This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft File: wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft (raw, json) Hash identifier: t0JJuo0Dl+5weNueYXBTdoz7fThsvPeHTaAT70+67JY= Subject key identifier: A8:83:C1:F4:85:1C:F2:89:49:72:DB:A2:4D:5D:95:66:96:06:18:7C Authority key identifier: C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE Certificate issuer: /CN=c13b90faac5efcf93195619da16f3a47effe99fe Certificate serial: 019AF19AD48C4BFD7A0F00F163CEB5281027 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:00:47 +0000 Manifest this update: Sat 06 Dec 2025 03:00:47 +0000 Manifest next update: Sun 07 Dec 2025 03:00:47 +0000 Files and hashes: 1: iyuy2kmWqZNHXuAfcuh0lwdEN5U.roa (hash: 80r40j4f0TX0nXOpgOJuceIx9IUXe6MHRj3CO+H5lVg=) 2: wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl (hash: RR0M0J0tODMESAzMIfnhrc00L8cxVMUQsFLXolfOru4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d4:8c:4b:fd:7a:0f:00:f1:63:ce:b5:28:10:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c13b90faac5efcf93195619da16f3a47effe99fe Validity Not Before: Dec 6 03:00:47 2025 GMT Not After : Dec 7 03:00:47 2025 GMT Subject: CN=a883c1f4851cf2894972dba24d5d95669606187c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:93:8d:57:72:6d:3b:d0:c8:0b:40:0b:57:24: b8:74:78:72:63:7e:37:86:27:30:f2:5a:3f:1d:96: 09:8f:49:eb:3e:13:33:68:56:b0:24:af:87:51:06: 63:d1:c6:6c:d8:d6:20:f7:86:5f:96:d2:3f:b4:77: 31:2b:bd:58:ac:ae:b5:71:27:c4:b5:d0:37:ca:57: 88:d7:4e:b9:dd:75:52:63:f7:88:43:0e:48:88:14: 37:e0:d3:9a:b0:81:47:ac:53:38:c0:ac:fd:05:72: 5f:34:96:b6:30:98:bb:14:e3:46:f4:7f:43:72:be: 8e:19:aa:04:fe:ef:55:ad:80:ca:d5:c3:09:dd:4a: 1b:bb:5c:e5:98:50:0f:8f:e8:da:2f:f3:cb:b1:bb: dc:06:a0:8a:35:c7:4b:32:2f:f9:65:b6:b1:43:c9: f0:83:4f:35:8c:d8:5e:a5:9e:86:74:8b:42:b5:7e: e5:5e:79:ae:8a:ce:dd:12:6e:81:e3:1a:80:48:4a: 40:16:f7:4d:84:7b:e2:bb:85:70:dc:f8:be:31:35: 8d:55:5a:6d:86:08:4f:de:82:25:21:a3:ed:41:9c: 83:24:b3:3a:53:8a:c0:97:9d:16:ec:fb:84:05:df: 63:c3:5b:db:af:f4:01:e2:92:3a:90:05:e2:42:90: 99:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:83:C1:F4:85:1C:F2:89:49:72:DB:A2:4D:5D:95:66:96:06:18:7C X509v3 Authority Key Identifier: keyid:C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:86:ac:95:99:70:9a:39:2b:db:46:63:d3:ea:45:c9:d0:ac: a4:27:ab:20:90:33:ed:82:ae:c8:17:de:c3:06:8a:23:27:db: a7:5a:34:3b:9b:07:6f:5c:67:41:20:33:30:39:50:d3:25:91: 8f:ec:65:58:d4:a7:59:d2:aa:16:2a:7a:4b:1d:f6:1b:13:b9: 38:17:f2:15:a6:cd:84:0e:22:a5:69:bc:d9:f3:9d:54:da:88: 6b:0c:60:a2:5d:29:f2:23:e4:fc:4e:9f:5e:d6:46:b6:60:2d: 72:99:e7:36:6a:52:c8:8e:77:8a:f6:f9:d3:24:c9:4a:8f:0e: 24:b7:44:13:82:c4:a7:04:df:34:3b:24:6d:6f:67:49:6e:4f: fe:0f:0d:9f:b7:1f:c3:0e:45:30:03:61:71:f5:f2:07:70:85: bf:d2:0e:48:f8:b9:aa:54:f8:f0:d0:f8:52:c8:08:39:f5:ad: 0f:80:81:11:d8:54:1f:3a:ae:7a:98:88:92:98:2b:8d:a0:86: a9:3f:f9:51:ed:73:f3:79:bf:89:7a:f4:0f:a4:51:53:42:54: 2c:26:80:05:c8:3f:6f:06:e3:f8:c4:57:94:70:db:56:0f:30: 21:df:b2:4b:26:c6:f8:28:01:41:3a:de:a3:42:43:4b:60:45: 70:a5:52:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtSMS/16DwDxY861KBAnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxM2I5MGZhYWM1ZWZjZjkzMTk1NjE5ZGExNmYzYTQ3ZWZm ZTk5ZmUwHhcNMjUxMjA2MDMwMDQ3WhcNMjUxMjA3MDMwMDQ3WjAzMTEwLwYDVQQD EyhhODgzYzFmNDg1MWNmMjg5NDk3MmRiYTI0ZDVkOTU2Njk2MDYxODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pONV3JtO9DIC0ALVyS4dHhyY343 hicw8lo/HZYJj0nrPhMzaFawJK+HUQZj0cZs2NYg94ZfltI/tHcxK71YrK61cSfE tdA3yleI10653XVSY/eIQw5IiBQ34NOasIFHrFM4wKz9BXJfNJa2MJi7FONG9H9D cr6OGaoE/u9VrYDK1cMJ3Uobu1zlmFAPj+jaL/PLsbvcBqCKNcdLMi/5ZbaxQ8nw g081jNhepZ6GdItCtX7lXnmuis7dEm6B4xqASEpAFvdNhHviu4Vw3Pi+MTWNVVpt hghP3oIlIaPtQZyDJLM6U4rAl50W7PuEBd9jw1vbr/QB4pI6kAXiQpCZUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKiDwfSFHPKJSXLbok1dlWaWBhh8MB8GA1UdIwQY MBaAFME7kPqsXvz5MZVhnaFvOkfv/pn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1R1US1xeGVfUGt4bFdHZG9XODZSLV8tbWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zYTYxY2MtNzI4Ni00ZmIwLTk1MDgt YzEzNWE2ZWRiODYxLzEvd1R1US1xeGVfUGt4bFdHZG9XODZSLV8tbWY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zYTYxY2MtNzI4Ni00ZmIwLTk1MDgtYzEzNWE2ZWRiODYx LzEvd1R1US1xeGVfUGt4bFdHZG9XODZSLV8tbWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdoaslZlw mjkr20Zj0+pFydCspCerIJAz7YKuyBfewwaKIyfbp1o0O5sHb1xnQSAzMDlQ0yWR j+xlWNSnWdKqFip6Sx32GxO5OBfyFabNhA4ipWm82fOdVNqIawxgol0p8iPk/E6f XtZGtmAtcpnnNmpSyI53ivb50yTJSo8OJLdEE4LEpwTfNDskbW9nSW5P/g8Nn7cf ww5FMANhcfXyB3CFv9IOSPi5qlT48ND4UsgIOfWtD4CBEdhUHzquepiIkpgrjaCG qT/5Ue1z83m/iXr0D6RRU0JULCaABcg/bwbj+MRXlHDbVg8wId+ySybG+CgBQTre o0JDS2BFcKVS2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:59:12 2025 by rpki-client