This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft File: WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft (raw, json) Hash identifier: mZuhMUk/3M7ZNCJD3es8GkN78bIf44BDR8yLKC+Ylgc= Subject key identifier: FF:9A:0C:93:BF:D9:3A:D9:AA:B8:C3:68:05:E7:6B:08:C2:29:DB:93 Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B Certificate issuer: /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b Certificate serial: 019B2BF91A07CF93B546BB46D59A27A504DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft Manifest number: 084F Signing time: Wed 17 Dec 2025 11:01:43 +0000 Manifest this update: Wed 17 Dec 2025 11:01:43 +0000 Manifest next update: Thu 18 Dec 2025 11:01:43 +0000 Files and hashes: 1: Vm3FZcwyN5QxEii_ssxb-za5Fkk.roa (hash: InHAGmxk/rpqwiHkXwhjwEsvW1iLiHdwr3I++HGignQ=) 2: WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl (hash: UZomzzdfL9MlJuRleF/i3LmUiAkqVeWrZInIpYdnTZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f9:1a:07:cf:93:b5:46:bb:46:d5:9a:27:a5:04:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b Validity Not Before: Dec 17 11:01:43 2025 GMT Not After : Dec 18 11:01:43 2025 GMT Subject: CN=ff9a0c93bfd93ad9aab8c36805e76b08c229db93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9e:10:f3:ae:a6:7c:a1:83:2c:5c:40:86:08: b4:58:23:83:60:18:7c:eb:f0:7c:b7:67:ee:6e:31: ca:c5:79:8a:e9:af:52:1c:58:59:25:5f:7e:57:af: 5c:4f:60:87:aa:01:9a:b2:66:5e:5b:f5:f6:91:8b: 1e:5e:07:d6:0b:33:73:9a:f9:62:6e:7d:e4:c2:ee: 6e:81:b1:2e:ee:7b:24:39:e0:19:d7:ec:fc:cf:43: 1a:f3:2a:ee:2f:c0:03:f9:48:c1:e1:be:bc:9c:1f: 2c:cc:0e:de:d0:87:44:c5:41:41:61:16:5e:a4:2a: 46:cc:73:64:82:cf:48:9b:82:30:be:e9:4c:62:bd: cd:80:d1:31:cd:99:e6:1c:0b:79:30:33:b7:2f:e2: 69:1e:f0:91:86:25:3f:48:95:bb:cb:44:88:d4:18: b2:cb:bf:c3:76:ee:f8:17:f1:28:0c:f0:0d:19:01: 84:4b:df:9a:cb:a3:64:46:0b:e9:70:b7:5f:f8:22: 4a:08:ae:1a:d2:cf:62:af:17:a7:a2:82:df:bb:f2: 05:35:27:7b:cc:dc:f1:8b:b7:7e:26:ad:38:93:c1: 23:ba:8c:9f:8b:f0:0d:49:5a:0c:45:76:a1:46:39: 07:b3:e5:81:01:98:75:88:91:1b:d0:80:22:62:d4: 4f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9A:0C:93:BF:D9:3A:D9:AA:B8:C3:68:05:E7:6B:08:C2:29:DB:93 X509v3 Authority Key Identifier: keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:a4:fe:18:73:a0:45:fc:54:cf:d0:cf:dc:3f:ab:6d:06:f2: 94:6a:72:12:55:f1:05:13:8a:6c:c0:b2:29:e4:08:b7:6a:be: 20:0c:e0:3c:4a:a8:9f:b5:9d:4a:af:16:2e:d5:8f:37:d2:f0: f0:4c:65:8a:ff:3e:1f:ca:d5:87:d4:0f:8d:17:77:08:30:02: c2:84:5e:50:d6:2e:04:4e:bb:e9:6d:d6:20:6e:8f:44:0a:33: c9:b1:ee:88:84:f6:d3:61:29:08:fb:31:bd:8a:0a:66:f4:48: 1a:66:2f:62:38:02:59:a0:59:6e:fc:39:d5:11:3e:81:07:38: 55:96:85:cd:91:9e:13:f3:8e:8f:09:74:1a:df:54:b2:79:9d: 48:93:32:6e:68:7c:2f:88:fe:cf:29:38:36:70:f1:ac:81:e1: a1:7d:70:bc:62:58:55:91:43:0d:fb:fb:5c:65:51:e4:cc:31: ef:96:0a:f6:32:71:39:c1:1a:4b:70:56:8c:8d:66:23:f9:7b: a3:33:cf:05:78:49:2b:ae:c7:09:87:35:a9:00:07:c0:80:9b: cb:a1:a7:d4:d1:79:26:2b:90:ac:fc:81:e4:12:35:b7:ca:c9: ee:b5:b2:05:af:dd:30:67:26:57:ab:e8:0a:bc:b5:d9:87:81: fa:56:5e:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+RoHz5O1RrtG1ZonpQTeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NDU3YzY4NWM1YjE1YzNhZjRkNDNiNjBlNGQ0YzBhMGVl ZWQ2OGIwHhcNMjUxMjE3MTEwMTQzWhcNMjUxMjE4MTEwMTQzWjAzMTEwLwYDVQQD EyhmZjlhMGM5M2JmZDkzYWQ5YWFiOGMzNjgwNWU3NmIwOGMyMjlkYjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ4Q866mfKGDLFxAhgi0WCODYBh8 6/B8t2fubjHKxXmK6a9SHFhZJV9+V69cT2CHqgGasmZeW/X2kYseXgfWCzNzmvli bn3kwu5ugbEu7nskOeAZ1+z8z0Ma8yruL8AD+UjB4b68nB8szA7e0IdExUFBYRZe pCpGzHNkgs9Im4IwvulMYr3NgNExzZnmHAt5MDO3L+JpHvCRhiU/SJW7y0SI1Biy y7/Ddu74F/EoDPANGQGES9+ay6NkRgvpcLdf+CJKCK4a0s9irxenooLfu/IFNSd7 zNzxi7d+Jq04k8Ejuoyfi/ANSVoMRXahRjkHs+WBAZh1iJEb0IAiYtRPrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+aDJO/2TrZqrjDaAXnawjCKduTMB8GA1UdIwQY MBaAFFlFfGhcWxXDr01Dtg5NTAoO7taLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2Qt MGJmMmExYjJjY2NiLzEvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2QtMGJmMmExYjJjY2Ni LzEvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKT+GHOg RfxUz9DP3D+rbQbylGpyElXxBROKbMCyKeQIt2q+IAzgPEqon7WdSq8WLtWPN9Lw 8Exliv8+H8rVh9QPjRd3CDACwoReUNYuBE676W3WIG6PRAozybHuiIT202EpCPsx vYoKZvRIGmYvYjgCWaBZbvw51RE+gQc4VZaFzZGeE/OOjwl0Gt9UsnmdSJMybmh8 L4j+zyk4NnDxrIHhoX1wvGJYVZFDDfv7XGVR5Mwx75YK9jJxOcEaS3BWjI1mI/l7 ozPPBXhJK67HCYc1qQAHwICby6Gn1NF5JiuQrPyB5BI1t8rJ7rWyBa/dMGcmV6vo Cry12YeB+lZeSQ== -----END CERTIFICATE-----Generated at Wed Dec 17 18:32:50 2025 by rpki-client