This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft File: wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft (raw, json) Hash identifier: wHmrO2fILICrxHC9HyshNx/fTcNBZntVzOia0l1iHUc= Subject key identifier: 8E:B6:A7:A0:1E:7E:02:33:5E:BD:E0:AF:69:70:E9:0A:1F:62:43:5E Authority key identifier: C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F Certificate issuer: /CN=c04a3d80f6786f1791098d45ecd554f0660cce4f Certificate serial: 019AF19B404401512CDCC10E401E8300DA3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft Manifest number: 085D Signing time: Sat 06 Dec 2025 03:01:14 +0000 Manifest this update: Sat 06 Dec 2025 03:01:14 +0000 Manifest next update: Sun 07 Dec 2025 03:01:14 +0000 Files and hashes: 1: wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl (hash: TnRKfMb6LqZ1ppg/mvi+opYNHgQzTqeRXogwIkScPwA=) 2: zpicEsTdAQH31s_U5VTklFFkx3A.roa (hash: F4NgHOhmdVZSO+9LtvSeSBchmLUaANtpy3YFPClVpoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:40:44:01:51:2c:dc:c1:0e:40:1e:83:00:da:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c04a3d80f6786f1791098d45ecd554f0660cce4f Validity Not Before: Dec 6 03:01:14 2025 GMT Not After : Dec 7 03:01:14 2025 GMT Subject: CN=8eb6a7a01e7e02335ebde0af6970e90a1f62435e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ec:c7:08:e3:46:51:13:4b:60:4e:64:8b:c0: e6:51:a1:99:59:b0:5f:06:05:e3:6e:76:a8:49:ac: 36:81:6e:2e:c9:d0:86:49:83:90:78:8e:66:08:d6: 3c:ca:01:a5:b7:ff:d8:33:8f:e7:d4:4f:fb:d3:42: 3f:17:22:4c:31:0d:4d:a0:aa:b3:5b:67:67:5c:ed: bc:ab:a5:40:6b:73:70:b8:1f:0b:a8:e8:da:8a:c2: 65:76:f1:ba:b3:d1:00:38:7e:2b:50:6b:b0:f6:43: 92:10:23:4f:29:e6:03:44:24:f5:0a:0e:8a:13:9d: c8:5b:5a:ff:06:40:5b:16:a9:e2:c2:32:48:d0:bd: 28:92:a7:75:4b:94:77:c2:4e:dc:51:c4:8c:6f:a8: 83:04:6c:b5:83:6e:d2:02:ed:98:84:67:55:c0:62: 94:b9:1a:86:e5:83:f7:4e:e8:6e:63:99:95:6c:50: ec:42:43:8d:64:54:ec:9e:80:50:ae:c9:53:f8:40: a3:f2:95:0e:b9:24:e8:8b:0b:f1:6f:b9:6a:dd:01: 4d:f9:ee:ff:74:55:1c:37:9f:a3:e5:77:83:b6:e2: c0:b2:d5:63:ef:ac:16:82:4a:9b:ce:7f:b6:33:50: 54:1c:b6:30:26:03:7b:f4:93:66:a0:5b:9b:91:db: 8c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B6:A7:A0:1E:7E:02:33:5E:BD:E0:AF:69:70:E9:0A:1F:62:43:5E X509v3 Authority Key Identifier: keyid:C0:4A:3D:80:F6:78:6F:17:91:09:8D:45:EC:D5:54:F0:66:0C:CE:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e36eb1-8af5-4910-8df4-ed2e136dc026/1/wEo9gPZ4bxeRCY1F7NVU8GYMzk8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:ee:f5:49:63:81:08:93:e6:02:26:0b:ad:de:ce:e3:8f:1b: