This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft File: wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft (raw, json) Hash identifier: khG0Z7iR9dfvTqmb70noYyHSqXbjUEXlJeASEPI3/5E= Subject key identifier: 29:DB:8B:D8:EA:31:D9:B1:EC:2D:4B:1E:77:27:B1:4A:CF:20:52:E7 Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Certificate serial: 019AF352B1ED7451C921B9B5D6FFF256F403 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft Manifest number: 0976 Signing time: Sat 06 Dec 2025 11:01:14 +0000 Manifest this update: Sat 06 Dec 2025 11:01:14 +0000 Manifest next update: Sun 07 Dec 2025 11:01:14 +0000 Files and hashes: 1: 1-OHLRD334FWm6Zrjcgppie9BswM.roa (hash: urCbs2jOMpV/xBqYvz6vgOCjI2x8EVTTMcQlzcrKQKU=) 2: 1TzUGOISzDA60EIuoaOCEldIKdA.roa (hash: BLBlbTPtdydLXzYGnqSxQMivDmgQhsVxzd+uAEw/tSs=) 3: 5OAXbGjOqg-vS_55ZPKWFqHiJWs.roa (hash: Xs90gWSaUge8bMFZD1j250L70pMv92DLAovpQ1YIcqQ=) 4: 8NHyyXImfpTMW71nUWch0BiF5Xg.roa (hash: eGClbyh1h6xo26ZfLRahAomcB8GyqPbNSmUc+I5rBP8=) 5: 8joE7txuqPRptc2U6nWwYuYnOmI.roa (hash: Zwogdhh73hhf4ungwCilm3IbJUadAHNWf9EL+OCOw1Q=) 6: 9LlqBOZrF4SBJFApdi1WJjsEJwQ.roa (hash: hM+HJpIJptN08ori750yWre+VYMnzo/BXYZmLiiupXc=) 7: AuIUSKV86C7BXB3cKTMOXDDJDxg.roa (hash: zV0DboRCqeI5iUfqxHmafkMKaUmCDd/7aboDtWeZ6H0=) 8: BGHFUqVejSgU54raf_BEGdliceQ.roa (hash: /WvBr8+8azpgI7EuGeRsoFRQN1mrpglq6k/jLoAWaPg=) 9: FIW7fwGAyJnOAzz2Ig4OquStbIw.roa (hash: Itn/Khoc6SXbHAI9HOvcWbsIu8OiTqhQSGekM+dshLA=) 10: Ho010-5FAsL0AW4rW7aJrqoW8g0.roa (hash: RfaotJrye6UjauxHRFgmD8eKhZyY9JvJ6MfjuA1zSxA=) 11: IQkntFvhRsdycQaCoTh6uWBlM0w.roa (hash: ObXi/Gh86sV5Yu8bR/iyvVTSXYpSj+cAT5PW6Kmrdqo=) 12: Jc4UjjXDIHer7xI93ScihguvNyI.roa (hash: IRfvvMt08HvaaPswtbTpbce96zw5k4oSSFo123wdXVg=) 13: L4ebS5DYuu1WMDLPNVuFPfYY3-A.roa (hash: aKfpqocUWLfizAyD84ddOvn90vsZei+gl4YQ6Ps+5Nw=) 14: P2DSCIMV0HHkBQvcusVrkVUHJ-k.roa (hash: UOdNaKMoFJYMlUedUl0GUGdpyC2yCCaGtSt3gBG0pwM=) 15: _vVj7Yf7SEDc0U-oT24hLr9AmWo.roa (hash: j+iJlPVCSfJjs834awahPlI3pwAuXtW3vZid82gyL2c=) 16: eNZXxCCzC2aIFELjq6RpMQzGjSs.roa (hash: CXPmpeLWckeBx9Uclq/du3j6HeMssd7O/L4FVYvmJ6k=) 17: hEDQykrxXLfCPsLT_Uv4AhZry78.roa (hash: mRss66ZgEty+8I11/rtsJiwoCbdAIsEfAH5G7NCk4R0=) 18: iKcwhnEN10fRYRRzzUNUhLbzgII.roa (hash: 8XbU5xfN398bTFEwcsbwpEuYyx6/DG2cMnShSgvLAsw=) 19: lx-I99Rz7UE_i9h7mI7tDYnV2-Y.roa (hash: F42LmZoHNcE33lqnHRPsH2ID11JlTB7ve7cZ1cVQPlU=) 20: myS70wSaXraGlV45HLBBmwXwrwc.roa (hash: FZsWjRMS6HiCSjpm2cjqK9xWh87tWd8uC6DrqvB4t9Q=) 21: ownf_EA4QLCePC3UUTTwGnLoTLw.roa (hash: 93BCrxGb3Lysj+TYISTy8jTAsJzMKioWglq3RX6G7Ok=) 22: wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl (hash: XrlLM1P4VuIlNVRMoQ7qj3nCA9qspAdbmF7F3WlyyII=) 23: xIOo3rZx3f0vOIzSVMh1Ya9ClVc.roa (hash: 6N6kjKKhC2oSPTyjceZNAglAGE7L0pEAqJMjbpNF7V8=) 24: z3kWu-yUrhb7i7RJ_9n8Pz6MTKw.roa (hash: G3LXLnUV2U2i7TF7ag92NBNGeKqfOc8dN9b41KiF4QU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:b1:ed:74:51:c9:21:b9:b5:d6:ff:f2:56:f4:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339 Validity Not Before: Dec 6 11:01:14 2025 GMT Not After : Dec 7 11:01:14 2025 GMT Subject: CN=29db8bd8ea31d9b1ec2d4b1e7727b14acf2052e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:27:4e:9c:2f:65:1c:09:c0:92:bd:b2:1b:f4: 