This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft File: wU7kzo087uI-Amb8r1RIIK5BB4g.mft (raw, json) Hash identifier: bxepn0j/YOtplVXj6GESmbgmPvP8SIHPJbx4fPJuw6I= Subject key identifier: C5:DF:EC:B1:4F:30:E1:A6:B6:5C:8A:C3:11:88:F2:FD:67:CB:A2:87 Authority key identifier: C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88 Certificate issuer: /CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788 Certificate serial: 019AF38977C620FA797BB378F4FDDDF8A3FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft Manifest number: 03BD Signing time: Sat 06 Dec 2025 12:01:03 +0000 Manifest this update: Sat 06 Dec 2025 12:01:03 +0000 Manifest next update: Sun 07 Dec 2025 12:01:03 +0000 Files and hashes: 1: StpUpn9lX23TO-Oe-4PI79KxNG0.roa (hash: Y4gPgVsX/dvV/I4lGCjA++A6e1J5MarmPPrWMNyloHc=) 2: wU7kzo087uI-Amb8r1RIIK5BB4g.crl (hash: z7qwBrLeYfrXcHAdbN2NYaqJ8dx7ykAclVchyX/gTq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:77:c6:20:fa:79:7b:b3:78:f4:fd:dd:f8:a3:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788 Validity Not Before: Dec 6 12:01:03 2025 GMT Not After : Dec 7 12:01:03 2025 GMT Subject: CN=c5dfecb14f30e1a6b65c8ac31188f2fd67cba287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:72:03:d8:c6:c4:d9:45:8d:64:64:e1:f8:56: c5:ae:48:3a:ea:48:b2:69:59:95:6f:da:4f:c9:6e: 25:e5:41:ae:ba:e0:f3:25:43:e5:2b:4c:a2:f5:5c: 98:32:6b:80:dc:42:13:f3:13:a1:eb:46:c2:5c:d4: a7:de:b1:89:41:35:a3:4d:3c:c6:2f:b7:ad:fd:0e: 05:f2:a9:18:9c:a8:91:d6:29:13:48:0d:50:f2:27: 45:37:e8:2b:10:ab:93:ea:16:d8:9f:2e:24:24:d0: 68:2c:9c:f1:02:12:e5:db:69:43:0b:87:12:ca:e0: 9a:3e:89:fd:83:0a:27:aa:ce:a1:0e:82:4f:9c:e5: 34:7a:51:82:9d:66:bd:a6:3a:f6:a1:94:11:9e:b5: af:9f:06:ea:cf:b2:59:57:8e:62:fe:63:c9:55:58: 0a:21:2c:34:f7:93:38:cd:b7:52:6e:3c:33:12:3a: 32:16:35:5a:a3:f7:5e:c5:80:14:77:1d:b7:13:58: 92:41:c4:74:ac:83:6a:b6:c0:4f:46:c5:da:3c:af: dc:e4:f5:f1:b1:fe:59:2a:29:f4:51:cd:df:c3:6e: bb:dc:95:73:7b:97:62:bb:28:b2:3c:47:0f:72:18: c3:af:e5:26:46:1f:64:5f:6e:b6:83:8c:db:be:82: c9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DF:EC:B1:4F:30:E1:A6:B6:5C:8A:C3:11:88:F2:FD:67:CB:A2:87 X509v3 Authority Key Identifier: keyid:C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:1c:f4:e3:e2:9e:47:cc:71:33:e2:86:60:d2:64:cc:6d:0a: 47:00:0a:de:59:41:fc:e8:33:b4:ab:63:4f:1f:51:97:e3:f1: