This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft File: wQdbeoGvSd7_tsg1xWCO4LiEMso.mft (raw, json) Hash identifier: lGTlVCZm55ru0Ov7Qf2zegvFF44UCouruxgR629I5d4= Subject key identifier: C2:CE:45:22:42:94:A0:1C:5D:5B:16:0D:A3:B9:C4:A4:1F:2A:8D:FB Authority key identifier: C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA Certificate issuer: /CN=c1075b7a81af49deffb6c835c5608ee0b88432ca Certificate serial: 019AF4656F8141DA5D838341E25ADA926256 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft Manifest number: 0293 Signing time: Sat 06 Dec 2025 16:01:19 +0000 Manifest this update: Sat 06 Dec 2025 16:01:19 +0000 Manifest next update: Sun 07 Dec 2025 16:01:19 +0000 Files and hashes: 1: YfJtBuAEzwrAwSN_J7xGNSKCjCE.roa (hash: XmpRYRo5Vs4yfW8P8k8ClzDTbvhLktOQ+0fCN4Fj/SI=) 2: wQdbeoGvSd7_tsg1xWCO4LiEMso.crl (hash: xREA3XSuCEB83L7TfyubxPR+0sBOKg/85nK6CBb0OaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:6f:81:41:da:5d:83:83:41:e2:5a:da:92:62:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1075b7a81af49deffb6c835c5608ee0b88432ca Validity Not Before: Dec 6 16:01:19 2025 GMT Not After : Dec 7 16:01:19 2025 GMT Subject: CN=c2ce45224294a01c5d5b160da3b9c4a41f2a8dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6d:84:be:cd:57:c8:ac:94:cd:f3:fc:9f:2a: 95:12:ab:4b:a6:c3:b4:d4:8d:be:a0:91:6d:ff:79: f8:0c:a7:ec:ed:e8:df:78:8f:c4:e2:72:05:1f:13: 03:33:47:ca:1f:6d:47:73:a5:f8:48:16:99:77:fa: 8d:99:a4:6c:70:8a:c7:4f:64:8d:14:67:5a:ae:73: ab:a0:a1:17:7b:ce:c7:61:fb:1a:2e:5b:de:60:af: 6f:04:99:df:36:fd:ca:3c:f3:1c:d1:d6:17:fd:40: 5e:52:9f:cd:23:72:9f:51:7f:e2:6f:c2:e6:25:c4: af:d2:11:20:a7:e2:0a:58:08:5d:d3:9b:4b:cb:a6: 99:cc:b6:b0:f1:bb:8e:c1:21:f0:74:91:a7:c4:31: ac:d2:b8:a6:10:ee:f6:95:24:ca:2f:59:af:cc:a9: d1:ac:b5:c0:d9:f8:8c:0a:28:62:bc:83:28:49:50: b5:c8:0f:23:36:d8:9e:6e:ef:c1:7b:bd:d2:db:45: 09:ad:74:1f:b5:3d:66:9e:75:7b:a3:8b:7e:a0:d4: 31:39:59:48:27:0a:e2:48:9b:6f:fa:e8:7a:90:b4: 4d:a5:07:de:6c:e5:51:b0:9a:c9:f8:7e:e0:83:a8: 1c:53:1a:19:ab:0f:19:91:0f:46:ad:5a:58:d0:d6: 12:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CE:45:22:42:94:A0:1C:5D:5B:16:0D:A3:B9:C4:A4:1F:2A:8D:FB X509v3 Authority Key Identifier: keyid:C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:6c:c5:88:b2:23:6a:d2:3d:4f:7a:7a:6a:64:bf:f1:e8:9f: 73:a8:47:1b:61:d0:19:18:1f:16:18:7d:a6:e5:02:70:3d:ca: e1:38:45:25:c2:99:bd:bc:9f:8a:44:80:91:42:51:49:0f:5e: 08:26:b1:da:a1:2a:b6:e7:47:d6:7a:65:5c:1d:59:f1:1e:08: 95:7f:3d:6a:8b:24:20:30:25:76:ed:90:f4:4d:33:e0:37:eb: 9d:db:5e:88:b7:70:d7:c5:a5:24:05:96:84:10:3e:0a:ae:9e: 6f:4c:02:54:42:3f:9b:6a:fa:59:08:25:3f:b9:10:ff:31:28: a7:b3:ee:03:9b:28:75:0e:be:a5:5c:0d:4d:e0:97:80:31:1b: 91:0d:81:2b:e8:16:c6:99:72:5a:b6:b1:f7:bc:bf:bf:1c:36: a0:cf:fd:41:37:aa:6c:27:31:89:86:5b:8a:04:2f:10:3e:3e: ef:10:48:3c:7c:78:1e:73:14:c0:5c:c6:c3:4d:b3:ee:24:a8: 33:34:07:3f:fe:d9:d6:6e:f5:3d:ee:07:b4:be:bd:76:51:f3: d0:c4:21:27:ea:2f:24:02:f9:a9:42:22:cc:8b:4c:40:d8:c0: fc:5c:6c:5b:a1:2d:35:df:45:27:c8:73:2b:f3:38:8f:62:65: ec:99:1b:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZW+BQdpdg4NB4lrakmJWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDc1YjdhODFhZjQ5ZGVmZmI2YzgzNWM1NjA4ZWUwYjg4 NDMyY2EwHhcNMjUxMjA2MTYwMTE5WhcNMjUxMjA3MTYwMTE5WjAzMTEwLwYDVQQD EyhjMmNlNDUyMjQyOTRhMDFjNWQ1YjE2MGRhM2I5YzRhNDFmMmE4ZGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG2Evs1XyKyUzfP8nyqVEqtLpsO0 1I2+oJFt/3n4DKfs7ejfeI/E4nIFHxMDM0fKH21Hc6X4SBaZd/qNmaRscIrHT2SN FGdarnOroKEXe87HYfsaLlveYK9vBJnfNv3KPPMc0dYX/UBeUp/NI3KfUX/ib8Lm JcSv0hEgp+IKWAhd05tLy6aZzLaw8buOwSHwdJGnxDGs0rimEO72lSTKL1mvzKnR rLXA2fiMCihivIMoSVC1yA8jNtiebu/Be73S20UJrXQftT1mnnV7o4t+oNQxOVlI JwriSJtv+uh6kLRNpQfebOVRsJrJ+H7gg6gcUxoZqw8ZkQ9GrVpY0NYSFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLORSJClKAcXVsWDaO5xKQfKo37MB8GA1UdIwQY MBaAFMEHW3qBr0ne/7bINcVgjuC4hDLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FkYmVvR3ZTZDdfdHNnMXhXQ080TGlFTXNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yYTgyOWItMzJiMy00OTZhLTgwY2Ut YTAyNDY3ZjY0MjVmLzEvd1FkYmVvR3ZTZDdfdHNnMXhXQ080TGlFTXNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8yYTgyOWItMzJiMy00OTZhLTgwY2UtYTAyNDY3ZjY0MjVm LzEvd1FkYmVvR3ZTZDdfdHNnMXhXQ080TGlFTXNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmzFiLIj atI9T3p6amS/8eifc6hHG2HQGRgfFhh9puUCcD3K4ThFJcKZvbyfikSAkUJRSQ9e CCax2qEqtudH1nplXB1Z8R4IlX89aoskIDAldu2Q9E0z4DfrndteiLdw18WlJAWW hBA+Cq6eb0wCVEI/m2r6WQglP7kQ/zEop7PuA5sodQ6+pVwNTeCXgDEbkQ2BK+gW xplyWrax97y/vxw2oM/9QTeqbCcxiYZbigQvED4+7xBIPHx4HnMUwFzGw02z7iSo MzQHP/7Z1m71Pe4HtL69dlHz0MQhJ+ovJAL5qUIizItMQNjA/FxsW6EtNd9FJ8hz K/M4j2Jl7JkbSQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:12:26 2025 by rpki-client