This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft File: rWUjcvDl0WnCAPfR0IDoVw_-23E.mft (raw, json) Hash identifier: mmqbSOO5QTiqRhlG25TQm9KsZYWGVgMv55H2OAWzBMY= Subject key identifier: 95:86:07:DB:90:5C:7C:54:5D:5C:E9:63:86:4A:7F:55:CF:EF:47:20 Authority key identifier: AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71 Certificate issuer: /CN=ad652372f0e5d169c200f7d1d080e8570ffedb71 Certificate serial: 019AF50ABA270A13275C4E9A95778C672785 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft Manifest number: 04CE Signing time: Sat 06 Dec 2025 19:01:52 +0000 Manifest this update: Sat 06 Dec 2025 19:01:52 +0000 Manifest next update: Sun 07 Dec 2025 19:01:52 +0000 Files and hashes: 1: nQ9AG6h0t4BBBHaY1oIQ2Z7HXiE.roa (hash: bmhEBNk6LesEwcu8xwGODwFl5oPTmJlYZFKxsnvzgRU=) 2: rWUjcvDl0WnCAPfR0IDoVw_-23E.crl (hash: 8uX6oElqcDJqbH+it+Xkp2VG0cmLpAbsVlkn3RqPR9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:ba:27:0a:13:27:5c:4e:9a:95:77:8c:67:27:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad652372f0e5d169c200f7d1d080e8570ffedb71 Validity Not Before: Dec 6 19:01:52 2025 GMT Not After : Dec 7 19:01:52 2025 GMT Subject: CN=958607db905c7c545d5ce963864a7f55cfef4720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a4:d8:9b:00:16:eb:80:f0:6f:62:9c:09:5e: ff:17:c9:da:13:b7:60:db:e8:a1:5d:78:bc:51:aa: 32:a8:a8:39:01:7b:73:41:b7:8e:e9:67:5b:d8:11: 80:93:d2:97:0b:e5:e7:66:2f:f7:d4:2b:d0:5a:56: 40:b4:26:6d:f4:bc:2e:f8:6a:7b:d9:d8:2f:f3:19: 11:e0:e2:f2:f9:71:4d:05:9c:52:86:cf:e5:ee:60: 4e:54:4e:65:a6:43:d7:ce:87:40:d3:f9:40:e3:29: a5:46:42:d3:d3:28:52:e6:f8:c6:a0:df:89:98:c2: 55:c7:67:82:da:fb:18:cc:34:32:cf:a6:47:c0:7a: 85:ad:8c:69:33:55:31:e9:9f:4c:2b:45:9f:95:a7: d1:7a:86:52:71:cf:73:e5:9d:65:f9:15:05:7f:ca: ec:83:36:5b:14:91:19:db:71:40:11:ff:db:f7:fb: 3b:d7:2c:d3:21:b8:f0:84:7a:69:cf:a4:f1:03:9e: cc:3e:0f:df:8a:17:d0:36:42:43:41:c2:45:23:1b: 64:bb:68:23:f8:3d:07:d4:66:21:ed:da:47:05:41: cd:e5:fa:fe:24:92:ff:d0:9f:67:53:e2:60:7b:00: 24:c4:14:ee:c5:90:4d:a7:87:f7:52:fd:d1:c3:49: d0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:86:07:DB:90:5C:7C:54:5D:5C:E9:63:86:4A:7F:55:CF:EF:47:20 X509v3 Authority Key Identifier: keyid:AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:f2:d2:f1:cf:e4:f6:da:2d:ea:9b:e0:0c:87:61:71:4e:01: 02:ae:d8:f5:32:62:f9:c9:1b:5b:f5:e2:b8:4e:1c:25:a7:82: e0:47:03:71:07:25:7b:1c:ad:95:f5:56:97:30:8d:20:62:0b: c5:1a:41:fb:99:b6:6f:64:1b:39:da:1b:07:b7:eb:35:5d:3a: 4e:e5:c5:5e:aa:59:a4:0d:e2:4d:e2:39:66:a7:15:09:58:0b: ac:ab:f0:5e:76:3b:f1:75:8d:13:fe:36:ca:c3:cf:5c:5b:df: 60:79:c4:a1:79:2d:2b:05:8f:7a:e0:45:b3:c1:c9:9d:4d:98: a4:3b:7d:cb:c5:b2:6c:8a:da:77:91:27:bf:cd:4b:b4:4c:78: 45:c6:44:c2:aa:6b:5d:38:1f:ac:b7:88:6b:74:22:fd:6c:be: 7f:30:a0:ac:34:d0:1d:c6:5e:10:13:1d:50:78:d4:11:7b:d9: 65:4c:5f:6a:b6:dd:9c:09:47:0c:11:4c:7c:77:6e:1f:fb:29: 48:b4:62:fc:cb:ae:0a:b3:29:86:b3:a4:b5:c2:c6:a4:4a:f5: 74:87:d0:5a:9c:d8:81:4f:41:6b:b4:6d:5d:03:46:f8:fb:96: 1f:e6:77:11:38:dd:e3:95:18:3f:fb:98:89:c6:af:a2:ae:ec: 16:23:1d:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CronChMnXE6alXeMZyeFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNjUyMzcyZjBlNWQxNjljMjAwZjdkMWQwODBlODU3MGZm ZWRiNzEwHhcNMjUxMjA2MTkwMTUyWhcNMjUxMjA3MTkwMTUyWjAzMTEwLwYDVQQD Eyg5NTg2MDdkYjkwNWM3YzU0NWQ1Y2U5NjM4NjRhN2Y1NWNmZWY0NzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqTYmwAW64Dwb2KcCV7/F8naE7dg 2+ihXXi8UaoyqKg5AXtzQbeO6Wdb2BGAk9KXC+XnZi/31CvQWlZAtCZt9Lwu+Gp7 2dgv8xkR4OLy+XFNBZxShs/l7mBOVE5lpkPXzodA0/lA4ymlRkLT0yhS5vjGoN+J mMJVx2eC2vsYzDQyz6ZHwHqFrYxpM1Ux6Z9MK0WflafReoZScc9z5Z1l+RUFf8rs gzZbFJEZ23FAEf/b9/s71yzTIbjwhHppz6TxA57MPg/fihfQNkJDQcJFIxtku2gj +D0H1GYh7dpHBUHN5fr+JJL/0J9nU+JgewAkxBTuxZBNp4f3Uv3Rw0nQiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWGB9uQXHxUXVzpY4ZKf1XP70cgMB8GA1UdIwQY MBaAFK1lI3Lw5dFpwgD30dCA6FcP/ttxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcldVamN2RGwwV25DQVBmUjBJRG9Wd18tMjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iZDk4YzktZmNlMy00YmJhLWI0OWIt NGNhZTMyNWMwZTI4LzEvcldVamN2RGwwV25DQVBmUjBJRG9Wd18tMjNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iZDk4YzktZmNlMy00YmJhLWI0OWItNGNhZTMyNWMwZTI4 LzEvcldVamN2RGwwV25DQVBmUjBJRG9Wd18tMjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePLS8c/k 9tot6pvgDIdhcU4BAq7Y9TJi+ckbW/XiuE4cJaeC4EcDcQclexytlfVWlzCNIGIL xRpB+5m2b2QbOdobB7frNV06TuXFXqpZpA3iTeI5ZqcVCVgLrKvwXnY78XWNE/42 ysPPXFvfYHnEoXktKwWPeuBFs8HJnU2YpDt9y8WybIrad5Env81LtEx4RcZEwqpr XTgfrLeIa3Qi/Wy+fzCgrDTQHcZeEBMdUHjUEXvZZUxfarbdnAlHDBFMfHduH/sp SLRi/MuuCrMphrOktcLGpEr1dIfQWpzYgU9Ba7RtXQNG+PuWH+Z3ETjd45UYP/uY icavoq7sFiMdUw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:26 2025 by rpki-client