This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft File: wuP6h-sxaafS3XRFMoMCGicDx2k.mft (raw, json) Hash identifier: w6WfXAGqkKfgmAY6JsE8PVKDsOOWQlnF+xmHaXm4T30= Subject key identifier: A5:5E:32:42:46:6D:EE:55:34:24:6E:0B:0A:78:61:37:90:F3:BB:F1 Authority key identifier: C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69 Certificate issuer: /CN=c2e3fa87eb3169a7d2dd74453283021a2703c769 Certificate serial: 019AF2AD431C3FD10979DC2F6F6F684B875A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 08:00:32 +0000 Manifest this update: Sat 06 Dec 2025 08:00:32 +0000 Manifest next update: Sun 07 Dec 2025 08:00:32 +0000 Files and hashes: 1: UQeJyG9BAYXx7MdsdkPbT5nATwI.roa (hash: hKLTaUlMIPTXFfDFectFLlcV0ReJ/iVzU3RYDLItnvI=) 2: wuP6h-sxaafS3XRFMoMCGicDx2k.crl (hash: qJpkKBuuu/qi7cSBZ20F+9KZnaddfzplv9P/jTFPLpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:43:1c:3f:d1:09:79:dc:2f:6f:6f:68:4b:87:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2e3fa87eb3169a7d2dd74453283021a2703c769 Validity Not Before: Dec 6 08:00:32 2025 GMT Not After : Dec 7 08:00:32 2025 GMT Subject: CN=a55e3242466dee5534246e0b0a78613790f3bbf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0a:9d:4f:57:d8:83:a7:62:24:de:95:9a:17: 6a:be:9b:be:db:dc:12:0c:cc:17:b0:a8:76:ac:f5: ea:6e:87:d0:01:42:a8:a6:81:18:ad:87:01:5d:97: 96:cd:67:3f:12:8c:57:64:42:fa:a9:85:1d:0e:9a: 62:86:35:94:08:c5:6b:94:39:1a:8d:a6:54:3c:bd: 8f:1f:61:02:b3:bf:c4:ba:bc:a6:fe:7c:a8:62:7c: 37:79:65:1f:c4:a3:75:47:0d:4e:31:5c:bd:97:97: 02:1d:07:1e:bf:a5:d6:85:e9:f0:2a:83:e0:16:1f: 96:6b:a4:23:4d:e1:79:f1:10:95:1d:32:30:17:4f: bc:3a:9f:d7:1b:8c:60:86:19:ba:cc:30:9d:70:24: ab:2a:b0:75:41:32:bc:98:25:d1:39:58:ea:78:77: 3f:d3:71:63:00:9e:4c:7c:76:82:c0:95:99:f0:8e: a7:8f:ff:09:8e:be:8f:5f:fe:2e:84:20:15:67:0d: 3c:25:ae:e8:a8:28:54:a1:d4:45:b0:b8:75:62:68: a0:3f:3b:81:bf:93:f5:9b:cb:67:86:50:57:7b:ee: da:ba:f8:4e:ec:86:ca:7e:a6:f3:09:ec:ac:ae:4b: cf:be:5d:93:92:04:fe:fa:a3:50:5b:30:8c:83:be: ad:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5E:32:42:46:6D:EE:55:34:24:6E:0B:0A:78:61:37:90:F3:BB:F1 X509v3 Authority Key Identifier: keyid:C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:26:b8:a1:42:bf:52:08:3e:60:ee:5b:50:6b:45:50:f7:a7: 5d:90:67:8e:4d:fc:43:aa:03:9a:ad:c6:b9:12:57:50:39:4d: 05:cd:21:db:af:ce:f8:65:e6:a0:3c:6c:79:28:f4:3e:9e:fb: 82:92:f0:a0:13:36:3b:64:39:5d:1e:96:ba:8c:27:b9:92:98: 90:68:73:b4:eb:0a:61:5f:3d:9a:8b:3a:5b:d4:46:9f:14:4f: 60:e6:ea:8b:cb:da:6a:42:55:90:a5:0d:1a:93:78:6d:ac:51: 5d:33:70:ff:8c:51:61:3c:df:46:3b:68:94:85:d1:1f:84:3a: 22:5c:96:21:44:30:c5:39:6b:33:8d:d6:5b:be:65:32:72:bf: 54:4f:ff:db:7e:d8:5a:ed:44:d2:d8:2d:69:52:48:d5:7d:a8: e8:a5:7c:f5:09:b6:70:20:51:c6:4f:5a:4f:2f:04:b2:d9:b0: d7:dd:aa:ba:cc:04:9f:76:36:1c:1a:31:30:46:ea:68:b1:25: 0c:42:a0:11:89:c1:d6:20:e8:6b:80:f2:5e:31:11:4f:8d:fd: fe:be:95:bc:fd:97:7c:c9:4f:97:1f:98:a4:27:6c:5e:82:7f: 81:fd:a0:73:a0:38:ed:9f:37:b2:b1:bf:f0:92:ef:d2:c0:02: 02:1a:58:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrUMcP9EJedwvb29oS4daMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZTNmYTg3ZWIzMTY5YTdkMmRkNzQ0NTMyODMwMjFhMjcw M2M3NjkwHhcNMjUxMjA2MDgwMDMyWhcNMjUxMjA3MDgwMDMyWjAzMTEwLwYDVQQD EyhhNTVlMzI0MjQ2NmRlZTU1MzQyNDZlMGIwYTc4NjEzNzkwZjNiYmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gqdT1fYg6diJN6Vmhdqvpu+29wS DMwXsKh2rPXqbofQAUKopoEYrYcBXZeWzWc/EoxXZEL6qYUdDppihjWUCMVrlDka jaZUPL2PH2ECs7/Eurym/nyoYnw3eWUfxKN1Rw1OMVy9l5cCHQcev6XWhenwKoPg Fh+Wa6QjTeF58RCVHTIwF0+8Op/XG4xghhm6zDCdcCSrKrB1QTK8mCXROVjqeHc/ 03FjAJ5MfHaCwJWZ8I6nj/8Jjr6PX/4uhCAVZw08Ja7oqChUodRFsLh1YmigPzuB v5P1m8tnhlBXe+7auvhO7IbKfqbzCeysrkvPvl2TkgT++qNQWzCMg76tNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVeMkJGbe5VNCRuCwp4YTeQ87vxMB8GA1UdIwQY MBaAFMLj+ofrMWmn0t10RTKDAhonA8dpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85OWJhMjAtOWJiNy00MTcxLWFmNTYt ZGZlNTY2NDExMDE2LzEvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi85OWJhMjAtOWJiNy00MTcxLWFmNTYtZGZlNTY2NDExMDE2 LzEvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSa4oUK/ Ugg+YO5bUGtFUPenXZBnjk38Q6oDmq3GuRJXUDlNBc0h26/O+GXmoDxseSj0Pp77 gpLwoBM2O2Q5XR6WuownuZKYkGhztOsKYV89mos6W9RGnxRPYObqi8vaakJVkKUN GpN4baxRXTNw/4xRYTzfRjtolIXRH4Q6IlyWIUQwxTlrM43WW75lMnK/VE//237Y Wu1E0tgtaVJI1X2o6KV89Qm2cCBRxk9aTy8Estmw192quswEn3Y2HBoxMEbqaLEl DEKgEYnB1iDoa4DyXjERT439/r6VvP2XfMlPlx+YpCdsXoJ/gf2gc6A47Z83srG/ 8JLv0sACAhpYzg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:22:51 2025 by rpki-client