This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft File: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft (raw, json) Hash identifier: qtjqd+HuXGlEGGcgJlHcrNZb19BrybfyAQP4Y3XT/yY= Subject key identifier: 27:F4:F8:2B:66:37:FC:1F:23:B3:48:BA:07:3D:DA:7A:B4:BC:C6:EF Authority key identifier: C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF Certificate issuer: /CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff Certificate serial: 019B41DB98854C73066AA891D527C17BE10B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft Manifest number: 06D4 Signing time: Sun 21 Dec 2025 17:01:08 +0000 Manifest this update: Sun 21 Dec 2025 17:01:08 +0000 Manifest next update: Mon 22 Dec 2025 17:01:08 +0000 Files and hashes: 1: g5yuydF4Poe4QOJQ8dgMQtQLFlA.roa (hash: ztDU3PoyCa7wU7AjEFCTcvzcTrmXKsTMTZ/tLyZjIE8=) 2: nPjV6lYXInJfXl86tbhvs9WXUa4.roa (hash: asKBhySwit3PBxbedsUA8HTRnekoYKrc5tk7Wn5QFGc=) 3: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl (hash: 0+hc5Oeojr1gfnEtA4EUTq0Kup+eCJZ/l4t6ySR9ozU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:98:85:4c:73:06:6a:a8:91:d5:27:c1:7b:e1:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff Validity Not Before: Dec 21 17:01:08 2025 GMT Not After : Dec 22 17:01:08 2025 GMT Subject: CN=27f4f82b6637fc1f23b348ba073dda7ab4bcc6ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:94:ce:b1:ac:c5:63:2e:c4:2d:f1:bb:73:94: 27:85:0d:fd:1c:22:f2:4b:3f:45:bc:60:23:8a:6b: 9d:a8:bf:58:3b:16:1a:b6:87:74:fb:7d:c6:7e:25: 00:b5:0d:e7:ef:b8:8e:1e:73:92:2f:48:2d:b1:8f: f4:ca:34:95:82:e4:ee:09:95:7b:e8:fb:b9:7c:20: b0:f2:00:1a:27:6e:32:08:62:1b:9c:62:71:ea:ae: d7:55:e0:2f:80:b6:af:94:27:5c:2b:f8:2b:e9:8f: bc:7c:13:d8:2c:c3:a1:c1:c9:62:7d:75:11:fd:49: e8:82:45:0b:86:de:af:4f:7e:35:94:01:a1:46:88: 99:78:b6:69:0f:e1:05:b7:76:f8:54:cd:84:ae:9d: 89:51:27:f8:38:a5:12:f0:ae:ab:f8:ae:0b:b5:97: 4a:51:b7:91:e8:5b:83:84:f9:a5:51:e7:2e:20:67: 09:ba:dc:5d:48:8f:2a:dd:d9:cd:ab:0a:8b:50:c1: 48:62:5c:63:83:5e:d2:c5:fe:21:42:30:a7:77:f9: 42:ae:0b:72:aa:85:94:27:31:f3:b5:da:ad:c5:5d: df:f7:e1:05:fc:33:33:f1:88:32:39:42:d1:a1:d4: dd:44:2d:8c:88:5d:ac:54:72:3d:9e:0b:e1:a0:e4: 6f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F4:F8:2B:66:37:FC:1F:23:B3:48:BA:07:3D:DA:7A:B4:BC:C6:EF X509v3 Authority Key Identifier: keyid:C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a8:02:57:07:d4:0b:9e:4e:8f:4d:7b:9b:65:5d:25:a7:4f: 