This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft File: WUmzHrtuTLvQzHcMxvTVD3jw63s.mft (raw, json) Hash identifier: ghfdjSgIVrrvDIDFMHsFH9/giujG9BcgVTFqWRS4yV0= Subject key identifier: 4F:60:D0:44:17:A1:42:37:63:4D:F8:E7:3F:B5:95:02:3B:9B:F4:BA Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B Certificate issuer: /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b Certificate serial: 019AF088A54F7564680E1232C75675DFAA57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft Manifest number: 175E Signing time: Fri 05 Dec 2025 22:01:18 +0000 Manifest this update: Fri 05 Dec 2025 22:01:18 +0000 Manifest next update: Sat 06 Dec 2025 22:01:18 +0000 Files and hashes: 1: IopWMeRqXOypB_fRacr3ZaxFtQI.roa (hash: FppOmUQRJ7eFBYEwXngpnxhSpl+Hc5qsOfWlbbkaJzw=) 2: Jr5TTPsXLbcmeb3jXm4kwRQ-J5g.roa (hash: 7oDZ/1zx1zR8r5+3OuEyrGxtjVcipWg0/FsvL6uuU3M=) 3: OL6yc8ZRNNzUrmUlMJiUidDHuh8.roa (hash: yRgWUM0pwyoXJeRdU0MzJI562R7I/kz9Vz80Sl7k9NU=) 4: WUmzHrtuTLvQzHcMxvTVD3jw63s.crl (hash: LiRShNoiqWIAEcZF9cSHmSdhguc8ZF1b5vH4X0PURjM=) 5: s4RqD1BS5l0_C1DY6qiIvroBiqY.roa (hash: zMF8j8B+bWyi3iOyQzBoW2FngUlQmNbr8zpHXcZBvR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:a5:4f:75:64:68:0e:12:32:c7:56:75:df:aa:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b Validity Not Before: Dec 5 22:01:18 2025 GMT Not After : Dec 6 22:01:18 2025 GMT Subject: CN=4f60d04417a14237634df8e73fb595023b9bf4ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:09:c4:db:02:8a:36:cc:03:37:50:f2:2b:47: a7:d4:c1:68:7f:7e:7f:ff:07:ae:61:d1:15:13:c7: a0:11:89:0e:6c:ea:26:50:c8:77:33:c3:ee:07:41: 57:b9:e5:17:fc:6a:93:26:6b:17:9c:a5:c3:6b:28: 85:1c:1e:04:24:aa:5f:d5:9f:56:f3:3c:3b:02:53: 2f:be:7f:1d:15:ad:e5:b5:28:29:12:8b:83:0c:d0: 56:e5:f6:20:cd:45:83:15:62:ab:95:46:cd:b0:ef: ba:0c:87:83:e8:37:a6:0e:b5:7a:e6:58:65:7b:d9: af:2b:ee:39:eb:32:ea:4d:b1:e1:43:d8:be:59:e1: 69:89:11:30:ba:7b:45:ca:95:89:bd:ea:56:49:3d: 37:90:01:03:b2:b9:89:73:05:0a:b4:d6:85:ba:94: b5:b7:39:3e:1a:62:15:81:31:53:b3:93:38:60:21: 51:63:8c:04:74:4d:ba:ee:06:7c:0b:4c:be:49:e5: 7f:b1:61:78:6d:d2:95:6c:cb:b7:00:e4:23:ed:20: 3f:6c:9e:b9:4c:0d:6c:1b:50:8b:af:be:68:9c:34: 40:d3:dd:23:7a:98:9e:00:5d:25:c2:8b:24:59:42: 46:e2:a2:39:3b:55:b3:72:10:73:50:d4:6f:94:0e: 81:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:60:D0:44:17:A1:42:37:63:4D:F8:E7:3F:B5:95:02:3B:9B:F4:BA