This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft File: wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft (raw, json) Hash identifier: VGmyrOcI31EhbVThmnN36CdgRW2f/wxaQp5Ksv0wNKA= Subject key identifier: 10:8B:F0:52:FF:BF:9D:D2:A9:92:97:16:A5:DE:B9:F4:51:2F:F5:36 Authority key identifier: C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE Certificate issuer: /CN=c13b90faac5efcf93195619da16f3a47effe99fe Certificate serial: 019B3CEBDE417BA77E5E21589B4BB2DAF953 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 18:00:49 +0000 Manifest this update: Sat 20 Dec 2025 18:00:49 +0000 Manifest next update: Sun 21 Dec 2025 18:00:49 +0000 Files and hashes: 1: iyuy2kmWqZNHXuAfcuh0lwdEN5U.roa (hash: 80r40j4f0TX0nXOpgOJuceIx9IUXe6MHRj3CO+H5lVg=) 2: wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl (hash: MrXYDb66kYtIAwX55uA5wcxHGMqCnBPOaokFaoI0ZM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:de:41:7b:a7:7e:5e:21:58:9b:4b:b2:da:f9:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c13b90faac5efcf93195619da16f3a47effe99fe Validity Not Before: Dec 20 18:00:49 2025 GMT Not After : Dec 21 18:00:49 2025 GMT Subject: CN=108bf052ffbf9dd2a9929716a5deb9f4512ff536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a0:ce:c2:4a:55:03:43:c1:b3:50:92:84:9c: 59:b5:56:84:d6:e5:ba:f5:74:27:0f:94:a1:1f:7f: cd:10:76:3e:fa:1c:e0:7f:7f:9e:23:5a:6a:97:7c: 75:fd:8d:58:a8:80:0f:66:84:71:cd:2c:b4:fc:fe: f2:00:4b:93:da:07:dd:df:b8:a0:00:91:40:03:a5: 20:27:ca:41:6c:aa:87:89:e5:d8:5b:d8:63:7c:dc: df:f0:1a:3c:75:0c:72:4f:4a:ed:54:8f:5b:67:d3: 78:87:b3:3d:e2:00:2b:49:43:51:db:63:ee:41:e7: 3f:9b:f5:10:e7:c0:df:43:9b:2e:b3:c3:a7:fd:22: 98:1f:76:ae:15:44:e5:0a:d9:87:13:40:b0:a7:bc: f9:cc:37:4d:16:cc:2c:87:0c:22:c9:54:98:f2:8a: db:ad:d0:70:5a:dd:32:b5:b4:f9:20:da:01:b9:65: 54:4e:08:a9:0e:6a:75:14:f5:68:04:f0:73:c3:3e: 3b:82:f9:b9:45:cf:fb:e4:82:ec:c1:3e:8b:04:95: a0:52:52:c5:50:14:52:e7:35:29:36:f8:e4:c3:0f: db:65:72:4f:d9:a2:ef:ab:98:4a:9d:be:ec:7c:50: b5:1b:e3:54:54:32:5a:04:2a:88:f8:7e:ce:60:c0: a0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8B:F0:52:FF:BF:9D:D2:A9:92:97:16:A5:DE:B9:F4:51:2F:F5:36 X509v3 Authority Key Identifier: keyid:C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:6d:d7:df:39:9f:22:4e:4d:c6:2a:32:24:fe:c1:75:1a:c7: 34:3e:eb:08:d6:84:91:52:cf:e4:bb:c9:1f:e4:d0:1d:c2:cd: 