This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft File: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft (raw, json) Hash identifier: EQeEcHeuhTgI1/GASJp5c3Qn/D11FOQ8glgZixEFBKk= Subject key identifier: F4:4D:F5:00:AF:C6:9C:72:1F:E8:D6:96:CC:43:E5:BA:F9:58:B9:AB Authority key identifier: C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF Certificate issuer: /CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff Certificate serial: 019AF0BF9E89F00535BAB2ED30E04DFC001F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft Manifest number: 06AA Signing time: Fri 05 Dec 2025 23:01:20 +0000 Manifest this update: Fri 05 Dec 2025 23:01:20 +0000 Manifest next update: Sat 06 Dec 2025 23:01:20 +0000 Files and hashes: 1: g5yuydF4Poe4QOJQ8dgMQtQLFlA.roa (hash: ztDU3PoyCa7wU7AjEFCTcvzcTrmXKsTMTZ/tLyZjIE8=) 2: nPjV6lYXInJfXl86tbhvs9WXUa4.roa (hash: asKBhySwit3PBxbedsUA8HTRnekoYKrc5tk7Wn5QFGc=) 3: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl (hash: zkFzAUHZBvGYBU5nKdr6ZeGqPmpzoIyDKCPZEmI7xvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:9e:89:f0:05:35:ba:b2:ed:30:e0:4d:fc:00:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff Validity Not Before: Dec 5 23:01:20 2025 GMT Not After : Dec 6 23:01:20 2025 GMT Subject: CN=f44df500afc69c721fe8d696cc43e5baf958b9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:73:d2:05:62:1d:04:55:3d:bf:be:49:c7:e2: 52:3a:99:68:d2:7d:00:f3:04:00:69:06:c2:6e:6e: 6d:44:c9:0b:ca:d4:07:ff:ab:0c:5e:45:92:fb:9b: 1b:39:69:9d:83:4f:be:82:bb:bb:bb:00:f7:6f:b6: e0:eb:68:c8:be:a1:09:1e:25:18:65:d1:fa:93:3d: 10:cb:7e:8c:fe:5f:26:7f:7a:82:6b:4a:db:8e:a2: d0:2a:b7:30:8b:d7:72:12:a3:55:d7:3e:cd:74:26: 37:cd:2c:c9:74:5c:92:a3:c9:9e:4a:ed:73:ef:0f: 43:3a:7f:24:90:ed:c6:91:69:5b:e4:a9:50:39:9c: 8d:ce:87:90:86:95:86:a1:42:a5:82:1e:fc:1c:2b: c3:5b:5b:b1:e1:33:fd:ed:90:d2:bd:9a:7f:30:c6: 47:6f:b3:6c:8d:f8:99:93:31:7e:ab:cd:86:eb:56: ff:10:a0:9f:7a:b0:cb:7a:1f:17:84:2a:c3:c5:4a: d6:de:9a:c1:b1:6c:70:4c:ae:59:56:2f:e7:c0:f9: f9:0f:9a:a3:f6:d0:2e:d2:33:5e:2b:07:17:7b:b9: 17:0d:be:22:ea:f8:a7:23:83:c9:64:1e:43:a5:b5: 84:45:7b:7d:0f:25:be:79:49:b2:25:5c:79:3a:c7: a0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4D:F5:00:AF:C6:9C:72:1F:E8:D6:96:CC:43:E5:BA:F9:58:B9:AB X509v3 Authority Key Identifier: keyid:C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:2f:f6:e4:e2:0b:45:1f:b3:23:41:39:ec:a3:e6:87:57:01: 