This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft File: wFlbbIrobPkGmro-um3fKmgjfwg.mft (raw, json) Hash identifier: dbSYKCjNSNPf+cWCki/F0HVB0jiuHHV3eWjvBf9Fn5Y= Subject key identifier: D8:21:E3:9C:93:12:60:91:DE:15:F8:C8:ED:10:D8:A3:48:E2:73:99 Authority key identifier: C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08 Certificate issuer: /CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08 Certificate serial: 019AF23FDC4B23C50D3D5FD9FFCD09F2AE10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft Manifest number: 070D Signing time: Sat 06 Dec 2025 06:01:02 +0000 Manifest this update: Sat 06 Dec 2025 06:01:02 +0000 Manifest next update: Sun 07 Dec 2025 06:01:02 +0000 Files and hashes: 1: 8UgkBAZONepNyI81FukUfi25Kao.roa (hash: rpUHlCnR+nUi3dHMj1nsfDs3V156wUfOtUa+u9zdDrQ=) 2: wFlbbIrobPkGmro-um3fKmgjfwg.crl (hash: xBD4rLmXuw71r591JrVeNj8xT8t2DLC14Dk7Cn88dkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:dc:4b:23:c5:0d:3d:5f:d9:ff:cd:09:f2:ae:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08 Validity Not Before: Dec 6 06:01:02 2025 GMT Not After : Dec 7 06:01:02 2025 GMT Subject: CN=d821e39c93126091de15f8c8ed10d8a348e27399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:13:40:a9:0e:13:fd:2d:92:b7:cd:2c:ab:cb: 4c:ed:d7:44:e7:f2:11:ec:e1:b9:5d:8c:3f:3f:fe: 49:92:d3:64:c4:31:57:4f:0c:10:fe:f1:7f:d9:be: ea:fb:6e:2a:99:1d:84:ec:70:f5:70:c9:d6:48:68: 45:84:7e:e8:55:f8:cc:ef:5c:09:99:7e:ae:b2:dd: 6f:59:dd:2c:5f:e4:7d:08:c6:91:e9:15:31:a7:c0: 2c:83:4e:23:21:42:55:df:0b:3f:be:fb:d8:4b:35: 9a:28:f5:e1:5b:97:b2:f6:50:11:0b:3d:66:4d:47: fd:74:e4:e9:04:26:f8:0f:29:d4:a1:33:ce:ec:b9: b4:51:c9:0c:bd:52:b4:60:d3:92:d0:71:88:5e:e4: 35:44:b0:51:71:c8:ae:ec:c2:b1:5a:df:50:52:6c: e4:59:79:6c:2a:a8:e7:a9:47:b3:fc:95:15:0a:1b: e2:b1:68:fc:8b:41:ce:9c:eb:fd:2f:bf:85:36:f3: b1:73:d7:2b:dd:d4:23:0e:fc:48:f0:11:5d:8f:b3: 26:6a:d4:b7:2e:95:28:b6:ba:d5:71:22:f8:a5:a5: 08:33:85:55:d0:9c:36:9e:a6:00:7c:4d:c9:49:b9: 88:9c:84:95:4d:7b:f1:ec:25:a8:fb:28:08:2a:35: 08:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:21:E3:9C:93:12:60:91:DE:15:F8:C8:ED:10:D8:A3:48:E2:73:99 X509v3 Authority Key Identifier: keyid:C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:bf:2c:e3:8e:8b:d9:68:01:97:e5:db:fb:0c:5c:88:a0:56: f6:f5:4d:d1:47:6d:3e:b9:5c:16:b0:a8:c7:96:0a:2e:ca:96: 