This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft File: WueVPpRZ3AlIbw3cWfKkBbVmklA.mft (raw, json) Hash identifier: k3Yf6ITe3KkpETG3uRmuBPQS7HWtBMOwKfNvvZqx5hk= Subject key identifier: 7D:25:D7:D9:6E:EA:81:3F:E1:40:76:06:22:B0:49:85:77:04:8D:DF Authority key identifier: 5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50 Certificate issuer: /CN=5ae7953e9459dc09486f0ddc59f2a405b5669250 Certificate serial: 019B2B8B053CD072330505228D7962D5B3D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft Manifest number: 16E6 Signing time: Wed 17 Dec 2025 09:01:29 +0000 Manifest this update: Wed 17 Dec 2025 09:01:29 +0000 Manifest next update: Thu 18 Dec 2025 09:01:29 +0000 Files and hashes: 1: DBk26ni3rWAWrcHCnCAPZ2xkK4Q.roa (hash: Qk/2nxHHAgzzRwHK2tRfQQjLdz8MwTUa/j75IBrERBE=) 2: WueVPpRZ3AlIbw3cWfKkBbVmklA.crl (hash: bGpdGdwltMIlTT1AJHBYfIjvTmNHX/0aV7cGGTJSanE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8b:05:3c:d0:72:33:05:05:22:8d:79:62:d5:b3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ae7953e9459dc09486f0ddc59f2a405b5669250 Validity Not Before: Dec 17 09:01:29 2025 GMT Not After : Dec 18 09:01:29 2025 GMT Subject: CN=7d25d7d96eea813fe140760622b0498577048ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:f7:e5:c9:38:7d:da:3e:27:71:57:50:9d: ea:5d:7e:62:90:9a:63:e1:56:8b:e8:40:fe:20:19: d2:75:c8:a1:e6:dc:61:4d:af:39:d3:f2:da:ea:d2: 02:38:10:32:c6:7c:a8:8d:47:e0:dd:ac:4d:0c:dc: e2:4c:49:b7:0d:0c:e4:0d:f9:ca:72:fb:d7:90:6f: b6:10:3c:65:5c:b6:eb:af:79:92:67:a8:67:39:a0: c0:8f:56:08:68:cd:9e:dd:49:29:75:7d:3c:76:18: c8:78:2e:cb:12:08:d4:1f:ff:ad:1a:32:31:1f:3b: 56:a9:bf:2a:03:4e:a1:99:ab:33:4d:e6:b7:cd:4e: 2f:67:41:f3:42:6d:fe:04:8b:94:d5:b9:36:85:5a: f2:71:89:ff:ab:49:80:cd:92:d3:35:98:66:49:29: 5d:d9:b7:d6:18:26:a7:26:80:e1:61:4c:62:3b:20: 4b:6b:03:3c:cb:df:f0:a7:e5:9b:93:f0:39:14:74: b4:03:0e:53:52:13:62:ac:f4:b7:8f:19:9c:02:fb: 65:ba:c7:63:3c:0b:64:40:9a:f4:58:36:8d:49:76: 79:19:37:05:f5:d0:01:ab:bc:35:30:6c:56:d4:a9: b6:31:4f:27:0b:62:e0:64:c1:17:fd:5e:fe:7a:36: 24:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:25:D7:D9:6E:EA:81:3F:E1:40:76:06:22:B0:49:85:77:04:8D:DF X509v3 Authority Key Identifier: keyid:5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:36:b1:61:96:02:06:de:17:bb:97:88:17:fd:dc:93:dd:ce: 