X509v3 Authority Key Identifier: keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:5a:3e:73:e6:1d:13:8e:6d:9e:f1:f2:31:fc:57:39:06:5b: 23:f8:77:e3:91:63:82:85:b0:da:0a:51:be:37:7e:49:73:a1: c5:a3:5e:48:a3:55:d4:91:d0:2d:b7:f5:0b:b5:7d:73:0d:93: 5e:ce:51:d4:b9:e1:82:a3:f6:0a:e7:5a:6f:fc:59:53:0c:fa: e6:c8:f5:df:ed:d1:e7:b1:6f:4a:e7:53:fa:47:62:7a:59:97: d3:d4:93:8a:12:fa:34:e9:8b:43:81:79:9a:93:d3:d5:62:6e: dd:48:d2:66:76:87:50:0b:c8:cc:2e:15:6e:2f:dc:8c:63:89: 4b:c6:bf:74:98:d5:7a:b2:91:b9:ac:3d:35:51:25:11:17:ba: d0:d9:2c:10:e6:5b:4a:7e:97:16:2b:db:cd:97:c5:63:4f:3f: 30:c9:a9:b7:cd:c5:04:07:bc:f2:ed:9e:37:b6:af:48:56:87: 7b:48:2c:00:26:15:3e:fe:00:9b:76:8a:a6:2e:38:01:53:e9: 3d:b5:10:72:5d:0a:e6:54:80:f2:5c:72:de:8d:2f:fc:e9:81: bd:a5:d6:ad:94:bf:f5:1a:36:fc:64:9a:56:38:6c:a8:04:9e: f1:f6:6d:aa:20:9d:3a:9f:00:92:e3:77:a8:32:7d:7e:a5:37: 83:8f:3b:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiKVPdWRoDhIyx1Z136pXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NDliMzFlYmI2ZTRjYmJkMGNjNzcwY2M2ZjRkNTBmNzhm MGViN2IwHhcNMjUxMjA1MjIwMTE4WhcNMjUxMjA2MjIwMTE4WjAzMTEwLwYDVQQD Eyg0ZjYwZDA0NDE3YTE0MjM3NjM0ZGY4ZTczZmI1OTUwMjNiOWJmNGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QnE2wKKNswDN1DyK0en1MFof35/ /weuYdEVE8egEYkObOomUMh3M8PuB0FXueUX/GqTJmsXnKXDayiFHB4EJKpf1Z9W 8zw7AlMvvn8dFa3ltSgpEouDDNBW5fYgzUWDFWKrlUbNsO+6DIeD6DemDrV65lhl e9mvK+456zLqTbHhQ9i+WeFpiREwuntFypWJvepWST03kAEDsrmJcwUKtNaFupS1 tzk+GmIVgTFTs5M4YCFRY4wEdE267gZ8C0y+SeV/sWF4bdKVbMu3AOQj7SA/bJ65 TA1sG1CLr75onDRA090jepieAF0lwoskWUJG4qI5O1WzchBzUNRvlA6BrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9g0EQXoUI3Y0345z+1lQI7m/S6MB8GA1UdIwQY MBaAFFlJsx67bky70Mx3DMb01Q948Ot7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTkt MzE4MGFlNDI3NGYzLzEvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTktMzE4MGFlNDI3NGYz LzEvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFo+c+Yd E45tnvHyMfxXOQZbI/h345FjgoWw2gpRvjd+SXOhxaNeSKNV1JHQLbf1C7V9cw2T Xs5R1LnhgqP2Cudab/xZUwz65sj13+3R57FvSudT+kdielmX09STihL6NOmLQ4F5 mpPT1WJu3UjSZnaHUAvIzC4Vbi/cjGOJS8a/dJjVerKRuaw9NVElERe60NksEOZb Sn6XFivbzZfFY08/MMmpt83FBAe88u2eN7avSFaHe0gsACYVPv4Am3aKpi44AVPp PbUQcl0K5lSA8lxy3o0v/OmBvaXWrZS/9Ro2/GSaVjhsqASe8fZtqiCdOp8AkuN3 qDJ9fqU3g4874w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:28 2025 by rpki-client