This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft File: Wu6ShG_jj96OD2KUjKmIPBopt1U.mft (raw, json) Hash identifier: k+9tqU5Ok63qfJERRx4+y1+jZQ5qNO+U+rnqtARVpxk= Subject key identifier: 7F:42:B5:A3:95:8A:B2:98:EF:BD:60:90:6F:F1:98:B8:02:4A:C6:15 Authority key identifier: 5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55 Certificate issuer: /CN=5aee92846fe38fde8e0f62948ca9883c1a29b755 Certificate serial: 019AF19B4F3E0A54AFA700033A55862B665D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft Manifest number: 0BA2 Signing time: Sat 06 Dec 2025 03:01:18 +0000 Manifest this update: Sat 06 Dec 2025 03:01:18 +0000 Manifest next update: Sun 07 Dec 2025 03:01:18 +0000 Files and hashes: 1: QnsXwvgDL1vpnE_nHW7cZ8l-yys.roa (hash: VNqFUdRBsRfrCU4DQ7mXN2LJBOfMOJgZg+HVbNE534A=) 2: Wu6ShG_jj96OD2KUjKmIPBopt1U.crl (hash: bNcwPBUJZz3ZGR3Cl3XmNcWptJgd9Z5Cy/o9D0iGsCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:4f:3e:0a:54:af:a7:00:03:3a:55:86:2b:66:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aee92846fe38fde8e0f62948ca9883c1a29b755 Validity Not Before: Dec 6 03:01:18 2025 GMT Not After : Dec 7 03:01:18 2025 GMT Subject: CN=7f42b5a3958ab298efbd60906ff198b8024ac615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:ce:4b:a6:b1:ac:64:5b:31:e4:2e:6a:69: 05:53:4d:2d:98:d5:0a:0a:d8:30:db:9c:ef:b0:0c: fc:0b:f2:fe:a7:7c:04:9a:ab:8d:e7:c6:40:b0:1f: 04:c4:16:52:c0:8d:60:01:45:80:79:d1:8b:3d:29: 8c:92:f9:ae:6c:38:90:8a:ee:2e:e2:09:74:ab:08: 16:1b:ff:b2:17:a5:c4:e4:05:68:35:72:a7:c9:47: 00:97:88:2d:dd:47:f8:e8:21:7b:fc:55:4e:a4:ae: 54:ad:6e:34:0e:4f:be:f2:98:69:3f:5a:fa:f8:81: 6b:75:55:9e:52:56:69:a1:92:30:b8:aa:2f:7e:c8: d9:3a:46:e5:7a:86:b9:e2:40:6f:86:3e:90:93:ae: ff:ca:f1:ce:be:eb:b7:8f:c2:76:07:44:f9:3a:de: fa:3e:8e:dd:02:0b:37:4a:00:52:99:9c:b3:ba:cf: d7:a4:8d:e1:17:6d:cd:a3:f4:0f:d4:76:7c:f5:ea: dd:e2:61:02:c1:4f:61:40:3c:54:42:34:33:4c:5a: 21:0f:a9:9d:64:2c:d6:92:b6:fe:a3:cf:a7:26:7c: fd:81:5f:ab:fc:5d:65:2a:14:89:fd:0a:2d:b7:cb: 5c:11:11:0c:51:02:f7:72:bf:03:4b:c9:a7:8f:85: 6b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:42:B5:A3:95:8A:B2:98:EF:BD:60:90:6F:F1:98:B8:02:4A:C6:15 X509v3 Authority Key Identifier: keyid:5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:6b:20:2f:76:7d:de:e6:83:e5:bf:ec:f5:fe:47:f2:84:4b: 9c:68:46:70:68:59:6b:86:f9:e7:11:5f:92:6c:ae:3e:34:40: 