This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft File: wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft (raw, json) Hash identifier: iChX/76Gn/Fwm7MuqLuqa3i2w4znPzdNc10aOaKm9/Q= Subject key identifier: 3C:0F:58:47:71:D3:98:22:2A:31:00:02:D4:CC:62:1A:80:AF:C5:93 Authority key identifier: C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08 Certificate issuer: /CN=c14d63d39707d45a8c683cb52e47171d136ce508 Certificate serial: 019AF2764ACF1DD1B76C9B68014B872DB7E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft Manifest number: 1034 Signing time: Sat 06 Dec 2025 07:00:29 +0000 Manifest this update: Sat 06 Dec 2025 07:00:29 +0000 Manifest next update: Sun 07 Dec 2025 07:00:29 +0000 Files and hashes: 1: VWUmt1-Lc9mwWkzpXFUMDbb2UqE.roa (hash: Tjmb/lxEFBxZz68PrILtJGnl1lSlmzqzB3RT5UoyTR8=) 2: wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl (hash: a1xOTyOMgoM113ZdiEcLakwmWcOwo8dt23LJl7bs9pA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:4a:cf:1d:d1:b7:6c:9b:68:01:4b:87:2d:b7:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c14d63d39707d45a8c683cb52e47171d136ce508 Validity Not Before: Dec 6 07:00:29 2025 GMT Not After : Dec 7 07:00:29 2025 GMT Subject: CN=3c0f584771d398222a310002d4cc621a80afc593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:11:e8:be:d0:7e:ff:2d:2a:86:93:09:13:76: 5c:74:7d:53:e6:e2:3e:15:67:d8:4c:54:07:61:96: 83:a8:ee:0d:bd:eb:80:64:6a:0d:33:7d:1d:1a:74: 89:f3:b5:78:20:84:1b:3a:32:93:be:a9:98:2f:65: e5:c4:29:54:f6:5c:2c:ff:3f:0f:ec:3a:15:5e:5c: 80:92:97:07:58:83:aa:c2:25:c9:4a:36:35:c0:b2: 05:35:52:87:81:78:72:8e:e9:7d:06:d6:90:a3:a2: 46:52:3a:d2:69:1a:c8:84:4f:23:58:f0:96:49:9a: ea:48:2b:4d:14:06:0c:03:4e:45:7a:51:33:c4:f3: 3e:43:2d:35:d0:98:be:3e:4d:13:f0:db:f9:56:18: a6:11:58:7c:47:53:b3:a9:35:4b:7a:8c:cf:56:ef: 12:7e:e9:6d:f2:0b:e0:cb:96:30:4b:f0:04:b1:a6: 0b:47:ad:5c:9d:d5:4f:73:25:05:f2:54:03:84:50: c3:94:cf:fa:c4:59:b8:5b:00:de:b2:c4:2f:13:fb: c2:9d:73:04:22:2d:8e:66:44:d6:ed:d5:e3:5d:b7: ba:25:96:38:9b:5b:69:5b:8f:61:a3:35:1e:9c:21: 25:39:8b:0c:37:4f:70:98:d8:89:62:52:97:81:76: 89:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0F:58:47:71:D3:98:22:2A:31:00:02:D4:CC:62:1A:80:AF:C5:93 X509v3 Authority Key Identifier: keyid:C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:60:02:db:fb:c2:3b:57:38:3a:1e:cc:d2:9f:fa:88:5c:e5: