This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft File: weJGTdbQQjCVFffltk6mXAibRhY.mft (raw, json) Hash identifier: X9OLfdLR6Ah2G5vkjbbQtU1WqvPv/mCJzZUWi8jBcU4= Subject key identifier: 7E:1E:D8:EF:03:EA:95:4C:B5:88:48:A8:20:18:04:67:2D:91:11:29 Authority key identifier: C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16 Certificate issuer: /CN=c1e2464dd6d042309515f7e5b64ea65c089b4616 Certificate serial: 019B2F670FDE76BE99E3C6580F187AF11DAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 03:00:41 +0000 Manifest this update: Thu 18 Dec 2025 03:00:41 +0000 Manifest next update: Fri 19 Dec 2025 03:00:41 +0000 Files and hashes: 1: DgGyGbwI_Z-hbBwqBMhZZb6vSwc.roa (hash: YoSjsmqBi7UGbr0YdaEV1pXh33zn8N/CDmlmvP42wg0=) 2: weJGTdbQQjCVFffltk6mXAibRhY.crl (hash: a6K1oDa4FSjth9gMJkvUDYeu4SpAM59mUD4K4gNoHmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:0f:de:76:be:99:e3:c6:58:0f:18:7a:f1:1d:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1e2464dd6d042309515f7e5b64ea65c089b4616 Validity Not Before: Dec 18 03:00:41 2025 GMT Not After : Dec 19 03:00:41 2025 GMT Subject: CN=7e1ed8ef03ea954cb58848a8201804672d911129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7a:53:10:cb:43:46:43:f9:a9:3b:3c:b6:21: 67:59:83:6c:96:7a:8d:5c:f5:82:c6:ef:d3:35:0f: c1:ae:af:25:ac:95:e9:2d:d0:c4:4b:a6:9b:b3:9d: 62:ba:3c:45:e9:a2:a6:67:75:91:f7:b0:3d:36:4f: b1:ec:7c:c1:c4:35:03:3c:97:fa:af:62:ac:ef:af: d5:91:64:f2:65:43:ec:4c:9d:68:10:d0:66:eb:48: 48:10:93:3f:b0:47:31:77:6a:08:f5:f9:7c:3c:8b: 09:6f:d2:e9:0a:6d:96:c7:c3:18:ee:98:83:e0:3c: b0:c9:a7:c1:3d:03:43:af:68:a8:5d:3e:9d:fd:cf: 30:8a:11:51:e7:14:c4:5c:8d:80:c8:65:7d:25:55: 1e:c1:a4:52:e5:40:e9:79:f0:2e:28:7c:9d:84:6e: 77:1d:73:cb:b8:67:78:13:97:49:ff:00:6f:9b:ae: 65:cd:08:cc:16:c8:8c:4f:be:c7:a8:a9:1b:ca:53: b2:cb:93:47:a4:6d:2b:83:d7:dc:97:75:df:86:bd: 39:2f:64:25:4a:74:b8:80:aa:09:e0:3d:7a:1f:63: dc:b0:8c:2e:39:fe:f4:2c:3d:86:c1:86:a6:3a:1c: ee:48:11:12:54:5c:44:e6:03:9b:25:d6:97:ce:f8: ba:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1E:D8:EF:03:EA:95:4C:B5:88:48:A8:20:18:04:67:2D:91:11:29 X509v3 Authority Key Identifier: keyid:C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e7:96:9a:a1:9a:bd:64:8b:dc:59:01:f3:f9:e1:80:ee:60: 0b:1c:c2:89:2f:3d:cd:ea:8d:c4:97:a4:e4:5a:9b:6d:04:c1: