This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft File: wKqzltZQgmAnwr2KBiByEJIQnik.mft (raw, json) Hash identifier: F5YA2X6c2/2W5tLwZS3AY96lhyKaINX5cv771bU0YZw= Subject key identifier: 74:B1:F9:C7:2C:02:CA:A5:67:43:7D:9E:E6:7D:03:4F:D0:65:CA:BA Authority key identifier: C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29 Certificate issuer: /CN=c0aab396d650826027c2bd8a0620721092109e29 Certificate serial: 019AF61C98F920F0FC616F9B5A43DB2186F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft Manifest number: 0219 Signing time: Sun 07 Dec 2025 00:01:00 +0000 Manifest this update: Sun 07 Dec 2025 00:01:00 +0000 Manifest next update: Mon 08 Dec 2025 00:01:00 +0000 Files and hashes: 1: FQ0Z9CjauF1-N_C29EdkHs_XYtQ.roa (hash: +snXzR2/FfWDx0T5r9Nyn9CPDVn/IvcZNIPrKP0aONw=) 2: wKqzltZQgmAnwr2KBiByEJIQnik.crl (hash: fQ5v1rWQ4y4CmAIyvv5aoaW/w4eQvFXL9u+JLyd2JDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:98:f9:20:f0:fc:61:6f:9b:5a:43:db:21:86:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0aab396d650826027c2bd8a0620721092109e29 Validity Not Before: Dec 7 00:01:00 2025 GMT Not After : Dec 8 00:01:00 2025 GMT Subject: CN=74b1f9c72c02caa567437d9ee67d034fd065caba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:82:19:3d:45:b8:20:f2:d8:bf:bb:e6:1b:b2: 18:4d:d2:7d:15:83:59:75:ee:31:74:59:4e:42:73: a7:7c:8c:31:cd:bd:f9:66:f8:3d:1c:19:87:1f:f2: d8:aa:bb:0e:fc:8e:4e:06:4a:44:99:72:c4:64:44: 65:ab:92:43:24:e9:d4:52:e4:d8:f7:8d:c8:f3:a2: bf:22:d5:94:49:b6:15:80:f4:03:50:77:75:91:1e: fe:4c:a5:d8:ec:35:49:a8:b9:22:80:b4:82:3b:d6: 28:82:de:f4:97:8c:5f:c4:bb:58:a0:ee:11:56:05: ac:53:5f:e5:10:62:51:53:e9:97:e6:01:16:23:bd: 29:8e:25:79:51:05:14:fe:d9:92:92:34:a4:6e:5b: ef:5f:43:88:5e:4e:32:4b:8b:f7:1d:ee:16:62:b9: bb:26:dd:a3:d8:a3:79:1a:a1:ee:14:78:3f:a6:a8: 39:8b:fe:e8:b5:94:e0:6d:ad:41:72:93:0f:1c:09: c1:54:bf:db:1c:ca:a8:d0:f5:c4:9e:0c:3b:df:ce: 68:46:64:86:65:5c:87:dd:80:ec:61:c9:21:2d:93: 51:b4:74:06:f6:12:5a:bd:e4:d5:91:f5:cc:cf:ef: af:69:15:83:dd:ba:0f:4f:e9:f4:62:6a:0b:61:ad: df:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B1:F9:C7:2C:02:CA:A5:67:43:7D:9E:E6:7D:03:4F:D0:65:CA:BA X509v3 Authority Key Identifier: keyid:C0:AA:B3:96:D6:50:82:60:27:C2:BD:8A:06:20:72:10:92:10:9E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKqzltZQgmAnwr2KBiByEJIQnik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d4e06-4faa-49a9-849b-e950699157e1/1/wKqzltZQgmAnwr2KBiByEJIQnik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:ef:8d:88:da:d3:7e:97:03:5b:51:13:98:d2:6b:a8:95:83: 