This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft File: wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft (raw, json) Hash identifier: Ekfz0w12V/Wt1QrtFQGWtrnVU3uj1AStHm69xDiP9Co= Subject key identifier: 63:F7:0F:CD:EC:9A:08:D0:9A:BE:45:B1:5A:33:CF:E7:99:23:64:70 Authority key identifier: C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7 Certificate issuer: /CN=c0f0abe688754510bc96c7f1b159492469fda6a7 Certificate serial: 019AF0BF1A916BD8FC9A967298A1E4A091B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft Manifest number: 06D6 Signing time: Fri 05 Dec 2025 23:00:47 +0000 Manifest this update: Fri 05 Dec 2025 23:00:47 +0000 Manifest next update: Sat 06 Dec 2025 23:00:47 +0000 Files and hashes: 1: MNSRA94GnwCWIcU0ZUPSgfJJzYA.roa (hash: vFvm6d7yLwrA+IkFyq24dAxJUZKY/00AaFr5EwDXEoE=) 2: wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl (hash: OEU9gQUlHz6bHiN98VK1lv1/FrgJMBuowea76192sgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:1a:91:6b:d8:fc:9a:96:72:98:a1:e4:a0:91:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0f0abe688754510bc96c7f1b159492469fda6a7 Validity Not Before: Dec 5 23:00:47 2025 GMT Not After : Dec 6 23:00:47 2025 GMT Subject: CN=63f70fcdec9a08d09abe45b15a33cfe799236470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d2:fa:a6:b7:40:1d:ab:9c:a7:98:be:81:fe: 82:6c:76:4b:c0:e2:10:06:7e:f7:8d:f7:11:cb:45: c9:eb:ec:76:6c:a1:68:5a:a5:bf:3c:43:f8:62:92: 9b:c3:e5:83:6c:a5:82:36:04:75:63:63:d3:0b:2a: b8:49:2a:40:08:29:1a:88:ed:6a:61:1c:51:9a:1f: 0a:64:84:58:89:7b:94:fc:7f:e3:05:c3:9a:8d:ce: 24:10:53:87:5e:74:f6:f1:fb:cc:1a:70:30:c6:bf: a0:0a:68:e9:57:b2:fb:64:74:c1:39:9a:5b:9b:fc: 4f:8f:01:0c:ea:e1:aa:65:e9:0f:38:8a:e1:f7:7e: 84:28:ca:e0:af:9c:91:15:0b:cd:b6:f4:9b:51:d1: 6a:07:cb:ec:dc:00:0e:18:d0:14:0c:05:d4:f3:17: b8:42:5f:b2:66:fb:94:15:9e:1e:bb:f4:7e:51:fd: 04:af:64:7d:f4:21:1b:9b:4c:e0:84:00:c8:99:3d: 20:67:75:00:b2:dd:dd:97:b4:e3:41:bc:87:96:fa: 3c:1d:a6:11:8b:86:05:1e:ba:84:83:9a:38:45:27: aa:ff:45:88:fe:54:61:85:ab:25:de:66:d0:b5:6d: b5:a3:36:c5:52:62:34:59:9c:7d:7a:f7:4d:c6:4e: c5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F7:0F:CD:EC:9A:08:D0:9A:BE:45:B1:5A:33:CF:E7:99:23:64:70 X509v3 Authority Key Identifier: keyid:C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:23:cd:50:cd:4e:a7:d5:52:66:3c:a5:52:a0:ae:04:c7:57: 