f4:13:1f:3c:88:31:d3:17:f5:0c:82:f8:f1:00:f6:cb:fe:03: 24:93:97:d6:45:b5:70:b2:72:86:5b:6e:ea:21:e2:6b:1a:10: 9a:22:0d:9b:82:72:ae:6c:d4:ff:9c:17:7b:3d:a2:22:90:a4: 8b:7c:cf:12:36:e0:a0:8a:b2:61:f4:8b:75:fd:17:ef:d2:c5: 70:0f:b0:71:26:4e:8c:e6:6e:3b:1c:f1:da:cb:fa:63:f7:94: 91:f2:12:23:94:8d:0f:3b:e1:4d:ab:87:a8:73:9c:17:08:9d: 61:73:b8:4f:24:e2:8e:4d:fb:46:2a:2b:e4:80:0f:da:9b:68: a6:0e:b9:6d:73:df:70:9c:62:e8:4d:4c:a1:89:e6:0f:e2:a8: 6d:9c:59:20:8c:9c:6b:2c:e8:fb:5b:5e:b7:7c:ca:09:47:04: d5:2a:5e:3c:8a:c5:2c:29:8c:49:4d:b3:bc:07:a6:e2:6a:c9: 51:f2:72:81:e2:88:1c:a8:fd:60:d4:d7:c8:67:78:9f:b7:56: 39:6c:42:5a:f2:1a:c8:80:c3:b8:1e:77:5a:03:4a:53:86:7e: 4e:40:e7:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZw/edr6Z48ZYDxh68R2rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZTI0NjRkZDZkMDQyMzA5NTE1ZjdlNWI2NGVhNjVjMDg5 YjQ2MTYwHhcNMjUxMjE4MDMwMDQxWhcNMjUxMjE5MDMwMDQxWjAzMTEwLwYDVQQD Eyg3ZTFlZDhlZjAzZWE5NTRjYjU4ODQ4YTgyMDE4MDQ2NzJkOTExMTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnpTEMtDRkP5qTs8tiFnWYNslnqN XPWCxu/TNQ/Brq8lrJXpLdDES6abs51iujxF6aKmZ3WR97A9Nk+x7HzBxDUDPJf6 r2Ks76/VkWTyZUPsTJ1oENBm60hIEJM/sEcxd2oI9fl8PIsJb9LpCm2Wx8MY7piD 4DywyafBPQNDr2ioXT6d/c8wihFR5xTEXI2AyGV9JVUewaRS5UDpefAuKHydhG53 HXPLuGd4E5dJ/wBvm65lzQjMFsiMT77HqKkbylOyy5NHpG0rg9fcl3Xfhr05L2Ql SnS4gKoJ4D16H2PcsIwuOf70LD2GwYamOhzuSBESVFxE5gObJdaXzvi6SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4e2O8D6pVMtYhIqCAYBGctkREpMB8GA1UdIwQY MBaAFMHiRk3W0EIwlRX35bZOplwIm0YWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2VKR1RkYlFRakNWRmZmbHRrNm1YQWliUmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yNTZmYWItZGU5Ny00Njc5LWE0NjUt Yjk2ZDY3MTRhMTc0LzEvd2VKR1RkYlFRakNWRmZmbHRrNm1YQWliUmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yNTZmYWItZGU5Ny00Njc5LWE0NjUtYjk2ZDY3MTRhMTc0 LzEvd2VKR1RkYlFRakNWRmZmbHRrNm1YQWliUmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeeWmqGa vWSL3FkB8/nhgO5gCxzCiS89zeqNxJek5FqbbQTB9BMfPIgx0xf1DIL48QD2y/4D JJOX1kW1cLJyhltu6iHiaxoQmiINm4JyrmzU/5wXez2iIpCki3zPEjbgoIqyYfSL df0X79LFcA+wcSZOjOZuOxzx2sv6Y/eUkfISI5SNDzvhTauHqHOcFwidYXO4TyTi jk37Rior5IAP2ptopg65bXPfcJxi6E1MoYnmD+KobZxZIIycayzo+1tet3zKCUcE 1SpePIrFLCmMSU2zvAem4mrJUfJygeKIHKj9YNTXyGd4n7dWOWxCWvIayIDDuB53 WgNKU4Z+TkDngQ== -----END CERTIFICATE-----Generated at Thu Dec 18 09:31:23 2025 by rpki-client