9b:6e:df:eb:8d:c1:d3:08:45:7a:64:5b:a8:0d:36:59:d7:0e: a2:70:fd:1b:fb:ca:a9:2d:f6:a3:70:aa:0c:11:87:bd:b3:06: 99:64:b6:0d:5e:f0:a6:29:ea:2d:bb:9b:c1:42:60:a6:ac:69: 32:44:05:0b:bf:9d:cb:b3:fb:8f:22:66:0a:fc:bf:e2:9d:d9: 1d:ae:1f:f9:af:55:e0:28:c2:7e:d9:20:2c:0a:50:41:4b:f6: 83:43:97:f3:11:2e:be:22:b3:dc:08:ac:0d:eb:97:bf:8d:ca: 40:30:c7:50:ee:41:4f:1b:36:27:a9:15:92:51:ba:a6:33:8a: 8d:b2:1c:e7:f0:fe:5e:7d:49:fd:29:a2:ac:27:16:0d:85:32: 18:ea:ed:c8:e3:e4:a5:6b:73:ae:ce:23:b4:b1:b2:76:b9:4b: 24:72:f9:59:aa:60:99:65:60:8a:61:e5:17:0c:d2:4e:fc:55: c1:67:e1:8b:d6:25:eb:32:3a:ac:69:4d:b0:0d:98:65:77:0f: 55:d0:2e:ee:3a:4b:9a:24:56:70:15:a0:02:02:9f:d8:2f:9f: 2b:aa:c7:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm08+ClSvpwADOlWGK2ZdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZWU5Mjg0NmZlMzhmZGU4ZTBmNjI5NDhjYTk4ODNjMWEy OWI3NTUwHhcNMjUxMjA2MDMwMTE4WhcNMjUxMjA3MDMwMTE4WjAzMTEwLwYDVQQD Eyg3ZjQyYjVhMzk1OGFiMjk4ZWZiZDYwOTA2ZmYxOThiODAyNGFjNjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb3OS6axrGRbMeQuamkFU00tmNUK Ctgw25zvsAz8C/L+p3wEmquN58ZAsB8ExBZSwI1gAUWAedGLPSmMkvmubDiQiu4u 4gl0qwgWG/+yF6XE5AVoNXKnyUcAl4gt3Uf46CF7/FVOpK5UrW40Dk++8phpP1r6 +IFrdVWeUlZpoZIwuKovfsjZOkbleoa54kBvhj6Qk67/yvHOvuu3j8J2B0T5Ot76 Po7dAgs3SgBSmZyzus/XpI3hF23No/QP1HZ89erd4mECwU9hQDxUQjQzTFohD6md ZCzWkrb+o8+nJnz9gV+r/F1lKhSJ/Qott8tcEREMUQL3cr8DS8mnj4VrdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9CtaOVirKY771gkG/xmLgCSsYVMB8GA1UdIwQY MBaAFFrukoRv44/ejg9ilIypiDwaKbdVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3U2U2hHX2pqOTZPRDJLVWpLbUlQQm9wdDFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8xZGIwY2ItNzlmZC00ZDY5LTk1MTUt NDJmY2ZiNzU1NzQ0LzEvV3U2U2hHX2pqOTZPRDJLVWpLbUlQQm9wdDFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8xZGIwY2ItNzlmZC00ZDY5LTk1MTUtNDJmY2ZiNzU1NzQ0 LzEvV3U2U2hHX2pqOTZPRDJLVWpLbUlQQm9wdDFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmsgL3Z9 3uaD5b/s9f5H8oRLnGhGcGhZa4b55xFfkmyuPjRAm27f643B0whFemRbqA02WdcO onD9G/vKqS32o3CqDBGHvbMGmWS2DV7wpinqLbubwUJgpqxpMkQFC7+dy7P7jyJm Cvy/4p3ZHa4f+a9V4CjCftkgLApQQUv2g0OX8xEuviKz3AisDeuXv43KQDDHUO5B Txs2J6kVklG6pjOKjbIc5/D+Xn1J/SmirCcWDYUyGOrtyOPkpWtzrs4jtLGydrlL JHL5WapgmWVgimHlFwzSTvxVwWfhi9Yl6zI6rGlNsA2YZXcPVdAu7jpLmiRWcBWg AgKf2C+fK6rHOA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:53:03 2025 by rpki-client