This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft File: wLjiV5ep3EPC5GOUsMixsQirQ7k.mft (raw, json) Hash identifier: tBH3eRRGI3s008YO8EiQjo4tZyDO91DK6F1vQyMf+yM= Subject key identifier: DB:D5:59:B4:FF:1E:97:62:61:C0:9A:D1:8D:BA:AB:1F:AC:66:A7:C0 Authority key identifier: C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9 Certificate issuer: /CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9 Certificate serial: 019AF31CC24A83D3A9D5F30EBDB9019BE59D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft Manifest number: 05F2 Signing time: Sat 06 Dec 2025 10:02:19 +0000 Manifest this update: Sat 06 Dec 2025 10:02:19 +0000 Manifest next update: Sun 07 Dec 2025 10:02:19 +0000 Files and hashes: 1: 3oLf6nYLu-Xr7qpLQICeS2w7Tus.roa (hash: XtsupCW4EVcqvMqJHKb5yPLyEGcRcTQPpgXjTIHJ3Z4=) 2: wLjiV5ep3EPC5GOUsMixsQirQ7k.crl (hash: j021LWcmSIykNpEp+SCWfh3AweQ5D892YQkouSXWGRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:c2:4a:83:d3:a9:d5:f3:0e:bd:b9:01:9b:e5:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9 Validity Not Before: Dec 6 10:02:19 2025 GMT Not After : Dec 7 10:02:19 2025 GMT Subject: CN=dbd559b4ff1e976261c09ad18dbaab1fac66a7c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:71:b0:79:e3:cf:2f:cc:d3:60:77:44:9a:1c: 9e:50:ac:ac:27:f9:d9:0e:e4:82:96:34:4c:6b:3d: 29:84:c1:0b:5a:58:76:1a:3e:71:19:28:57:a7:ae: 19:82:87:ba:55:24:39:0c:bd:ed:c4:9a:8f:2f:43: 74:fd:ff:61:d1:19:e9:92:e4:91:f6:70:ec:cc:e1: e4:17:f1:25:ad:e7:a6:d6:cd:b9:ab:bb:c0:ed:af: f8:8e:00:f2:c4:79:c5:23:f0:cd:1a:81:b6:9b:09: b8:6d:ea:73:32:34:67:38:83:52:da:f1:74:f0:41: e5:28:b6:cb:4c:da:a4:1d:b0:ca:a7:d0:4f:a0:35: 24:ce:66:f7:35:51:1b:3b:d4:a7:64:03:cc:1d:06: 4b:88:a5:36:90:4b:9b:bd:b8:95:da:c4:45:76:96: d9:eb:82:3e:6a:07:42:49:3d:43:3f:c9:a8:84:dc: 13:4c:ee:43:eb:f8:e7:c4:a9:b2:5e:17:46:d3:3d: aa:b3:be:eb:73:9d:8b:13:72:c4:26:d0:74:8b:eb: db:e1:c4:4e:ce:76:9b:c6:6c:4a:be:2c:29:b5:bd: ef:25:d4:5e:b8:66:77:59:8e:fd:ad:1e:b4:8c:1d: 54:e5:c8:aa:9b:78:89:af:6f:04:45:c2:67:75:ef: 3e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D5:59:B4:FF:1E:97:62:61:C0:9A:D1:8D:BA:AB:1F:AC:66:A7:C0 X509v3 Authority Key Identifier: keyid:C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b2:b8:e8:09:00:ca:09:4a:7c:f7:f0:9b:5e:fb:5a:f9:31: 7d:72:93:b2:54:39:fc:7e:17:09:40:44:0f:20:e4:b8:39:c1: 