58:3e:0b:36:3b:46:cc:9d:36:5d:46:5d:d0:2a:0e:8b:e8:1b: fa:4b:87:c8:c3:73:1b:f7:36:98:94:90:ca:c7:9b:11:f6:03: 77:8f:65:17:f6:b0:bf:36:fa:aa:f5:54:79:1c:c8:3c:cc:0d: ce:41:1f:7f:be:fe:79:51:d3:36:30:d1:2b:9d:57:53:ad:77: c3:ca:66:b0:1a:2a:0b:d2:bb:67:22:93:de:3f:80:aa:a7:96: 34:d7:b7:ee:25:55:62:ac:40:e0:37:a3:34:eb:b3:75:24:d3: fd:8a:4a:07:e5:1c:0f:7c:75:90:05:67:7d:67:bc:c4:55:45: 7f:a6:91:cf:7f:32:43:f6:d3:2b:aa:0c:1a:ca:09:f4:5b:b5: 6b:94:42:e6:f4:0d:75:40:0e:d3:69:f3:72:c2:a8:2f:44:4c: 1c:88:ab:ca:e5:78:4d:17:a2:ed:5a:96:66:26:23:ef:56:51: 9b:cd:ff:70:e9:98:e6:49:6c:a9:9d:7f:d2:ef:31:1c:97:5c: 8c:44:d8:f5:9a:fb:2b:34:cf:ad:61:4a:e7:ce:4f:58:e1:f4: 44:9b:64:46:83:6d:50:52:0b:03:fd:a8:90:82:e7:76:91:07: 72:fd:5c:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv56J8AU1urLtMOBN/AAfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMjRiNjllZDRhMjNiN2IzZTA2NzRhM2Y5OTQ2MDFkNzNi N2JhZmYwHhcNMjUxMjA1MjMwMTIwWhcNMjUxMjA2MjMwMTIwWjAzMTEwLwYDVQQD EyhmNDRkZjUwMGFmYzY5YzcyMWZlOGQ2OTZjYzQzZTViYWY5NThiOWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nPSBWIdBFU9v75Jx+JSOplo0n0A 8wQAaQbCbm5tRMkLytQH/6sMXkWS+5sbOWmdg0++gru7uwD3b7bg62jIvqEJHiUY ZdH6kz0Qy36M/l8mf3qCa0rbjqLQKrcwi9dyEqNV1z7NdCY3zSzJdFySo8meSu1z 7w9DOn8kkO3GkWlb5KlQOZyNzoeQhpWGoUKlgh78HCvDW1ux4TP97ZDSvZp/MMZH b7NsjfiZkzF+q82G61b/EKCferDLeh8XhCrDxUrW3prBsWxwTK5ZVi/nwPn5D5qj 9tAu0jNeKwcXe7kXDb4i6vinI4PJZB5DpbWERXt9DyW+eUmyJVx5Oseg4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRN9QCvxpxyH+jWlsxD5br5WLmrMB8GA1UdIwQY MBaAFMIktp7Uojt7PgZ0o/mUYB1zt7r/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2lTMm50U2lPM3MtQm5Tai1aUmdIWE8zdXY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wYWYxOTktZmU0Ny00ZjViLTljNjgt MTViOTQ0NTc3Yzg2LzEvd2lTMm50U2lPM3MtQm5Tai1aUmdIWE8zdXY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8wYWYxOTktZmU0Ny00ZjViLTljNjgtMTViOTQ0NTc3Yzg2 LzEvd2lTMm50U2lPM3MtQm5Tai1aUmdIWE8zdXY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcy/25OIL RR+zI0E57KPmh1cBWD4LNjtGzJ02XUZd0CoOi+gb+kuHyMNzG/c2mJSQysebEfYD d49lF/awvzb6qvVUeRzIPMwNzkEff77+eVHTNjDRK51XU613w8pmsBoqC9K7ZyKT 3j+AqqeWNNe37iVVYqxA4DejNOuzdSTT/YpKB+UcD3x1kAVnfWe8xFVFf6aRz38y Q/bTK6oMGsoJ9Fu1a5RC5vQNdUAO02nzcsKoL0RMHIiryuV4TRei7VqWZiYj71ZR m83/cOmY5klsqZ1/0u8xHJdcjETY9Zr7KzTPrWFK585PWOH0RJtkRoNtUFILA/2o kILndpEHcv1c4A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:32:58 2025 by rpki-client