06:9b:72:c9:3b:2e:58:d1:19:a9:aa:60:ba: dd:26:6c:3b:73:86:97:39:35:c2:8d:b9:85:46:7f: ec:4d:9d:23:2d:04:e6:e8:30:0c:32:33:ab:a4:bd: 74:9b:85:e0:f5:b1:89:e6:76:ed:52:12:cf:c2:eb: f0:e4:43:35:1b:b7:71:0f:b5:14:00:d9:97:bd:38: 9f:fa:94:d2:8e:8e:4b:62:c8:9b:14:a1:c9:72:ad: 0c:0d:32:f0:be:62:b2:f7:7f:fe:98:3b:58:37:04: 2c:a4:0a:be:be:7f:32:25:cf:99:60:1b:a7:48:4b: 63:8d:8c:06:8b:c1:82:38:6c:3d:3f:73:39:01:0a: 86:d9:63:ae:ad:8e:65:d1:88:eb:36:00:06:b1:56: c0:39:f3:2e:0d:1a:3e:5b:31:b0:67:c5:74:51:74: de:fa:4f:0c:43:40:c7:db:38:3c:50:ed:bf:dc:7e: 09:31:6b:15:34:28:68:0e:b1:1f:d6:0e:3d:f1:c0: f2:69:72:72:a6:d5:63:b9:bb:4c:c7:a4:d0:2a:9f: 02:70:b5:50:a7:81:2d:c3:93:65:a8:8e:79:32:87: d2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:54:08:64:1C:CA:B1:CC:84:9B:FE:0D:0D:C0:E0:5B:FD:97:F8:E1 X509v3 Authority Key Identifier: keyid:5A:AF:77:4E:C9:C2:73:02:6E:B1:17:E4:8E:73:FE:F4:28:8D:DE:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:7d:15:cf:9d:58:fc:ed:9b:9a:d6:c6:d0:b7:af:25:41:8b: 85:a1:57:1d:38:33:87:3c:d0:9b:9e:55:31:7b:32:79:35:7a: d3:93:36:3b:18:ee:83:fa:e5:43:b4:cf:5e:55:4b:4e:05:52: 14:fb:70:c2:39:45:a2:c2:78:20:28:57:aa:06:58:92:ac:f8: 2c:0a:f0:13:70:b2:89:0e:cf:32:79:6b:a1:b0:14:ec:56:bd: 37:b4:8e:51:ec:c1:e3:e7:5e:b4:8e:b8:3f:aa:f3:fb:51:85: 75:1f:43:aa:3a:c4:a0:f5:7d:6b:86:49:0e:d8:bc:2b:b4:2a: f3:f2:4b:21:15:98:d0:e6:f1:53:d2:10:8b:6f:08:5f:99:92: a4:75:2c:5b:b2:91:55:3d:ac:52:d4:27:9c:36:92:24:4c:1c: 9e:47:25:b5:a1:df:68:10:82:30:60:12:a9:61:3e:14:88:61: 61:ea:06:e1:77:8e:52:82:fe:12:d4:86:54:a7:f4:59:a4:fc: 2d:31:8b:e2:18:68:17:f4:0f:94:f1:47:da:42:cb:a6:52:0d: 5b:eb:b2:0f:2e:82:f0:39:7c:25:5e:d0:1a:d8:e2:b4:99:10: 0e:c7:84:36:7b:51:1d:19:6d:57:f9:9e:6c:a6:7c:c1:17:71: c3:b8:b6:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eBYm0k6tAyIxTzpnN9C/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYWY3NzRlYzljMjczMDI2ZWIxMTdlNDhlNzNmZWY0Mjg4 ZGRlYzgwHhcNMjUxMjA2MjEwMTE5WhcNMjUxMjA3MjEwMTE5WjAzMTEwLwYDVQQD Eyg2NzU0MDg2NDFjY2FiMWNjODQ5YmZlMGQwZGMwZTA1YmZkOTdmOGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPiobIz/qxS1DketOWZ18MnO51AU q7yx0K5aIp2d8Aabcsk7LljRGamqYLrdJmw7c4aXOTXCjbmFRn/sTZ0jLQTm6DAM MjOrpL10m4Xg9bGJ5nbtUhLPwuvw5EM1G7dxD7UUANmXvTif+pTSjo5LYsibFKHJ cq0MDTLwvmKy93/+mDtYNwQspAq+vn8yJc+ZYBunSEtjjYwGi8GCOGw9P3M5AQqG 2WOurY5l0YjrNgAGsVbAOfMuDRo+WzGwZ8V0UXTe+k8MQ0DH2zg8UO2/3H4JMWsV NChoDrEf1g498cDyaXJyptVjubtMx6TQKp8CcLVQp4Etw5NlqI55MofS+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdUCGQcyrHMhJv+DQ3A4Fv9l/jhMB8GA1UdIwQY MBaAFFqvd07JwnMCbrEX5I5z/vQojd7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3E5M1RzbkNjd0p1c1Jma2puUC05Q2lOM3NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9kYzQzMGQtMzc3OS00OTg5LWI4NzIt MzM2NDQwNTllODY2LzEvV3E5M1RzbkNjd0p1c1Jma2puUC05Q2lOM3NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9kYzQzMGQtMzc3OS00OTg5LWI4NzItMzM2NDQwNTllODY2 LzEvV3E5M1RzbkNjd0p1c1Jma2puUC05Q2lOM3NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFH0Vz51Y /O2bmtbG0LevJUGLhaFXHTgzhzzQm55VMXsyeTV605M2Oxjug/rlQ7TPXlVLTgVS FPtwwjlFosJ4IChXqgZYkqz4LArwE3CyiQ7PMnlrobAU7Fa9N7SOUezB4+detI64 P6rz+1GFdR9DqjrEoPV9a4ZJDti8K7Qq8/JLIRWY0ObxU9IQi28IX5mSpHUsW7KR VT2sUtQnnDaSJEwcnkcltaHfaBCCMGASqWE+FIhhYeoG4XeOUoL+EtSGVKf0WaT8 LTGL4hhoF/QPlPFH2kLLplINW+uyDy6C8Dl8JV7QGtjitJkQDseENntRHRltV/me bKZ8wRdxw7i2nw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:43:02 2025 by rpki-client