This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft File: WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft (raw, json) Hash identifier: gWJXtCIcq0C7YZklDxPwdDudE/Uf/GtbfwWq5RDIDYg= Subject key identifier: B4:C1:99:4A:33:C9:51:93:62:0D:CD:73:BB:96:A7:64:EA:59:C5:C2 Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B Certificate issuer: /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b Certificate serial: 019B2DE6F996EB4ADA4D506C42A5C96BA622 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft Manifest number: 0850 Signing time: Wed 17 Dec 2025 20:01:10 +0000 Manifest this update: Wed 17 Dec 2025 20:01:10 +0000 Manifest next update: Thu 18 Dec 2025 20:01:10 +0000 Files and hashes: 1: Vm3FZcwyN5QxEii_ssxb-za5Fkk.roa (hash: InHAGmxk/rpqwiHkXwhjwEsvW1iLiHdwr3I++HGignQ=) 2: WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl (hash: yK+cdUC6edPs9+Iz9i3pSX8XDZwMoPZx5BTzoHd2m6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:e6:f9:96:eb:4a:da:4d:50:6c:42:a5:c9:6b:a6:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b Validity Not Before: Dec 17 20:01:10 2025 GMT Not After : Dec 18 20:01:10 2025 GMT Subject: CN=b4c1994a33c95193620dcd73bb96a764ea59c5c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a0:7d:65:d9:17:20:b1:c1:03:f9:4b:27:4f: a4:df:2e:45:dd:b6:a3:61:37:4d:2a:50:c4:ea:ab: e3:51:c2:82:b1:64:c6:e5:87:19:a6:8f:29:44:54: 74:e5:af:79:4c:6a:d9:71:3f:a9:05:e1:18:c2:0c: 61:d3:a7:b9:d8:e5:15:50:c4:c0:9e:49:a0:4d:ae: 01:bb:ab:06:c1:c7:b3:cd:c4:74:bb:c8:b4:72:10: 99:2f:98:d9:b1:22:f8:b5:6d:24:2a:c9:cc:2c:d4: 58:f6:e9:c7:80:fd:3f:27:af:8d:61:1b:6c:a2:d2: 22:64:44:99:05:1e:f4:f6:e9:2b:9a:e0:c0:1e:6e: f9:88:d2:f6:c3:63:cf:45:db:c5:f1:b8:a4:b4:b7: d3:20:73:68:ba:0c:30:4a:18:d3:bb:11:01:17:37: a1:cd:18:4e:91:3b:57:29:8b:62:7c:fa:3f:e4:03: 71:19:d6:ad:d4:d1:21:d4:5f:e9:8b:5a:f3:69:47: 2f:cc:5d:f8:7c:2e:94:5f:c2:be:43:74:a5:6d:33: 70:1c:d9:8d:74:48:80:d3:33:f2:70:7b:d9:d9:28: 35:b7:b3:9b:f2:aa:72:23:e1:a4:93:e3:7f:e8:9e: c8:f1:f9:25:fb:2e:ba:6e:ad:37:35:6f:09:84:c2: 96:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C1:99:4A:33:C9:51:93:62:0D:CD:73:BB:96:A7:64:EA:59:C5:C2 X509v3 Authority Key Identifier: keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:f6:b4:4a:f3:17:30:d7:b7:a9:35:8e:fb:16:68:8a:09:bb: 78:4a:71:2b:27:2d:a4:9e:59:24:2a:1f:49:34:fa:c5:87:9d: e9:e4:de:27:13:2c:23:99:21:ee:cb:2d:34:92:d3:54:e5:f7: 1f:b6:4c:07:2d:9d:e9:ed:e1:fd:fb:86:9e:3e:46:01:8e:cc: ea:27:0f:4c:75:84:aa:59:7b:46:58:20:06:f1:a4:6b:8a:31: c8:d9:96:98:05:f3:4d:c8:dc:b4:22:fc:16:66:cb:71:69:70: 3f:79:8b:c8:07:1e:a5:7b:52:db:c2:22:85:ec:aa:c8:de:ad: 4f:f3:72:ca:aa:c4:af:da:12:33:ac:4c:f1:2b:25:a5:f4:00: d5:45:49:9e:dd:d1:b1:14:a0:3c:69:b8:8c:a9:45:ee:d7:fa: a9:d2:70:a0:6c:00:20:86:50:18:62:6a:5c:66:8b:51:44:53: ad:53:cc:80:8d:41:f8:4f:ed:85:74:51:05:e0:ce:3d:5d:e1: e5:58:d5:7b:f2:08:77:d5:d3:ac:6f:76:fe:88:92:c2:fc:98: 68:06:c5:27:ab:93:71:6c:d8:91:d6:6d:2c:b2:91:6f:69:0a: cf:13:c1:10:2e:5e:d0:75:a1:43:94:04:5a:f6:85:53:8d:c0: 50:16:c4:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZst5vmW60raTVBsQqXJa6YiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NDU3YzY4NWM1YjE1YzNhZjRkNDNiNjBlNGQ0YzBhMGVl ZWQ2OGIwHhcNMjUxMjE3MjAwMTEwWhcNMjUxMjE4MjAwMTEwWjAzMTEwLwYDVQQD EyhiNGMxOTk0YTMzYzk1MTkzNjIwZGNkNzNiYjk2YTc2NGVhNTljNWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqB9ZdkXILHBA/lLJ0+k3y5F3baj YTdNKlDE6qvjUcKCsWTG5YcZpo8pRFR05a95TGrZcT+pBeEYwgxh06e52OUVUMTA nkmgTa4Bu6sGwcezzcR0u8i0chCZL5jZsSL4tW0kKsnMLNRY9unHgP0/J6+NYRts otIiZESZBR709ukrmuDAHm75iNL2w2PPRdvF8biktLfTIHNougwwShjTuxEBFzeh zRhOkTtXKYtifPo/5ANxGdat1NEh1F/pi1rzaUcvzF34fC6UX8K+Q3SlbTNwHNmN dEiA0zPycHvZ2Sg1t7Ob8qpyI+Gkk+N/6J7I8fkl+y66bq03NW8JhMKWZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTBmUozyVGTYg3Nc7uWp2TqWcXCMB8GA1UdIwQY MBaAFFlFfGhcWxXDr01Dtg5NTAoO7taLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2Qt MGJmMmExYjJjY2NiLzEvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2QtMGJmMmExYjJjY2Ni LzEvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/a0SvMX MNe3qTWO+xZoigm7eEpxKyctpJ5ZJCofSTT6xYed6eTeJxMsI5kh7sstNJLTVOX3 H7ZMBy2d6e3h/fuGnj5GAY7M6icPTHWEqll7RlggBvGka4oxyNmWmAXzTcjctCL8 FmbLcWlwP3mLyAcepXtS28IiheyqyN6tT/NyyqrEr9oSM6xM8SslpfQA1UVJnt3R sRSgPGm4jKlF7tf6qdJwoGwAIIZQGGJqXGaLUURTrVPMgI1B+E/thXRRBeDOPV3h 5VjVe/IId9XTrG92/oiSwvyYaAbFJ6uTcWzYkdZtLLKRb2kKzxPBEC5e0HWhQ5QE WvaFU43AUBbEFw== -----END CERTIFICATE-----Generated at Thu Dec 18 05:01:44 2025 by rpki-client