49:44:00:c5:cf:73:6e:c0:76:92:7a:10:b4:39:55:03:b2:fb: 82:33:cd:ff:24:cd:8d:da:1a:5b:96:45:87:78:0d:70:9c:17: df:f8:74:6a:90:7e:f5:6c:e4:40:d5:b9:06:22:65:a5:20:31: 3b:46:87:f1:e6:6e:ff:84:b8:29:c4:93:7a:1d:97:43:a1:7b: 2f:ad:5c:53:2f:22:29:8f:ff:d5:60:f0:f3:a6:45:b5:30:6f: 43:b2:06:98:2f:72:cc:ea:eb:0e:07:25:8f:88:bf:44:0f:64: 86:bb:47:88:7f:49:50:31:94:e7:e9:a0:48:bc:3f:4e:96:38: 7e:db:2d:93:bd:e3:31:a9:37:55:75:82:6b:ed:d6:d9:00:c0: d7:91:a8:ec:99:46:22:41:81:78:48:ff:0c:49:a8:c4:bc:69: 1a:42:b8:bf:91:0d:c8:51:ff:ad:0b:18:0d:8f:e4:f1:0f:d0: 69:5e:6f:8e:c0:93:5b:8b:c3:7d:af:b6:f6:1c:99:70:71:7d: a0:25:03:4d:70:92:ee:8f:f1:c2:16:90:82:23:14:4d:eb:4c: de:01:d2:6a:b1:1a:e0:10:b6:9f:ef:16:bb:68:7c:98:e9:bc: a9:d9:43:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB25iFTHMGaqiR1SfBe+ELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMjRiNjllZDRhMjNiN2IzZTA2NzRhM2Y5OTQ2MDFkNzNi N2JhZmYwHhcNMjUxMjIxMTcwMTA4WhcNMjUxMjIyMTcwMTA4WjAzMTEwLwYDVQQD EygyN2Y0ZjgyYjY2MzdmYzFmMjNiMzQ4YmEwNzNkZGE3YWI0YmNjNmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZTOsazFYy7ELfG7c5QnhQ39HCLy Sz9FvGAjimudqL9YOxYatod0+33GfiUAtQ3n77iOHnOSL0gtsY/0yjSVguTuCZV7 6Pu5fCCw8gAaJ24yCGIbnGJx6q7XVeAvgLavlCdcK/gr6Y+8fBPYLMOhwclifXUR /UnogkULht6vT341lAGhRoiZeLZpD+EFt3b4VM2Erp2JUSf4OKUS8K6r+K4LtZdK UbeR6FuDhPmlUecuIGcJutxdSI8q3dnNqwqLUMFIYlxjg17Sxf4hQjCnd/lCrgty qoWUJzHztdqtxV3f9+EF/DMz8YgyOULRodTdRC2MiF2sVHI9ngvhoORvpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCf0+CtmN/wfI7NIugc92nq0vMbvMB8GA1UdIwQY MBaAFMIktp7Uojt7PgZ0o/mUYB1zt7r/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2lTMm50U2lPM3MtQm5Tai1aUmdIWE8zdXY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wYWYxOTktZmU0Ny00ZjViLTljNjgt MTViOTQ0NTc3Yzg2LzEvd2lTMm50U2lPM3MtQm5Tai1aUmdIWE8zdXY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8wYWYxOTktZmU0Ny00ZjViLTljNjgtMTViOTQ0NTc3Yzg2 LzEvd2lTMm50U2lPM3MtQm5Tai1aUmdIWE8zdXY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqgCVwfU C55Oj017m2VdJadPSUQAxc9zbsB2knoQtDlVA7L7gjPN/yTNjdoaW5ZFh3gNcJwX 3/h0apB+9WzkQNW5BiJlpSAxO0aH8eZu/4S4KcSTeh2XQ6F7L61cUy8iKY//1WDw 86ZFtTBvQ7IGmC9yzOrrDgclj4i/RA9khrtHiH9JUDGU5+mgSLw/TpY4ftstk73j Mak3VXWCa+3W2QDA15Go7JlGIkGBeEj/DEmoxLxpGkK4v5ENyFH/rQsYDY/k8Q/Q aV5vjsCTW4vDfa+29hyZcHF9oCUDTXCS7o/xwhaQgiMUTetM3gHSarEa4BC2n+8W u2h8mOm8qdlD8Q== -----END CERTIFICATE-----Generated at Sun Dec 21 19:24:12 2025 by rpki-client