92:d3:91:76:44:0c:13:54:0b:5b:e5:5f:3e:d3:3d:8f:34:8c: 74:0a:86:b1:2c:49:a0:b0:89:f1:ae:96:eb:8a:35:0c:73:2e: 99:f2:5e:9b:39:c7:4d:f9:26:44:df:6e:35:6f:3a:17:26:95: 5b:6c:41:75:0d:11:96:bc:ba:b7:b4:ac:e3:8f:a9:f7:47:b6: 8e:cf:12:f1:1e:a0:f5:b4:f7:34:98:2f:3b:7d:e0:74:ae:1b: b2:75:ae:9e:6c:a7:a7:58:b7:af:e5:52:50:cc:5c:56:bb:88: af:b6:68:5d:93:c7:22:c9:a6:62:80:85:8c:2b:89:4f:74:53: 0d:06:c7:8a:a8:23:fc:86:44:ec:ad:2a:7f:a4:9e:21:83:d4: a3:7a:e7:45:c4:0a:d6:a5:67:04:9c:11:91:d5:5f:f7:b6:50: a3:d6:21:25:24:d1:04:94:02:c5:b6:7e:0f:c7:d9:0a:49:d1: 29:a2:70:82:33:a0:bc:b6:41:14:02:7e:bf:ed:07:f9:9d:77: 3f:7a:c3:f9:b1:2b:60:e6:6b:59:c2:72:21:da:4d:90:48:9e: aa:86:e3:12:e3:eb:97:d4:49:97:9e:b1:ca:ac:cb:5a:22:56: 8f:79:46:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HJj5IPD8YW+bWkPbIYb4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYWFiMzk2ZDY1MDgyNjAyN2MyYmQ4YTA2MjA3MjEwOTIx MDllMjkwHhcNMjUxMjA3MDAwMTAwWhcNMjUxMjA4MDAwMTAwWjAzMTEwLwYDVQQD Eyg3NGIxZjljNzJjMDJjYWE1Njc0MzdkOWVlNjdkMDM0ZmQwNjVjYWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoIZPUW4IPLYv7vmG7IYTdJ9FYNZ de4xdFlOQnOnfIwxzb35Zvg9HBmHH/LYqrsO/I5OBkpEmXLEZERlq5JDJOnUUuTY 943I86K/ItWUSbYVgPQDUHd1kR7+TKXY7DVJqLkigLSCO9Yogt70l4xfxLtYoO4R VgWsU1/lEGJRU+mX5gEWI70pjiV5UQUU/tmSkjSkblvvX0OIXk4yS4v3He4WYrm7 Jt2j2KN5GqHuFHg/pqg5i/7otZTgba1BcpMPHAnBVL/bHMqo0PXEngw7385oRmSG ZVyH3YDsYckhLZNRtHQG9hJaveTVkfXMz++vaRWD3boPT+n0YmoLYa3fKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSx+ccsAsqlZ0N9nuZ9A0/QZcq6MB8GA1UdIwQY MBaAFMCqs5bWUIJgJ8K9igYgchCSEJ4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0txemx0WlFnbUFud3IyS0JpQnlFSklRbmlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xZDRlMDYtNGZhYS00OWE5LTg0OWIt ZTk1MDY5OTE1N2UxLzEvd0txemx0WlFnbUFud3IyS0JpQnlFSklRbmlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8xZDRlMDYtNGZhYS00OWE5LTg0OWItZTk1MDY5OTE1N2Ux LzEvd0txemx0WlFnbUFud3IyS0JpQnlFSklRbmlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACO+NiNrT fpcDW1ETmNJrqJWDktORdkQME1QLW+VfPtM9jzSMdAqGsSxJoLCJ8a6W64o1DHMu mfJemznHTfkmRN9uNW86FyaVW2xBdQ0Rlry6t7Ss44+p90e2js8S8R6g9bT3NJgv O33gdK4bsnWunmynp1i3r+VSUMxcVruIr7ZoXZPHIsmmYoCFjCuJT3RTDQbHiqgj /IZE7K0qf6SeIYPUo3rnRcQK1qVnBJwRkdVf97ZQo9YhJSTRBJQCxbZ+D8fZCknR KaJwgjOgvLZBFAJ+v+0H+Z13P3rD+bErYOZrWcJyIdpNkEieqobjEuPrl9RJl56x yqzLWiJWj3lG+A== -----END CERTIFICATE-----Generated at Sun Dec 7 01:35:27 2025 by rpki-client