e9:50:75:9d:17:4b:db:af:60:82:61:8f:3d:f3:59:6c:93:e7: e6:fa:e1:ff:8c:fc:71:b9:d0:c6:6e:3c:1c:25:ad:ef:c9:c6: 9f:42:ec:0f:ba:cb:8c:d8:9d:3e:04:71:f6:7f:7c:8b:21:c3: 3e:c2:aa:09:bd:08:58:7e:7f:af:ad:de:05:c4:fa:29:28:b9: 82:31:3a:a5:4a:8f:cf:65:0d:2b:b2:5a:46:76:4a:0b:86:0e: 47:70:67:6c:64:40:02:94:9f:df:0d:86:e4:3c:9f:65:96:7c: a6:5c:e8:dc:fa:82:50:bd:b7:a0:68:01:a5:11:c1:28:b9:b2: 87:bc:20:ac:ca:c4:c2:ff:9b:80:e6:c1:a5:9e:32:cf:5b:e8: 86:1d:24:b5:e5:b4:5c:6e:d8:3e:d3:d6:7e:59:2b:cc:50:7f: 99:7d:cb:4d:3f:7a:43:24:93:a1:d4:1f:fe:b3:12:cb:f5:d7: 4f:43:1b:76:7d:d5:a3:22:40:47:d8:e2:ff:5e:9e:11:e8:0a: 82:e5:20:2d:ca:a3:58:7e:33:cb:c8:78:45:4d:2c:a6:2d:06: 8e:64:78:d7:fc:16:e1:e6:fa:79:a9:d6:25:bc:e0:7b:b4:7f: ce:3d:7a:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0BEAVEs3MEOQB6DANo+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNGEzZDgwZjY3ODZmMTc5MTA5OGQ0NWVjZDU1NGYwNjYw Y2NlNGYwHhcNMjUxMjA2MDMwMTE0WhcNMjUxMjA3MDMwMTE0WjAzMTEwLwYDVQQD Eyg4ZWI2YTdhMDFlN2UwMjMzNWViZGUwYWY2OTcwZTkwYTFmNjI0MzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+zHCONGURNLYE5ki8DmUaGZWbBf BgXjbnaoSaw2gW4uydCGSYOQeI5mCNY8ygGlt//YM4/n1E/700I/FyJMMQ1NoKqz W2dnXO28q6VAa3NwuB8LqOjaisJldvG6s9EAOH4rUGuw9kOSECNPKeYDRCT1Cg6K E53IW1r/BkBbFqniwjJI0L0okqd1S5R3wk7cUcSMb6iDBGy1g27SAu2YhGdVwGKU uRqG5YP3TuhuY5mVbFDsQkONZFTsnoBQrslT+ECj8pUOuSToiwvxb7lq3QFN+e7/ dFUcN5+j5XeDtuLAstVj76wWgkqbzn+2M1BUHLYwJgN79JNmoFubkduMfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI62p6AefgIzXr3gr2lw6QofYkNeMB8GA1UdIwQY MBaAFMBKPYD2eG8XkQmNRezVVPBmDM5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0VvOWdQWjRieGVSQ1kxRjdOVlU4R1lNems4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMzZlYjEtOGFmNS00OTEwLThkZjQt ZWQyZTEzNmRjMDI2LzEvd0VvOWdQWjRieGVSQ1kxRjdOVlU4R1lNems4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMzZlYjEtOGFmNS00OTEwLThkZjQtZWQyZTEzNmRjMDI2 LzEvd0VvOWdQWjRieGVSQ1kxRjdOVlU4R1lNems4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeO71SWOB CJPmAiYLrd7O448b6VB1nRdL269ggmGPPfNZbJPn5vrh/4z8cbnQxm48HCWt78nG n0LsD7rLjNidPgRx9n98iyHDPsKqCb0IWH5/r63eBcT6KSi5gjE6pUqPz2UNK7Ja RnZKC4YOR3BnbGRAApSf3w2G5DyfZZZ8plzo3PqCUL23oGgBpRHBKLmyh7wgrMrE wv+bgObBpZ4yz1vohh0kteW0XG7YPtPWflkrzFB/mX3LTT96QySTodQf/rMSy/XX T0Mbdn3VoyJAR9ji/16eEegKguUgLcqjWH4zy8h4RU0spi0GjmR41/wW4eb6eanW Jbzge7R/zj16UA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:50 2025 by rpki-client