This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft File: WtERZRPCPYeqy_Wxu-45mBx2McE.mft (raw, json) Hash identifier: k/baU3cOEVmpXF9JGpJGrf1f1/qv6rDMWhykxMnRwxI= Subject key identifier: 06:DE:50:E0:10:2A:25:61:F2:94:04:03:85:C5:7D:6D:DF:63:32:BE Authority key identifier: 5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1 Certificate issuer: /CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1 Certificate serial: 019AF23F7821BC5E0DA89A3F28D871198D3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft Manifest number: 069F Signing time: Sat 06 Dec 2025 06:00:36 +0000 Manifest this update: Sat 06 Dec 2025 06:00:36 +0000 Manifest next update: Sun 07 Dec 2025 06:00:36 +0000 Files and hashes: 1: DPHxPFz4hD849uPgUxDNkAj6z10.roa (hash: Piql48dJ9y76IkzwD/1Mb1jMycR207R9MhGmJ1kgKWk=) 2: WtERZRPCPYeqy_Wxu-45mBx2McE.crl (hash: iU3fwUHkvkUCYmSzoarniwS9S5CQDh+qhyr1tHf09Fk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:78:21:bc:5e:0d:a8:9a:3f:28:d8:71:19:8d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1 Validity Not Before: Dec 6 06:00:36 2025 GMT Not After : Dec 7 06:00:36 2025 GMT Subject: CN=06de50e0102a2561f294040385c57d6ddf6332be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3f:ac:a4:a3:84:20:cd:ba:13:d6:61:87:d8: 23:d5:64:58:3a:13:11:12:76:8e:87:89:19:a3:6f: 93:ef:e8:27:9b:79:1b:7d:b5:2b:f0:fe:ba:52:30: 15:13:ac:ef:54:12:2c:ec:1f:95:1e:b1:12:f2:e6: 84:d4:25:f7:11:cf:b0:94:a3:69:2b:12:88:5b:e0: 73:c4:21:ea:1b:4b:9d:cc:78:13:b1:18:a3:be:32: 5f:0d:6b:df:e7:86:f4:4c:6d:c5:bc:24:d1:33:71: 07:91:db:e5:f5:c3:30:46:68:be:34:dd:0c:a1:b1: 72:c4:85:76:78:67:7f:0d:15:4d:96:8b:ea:5a:bb: e3:42:cc:92:9e:db:8c:80:b9:b9:9d:9b:40:cd:08: c5:6e:90:70:8b:f2:4d:33:07:31:81:bd:1f:0e:6a: 7b:62:db:4e:48:7b:11:e5:61:77:cc:10:61:75:59: e3:0b:5e:1d:5f:d1:53:1e:dc:7b:85:cb:73:84:cf: 34:31:4e:78:57:f4:cd:64:b9:29:de:90:88:83:b5: ee:13:9d:44:ff:bc:bc:8f:b6:73:9c:66:e8:45:b9: 43:85:92:e9:f0:87:90:0f:06:a3:37:2b:37:2b:84: 4d:f5:fb:05:03:6d:6a:2c:4c:29:d4:2c:d7:a4:5c: 42:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DE:50:E0:10:2A:25:61:F2:94:04:03:85:C5:7D:6D:DF:63:32:BE X509v3 Authority Key Identifier: keyid:5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:7a:ef:34:39:6a:cd:60:00:cb:1d:8f:98:b7:51:20:9c:f5: 0a:31:21:6e:26:d6:f4:49:5e:ed:0c:70:b3:8d:7a:ac:2b:88: e3:75:a6:ec:81:95:5d:b8:5b:9d:1c:3b:86:4f:6a:6a:cc:05: 68:d6:fc:4d:7f:6f:81:61:c9:6c:d7:d6:6c:77:64:27:17:54: c7:13:57:2d:f8:f1:c2:f2:e4:44:ec:57:50:49:e3:b4:b0:e7: 7e:df:5f:90:76:56:cc:8e:b1:34:8b:8d:d9:ad:d9:6e:b9:c0: e0:11:ce:d5:75:13:bd:fb:c5:1a:55:28:33:a0:fa:10:16:d7: 63:fa:38:75:2d:7b:eb:04:26:1b:42:ea:e8:31:00:ad:16:98: 92:25:b1:98:cb:80:ec:9d:c4:34:c4:7e:9e:ff:a8:18:f3:ec: 4e:03:cc:71:22:76:7b:9d:44:3a:31:e5:15:88:00:11:96:4c: f0:fa:4c:40:1d:79:54:3c:8d:bb:08:66:db:bd:62:5f:ce:c7: 43:7d:a1:94:78:09:c4:b3:36:ec:0a:f7:ad:cd:3c:eb:4c:c6: 38:b7:c2:14:3e:39:f1:22:b0:9b:21:0b:0c:fa:ec:6e:8d:f0: 28:27:40:1d:f9:de:44:55:4a:a8:bc:e6:11:5d:9b:28:73:b8: f9:50:11:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3ghvF4NqJo/KNhxGY09MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZDExMTY1MTNjMjNkODdhYWNiZjViMWJiZWUzOTk4MWM3 NjMxYzEwHhcNMjUxMjA2MDYwMDM2WhcNMjUxMjA3MDYwMDM2WjAzMTEwLwYDVQQD EygwNmRlNTBlMDEwMmEyNTYxZjI5NDA0MDM4NWM1N2Q2ZGRmNjMzMmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz+spKOEIM26E9Zhh9gj1WRYOhMR EnaOh4kZo2+T7+gnm3kbfbUr8P66UjAVE6zvVBIs7B+VHrES8uaE1CX3Ec+wlKNp KxKIW+BzxCHqG0udzHgTsRijvjJfDWvf54b0TG3FvCTRM3EHkdvl9cMwRmi+NN0M obFyxIV2eGd/DRVNlovqWrvjQsySntuMgLm5nZtAzQjFbpBwi/JNMwcxgb0fDmp7 YttOSHsR5WF3zBBhdVnjC14dX9FTHtx7hctzhM80MU54V/TNZLkp3pCIg7XuE51E /7y8j7ZznGboRblDhZLp8IeQDwajNys3K4RN9fsFA21qLEwp1CzXpFxCsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbeUOAQKiVh8pQEA4XFfW3fYzK+MB8GA1UdIwQY MBaAFFrREWUTwj2Hqsv1sbvuOZgcdjHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3RFUlpSUENQWWVxeV9XeHUtNDVtQngyTWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMWNjOGQtODgwOC00YzFlLTgxZjAt MjNhYzk3OWQ0MWFkLzEvV3RFUlpSUENQWWVxeV9XeHUtNDVtQngyTWNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9iMWNjOGQtODgwOC00YzFlLTgxZjAtMjNhYzk3OWQ0MWFk LzEvV3RFUlpSUENQWWVxeV9XeHUtNDVtQngyTWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHrvNDlq zWAAyx2PmLdRIJz1CjEhbibW9Ele7Qxws416rCuI43Wm7IGVXbhbnRw7hk9qaswF aNb8TX9vgWHJbNfWbHdkJxdUxxNXLfjxwvLkROxXUEnjtLDnft9fkHZWzI6xNIuN 2a3ZbrnA4BHO1XUTvfvFGlUoM6D6EBbXY/o4dS176wQmG0Lq6DEArRaYkiWxmMuA 7J3ENMR+nv+oGPPsTgPMcSJ2e51EOjHlFYgAEZZM8PpMQB15VDyNuwhm271iX87H Q32hlHgJxLM27Ar3rc0860zGOLfCFD458SKwmyELDPrsbo3wKCdAHfneRFVKqLzm EV2bKHO4+VARDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:31 2025 by rpki-client