54:c9:36:a4:9f:d7:73:2e:eb:a6:26:5f:3d:0d:44:a5:25:22: f4:41:1b:f2:33:8c:93:33:02:bb:73:14:94:9b:c8:15:b2:48: 77:3e:1a:81:d3:8b:e2:f4:f3:c2:23:8d:bd:45:a9:91:94:fb: 50:df:e5:cb:fa:c1:bd:33:cf:4c:14:e5:6f:59:0d:de:22:d1: e2:a8:49:5b:56:7b:70:17:92:bb:58:3a:c7:4e:d2:c0:65:41: 38:16:c0:bf:ac:d8:1b:33:78:80:fc:66:0c:50:57:71:08:b5: 78:18:a4:08:3d:44:92:8a:44:69:cb:18:9e:9d:ec:66:c9:a3: 73:c5:91:70:2d:03:d9:59:b2:0d:f0:c3:d8:8e:f8:3e:d5:ff: 6c:64:71:2a:34:68:04:74:ec:9d:6e:a1:83:3e:e5:5b:4f:6f: b1:b7:39:55:80:d8:0a:8f:5d:6d:3a:36:3c:85:0b:81:4d:e7: 1a:7c:dd:78:73:f9:d3:92:0c:44:36:27:13:56:d8:b1:1a:db: a9:91:eb:d0:c6:e8:c7:60:bd:7d:b2:25:ff:87:f3:3a:15:3d: 54:e7:29:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHMJKg9Op1fMOvbkBm+WdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYjhlMjU3OTdhOWRjNDNjMmU0NjM5NGIwYzhiMWIxMDhh YjQzYjkwHhcNMjUxMjA2MTAwMjE5WhcNMjUxMjA3MTAwMjE5WjAzMTEwLwYDVQQD EyhkYmQ1NTliNGZmMWU5NzYyNjFjMDlhZDE4ZGJhYWIxZmFjNjZhN2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3GweePPL8zTYHdEmhyeUKysJ/nZ DuSCljRMaz0phMELWlh2Gj5xGShXp64Zgoe6VSQ5DL3txJqPL0N0/f9h0RnpkuSR 9nDszOHkF/Elreem1s25q7vA7a/4jgDyxHnFI/DNGoG2mwm4bepzMjRnOINS2vF0 8EHlKLbLTNqkHbDKp9BPoDUkzmb3NVEbO9SnZAPMHQZLiKU2kEubvbiV2sRFdpbZ 64I+agdCST1DP8mohNwTTO5D6/jnxKmyXhdG0z2qs77rc52LE3LEJtB0i+vb4cRO znabxmxKviwptb3vJdReuGZ3WY79rR60jB1U5ciqm3iJr28ERcJnde8+MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvVWbT/HpdiYcCa0Y26qx+sZqfAMB8GA1UdIwQY MBaAFMC44leXqdxDwuRjlLDIsbEIq0O5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0xqaVY1ZXAzRVBDNUdPVXNNaXhzUWlyUTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xZGUyMTMtZjM1Mi00M2E0LWI4OGIt NTNlYWNkODk2M2ExLzEvd0xqaVY1ZXAzRVBDNUdPVXNNaXhzUWlyUTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8xZGUyMTMtZjM1Mi00M2E0LWI4OGItNTNlYWNkODk2M2Ex LzEvd0xqaVY1ZXAzRVBDNUdPVXNNaXhzUWlyUTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbK46AkA yglKfPfwm177WvkxfXKTslQ5/H4XCUBEDyDkuDnBVMk2pJ/Xcy7rpiZfPQ1EpSUi 9EEb8jOMkzMCu3MUlJvIFbJIdz4agdOL4vTzwiONvUWpkZT7UN/ly/rBvTPPTBTl b1kN3iLR4qhJW1Z7cBeSu1g6x07SwGVBOBbAv6zYGzN4gPxmDFBXcQi1eBikCD1E kopEacsYnp3sZsmjc8WRcC0D2VmyDfDD2I74PtX/bGRxKjRoBHTsnW6hgz7lW09v sbc5VYDYCo9dbTo2PIULgU3nGnzdeHP505IMRDYnE1bYsRrbqZHr0Mbox2C9fbIl /4fzOhU9VOcpmA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:35:33 2025 by rpki-client