This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft File: wNBDfN98up85Z-syighobQbkfVY.mft (raw, json) Hash identifier: uACQE0fX8o72fhnDvyCVRiW3djnffWthuo7dA1TIShg= Subject key identifier: A6:58:EC:88:74:68:25:CB:C6:2E:7D:4B:71:FA:2B:4F:1F:01:0B:D7 Authority key identifier: C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56 Certificate issuer: /CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56 Certificate serial: 019AF3F731DBAB3AE9C2DB467231B3BA8E0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft Manifest number: 0505 Signing time: Sat 06 Dec 2025 14:00:54 +0000 Manifest this update: Sat 06 Dec 2025 14:00:54 +0000 Manifest next update: Sun 07 Dec 2025 14:00:54 +0000 Files and hashes: 1: RVpE5x4ewK-16qeOmC4zQhoP4D0.roa (hash: hUGCkNpwy4m/7VpqWBt6q2aDAeStLb3YaDGvbWD+DDQ=) 2: wNBDfN98up85Z-syighobQbkfVY.crl (hash: u2I+O4HNGhVBTPcoBpPP6qRr1gWKCRq5zn+srHvC/Zg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:31:db:ab:3a:e9:c2:db:46:72:31:b3:ba:8e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56 Validity Not Before: Dec 6 14:00:54 2025 GMT Not After : Dec 7 14:00:54 2025 GMT Subject: CN=a658ec88746825cbc62e7d4b71fa2b4f1f010bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c5:7e:bb:05:8d:5c:25:e6:6b:33:87:91:06: f0:de:d0:4c:2d:ac:95:e5:aa:00:74:10:86:36:8b: b5:f7:17:f2:71:e8:59:c8:f3:be:c6:f0:aa:14:40: 01:b8:e0:74:fb:3a:a0:ab:78:a2:1f:be:db:38:94: cb:7d:03:5d:fa:6c:23:a0:ff:b1:ef:5e:e4:89:3c: 35:d2:81:f4:2a:d9:14:74:52:12:62:17:f5:dd:5c: 62:81:8b:d5:9f:9e:54:88:04:e8:d4:c1:13:09:5b: 34:a8:de:98:5d:2a:a0:8b:c3:22:8d:25:53:62:e0: 33:83:d6:5a:6c:e2:ff:dc:9a:ad:3c:66:16:af:69: d7:3b:8b:b1:41:ac:01:b6:b8:42:16:4b:7d:b6:2e: 8b:2c:69:c2:35:4c:e6:15:6c:87:21:d2:7a:b8:10: e9:8d:c6:b5:26:fd:9a:bb:35:d2:15:e8:ac:f0:eb: 64:01:5c:ad:df:61:b4:55:c1:d7:14:3b:68:0b:64: 46:7e:c0:0a:ec:c9:e5:2b:1d:17:f4:c6:a3:dd:6e: 01:0b:f5:ed:32:43:a3:0b:61:fc:2a:b6:6e:60:a0: 3b:74:1f:26:87:03:10:66:c7:95:1d:6e:ac:0d:b0: a9:45:7c:70:9f:1f:fd:44:60:f8:24:d9:11:2a:15: 71:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:58:EC:88:74:68:25:CB:C6:2E:7D:4B:71:FA:2B:4F:1F:01:0B:D7 X509v3 Authority Key Identifier: keyid:C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:f2:42:d7:7a:4b:5b:f1:4f:99:0a:00:15:24:0f:11:08:23: 69:fe:79:57:d4:17:33:55:c8:19:3f:38:05:01:f8:9e:1e:2e: 