09:88:9f:ed:e9:da:76:b3:74:63:41:66:6b:a1:4b:65:09:19: f4:66:55:7c:c6:92:91:01:f6:83:33:da:17:1b:da:99:bb:19: 4f:c8:be:68:f9:7c:5c:2f:22:95:2f:81:71:08:98:21:9c:d1: 62:e9:8f:b2:d6:d5:50:64:98:47:6e:7e:f9:77:a2:f6:c8:54: a3:67:b7:36:21:a6:00:c1:f2:e6:39:21:06:4d:37:89:56:bc: 00:8e:89:37:22:7f:74:80:34:e6:8f:f8:a0:19:f0:b0:1d:00: f5:5b:ed:d3:1a:b8:a5:61:3d:47:92:ce:61:18:17:5d:44:d8: 57:2e:36:d1:1c:26:f3:1d:ee:e7:03:df:96:04:eb:77:db:5c: a3:ba:66:28:32:12:56:8a:44:91:b0:ba:69:e7:bc:67:bb:30: 19:79:a7:7e:47:ef:d4:35:62:df:81:ed:12:87:75:9f:1e:15: 16:2d:5a:5f:33:76:48:02:d4:48:de:be:9f:3a:e0:fd:a4:f6: 55:26:59:77:0e:f7:e4:0a:23:bc:0f:c3:27:95:bd:3d:2f:61: 96:c2:d4:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8695Be6d+XiFYm0uy2vlTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxM2I5MGZhYWM1ZWZjZjkzMTk1NjE5ZGExNmYzYTQ3ZWZm ZTk5ZmUwHhcNMjUxMjIwMTgwMDQ5WhcNMjUxMjIxMTgwMDQ5WjAzMTEwLwYDVQQD EygxMDhiZjA1MmZmYmY5ZGQyYTk5Mjk3MTZhNWRlYjlmNDUxMmZmNTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaDOwkpVA0PBs1CShJxZtVaE1uW6 9XQnD5ShH3/NEHY++hzgf3+eI1pql3x1/Y1YqIAPZoRxzSy0/P7yAEuT2gfd37ig AJFAA6UgJ8pBbKqHieXYW9hjfNzf8Bo8dQxyT0rtVI9bZ9N4h7M94gArSUNR22Pu Qec/m/UQ58DfQ5sus8On/SKYH3auFUTlCtmHE0Cwp7z5zDdNFswshwwiyVSY8orb rdBwWt0ytbT5INoBuWVUTgipDmp1FPVoBPBzwz47gvm5Rc/75ILswT6LBJWgUlLF UBRS5zUpNvjkww/bZXJP2aLvq5hKnb7sfFC1G+NUVDJaBCqI+H7OYMCg6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCL8FL/v53SqZKXFqXeufRRL/U2MB8GA1UdIwQY MBaAFME7kPqsXvz5MZVhnaFvOkfv/pn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1R1US1xeGVfUGt4bFdHZG9XODZSLV8tbWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zYTYxY2MtNzI4Ni00ZmIwLTk1MDgt YzEzNWE2ZWRiODYxLzEvd1R1US1xeGVfUGt4bFdHZG9XODZSLV8tbWY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zYTYxY2MtNzI4Ni00ZmIwLTk1MDgtYzEzNWE2ZWRiODYx LzEvd1R1US1xeGVfUGt4bFdHZG9XODZSLV8tbWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWG3X3zmf Ik5NxioyJP7BdRrHND7rCNaEkVLP5LvJH+TQHcLNCYif7enadrN0Y0Fma6FLZQkZ 9GZVfMaSkQH2gzPaFxvambsZT8i+aPl8XC8ilS+BcQiYIZzRYumPstbVUGSYR25+ +Xei9shUo2e3NiGmAMHy5jkhBk03iVa8AI6JNyJ/dIA05o/4oBnwsB0A9Vvt0xq4 pWE9R5LOYRgXXUTYVy420Rwm8x3u5wPflgTrd9tco7pmKDISVopEkbC6aee8Z7sw GXmnfkfv1DVi34HtEod1nx4VFi1aXzN2SALUSN6+nzrg/aT2VSZZdw735AojvA/D J5W9PS9hlsLU2g== -----END CERTIFICATE-----Generated at Sat Dec 20 20:29:10 2025 by rpki-client