This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft File: wXPRwALuqv2ht1iN1WIcTm_Jn64.mft (raw, json) Hash identifier: 2IlkRb1/W3Ar8hz46mL2F2MdXd89FYcsid2jhdqnj5U= Subject key identifier: 93:D4:20:BF:A0:22:42:1A:3F:4F:B6:B7:FF:79:B0:52:6F:51:30:91 Authority key identifier: C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE Certificate issuer: /CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae Certificate serial: 019B25524C8A6094534C5FB87932CA671901 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft Manifest number: 0640 Signing time: Tue 16 Dec 2025 04:01:49 +0000 Manifest this update: Tue 16 Dec 2025 04:01:49 +0000 Manifest next update: Wed 17 Dec 2025 04:01:49 +0000 Files and hashes: 1: JVqwz5mxYEMKGOHUiJ_GpSZnGN0.roa (hash: h8BGg/oG3iccU6NMytqMgx4YDS4KmCfVV7fVMEeYu2Y=) 2: wXPRwALuqv2ht1iN1WIcTm_Jn64.crl (hash: lE43wGZbm6i6JJrAOKAO6MGy49o+cpna96KJ3yiVUTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:4c:8a:60:94:53:4c:5f:b8:79:32:ca:67:19:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae Validity Not Before: Dec 16 04:01:49 2025 GMT Not After : Dec 17 04:01:49 2025 GMT Subject: CN=93d420bfa022421a3f4fb6b7ff79b0526f513091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:43:03:4e:7a:93:f4:17:ce:16:a4:5a:c9:97: 32:92:c9:e0:e5:52:45:20:ef:bb:26:16:c6:1e:5b: 1a:31:03:00:a9:50:e9:5d:d0:fe:56:d2:45:8d:45: 95:4d:04:e9:04:fb:ec:5b:a8:f0:05:b8:9f:43:e2: 89:dc:7b:b0:77:4c:e8:e9:0c:a7:b8:75:70:e3:dd: a1:e0:48:5a:c1:ba:5a:92:fb:23:c9:33:97:38:d7: 7c:32:3e:57:68:58:a8:f2:d0:19:f6:87:47:d1:33: 6a:7b:e9:a7:0b:ca:43:79:36:b9:dd:c7:42:16:0e: 26:7d:eb:af:46:e0:3f:7e:74:9c:a3:60:93:2d:ac: 36:04:54:12:4a:1f:53:90:58:36:32:f3:69:ae:3c: b3:0f:b9:17:f6:c7:aa:c4:63:16:81:76:80:11:df: 49:ea:37:2f:11:ec:8a:b0:37:2e:cf:ca:b8:06:b7: 3e:ac:72:14:81:91:2d:e5:33:d0:e5:4e:7d:31:49: 85:f7:24:50:04:d0:e8:08:52:4b:31:07:12:06:c8: 1a:da:0d:17:14:ff:37:fc:64:cb:90:81:85:98:5d: 38:a1:dd:36:de:b0:b4:87:a7:be:2f:0c:0a:c3:ad: 56:90:e3:6b:ed:f6:23:eb:b4:1d:81:02:28:5e:39: 21:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D4:20:BF:A0:22:42:1A:3F:4F:B6:B7:FF:79:B0:52:6F:51:30:91 X509v3 Authority Key Identifier: keyid:C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c0:f0:84:a7:d5:e6:ae:aa:40:c4:6f:e8:19:ed:62:0f:14: 9e:54:96:65:4e:98:1e:8b:77:a9:12:53:e8:66:09:33:86:bf: ce:e6:c3:83:09:a9:5a:45:44:d4:27:38:ea:b1:1f:be:cf:86: a5:3f:0f:e3:56:8f:61:42:6c:c0:b4:bc:cd:5b:e9:e5:ef:70: c5:96:cc:46:48:2d:b3:4b:87:c3:f0:e3:b1:4b:4c:c4:0c:21: 49:c8:43:c8:9e:10:a6:a8:bd:8f:fe:4b:d9:b3:c5:b5:26:05: c0:a4:9b:62:36:74:23:c5:ee:e6:02:66:0c:bb:47:33:4a:ce: a4:8f:7f:53:f4:42:6c:44:a0:10:cf:10:62:0b:29:4c:35:81: ce:33:f4:bf:b7:cd:4c:1e:6d:34:2b:d3:1c:07:56:af:7e:cf: 11:c7:55:f9:00:e0:04:ac:75:b7:6d:e9:d8:25:8f:8e:21:ab: c7:2d:be:b8:72:25:57:0f:59:25:b4:18:00:7f:af:ac:1c:e6: bb:11:8d:dd:8a:31:31:15:b0:89:c1:5e:64:a9:83:2a:04:80: 87:9e:0f:34:d0:03:9e:63:e9:c9:39:12:4a:e2:1c:02:7e:f6: d5:e5:85:4f:83:3a:5c:65:9c:37:a5:e5:e1:ba:06:11:35:37: 9f:1c:94:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUkyKYJRTTF+4eTLKZxkBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNzNkMWMwMDJlZWFhZmRhMWI3NTg4ZGQ1NjIxYzRlNmZj OTlmYWUwHhcNMjUxMjE2MDQwMTQ5WhcNMjUxMjE3MDQwMTQ5WjAzMTEwLwYDVQQD Eyg5M2Q0MjBiZmEwMjI0MjFhM2Y0ZmI2YjdmZjc5YjA1MjZmNTEzMDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykMDTnqT9BfOFqRayZcyksng5VJF IO+7JhbGHlsaMQMAqVDpXdD+VtJFjUWVTQTpBPvsW6jwBbifQ+KJ3Huwd0zo6Qyn uHVw492h4EhawbpakvsjyTOXONd8Mj5XaFio8tAZ9odH0TNqe+mnC8pDeTa53cdC Fg4mfeuvRuA/fnSco2CTLaw2BFQSSh9TkFg2MvNprjyzD7kX9seqxGMWgXaAEd9J 6jcvEeyKsDcuz8q4Brc+rHIUgZEt5TPQ5U59MUmF9yRQBNDoCFJLMQcSBsga2g0X FP83/GTLkIGFmF04od023rC0h6e+LwwKw61WkONr7fYj67QdgQIoXjkhmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPUIL+gIkIaP0+2t/95sFJvUTCRMB8GA1UdIwQY MBaAFMFz0cAC7qr9obdYjdViHE5vyZ+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1hQUndBTHVxdjJodDFpTjFXSWNUbV9KbjY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jNGZlMDQtMDYzYi00N2I3LWJlYmIt YjJjMGE0ZTdhZmMzLzEvd1hQUndBTHVxdjJodDFpTjFXSWNUbV9KbjY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9jNGZlMDQtMDYzYi00N2I3LWJlYmItYjJjMGE0ZTdhZmMz LzEvd1hQUndBTHVxdjJodDFpTjFXSWNUbV9KbjY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicDwhKfV 5q6qQMRv6BntYg8UnlSWZU6YHot3qRJT6GYJM4a/zubDgwmpWkVE1Cc46rEfvs+G pT8P41aPYUJswLS8zVvp5e9wxZbMRkgts0uHw/DjsUtMxAwhSchDyJ4Qpqi9j/5L 2bPFtSYFwKSbYjZ0I8Xu5gJmDLtHM0rOpI9/U/RCbESgEM8QYgspTDWBzjP0v7fN TB5tNCvTHAdWr37PEcdV+QDgBKx1t23p2CWPjiGrxy2+uHIlVw9ZJbQYAH+vrBzm uxGN3YoxMRWwicFeZKmDKgSAh54PNNADnmPpyTkSSuIcAn721eWFT4M6XGWcN6Xl 4boGETU3nxyU8Q== -----END CERTIFICATE-----Generated at Tue Dec 16 06:37:59 2025 by rpki-client