5d:37:79:22:6c:de:96:de:a7:af:b3:0a:f7:cf:82:aa:5e:e1: ad:62:a2:aa:23:5a:ce:48:ef:6d:c0:c5:65:c1:7b:f8:30:68: 60:c9:a6:8a:e4:ee:2b:40:6a:e2:cb:b4:78:86:3c:72:96:2d: 96:91:16:2a:5b:bc:39:a3:ed:7e:9e:89:49:ef:b2:c4:e9:60: 5b:cd:57:d4:db:f1:d0:f2:34:d3:37:6f:57:49:91:71:44:0c: e0:81:55:34:51:94:22:01:17:2e:7a:4b:ad:a0:36:4f:9d:ef: 86:0a:0e:62:0e:31:01:ca:d7:44:0b:c5:f3:96:38:65:d4:10: 2d:5e:68:cb:9b:1e:1f:0b:8d:46:fe:ad:ab:c3:f7:ae:8c:17: e0:ff:31:ae:07:d7:8b:ed:8b:63:c4:1b:c3:96:a0:cb:fb:3b: 2e:50:1b:71:17:62:14:2c:fc:98:0e:9c:43:1f:77:d4:41:e7: c2:4f:31:88:01:c1:bb:45:15:a3:a8:04:51:74:cf:f1:c5:58: 0f:34:85:8a:73:b6:61:fe:20:9b:37:21:52:8a:0b:32:5c:f1: 65:9d:63:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9xLI8UNPV/Z/80J8q4QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNTk1YjZjOGFlODZjZjkwNjlhYmEzZWJhNmRkZjJhNjgy MzdmMDgwHhcNMjUxMjA2MDYwMTAyWhcNMjUxMjA3MDYwMTAyWjAzMTEwLwYDVQQD EyhkODIxZTM5YzkzMTI2MDkxZGUxNWY4YzhlZDEwZDhhMzQ4ZTI3Mzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRNAqQ4T/S2St80sq8tM7ddE5/IR 7OG5XYw/P/5JktNkxDFXTwwQ/vF/2b7q+24qmR2E7HD1cMnWSGhFhH7oVfjM71wJ mX6ust1vWd0sX+R9CMaR6RUxp8Asg04jIUJV3ws/vvvYSzWaKPXhW5ey9lARCz1m TUf9dOTpBCb4DynUoTPO7Lm0UckMvVK0YNOS0HGIXuQ1RLBRcciu7MKxWt9QUmzk WXlsKqjnqUez/JUVChvisWj8i0HOnOv9L7+FNvOxc9cr3dQjDvxI8BFdj7MmatS3 LpUotrrVcSL4paUIM4VV0Jw2nqYAfE3JSbmInISVTXvx7CWo+ygIKjUIoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgh45yTEmCR3hX4yO0Q2KNI4nOZMB8GA1UdIwQY MBaAFMBZW2yK6Gz5Bpq6Prpt3ypoI38IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0ZsYmJJcm9iUGtHbXJvLXVtM2ZLbWdqZndnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hOWJmYjUtMTYyZC00YzdlLWI3MDAt MTkxYjJhZTNmYTVhLzEvd0ZsYmJJcm9iUGtHbXJvLXVtM2ZLbWdqZndnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hOWJmYjUtMTYyZC00YzdlLWI3MDAtMTkxYjJhZTNmYTVh LzEvd0ZsYmJJcm9iUGtHbXJvLXVtM2ZLbWdqZndnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbb8s446L 2WgBl+Xb+wxciKBW9vVN0UdtPrlcFrCox5YKLsqWXTd5Imzelt6nr7MK98+Cql7h rWKiqiNazkjvbcDFZcF7+DBoYMmmiuTuK0Bq4su0eIY8cpYtlpEWKlu8OaPtfp6J Se+yxOlgW81X1Nvx0PI00zdvV0mRcUQM4IFVNFGUIgEXLnpLraA2T53vhgoOYg4x AcrXRAvF85Y4ZdQQLV5oy5seHwuNRv6tq8P3rowX4P8xrgfXi+2LY8Qbw5agy/s7 LlAbcRdiFCz8mA6cQx931EHnwk8xiAHBu0UVo6gEUXTP8cVYDzSFinO2Yf4gmzch UooLMlzxZZ1jIw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:40 2025 by rpki-client