This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft File: wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft (raw, json) Hash identifier: lopl4S6MDvwknLSknufCjbmNvQxCncuoj9FGDwXr/BA= Subject key identifier: A9:D6:47:22:92:C6:9D:18:EA:6F:5C:3C:58:06:58:CD:E5:C9:06:28 Authority key identifier: C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC Certificate issuer: /CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc Certificate serial: 019AF31CB6CF47A4184CF77FEA8724C57333 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 10:02:16 +0000 Manifest this update: Sat 06 Dec 2025 10:02:16 +0000 Manifest next update: Sun 07 Dec 2025 10:02:16 +0000 Files and hashes: 1: CMFtvIRrP8F50u4CVRtzzHXRYto.roa (hash: zBitZQVL6CHlOMMwjKpEh8Pxjt6+cJBsedg4te+yLPA=) 2: wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl (hash: 5CJ7LtzwkcHTbt1g79+i5JvNSujcxnI3YiiTHSpayEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:b6:cf:47:a4:18:4c:f7:7f:ea:87:24:c5:73:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc Validity Not Before: Dec 6 10:02:16 2025 GMT Not After : Dec 7 10:02:16 2025 GMT Subject: CN=a9d6472292c69d18ea6f5c3c580658cde5c90628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6c:4e:d8:fd:a3:f9:09:2a:b9:b8:43:18:36: d6:50:45:ed:54:1d:21:f5:df:3f:14:c7:05:04:ac: b6:e3:b7:72:09:8c:13:99:1e:30:ae:3e:28:3a:0d: 29:95:11:4f:12:3f:4d:08:42:1e:9a:28:82:58:48: c2:39:09:39:5a:f8:d1:68:41:fa:21:98:d4:54:d3: 3f:87:f1:94:25:29:37:24:08:73:86:29:46:43:2d: cf:ae:e8:a3:10:c2:c7:da:d7:28:74:99:ee:c3:40: 81:93:c6:18:d1:2b:41:44:36:af:b4:3a:17:d2:9e: 26:f7:a0:8d:38:fc:86:31:15:9c:64:84:ea:22:74: 7d:b8:ac:50:15:72:76:19:e4:37:44:81:26:c0:94: 99:c9:54:25:62:e9:b8:a2:76:44:dd:df:0f:f8:f2: 25:c8:b1:ab:3e:e6:99:e8:eb:21:04:85:b1:3c:4e: 78:05:a8:71:d5:c8:ff:7b:1a:56:66:6d:bc:31:a3: 3b:a0:58:d7:92:b0:26:49:68:71:7d:d6:7f:86:e2: 12:dd:6e:f6:f8:f3:91:56:b2:3d:b8:33:43:a3:e7: 78:0b:6e:0c:5c:3c:57:c1:39:77:c3:45:c5:61:2b: 2e:5c:fe:62:16:e1:94:d5:56:68:dc:d3:76:6d:66: 55:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D6:47:22:92:C6:9D:18:EA:6F:5C:3C:58:06:58:CD:E5:C9:06:28 X509v3 Authority Key Identifier: keyid:C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:a6:f7:26:e8:77:68:59:fe:dd:31:3c:2d:27:59:83:1a:a6: 2b:0d:25:40:94:80:16:64:ef:49:fc:18:c9:8c:43:8f:4b:e9: 64:c8:fa:0a:4e:d8:b8:a0:8b:74:e3:f2:82:15:c7:0e:4b:64: b5:77:f5:57:48:de:39:9a:36:fa:9d:cc:62:36:64:aa:f3:f5: 02:c5:b7:7c:bf:7a:e5:ab:f6:0b:3a:8f:a5:bd:f7:54:88:76: d5:4f:ca:29:a7:26:62:5d:cb:39:8a:00:9e:40:6e:9e:f7:21: 1b:e9:7a:eb:91:ce:dd:39:5e:9f:43:82:25:71:8a:67:4c:fa: fd:69:f9:9d:a7:e1:c0:1b:43:00:34:dc:95:a8:d1:d6:55:e1: 21:b9:8d:94:52:de:c9:e7:ce:d9:13:62:03:a4:1e:61:08:f8: 43:a2:79:84:ec:45:80:6b:fe:51:d1:dc:de:3b:2b:43:67:8c: 6e:09:8f:de:5f:48:b4:ea:6a:c5:90:d5:99:f4:bf:e9:bd:27: e7:03:8e:b8:87:6e:0c:8b:a4:9a:73:c1:a6:a6:af:b0:a4:6c: 19:ed:3c:c6:b0:c3:cc:35:57:28:01:23:73:9e:f8:35:80:4d: 5e:02:89:94:3b:47:57:9a:1d:79:2f:a5:a1:80:5e:c0:a6:d8: bb:d0:9e:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHLbPR6QYTPd/6ockxXMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMjYxMjJiNGNlZWU0MWY5N2ZmYjhjYzIyNTUwYmUzZmEw YTUzZGMwHhcNMjUxMjA2MTAwMjE2WhcNMjUxMjA3MTAwMjE2WjAzMTEwLwYDVQQD EyhhOWQ2NDcyMjkyYzY5ZDE4ZWE2ZjVjM2M1ODA2NThjZGU1YzkwNjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22xO2P2j+QkqubhDGDbWUEXtVB0h 9d8/FMcFBKy247dyCYwTmR4wrj4oOg0plRFPEj9NCEIemiiCWEjCOQk5WvjRaEH6 IZjUVNM/h/GUJSk3JAhzhilGQy3PruijEMLH2tcodJnuw0CBk8YY0StBRDavtDoX 0p4m96CNOPyGMRWcZITqInR9uKxQFXJ2GeQ3RIEmwJSZyVQlYum4onZE3d8P+PIl yLGrPuaZ6OshBIWxPE54Bahx1cj/expWZm28MaM7oFjXkrAmSWhxfdZ/huIS3W72 +PORVrI9uDNDo+d4C24MXDxXwTl3w0XFYSsuXP5iFuGU1VZo3NN2bWZVBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnWRyKSxp0Y6m9cPFgGWM3lyQYoMB8GA1UdIwQY MBaAFMEmEitM7uQfl/+4zCJVC+P6ClPcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NZU0swenU1Qi1YXzdqTUlsVUw0X29LVTl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC84MDM5M2YtMmJkNS00NjY4LWFjYmQt MTUyYjQ2M2FhM2NhLzEvd1NZU0swenU1Qi1YXzdqTUlsVUw0X29LVTl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC84MDM5M2YtMmJkNS00NjY4LWFjYmQtMTUyYjQ2M2FhM2Nh LzEvd1NZU0swenU1Qi1YXzdqTUlsVUw0X29LVTl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArab3Juh3 aFn+3TE8LSdZgxqmKw0lQJSAFmTvSfwYyYxDj0vpZMj6Ck7YuKCLdOPyghXHDktk tXf1V0jeOZo2+p3MYjZkqvP1AsW3fL965av2CzqPpb33VIh21U/KKacmYl3LOYoA nkBunvchG+l665HO3Tlen0OCJXGKZ0z6/Wn5nafhwBtDADTclajR1lXhIbmNlFLe yefO2RNiA6QeYQj4Q6J5hOxFgGv+UdHc3jsrQ2eMbgmP3l9ItOpqxZDVmfS/6b0n 5wOOuIduDIukmnPBpqavsKRsGe08xrDDzDVXKAEjc574NYBNXgKJlDtHV5odeS+l oYBewKbYu9Cehg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:22:14 2025 by rpki-client