ab:34:c7:56:88:c1:4c:21:4b:40:56:ab:f3:80:09:5e:37:58: 5d:93:b7:c8:f9:90:38:51:b5:57:2f:ed:4d:29:68:e3:1b:cf: 9e:9d:82:62:dc:c8:64:a8:43:31:36:6c:38:87:ea:6f:ab:25: 7f:65:95:b8:ac:bd:02:2b:12:0b:8e:5f:57:db:23:4d:3f:9f: f6:6a:4e:e8:50:16:93:15:26:11:71:90:be:86:57:b3:82:25: f3:2a:31:f8:a2:f1:ce:40:f8:6e:de:7e:d1:eb:44:bf:c5:d8: 78:6d:36:5b:57:e3:26:36:03:5a:8e:42:98:86:a7:fb:78:92: 38:07:4b:a7:c3:0f:54:57:dd:c9:f5:9a:1d:49:02:c0:ad:cc: fa:76:76:c8:ca:5b:f0:fe:00:76:61:63:a0:61:00:9c:d2:7d: 07:3d:0c:11:7c:4f:32:93:dd:3f:11:6a:c9:bf:51:2e:81:52: b1:ca:37:0c:6b:cf:a0:1c:ee:08:79:70:6a:3d:f6:59:58:99: 99:fd:37:ca:c7:66:28:63:0e:fe:2f:d0:98:80:eb:f5:97:9a: 18:4d:12:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziXfGIPp5e7N49P3d+KP7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNGVlNGNlOGQzY2VlZTIzZTAyNjZmY2FmNTQ0ODIwYWU0 MTA3ODgwHhcNMjUxMjA2MTIwMTAzWhcNMjUxMjA3MTIwMTAzWjAzMTEwLwYDVQQD EyhjNWRmZWNiMTRmMzBlMWE2YjY1YzhhYzMxMTg4ZjJmZDY3Y2JhMjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHID2MbE2UWNZGTh+FbFrkg66kiy aVmVb9pPyW4l5UGuuuDzJUPlK0yi9VyYMmuA3EIT8xOh60bCXNSn3rGJQTWjTTzG L7et/Q4F8qkYnKiR1ikTSA1Q8idFN+grEKuT6hbYny4kJNBoLJzxAhLl22lDC4cS yuCaPon9gwonqs6hDoJPnOU0elGCnWa9pjr2oZQRnrWvnwbqz7JZV45i/mPJVVgK ISw095M4zbdSbjwzEjoyFjVao/dexYAUdx23E1iSQcR0rINqtsBPRsXaPK/c5PXx sf5ZKin0Uc3fw2673JVze5diuyiyPEcPchjDr+UmRh9kX262g4zbvoLJowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXf7LFPMOGmtlyKwxGI8v1ny6KHMB8GA1UdIwQY MBaAFMFO5M6NPO7iPgJm/K9USCCuQQeIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1U3a3pvMDg3dUktQW1iOHIxUklJSzVCQjRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wMGEyZmMtYzg3Mi00NGY2LTljZTQt NDg0MzgyMDJkYmFiLzEvd1U3a3pvMDg3dUktQW1iOHIxUklJSzVCQjRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8wMGEyZmMtYzg3Mi00NGY2LTljZTQtNDg0MzgyMDJkYmFi LzEvd1U3a3pvMDg3dUktQW1iOHIxUklJSzVCQjRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThz04+Ke R8xxM+KGYNJkzG0KRwAK3llB/OgztKtjTx9Rl+PxqzTHVojBTCFLQFar84AJXjdY XZO3yPmQOFG1Vy/tTSlo4xvPnp2CYtzIZKhDMTZsOIfqb6slf2WVuKy9AisSC45f V9sjTT+f9mpO6FAWkxUmEXGQvoZXs4Il8yox+KLxzkD4bt5+0etEv8XYeG02W1fj JjYDWo5CmIan+3iSOAdLp8MPVFfdyfWaHUkCwK3M+nZ2yMpb8P4AdmFjoGEAnNJ9 Bz0MEXxPMpPdPxFqyb9RLoFSsco3DGvPoBzuCHlwaj32WViZmf03ysdmKGMO/i/Q mIDr9ZeaGE0SFg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:47 2025 by rpki-client