This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft File: WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft (raw, json) Hash identifier: xaBe+GovIYGXj7Ews/SW8xSq4CfACmCzSGffh8uQwV8= Subject key identifier: DB:12:18:07:32:22:46:BA:3A:81:D3:A5:A1:2C:10:95:3C:B8:70:FB Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B Certificate issuer: /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b Certificate serial: 019AF2095EC5C1F8B1BA3666521CB895EB09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft Manifest number: 0831 Signing time: Sat 06 Dec 2025 05:01:31 +0000 Manifest this update: Sat 06 Dec 2025 05:01:31 +0000 Manifest next update: Sun 07 Dec 2025 05:01:31 +0000 Files and hashes: 1: Vm3FZcwyN5QxEii_ssxb-za5Fkk.roa (hash: InHAGmxk/rpqwiHkXwhjwEsvW1iLiHdwr3I++HGignQ=) 2: WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl (hash: Ux+MPYzxp2hcvzaVVf6EJmhVAUEVqR6mXSUFd4PZf64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:5e:c5:c1:f8:b1:ba:36:66:52:1c:b8:95:eb:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b Validity Not Before: Dec 6 05:01:31 2025 GMT Not After : Dec 7 05:01:31 2025 GMT Subject: CN=db121807322246ba3a81d3a5a12c10953cb870fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:da:c2:b2:7e:0b:3c:08:0d:61:b1:8e:04:9e: da:87:66:fe:8b:0e:2e:8d:48:16:8a:62:a8:7b:8f: b0:eb:19:6a:53:17:3f:61:ee:3e:0c:92:fe:c5:e3: eb:e8:2c:dd:05:3c:7d:de:9d:8f:eb:cf:a6:a2:50: 74:11:cc:61:05:ae:2e:bd:d2:64:7e:c2:d6:0a:f7: cf:10:57:38:9d:29:c3:d9:33:2d:9f:58:11:c1:44: b5:bc:ff:f2:bb:6e:03:be:ab:11:4f:da:73:71:79: d2:9e:a7:f3:08:97:ff:99:8a:7a:0a:a9:7a:ed:d5: a5:3f:f9:de:f8:a5:2e:96:77:0a:60:cc:d5:12:da: 20:a8:fc:0f:51:55:69:df:d6:91:ac:86:77:96:19: 8a:9b:dc:60:74:49:e7:80:06:e7:c0:9d:04:9f:48: e3:33:ce:33:e4:d7:23:88:5f:36:ec:d5:df:d6:44: dd:1d:6a:57:25:af:50:d3:5c:70:c4:24:8f:dd:aa: af:05:b0:5c:c6:51:7b:02:5c:6d:61:4c:b6:d6:77: 29:a6:01:fe:66:8e:5c:7c:21:13:f2:3c:e1:24:22: e7:71:88:10:79:ac:d1:76:6e:9b:69:e7:73:64:dd: aa:fb:1b:28:73:90:11:e6:65:34:25:2d:c5:48:6c: 44:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:12:18:07:32:22:46:BA:3A:81:D3:A5:A1:2C:10:95:3C:B8:70:FB X509v3 Authority Key Identifier: keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:9a:21:2f:93:f7:83:6f:6b:99:d9:e2:e4:a6:4f:7a:c9:bf: 1c:91:7e:a4:66:91:fb:1d:a4:db:f0:d9:bb:61:6d:d3:d1:71: da:b5:8a:c2:88:8f:7f:db:e9:a8:25:14:cc:21:b3:3a:b6:38: bb:b6:92:bc:6e:5b:2c:85:80:1c:9b:f5:39:a9:b0:fe:57:06: 1e:9c:e5:b9:52:5d:5c:47:a9:ea:42:1f:42:70:e5:ff:23:95: 0d:76:34:cf:b7:2d:33:ee:3b:3e:7b:4f:b8:03:d8:f4:7f:22: b2:13:76:a0:38:13:a5:30:ce:d2:18:fd:6c:bb:e0:c5:ae:b9: de:b6:ec:1f:e1:c7:1e:d2:6e:df:b8:76:6e:a0:09:8a:d1:80: b4:f4:4c:0e:c2:be:1f:a8:c8:16:f9:67:1b:82:7f:63:72:a0: 70:66:6a:bf:07:c0:69:51:96:6f:7c:54:70:ef:06:87:38:0b: 6b:38:62:80:2b:e2:ac:4d:4e:b0:01:e4:cc:0e:7a:e9:27:f6: 9b:5d:bc:90:15:90:b6:b8:29:f1:78:41:59:9c:42:b5:ae:42: 40:30:e3:15:4a:f9:99:04:67:d2:df:59:cf:db:51:64:7b:ac: 85:d1:51:f4:9e:98:c9:e8:53:05:24:92:3c:82:ac:1e:30:9f: ec:52:14:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCV7FwfixujZmUhy4lesJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NDU3YzY4NWM1YjE1YzNhZjRkNDNiNjBlNGQ0YzBhMGVl ZWQ2OGIwHhcNMjUxMjA2MDUwMTMxWhcNMjUxMjA3MDUwMTMxWjAzMTEwLwYDVQQD EyhkYjEyMTgwNzMyMjI0NmJhM2E4MWQzYTVhMTJjMTA5NTNjYjg3MGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttrCsn4LPAgNYbGOBJ7ah2b+iw4u jUgWimKoe4+w6xlqUxc/Ye4+DJL+xePr6CzdBTx93p2P68+molB0EcxhBa4uvdJk fsLWCvfPEFc4nSnD2TMtn1gRwUS1vP/yu24DvqsRT9pzcXnSnqfzCJf/mYp6Cql6 7dWlP/ne+KUulncKYMzVEtogqPwPUVVp39aRrIZ3lhmKm9xgdEnngAbnwJ0En0jj M84z5NcjiF827NXf1kTdHWpXJa9Q01xwxCSP3aqvBbBcxlF7AlxtYUy21ncppgH+ Zo5cfCET8jzhJCLncYgQeazRdm6baedzZN2q+xsoc5AR5mU0JS3FSGxECwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsSGAcyIka6OoHTpaEsEJU8uHD7MB8GA1UdIwQY MBaAFFlFfGhcWxXDr01Dtg5NTAoO7taLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2Qt MGJmMmExYjJjY2NiLzEvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2QtMGJmMmExYjJjY2Ni LzEvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpohL5P3 g29rmdni5KZPesm/HJF+pGaR+x2k2/DZu2Ft09Fx2rWKwoiPf9vpqCUUzCGzOrY4 u7aSvG5bLIWAHJv1Oamw/lcGHpzluVJdXEep6kIfQnDl/yOVDXY0z7ctM+47PntP uAPY9H8ishN2oDgTpTDO0hj9bLvgxa653rbsH+HHHtJu37h2bqAJitGAtPRMDsK+ H6jIFvlnG4J/Y3KgcGZqvwfAaVGWb3xUcO8GhzgLazhigCvirE1OsAHkzA566Sf2 m128kBWQtrgp8XhBWZxCta5CQDDjFUr5mQRn0t9Zz9tRZHushdFR9J6YyehTBSSS PIKsHjCf7FIUhA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:30 2025 by rpki-client