55:f5:6a:ba:f1:fc:9b:5a:c8:54:96:38:cd:94:d9:b7:87:07: 95:a7:40:ac:b3:d6:be:4f:d4:da:cd:97:ea:2f:b1:89:23:24: de:47:20:1b:19:c4:e2:ff:27:01:48:ac:3a:00:0d:1e:ad:83: 88:a7:bc:3d:1f:e4:fa:a9:ab:84:30:cc:cd:cb:ff:99:ec:63: f2:08:37:44:b0:f4:3a:ef:05:e8:83:1a:df:e2:82:62:12:68: c1:f3:f1:b2:60:aa:43:c1:d4:02:d6:13:5c:60:8f:97:da:fe: 56:f0:ca:bd:2f:98:50:c5:8e:1b:d4:8e:9d:f4:1a:f4:28:ca: 57:36:03:a7:6a:84:ab:05:bd:b2:b4:0e:fa:d0:37:57:8b:65: d4:09:3c:17:a8:53:d9:97:2a:ac:17:ba:c4:30:53:85:15:5a: 59:02:4c:d9:24:48:e2:4b:cb:da:87:fa:d4:81:7e:63:46:8b: 99:70:cb:f5:c7:95:d6:58:f2:ca:12:e0:54:ec:4f:b4:fd:79: bd:5a:98:7a:00:07:c8:66:77:04:76:9a:e0:d7:5b:aa:4d:df: 3e:3b:b6:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9zHbqzrpwttGcjGzuo4MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZDA0MzdjZGY3Y2JhOWYzOTY3ZWIzMjhhMDg2ODZkMDZl NDdkNTYwHhcNMjUxMjA2MTQwMDU0WhcNMjUxMjA3MTQwMDU0WjAzMTEwLwYDVQQD EyhhNjU4ZWM4ODc0NjgyNWNiYzYyZTdkNGI3MWZhMmI0ZjFmMDEwYmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMV+uwWNXCXmazOHkQbw3tBMLayV 5aoAdBCGNou19xfycehZyPO+xvCqFEABuOB0+zqgq3iiH77bOJTLfQNd+mwjoP+x 717kiTw10oH0KtkUdFISYhf13VxigYvVn55UiATo1METCVs0qN6YXSqgi8MijSVT YuAzg9ZabOL/3JqtPGYWr2nXO4uxQawBtrhCFkt9ti6LLGnCNUzmFWyHIdJ6uBDp jca1Jv2auzXSFeis8OtkAVyt32G0VcHXFDtoC2RGfsAK7MnlKx0X9Maj3W4BC/Xt MkOjC2H8KrZuYKA7dB8mhwMQZseVHW6sDbCpRXxwnx/9RGD4JNkRKhVxIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZY7Ih0aCXLxi59S3H6K08fAQvXMB8GA1UdIwQY MBaAFMDQQ3zffLqfOWfrMooIaG0G5H1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd05CRGZOOTh1cDg1Wi1zeWlnaG9iUWJrZlZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lNDYxNjgtOTgxOC00YjUxLTk0YWQt YzYxOGRlYzA3NDYyLzEvd05CRGZOOTh1cDg1Wi1zeWlnaG9iUWJrZlZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9lNDYxNjgtOTgxOC00YjUxLTk0YWQtYzYxOGRlYzA3NDYy LzEvd05CRGZOOTh1cDg1Wi1zeWlnaG9iUWJrZlZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmPJC13pL W/FPmQoAFSQPEQgjaf55V9QXM1XIGT84BQH4nh4uVfVquvH8m1rIVJY4zZTZt4cH ladArLPWvk/U2s2X6i+xiSMk3kcgGxnE4v8nAUisOgANHq2DiKe8PR/k+qmrhDDM zcv/mexj8gg3RLD0Ou8F6IMa3+KCYhJowfPxsmCqQ8HUAtYTXGCPl9r+VvDKvS+Y UMWOG9SOnfQa9CjKVzYDp2qEqwW9srQO+tA3V4tl1Ak8F6hT2ZcqrBe6xDBThRVa WQJM2SRI4kvL2of61IF+Y0aLmXDL9ceV1ljyyhLgVOxPtP15vVqYegAHyGZ3BHaa 4Ndbqk3fPju2+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 19:46:20 2025 by rpki-client