This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft File: wBxQlI83N__gw7drJBzpBWKIhdU.mft (raw, json) Hash identifier: jMgge+uh7y/2RY/1kU+6cnitwtL7CsUHYJryKm1MPAo= Subject key identifier: B5:36:8E:61:7B:EA:45:7E:33:75:1A:82:6A:23:7E:85:7E:85:6E:62 Authority key identifier: C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5 Certificate issuer: /CN=c01c50948f3737ffe0c3b76b241ce905628885d5 Certificate serial: 019AF3C06E3A1F879BF4D9424BC942B727D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 13:01:05 +0000 Manifest this update: Sat 06 Dec 2025 13:01:05 +0000 Manifest next update: Sun 07 Dec 2025 13:01:05 +0000 Files and hashes: 1: XGDEPbtc7WSL9UqjAgvMfvuw4zE.roa (hash: kp+3RGyWysprTwe33mB6LBHrd9lT7FkQfMmhfRn83iM=) 2: wBxQlI83N__gw7drJBzpBWKIhdU.crl (hash: dBeW3e6IQj6qgVcJFW54NcJt9jGo9m700vAWLd4Qvmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:6e:3a:1f:87:9b:f4:d9:42:4b:c9:42:b7:27:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c01c50948f3737ffe0c3b76b241ce905628885d5 Validity Not Before: Dec 6 13:01:05 2025 GMT Not After : Dec 7 13:01:05 2025 GMT Subject: CN=b5368e617bea457e33751a826a237e857e856e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f5:02:5f:9f:f0:77:4b:83:59:d6:d5:96:ac: 6e:59:f8:f5:6f:c5:de:37:18:a3:c0:81:36:43:0c: c8:be:04:20:84:b4:22:dd:13:2c:38:72:06:eb:cb: 42:7f:60:80:aa:25:56:6f:e9:17:c6:3d:0b:16:67: 7b:24:71:8c:8a:30:0c:0b:0a:92:58:d0:14:75:59: 3c:13:af:f5:ed:dc:21:a6:91:3b:04:0b:4a:f9:9a: 7f:c2:a3:bc:5e:8d:30:2c:18:9a:18:a3:5a:7d:07: f7:23:7f:d4:62:5d:25:69:4b:c5:69:96:84:42:a4: 99:28:4a:21:12:dc:34:16:b7:51:33:df:ff:74:42: 08:bc:eb:19:bc:e0:af:a7:96:1c:f1:a9:6d:37:cb: d2:a3:1b:cc:8c:51:5e:36:6e:6d:95:28:ea:fc:4d: 28:35:a4:e4:59:db:40:f6:f3:73:39:ed:f1:c4:22: f9:37:ac:8b:cc:ef:a0:a0:68:c8:e5:99:da:66:c2: 65:bf:89:d5:42:16:b3:d7:1f:17:bc:ae:8f:32:6e: 79:04:97:c8:1e:b7:82:37:29:45:da:e3:0a:99:54: da:bd:8e:47:99:33:71:5d:69:51:62:cf:ce:1d:66: 4c:97:63:4c:b9:bd:b9:e1:5b:6c:f4:87:2d:da:7d: f8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:36:8E:61:7B:EA:45:7E:33:75:1A:82:6A:23:7E:85:7E:85:6E:62 X509v3 Authority Key Identifier: keyid:C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:7e:bd:68:ab:0c:0e:1c:6f:a3:b6:d6:e8:36:02:ce:e7:d2: af:2f:68:f2:42:ec:d4:c6:01:0a:8a:1b:92:73:83:1f:fd:dc: 