cd:c5:9c:fd:74:6b:76:9d:b8:72:4d:46:cc:52:ac:a6:fa:38: 73:2f:f7:70:87:ff:56:74:57:80:f3:bd:53:e0:d7:34:00:7b: b7:5a:28:e0:4c:6a:c4:dc:de:08:d4:30:c5:d7:9b:c5:ca:cd: 7f:fc:ea:12:aa:6b:24:78:3b:98:41:a6:54:75:32:a6:5d:37: d3:89:2e:c8:4e:0e:56:24:b9:e6:e6:7c:f4:d5:77:de:d6:b5: dc:f7:50:0b:83:88:db:78:ce:27:01:e1:22:7b:5e:8d:a5:96: ba:ec:ae:03:74:bd:5e:6d:60:9d:74:0a:84:3b:44:ae:a2:c6: 32:56:e9:a0:80:3a:aa:4e:fa:69:3d:d3:27:35:c1:71:f1:1a: 55:2e:ed:06:43:73:5f:e0:3f:be:50:b0:8c:2d:f1:08:ca:82: c8:d7:9f:3c:7f:33:aa:41:fe:2b:6b:b1:24:73:5f:1e:6b:40: 74:e4:f3:4f:74:ee:f2:30:50:e2:b9:0f:9c:f9:55:63:53:65: 7b:c1:cf:6f:87:b6:25:cc:8d:3a:b2:a1:9a:1a:83:ee:cf:9b: 64:07:15:60:8d:ad:d1:fe:ba:ce:96:2e:39:0e:76:d7:61:e0: 31:25:35:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydkrPHdG3bJtoAUuHLbfkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNGQ2M2QzOTcwN2Q0NWE4YzY4M2NiNTJlNDcxNzFkMTM2 Y2U1MDgwHhcNMjUxMjA2MDcwMDI5WhcNMjUxMjA3MDcwMDI5WjAzMTEwLwYDVQQD EygzYzBmNTg0NzcxZDM5ODIyMmEzMTAwMDJkNGNjNjIxYTgwYWZjNTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxHovtB+/y0qhpMJE3ZcdH1T5uI+ FWfYTFQHYZaDqO4NveuAZGoNM30dGnSJ87V4IIQbOjKTvqmYL2XlxClU9lws/z8P 7DoVXlyAkpcHWIOqwiXJSjY1wLIFNVKHgXhyjul9BtaQo6JGUjrSaRrIhE8jWPCW SZrqSCtNFAYMA05FelEzxPM+Qy010Ji+Pk0T8Nv5VhimEVh8R1OzqTVLeozPVu8S fult8gvgy5YwS/AEsaYLR61cndVPcyUF8lQDhFDDlM/6xFm4WwDessQvE/vCnXME Ii2OZkTW7dXjXbe6JZY4m1tpW49hozUenCElOYsMN09wmNiJYlKXgXaJFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwPWEdx05giKjEAAtTMYhqAr8WTMB8GA1UdIwQY MBaAFMFNY9OXB9RajGg8tS5HFx0TbOUIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1UxajA1Y0gxRnFNYUR5MUxrY1hIUk5zNVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xNDhjNmMtYmExMC00M2EzLTg0ODIt NWExZGFhOTRkZTQyLzEvd1UxajA1Y0gxRnFNYUR5MUxrY1hIUk5zNVFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xNDhjNmMtYmExMC00M2EzLTg0ODItNWExZGFhOTRkZTQy LzEvd1UxajA1Y0gxRnFNYUR5MUxrY1hIUk5zNVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmAC2/vC O1c4Oh7M0p/6iFzlzcWc/XRrdp24ck1GzFKspvo4cy/3cIf/VnRXgPO9U+DXNAB7 t1oo4ExqxNzeCNQwxdebxcrNf/zqEqprJHg7mEGmVHUypl0304kuyE4OViS55uZ8 9NV33ta13PdQC4OI23jOJwHhIntejaWWuuyuA3S9Xm1gnXQKhDtErqLGMlbpoIA6 qk76aT3TJzXBcfEaVS7tBkNzX+A/vlCwjC3xCMqCyNefPH8zqkH+K2uxJHNfHmtA dOTzT3Tu8jBQ4rkPnPlVY1Nle8HPb4e2JcyNOrKhmhqD7s+bZAcVYI2t0f66zpYu OQ5212HgMSU19Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:29 2025 by rpki-client