38:ee:3d:7c:fe:8d:53:9c:82:03:8c:57:f9:a3:02:dd:bf:14: 25:70:61:72:44:dd:55:1a:da:15:a5:17:97:88:6f:3b:24:fe: a8:bf:8a:b9:fd:cc:3a:8f:eb:83:85:7f:a5:bd:8f:ce:b6:bd: 10:77:4d:8a:8d:66:92:c7:4d:2c:42:3c:ec:0a:cc:b6:2b:1e: 0c:d7:40:b2:bc:46:d0:0d:cc:08:1c:3d:e9:da:7c:4f:a3:42: 37:cf:ac:5e:2c:03:bb:0d:6e:97:a6:93:af:e0:bf:73:87:c6: a9:cb:59:b7:aa:a3:c8:60:a3:9a:17:ac:33:b2:92:b6:15:fe: d4:42:62:18:c6:d5:d4:47:ab:a8:9d:97:64:73:ac:53:e8:13: 16:61:ae:cf:d1:a7:69:e0:03:d6:1a:23:f7:ff:2c:9c:15:cc: 46:2a:31:02:8e:28:5e:03:93:1b:7b:8b:f3:b6:fc:70:25:59: 5b:83:98:d2:b6:2e:38:73:a2:ed:07:9a:01:4a:68:67:ab:d7: fe:69:57:7d:90:fe:5b:f9:fd:46:5c:ae:c7:43:81:74:52:74: f4:29:c6:4c:90:83:83:7b:a1:79:f3:06:dd:de:95:55:83:53: 81:61:58:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriwU80HIzBQUijXli1bPQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZTc5NTNlOTQ1OWRjMDk0ODZmMGRkYzU5ZjJhNDA1YjU2 NjkyNTAwHhcNMjUxMjE3MDkwMTI5WhcNMjUxMjE4MDkwMTI5WjAzMTEwLwYDVQQD Eyg3ZDI1ZDdkOTZlZWE4MTNmZTE0MDc2MDYyMmIwNDk4NTc3MDQ4ZGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfn35ck4fdo+J3FXUJ3qXX5ikJpj 4VaL6ED+IBnSdcih5txhTa850/La6tICOBAyxnyojUfg3axNDNziTEm3DQzkDfnK cvvXkG+2EDxlXLbrr3mSZ6hnOaDAj1YIaM2e3UkpdX08dhjIeC7LEgjUH/+tGjIx HztWqb8qA06hmaszTea3zU4vZ0HzQm3+BIuU1bk2hVrycYn/q0mAzZLTNZhmSSld 2bfWGCanJoDhYUxiOyBLawM8y9/wp+Wbk/A5FHS0Aw5TUhNirPS3jxmcAvtlusdj PAtkQJr0WDaNSXZ5GTcF9dABq7w1MGxW1Km2MU8nC2LgZMEX/V7+ejYkRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0l19lu6oE/4UB2BiKwSYV3BI3fMB8GA1UdIwQY MBaAFFrnlT6UWdwJSG8N3FnypAW1ZpJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zYzI2NzYtOTI0NS00YjNjLWJiN2Yt OGEyOTEyMDc1MGJmLzEvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zYzI2NzYtOTI0NS00YjNjLWJiN2YtOGEyOTEyMDc1MGJm LzEvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzaxYZYC Bt4Xu5eIF/3ck93OOO49fP6NU5yCA4xX+aMC3b8UJXBhckTdVRraFaUXl4hvOyT+ qL+Kuf3MOo/rg4V/pb2Pzra9EHdNio1mksdNLEI87ArMtiseDNdAsrxG0A3MCBw9 6dp8T6NCN8+sXiwDuw1ul6aTr+C/c4fGqctZt6qjyGCjmhesM7KSthX+1EJiGMbV 1EerqJ2XZHOsU+gTFmGuz9GnaeAD1hoj9/8snBXMRioxAo4oXgOTG3uL87b8cCVZ W4OY0rYuOHOi7QeaAUpoZ6vX/mlXfZD+W/n9Rlyux0OBdFJ09CnGTJCDg3uhefMG 3d6VVYNTgWFYQQ== -----END CERTIFICATE-----Generated at Wed Dec 17 18:31:33 2025 by rpki-client