This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft File: wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft (raw, json) Hash identifier: wP+HrHR5UsmNFNqsAUs7kaHUDTChyWy6+vWBjexlxY0= Subject key identifier: 68:CF:27:A3:0A:89:50:DD:DC:0A:76:71:0E:F3:55:48:BB:68:D2:F9 Authority key identifier: C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11 Certificate issuer: /CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611 Certificate serial: 019AF1D1EE5E8E67C2EE0F793A5E54380ECE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft Manifest number: 0328 Signing time: Sat 06 Dec 2025 04:00:58 +0000 Manifest this update: Sat 06 Dec 2025 04:00:58 +0000 Manifest next update: Sun 07 Dec 2025 04:00:58 +0000 Files and hashes: 1: shq45UEehLHlmhOeyI4UV2c2u0c.roa (hash: m82S0LKa4u++R6z0pfw1er3BwvIyylTnAWkb4EmiNoE=) 2: wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl (hash: OhJttofVSs/VqV+8GPk92ACwDRvmhJMeScIZXu22j4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ee:5e:8e:67:c2:ee:0f:79:3a:5e:54:38:0e:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611 Validity Not Before: Dec 6 04:00:58 2025 GMT Not After : Dec 7 04:00:58 2025 GMT Subject: CN=68cf27a30a8950dddc0a76710ef35548bb68d2f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:db:49:e9:ba:06:b0:d3:4c:40:fe:f2:6f:0e: 47:de:0e:61:f3:33:af:99:e2:2e:ea:8a:db:ee:a9: 72:bf:19:33:f6:8f:c3:e4:3a:f3:20:11:eb:7b:f0: 02:23:39:bd:55:de:b2:ba:53:2c:38:9d:c0:de:6d: 46:8f:52:ec:9b:0e:81:1d:42:e1:a9:3a:a8:b5:66: 2e:09:e0:56:41:5a:58:d4:7c:fe:f7:1b:4d:23:a8: 25:77:24:32:13:37:72:43:5f:d6:c5:13:e0:ac:b5: 18:85:d4:3d:76:57:33:96:51:36:bb:ac:55:f7:0e: bf:b5:aa:a6:2e:ad:df:04:16:04:07:e5:88:5a:f4: ba:e1:34:92:38:26:e5:25:8b:f6:53:d1:f7:ac:5b: 37:aa:8b:5a:02:ac:f4:9f:8d:f9:db:af:74:5c:71: 76:9e:5f:56:e8:c8:21:45:b6:78:a8:b0:a6:83:1c: cf:11:28:09:a0:3d:dd:ea:e0:a2:2c:ef:26:92:14: 9e:1a:ee:9d:25:84:97:1f:e1:ce:30:9d:18:d8:f7: c7:af:35:b1:91:70:ab:62:50:cc:0a:32:19:b7:94: 7f:e8:0f:41:80:b8:72:28:9e:8a:44:41:70:1f:ae: a2:b4:c5:e0:2b:33:1a:0e:87:0b:43:ca:78:e6:c0: 9d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CF:27:A3:0A:89:50:DD:DC:0A:76:71:0E:F3:55:48:BB:68:D2:F9 X509v3 Authority Key Identifier: keyid:C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:12:fd:42:41:68:28:c8:3b:d6:fa:1d:b7:f9:64:3e:5c:52: 61:ff:b7:af:c4:5e:7b:b3:66:ef:b8:02:0e:cc:a4:88:35:28: 71:11:f4:8f:6d:c1:94:20:6d:6c:14:29:94:22:08:6c:47:13: 48:86:aa:e8:e1:b5:58:55:04:b3:aa:ba:17:b2:a7:29:de:53: 0c:07:d2:62:fe:fb:c7:43:d0:fb:5f:14:45:97:6b:c3:39:89: 4e:b7:8d:3c:3d:e1:78:c9:97:95:7e:6c:c5:ce:32:27:83:40: 03:1d:f8:48:12:d2:e5:4c:23:44:6e:4c:d5:3d:39:bd:98:51: f5:db:29:58:1d:b0:57:1c:f2:76:86:59:f3:af:ba:90:e5:af: d6:41:04:69:bd:06:aa:b9:1c:3d:48:8a:70:d2:4b:eb:16:73: a4:eb:a9:76:00:45:99:c1:d9:c8:4b:2d:da:13:99:87:26:14: 0f:f2:4e:df:c9:c5:e2:c5:6d:fd:6c:8e:2e:e7:b2:c5:91:88: d0:9b:68:13:39:11:f3:ab:46:4a:84:d6:27:d7:bb:10:a9:9d: fb:5c:4b:db:a4:ed:21:81:20:61:a5:b7:d1:22:e7:ad:7e:07: 51:c1:a4:56:6b:83:12:4e:b6:cd:ee:8b:db:af:ae:7d:98:d0: 76:3c:14:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0e5ejmfC7g95Ol5UOA7OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYWM4ZjcwOTYxZDJkYzczZTJmZTNhNzk5MDgzMmU5M2Q0 OTU2MTEwHhcNMjUxMjA2MDQwMDU4WhcNMjUxMjA3MDQwMDU4WjAzMTEwLwYDVQQD Eyg2OGNmMjdhMzBhODk1MGRkZGMwYTc2NzEwZWYzNTU0OGJiNjhkMmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59tJ6boGsNNMQP7ybw5H3g5h8zOv meIu6orb7qlyvxkz9o/D5DrzIBHre/ACIzm9Vd6yulMsOJ3A3m1Gj1Lsmw6BHULh qTqotWYuCeBWQVpY1Hz+9xtNI6gldyQyEzdyQ1/WxRPgrLUYhdQ9dlczllE2u6xV 9w6/taqmLq3fBBYEB+WIWvS64TSSOCblJYv2U9H3rFs3qotaAqz0n4352690XHF2 nl9W6MghRbZ4qLCmgxzPESgJoD3d6uCiLO8mkhSeGu6dJYSXH+HOMJ0Y2PfHrzWx kXCrYlDMCjIZt5R/6A9BgLhyKJ6KREFwH66itMXgKzMaDocLQ8p45sCdOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjPJ6MKiVDd3Ap2cQ7zVUi7aNL5MB8GA1UdIwQY MBaAFMKsj3CWHS3HPi/jp5kIMuk9SVYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3F5UGNKWWRMY2MtTC1Pbm1RZ3k2VDFKVmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85NTZmZDItMGRkMy00ZDRmLThiMzct YzZkODZhMWIwOGUwLzEvd3F5UGNKWWRMY2MtTC1Pbm1RZ3k2VDFKVmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC85NTZmZDItMGRkMy00ZDRmLThiMzctYzZkODZhMWIwOGUw LzEvd3F5UGNKWWRMY2MtTC1Pbm1RZ3k2VDFKVmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBL9QkFo KMg71vodt/lkPlxSYf+3r8Ree7Nm77gCDsykiDUocRH0j23BlCBtbBQplCIIbEcT SIaq6OG1WFUEs6q6F7KnKd5TDAfSYv77x0PQ+18URZdrwzmJTreNPD3heMmXlX5s xc4yJ4NAAx34SBLS5UwjRG5M1T05vZhR9dspWB2wVxzydoZZ86+6kOWv1kEEab0G qrkcPUiKcNJL6xZzpOupdgBFmcHZyEst2hOZhyYUD/JO38nF4sVt/WyOLueyxZGI 0JtoEzkR86tGSoTWJ9e7EKmd+1xL26TtIYEgYaW30SLnrX4HUcGkVmuDEk62ze6L 26+ufZjQdjwUjg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:52:16 2025 by rpki-client