3d:e5:3f:1b:9f:50:c5:aa:9c:e5:5c:65:10:8d:64: 30:50:fc:0c:5e:6d:56:30:51:0e:f2:c3:a3:b1:1f: de:cd:8d:8a:aa:c6:a9:b2:28:d6:dc:1d:49:fd:c9: d7:58:81:04:97:88:08:d8:c1:a6:b3:53:e9:6e:f4: 3a:b2:4e:fe:d4:84:71:b7:01:0e:a5:bc:f5:ef:9d: 57:e0:11:53:f1:37:9c:34:b2:78:19:e8:ab:86:e1: af:a9:4a:2f:f5:11:c2:ee:0f:18:eb:97:85:69:88: d7:41:cb:46:c9:ea:4c:82:a7:d2:4e:b2:a5:d7:ba: 56:ac:5c:01:30:4f:23:d8:b1:6b:51:28:ff:0d:71: 9e:d1:ea:22:76:bc:71:2b:6c:5c:ae:78:e3:04:0c: 8d:50:9f:b8:85:8c:29:50:4c:9c:88:5c:29:d7:fb: d9:5a:b2:d3:b8:40:72:a3:30:35:47:f9:f0:97:f6: 07:44:54:53:f2:80:94:c6:9b:0e:37:c9:9d:7d:58: 5b:59:25:d4:c6:84:ef:a6:80:56:84:0c:98:4a:69: 40:4c:e0:2b:dc:1e:b6:2e:2d:10:17:3c:01:b2:7a: 16:64:4a:99:00:4b:cb:b4:1d:28:4e:eb:ee:23:31: 91:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DB:8B:D8:EA:31:D9:B1:EC:2D:4B:1E:77:27:B1:4A:CF:20:52:E7 X509v3 Authority Key Identifier: keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:2e:45:b5:7a:65:98:78:40:c7:88:50:81:28:85:bb:b8:7b: d8:9b:3b:23:2d:2a:d5:27:48:3b:2d:db:64:81:47:ee:e6:73: aa:7a:c7:ca:50:38:d0:0a:c1:27:f7:c0:0d:79:9b:db:cd:05: 50:fd:cc:b7:65:79:79:d9:a1:f8:43:aa:d9:77:5b:bb:43:7a: f6:c1:29:d8:20:17:35:2f:0c:80:68:08:b6:78:2f:3c:76:46: 8c:8c:6f:2a:57:10:57:e3:9a:af:c4:cc:39:e5:40:db:b4:2a: b8:e5:41:ae:30:67:06:69:9e:3f:d1:9a:46:10:84:5e:4e:86: 6c:c9:73:8e:cd:15:04:2c:a2:49:40:ea:d2:0c:bf:77:4e:45: c6:9b:55:79:68:7a:35:76:39:78:e1:1e:26:3f:6e:f7:ea:ba: 35:25:58:f2:1c:6e:25:ad:0c:d2:4c:63:b9:51:4b:ca:3a:f0: 2a:41:3c:e6:1b:63:0f:d0:4d:e2:a0:bb:eb:d5:49:94:e8:07: 7d:1c:4f:14:1d:80:2e:17:d6:d7:02:da:12:1d:a5:66:c2:69: ee:0e:61:4e:bf:3e:a6:24:d4:7a:d7:1b:c7:1a:be:49:d4:c7: b0:a8:b4:e9:55:37:7f:78:6d:dc:95:82:f2:60:16:07:ed:a5: 30:bf:81:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUrHtdFHJIbm11v/yVvQDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm NzMzMzkwHhcNMjUxMjA2MTEwMTE0WhcNMjUxMjA3MTEwMTE0WjAzMTEwLwYDVQQD EygyOWRiOGJkOGVhMzFkOWIxZWMyZDRiMWU3NzI3YjE0YWNmMjA1MmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmidOnC9lHAnAkr2yG/Q95T8bn1DF qpzlXGUQjWQwUPwMXm1WMFEO8sOjsR/ezY2KqsapsijW3B1J/cnXWIEEl4gI2MGm s1PpbvQ6sk7+1IRxtwEOpbz1751X4BFT8TecNLJ4GeirhuGvqUov9RHC7g8Y65eF aYjXQctGyepMgqfSTrKl17pWrFwBME8j2LFrUSj/DXGe0eoidrxxK2xcrnjjBAyN UJ+4hYwpUEyciFwp1/vZWrLTuEByozA1R/nwl/YHRFRT8oCUxpsON8mdfVhbWSXU xoTvpoBWhAyYSmlATOAr3B62Li0QFzwBsnoWZEqZAEvLtB0oTuvuIzGR7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnbi9jqMdmx7C1LHncnsUrPIFLnMB8GA1UdIwQY MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt ZGE3NTQzMGIxNmY2LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2 LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcy5FtXpl mHhAx4hQgSiFu7h72Js7Iy0q1SdIOy3bZIFH7uZzqnrHylA40ArBJ/fADXmb280F UP3Mt2V5edmh+EOq2Xdbu0N69sEp2CAXNS8MgGgItngvPHZGjIxvKlcQV+Oar8TM OeVA27QquOVBrjBnBmmeP9GaRhCEXk6GbMlzjs0VBCyiSUDq0gy/d05FxptVeWh6 NXY5eOEeJj9u9+q6NSVY8hxuJa0M0kxjuVFLyjrwKkE85htjD9BN4qC769VJlOgH fRxPFB2ALhfW1wLaEh2lZsJp7g5hTr8+piTUetcbxxq+SdTHsKi06VU3f3ht3JWC 8mAWB+2lML+BEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:17:03 2025 by rpki-client