20:9f:4a:3c:e2:94:7c:04:1f:d1:54:53:c1:1a:9f:06:75:f5: 3d:69:07:b9:19:78:80:a4:7b:f6:b2:8b:09:85:89:9c:7b:a9: d2:5c:89:12:a1:81:57:23:02:db:00:b7:cd:76:e3:23:9e:d5: 10:02:f4:34:4b:da:3f:22:6c:40:89:37:30:11:81:59:df:cf: ee:21:50:53:41:9d:bb:79:cc:9b:a8:c1:fc:87:3f:94:d9:f1: 82:24:cf:38:a3:d4:83:d7:41:82:79:1d:93:af:83:72:01:23: 28:07:89:be:6d:1e:64:13:06:94:52:e7:90:14:e6:30:8c:34: 9e:fa:68:16:68:16:c7:c0:49:61:17:9a:0c:f1:99:71:f8:26: 78:a9:4a:56:37:95:13:10:f5:5c:db:81:34:a0:31:77:c1:d9: 48:fc:5f:2a:fb:ea:ca:f9:28:2e:05:e4:0b:49:c4:8f:b9:da: 2c:1f:b0:c9:80:d2:1a:bf:05:de:b4:f2:90:ff:4b:4e:74:cd: 56:39:b6:33:e2:d9:e1:a6:2e:32:80:69:0b:24:ec:01:f1:fe: c8:a5:ee:77:10:39:61:03:d2:6e:e6:c4:95:0c:8e:34:10:a8: ab:5e:68:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxqRa9j8mpZymKHkoJG4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZjBhYmU2ODg3NTQ1MTBiYzk2YzdmMWIxNTk0OTI0Njlm ZGE2YTcwHhcNMjUxMjA1MjMwMDQ3WhcNMjUxMjA2MjMwMDQ3WjAzMTEwLwYDVQQD Eyg2M2Y3MGZjZGVjOWEwOGQwOWFiZTQ1YjE1YTMzY2ZlNzk5MjM2NDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNL6prdAHaucp5i+gf6CbHZLwOIQ Bn73jfcRy0XJ6+x2bKFoWqW/PEP4YpKbw+WDbKWCNgR1Y2PTCyq4SSpACCkaiO1q YRxRmh8KZIRYiXuU/H/jBcOajc4kEFOHXnT28fvMGnAwxr+gCmjpV7L7ZHTBOZpb m/xPjwEM6uGqZekPOIrh936EKMrgr5yRFQvNtvSbUdFqB8vs3AAOGNAUDAXU8xe4 Ql+yZvuUFZ4eu/R+Uf0Er2R99CEbm0zghADImT0gZ3UAst3dl7TjQbyHlvo8HaYR i4YFHrqEg5o4RSeq/0WI/lRhhasl3mbQtW21ozbFUmI0WZx9evdNxk7FwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGP3D83smgjQmr5FsVozz+eZI2RwMB8GA1UdIwQY MBaAFMDwq+aIdUUQvJbH8bFZSSRp/aanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1BDcjVvaDFSUkM4bHNmeHNWbEpKR245cHFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mOGIxYmItYzc0Ny00MTU4LTg3OTIt ODY0MTQxNWViYzgyLzEvd1BDcjVvaDFSUkM4bHNmeHNWbEpKR245cHFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9mOGIxYmItYzc0Ny00MTU4LTg3OTItODY0MTQxNWViYzgy LzEvd1BDcjVvaDFSUkM4bHNmeHNWbEpKR245cHFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATSPNUM1O p9VSZjylUqCuBMdXIJ9KPOKUfAQf0VRTwRqfBnX1PWkHuRl4gKR79rKLCYWJnHup 0lyJEqGBVyMC2wC3zXbjI57VEAL0NEvaPyJsQIk3MBGBWd/P7iFQU0Gdu3nMm6jB /Ic/lNnxgiTPOKPUg9dBgnkdk6+DcgEjKAeJvm0eZBMGlFLnkBTmMIw0nvpoFmgW x8BJYReaDPGZcfgmeKlKVjeVExD1XNuBNKAxd8HZSPxfKvvqyvkoLgXkC0nEj7na LB+wyYDSGr8F3rTykP9LTnTNVjm2M+LZ4aYuMoBpCyTsAfH+yKXudxA5YQPSbubE lQyONBCoq15oDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:16:37 2025 by rpki-client