This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft File: wMfxuj-ucTZOkysFYNYCxXJd2o4.mft (raw, json) Hash identifier: uKHS47NV0cswQrAjB0ngXgpmUbcWzpz3Jqvh94dvaq8= Subject key identifier: DC:91:42:F7:F6:39:53:8A:FC:E2:24:B0:A2:10:59:8C:B9:8C:1C:50 Authority key identifier: C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E Certificate issuer: /CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e Certificate serial: 019AF2401C1EFA980F09E7DCB05389A4C460 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft Manifest number: 0BDA Signing time: Sat 06 Dec 2025 06:01:18 +0000 Manifest this update: Sat 06 Dec 2025 06:01:18 +0000 Manifest next update: Sun 07 Dec 2025 06:01:18 +0000 Files and hashes: 1: Ts1wD-6dXK6YF6lbWc4Bp6qGGOU.roa (hash: l6AYzjv5b4VOeQIHxSNacHxCFNVxW6gn4dbeXJ7uQKA=) 2: wMfxuj-ucTZOkysFYNYCxXJd2o4.crl (hash: auwVthWBPjozmpmgAet/BdJ1asdgXMargPbhClTJz0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:1c:1e:fa:98:0f:09:e7:dc:b0:53:89:a4:c4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e Validity Not Before: Dec 6 06:01:18 2025 GMT Not After : Dec 7 06:01:18 2025 GMT Subject: CN=dc9142f7f639538afce224b0a210598cb98c1c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:93:b3:68:4a:ac:95:26:9c:c2:f8:87:e1:74: c1:a7:3b:f7:c1:31:7b:58:98:f6:e2:78:09:fb:5d: aa:cf:b9:36:01:b9:49:3b:04:5c:91:12:90:3d:5b: 1e:4b:5a:42:33:75:72:a9:bc:65:01:b9:fe:26:17: f6:d7:e0:dc:3c:bc:69:ad:25:b7:88:3e:61:2f:6f: 13:f1:4f:cc:8d:65:63:96:a9:17:16:b0:ce:1d:e9: 00:6a:36:ed:82:3e:da:9d:4d:5f:1c:29:8a:c0:24: 4b:93:e8:a2:30:f2:5e:5f:a9:32:47:79:78:93:2a: 4b:8f:90:10:6b:0f:05:f5:dc:5a:0b:e8:78:4f:49: 5f:80:e9:c8:26:0e:62:f0:a4:b1:ca:53:b0:f4:e6: a4:07:c5:5d:36:83:71:a5:83:56:e1:f8:7b:78:61: fd:2f:53:69:77:8d:97:06:41:28:3c:0d:2f:05:46: 8c:11:91:7f:cc:62:fe:bd:96:3c:74:aa:25:5d:a0: 27:ff:cd:59:25:6b:1e:9f:14:bc:f9:58:56:c2:8e: d6:22:e4:16:0b:a4:93:ae:f2:20:91:f5:54:71:59: b5:13:0b:1b:6f:0c:1c:8d:57:3b:3f:31:c3:25:59: 53:9f:ad:32:17:2d:d6:5c:ac:82:28:d5:c1:05:29: eb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:91:42:F7:F6:39:53:8A:FC:E2:24:B0:A2:10:59:8C:B9:8C:1C:50 X509v3 Authority Key Identifier: keyid:C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:bf:86:a0:e2:f4:89:7a:a3:79:78:b5:22:34:68:3e:d5:69: b5:04:e9:97:81:36:5f:ef:02:ee:cc:42:c4:86:b9:2e:30:a0: fb:1e:d5:b6:79:12:d0:c9:b3:c6:25:78:c8:33:52:b5:07:14: 0b:0c:a6:af:19:b7:97:c2:d9:0b:7e:c3:4e:08:27:81:d3:cc: 2a:d5:f9:59:77:0d:5f:53:b9:46:af:56:54:77:9c:ca:37:18: 28:84:58:af:0f:a3:c4:18:29:64:0c:60:a2:bd:40:03:c6:73: 2a:ae:2b:81:ef:82:be:8a:c1:67:48:f9:d6:18:0a:7d:8b:f2: c9:86:35:41:8d:e8:1a:7e:6f:00:ea:0f:8a:dc:d6:10:19:4b: 45:f9:a6:9c:f8:35:d0:f6:46:1e:14:0a:81:9f:45:bd:12:d7: ab:d3:7a:e3:d3:32:d7:1d:c6:ef:40:3e:c7:73:00:07:55:c2: 5b:22:74:a3:58:87:1f:dc:63:43:53:60:05:85:47:58:dd:cc: d2:a8:bf:a3:da:35:4e:e1:bb:76:82:34:3e:0c:67:9a:a0:dd: 38:c2:fe:7f:3e:a4:a8:9f:c4:2d:ec:18:d8:c9:24:ee:94:a2: 20:84:08:03:8f:7e:90:9d:d9:5e:bc:43:f7:d7:81:78:5d:45: d0:72:9a:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBwe+pgPCefcsFOJpMRgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYzdmMWJhM2ZhZTcxMzY0ZTkzMmIwNTYwZDYwMmM1NzI1 ZGRhOGUwHhcNMjUxMjA2MDYwMTE4WhcNMjUxMjA3MDYwMTE4WjAzMTEwLwYDVQQD EyhkYzkxNDJmN2Y2Mzk1MzhhZmNlMjI0YjBhMjEwNTk4Y2I5OGMxYzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpOzaEqslSacwviH4XTBpzv3wTF7 WJj24ngJ+12qz7k2AblJOwRckRKQPVseS1pCM3VyqbxlAbn+Jhf21+DcPLxprSW3 iD5hL28T8U/MjWVjlqkXFrDOHekAajbtgj7anU1fHCmKwCRLk+iiMPJeX6kyR3l4 kypLj5AQaw8F9dxaC+h4T0lfgOnIJg5i8KSxylOw9OakB8VdNoNxpYNW4fh7eGH9 L1Npd42XBkEoPA0vBUaMEZF/zGL+vZY8dKolXaAn/81ZJWsenxS8+VhWwo7WIuQW C6STrvIgkfVUcVm1EwsbbwwcjVc7PzHDJVlTn60yFy3WXKyCKNXBBSnr3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNyRQvf2OVOK/OIksKIQWYy5jBxQMB8GA1UdIwQY MBaAFMDH8bo/rnE2TpMrBWDWAsVyXdqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yYzY1OTAtYWIyOS00NmI0LWE2YWUt ZGEzODhiYzM0ZWZiLzEvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yYzY1OTAtYWIyOS00NmI0LWE2YWUtZGEzODhiYzM0ZWZi LzEvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7+GoOL0 iXqjeXi1IjRoPtVptQTpl4E2X+8C7sxCxIa5LjCg+x7VtnkS0MmzxiV4yDNStQcU Cwymrxm3l8LZC37DTggngdPMKtX5WXcNX1O5Rq9WVHecyjcYKIRYrw+jxBgpZAxg or1AA8ZzKq4rge+CvorBZ0j51hgKfYvyyYY1QY3oGn5vAOoPitzWEBlLRfmmnPg1 0PZGHhQKgZ9FvRLXq9N649My1x3G70A+x3MAB1XCWyJ0o1iHH9xjQ1NgBYVHWN3M 0qi/o9o1TuG7doI0PgxnmqDdOML+fz6kqJ/ELewY2Mkk7pSiIIQIA49+kJ3ZXrxD 99eBeF1F0HKagA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:10 2025 by rpki-client