99:d4:5d:26:26:73:48:a0:73:94:0a:34:4e:cf:06:74:58:05: a1:c2:9f:ec:c3:7f:29:bb:5c:0c:e0:e5:85:00:53:9a:b5:62: 70:d8:5f:4e:04:a9:a9:b9:50:d8:2d:a1:59:07:cc:16:56:3a: 2f:3e:a3:32:81:3a:45:9b:c4:bd:61:8f:37:07:a1:4b:59:05: 5d:9c:6e:60:6a:e6:31:8a:27:14:75:a4:64:3e:92:53:93:c8: f9:54:68:b8:b4:80:68:23:30:fe:27:13:ec:30:63:6b:58:6f: 7e:77:b3:0b:a5:dd:06:9d:25:16:44:0d:74:2b:e4:09:d0:71: 18:c8:3f:e2:49:53:dc:92:f7:92:16:73:ed:a8:b4:f8:21:fc: f2:ab:05:ca:5a:83:de:c4:e3:bd:28:81:6a:c2:d7:3d:82:05: 61:68:11:0b:d6:92:d7:c8:ab:d4:61:cb:4e:dd:ec:f1:11:94: fd:aa:81:41:a8:85:bb:ef:06:d5:61:e4:c2:b5:69:b3:e3:1c: 6f:29:43:ca:24:ed:b3:c7:4f:06:da:25:97:88:6c:55:79:c7: b8:33:02:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwG46H4eb9NlCS8lCtyfVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMWM1MDk0OGYzNzM3ZmZlMGMzYjc2YjI0MWNlOTA1NjI4 ODg1ZDUwHhcNMjUxMjA2MTMwMTA1WhcNMjUxMjA3MTMwMTA1WjAzMTEwLwYDVQQD EyhiNTM2OGU2MTdiZWE0NTdlMzM3NTFhODI2YTIzN2U4NTdlODU2ZTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPUCX5/wd0uDWdbVlqxuWfj1b8Xe NxijwIE2QwzIvgQghLQi3RMsOHIG68tCf2CAqiVWb+kXxj0LFmd7JHGMijAMCwqS WNAUdVk8E6/17dwhppE7BAtK+Zp/wqO8Xo0wLBiaGKNafQf3I3/UYl0laUvFaZaE QqSZKEohEtw0FrdRM9//dEIIvOsZvOCvp5Yc8altN8vSoxvMjFFeNm5tlSjq/E0o NaTkWdtA9vNzOe3xxCL5N6yLzO+goGjI5ZnaZsJlv4nVQhaz1x8XvK6PMm55BJfI HreCNylF2uMKmVTavY5HmTNxXWlRYs/OHWZMl2NMub254Vts9Ict2n34owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLU2jmF76kV+M3UagmojfoV+hW5iMB8GA1UdIwQY MBaAFMAcUJSPNzf/4MO3ayQc6QViiIXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0J4UWxJODNOX19ndzdkckpCenBCV0tJaGRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wYTc4MzEtN2UzMC00ZWQ1LWE3YzYt Y2QxNDk2ZGU4NDVlLzEvd0J4UWxJODNOX19ndzdkckpCenBCV0tJaGRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8wYTc4MzEtN2UzMC00ZWQ1LWE3YzYtY2QxNDk2ZGU4NDVl LzEvd0J4UWxJODNOX19ndzdkckpCenBCV0tJaGRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj369aKsM Dhxvo7bW6DYCzufSry9o8kLs1MYBCoobknODH/3cmdRdJiZzSKBzlAo0Ts8GdFgF ocKf7MN/KbtcDODlhQBTmrVicNhfTgSpqblQ2C2hWQfMFlY6Lz6jMoE6RZvEvWGP NwehS1kFXZxuYGrmMYonFHWkZD6SU5PI+VRouLSAaCMw/icT7DBja1hvfnezC6Xd Bp0lFkQNdCvkCdBxGMg/4klT3JL3khZz7ai0+CH88qsFylqD3sTjvSiBasLXPYIF YWgRC9aS18ir1GHLTt3s8RGU/aqBQaiFu+8G1WHkwrVps+McbylDyiTts8dPBtol l4hsVXnHuDMC2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 16:32:04 2025 by rpki-client