This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft File: wUuc2uDH11fKow4dR7Nz3uffdW0.mft (raw, json) Hash identifier: XXhHUYmtqhflGBKa8c5F5fNvL5084A6v9mUhXG1OK5M= Subject key identifier: 65:D0:A1:6D:C7:DB:BC:7E:49:52:4C:F2:9B:41:8B:5D:74:F8:8F:2F Authority key identifier: C1:4B:9C:DA:E0:C7:D7:57:CA:A3:0E:1D:47:B3:73:DE:E7:DF:75:6D Certificate issuer: /CN=c14b9cdae0c7d757caa30e1d47b373dee7df756d Certificate serial: 019B1FF3FBE94E38FF61D38A2E97FDA4CF49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUuc2uDH11fKow4dR7Nz3uffdW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft Manifest number: 03FD Signing time: Mon 15 Dec 2025 03:00:41 +0000 Manifest this update: Mon 15 Dec 2025 03:00:41 +0000 Manifest next update: Tue 16 Dec 2025 03:00:41 +0000 Files and hashes: 1: wUuc2uDH11fKow4dR7Nz3uffdW0.crl (hash: SUc/NdcFsxx+7QC1VpsTp0b+gDqmCFFOiBVPyjS9VTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft rsync://rpki.ripe.net/repository/DEFAULT/wUuc2uDH11fKow4dR7Nz3uffdW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f3:fb:e9:4e:38:ff:61:d3:8a:2e:97:fd:a4:cf:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c14b9cdae0c7d757caa30e1d47b373dee7df756d Validity Not Before: Dec 15 03:00:41 2025 GMT Not After : Dec 16 03:00:41 2025 GMT Subject: CN=65d0a16dc7dbbc7e49524cf29b418b5d74f88f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:df:32:dc:6c:67:01:9d:ab:30:be:25:95: db:26:74:bb:55:47:f3:f6:45:43:c2:c6:7f:9a:bc: c8:1d:3a:67:5e:a4:74:2e:09:61:42:b3:67:33:3e: 60:e2:65:19:95:37:ca:c4:a5:7f:6d:07:4f:79:d4: e4:94:35:15:50:78:c1:51:91:a3:5c:68:1e:cb:0a: 61:82:da:5d:12:d0:a1:67:20:93:cd:98:7c:22:82: 83:a5:1b:38:1b:8a:94:0b:c4:1d:37:28:db:36:e5: c6:a5:c6:15:c6:a6:8b:e1:a8:f1:6f:da:78:04:a4: 53:21:52:f9:7e:de:12:59:e7:31:56:15:d9:4b:de: 78:11:30:49:60:de:44:7b:74:d0:43:d1:80:bf:6a: ac:3b:bc:d2:31:87:0f:2f:7b:0e:b5:23:64:74:a1: a8:3c:af:ba:d7:db:9a:9c:93:64:2a:99:8d:c8:8c: c0:0f:6d:0b:09:9a:38:e3:10:00:05:a9:07:fe:64: f8:33:36:df:ff:ea:4f:27:b7:d7:f1:30:71:4f:7d: 43:f0:fc:df:b4:58:5a:69:3a:21:13:9d:05:3f:d7: e1:31:98:22:6f:a2:5a:0c:8a:38:05:70:a0:2c:f4: 64:ea:06:21:10:f3:ab:fb:08:1b:7b:f3:f3:c2:24: aa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D0:A1:6D:C7:DB:BC:7E:49:52:4C:F2:9B:41:8B:5D:74:F8:8F:2F X509v3 Authority Key Identifier: keyid:C1:4B:9C:DA:E0:C7:D7:57:CA:A3:0E:1D:47:B3:73:DE:E7:DF:75:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUuc2uDH11fKow4dR7Nz3uffdW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:d7:38:a8:40:04:15:57:57:30:34:8d:aa:51:cc:7a:8a:1c: 8c:9f:3a:5e:02:4b:85:0c:8a:9e:af:07:b2:4c:43:04:97:e7: a5:18:1e:0a:bd:32:4b:da:65:ca:d9:dd:2b:7c:c6:2c:ef:ea: 3e:0d:73:be:d1:84:30:e8:a8:62:cb:64:c7:18:78:73:eb:61: d1:d6:67:84:94:2a:e0:e0:6b:39:88:ae:e6:a8:19:d6:93:39: 83:49:54:d0:6b:26:98:39:10:07:13:3b:d5:45:93:c5:f0:72: 2e:68:3d:82:8f:ea:f0:58:ec:76:fd:03:5e:55:84:42:3f:cf: df:f2:dd:38:98:7d:20:81:2d:8e:cd:a8:e2:b9:f6:9b:ff:d1: 73:5d:86:2c:4e:c2:be:77:07:c6:b1:14:13:c7:72:7a:8b:b0: a1:88:0c:78:4d:dc:b6:e8:a7:57:00:a7:98:9e:41:ef:5e:cd: c2:8a:53:26:04:86:e5:78:76:95:47:74:1e:2a:bc:f3:66:4b: f8:43:95:96:5a:e4:2b:6a:62:f4:9c:84:a3:cb:ee:99:3c:85: ff:29:21:97:a7:c3:43:24:f2:97:f0:69:2b:9a:6c:6a:55:2f: fb:0c:88:7b:0a:36:14:09:de:9c:22:29:f3:a2:9b:9f:c2:14: bb:5b:c9:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf8/vpTjj/YdOKLpf9pM9JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNGI5Y2RhZTBjN2Q3NTdjYWEzMGUxZDQ3YjM3M2RlZTdk Zjc1NmQwHhcNMjUxMjE1MDMwMDQxWhcNMjUxMjE2MDMwMDQxWjAzMTEwLwYDVQQD Eyg2NWQwYTE2ZGM3ZGJiYzdlNDk1MjRjZjI5YjQxOGI1ZDc0Zjg4ZjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPLfMtxsZwGdqzC+JZXbJnS7VUfz 9kVDwsZ/mrzIHTpnXqR0LglhQrNnMz5g4mUZlTfKxKV/bQdPedTklDUVUHjBUZGj XGgeywphgtpdEtChZyCTzZh8IoKDpRs4G4qUC8QdNyjbNuXGpcYVxqaL4ajxb9p4 BKRTIVL5ft4SWecxVhXZS954ETBJYN5Ee3TQQ9GAv2qsO7zSMYcPL3sOtSNkdKGo PK+619uanJNkKpmNyIzAD20LCZo44xAABakH/mT4Mzbf/+pPJ7fX8TBxT31D8Pzf tFhaaTohE50FP9fhMZgib6JaDIo4BXCgLPRk6gYhEPOr+wgbe/PzwiSqhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXQoW3H27x+SVJM8ptBi110+I8vMB8GA1UdIwQY MBaAFMFLnNrgx9dXyqMOHUezc97n33VtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1V1YzJ1REgxMWZLb3c0ZFI3TnozdWZmZFcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9hOTlhMmEtNjAyNS00ZjViLTlhYWYt YjEwZWFmODY0YmI4LzEvd1V1YzJ1REgxMWZLb3c0ZFI3TnozdWZmZFcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9hOTlhMmEtNjAyNS00ZjViLTlhYWYtYjEwZWFmODY0YmI4 LzEvd1V1YzJ1REgxMWZLb3c0ZFI3TnozdWZmZFcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNc4qEAE FVdXMDSNqlHMeoocjJ86XgJLhQyKnq8HskxDBJfnpRgeCr0yS9plytndK3zGLO/q Pg1zvtGEMOioYstkxxh4c+th0dZnhJQq4OBrOYiu5qgZ1pM5g0lU0GsmmDkQBxM7 1UWTxfByLmg9go/q8Fjsdv0DXlWEQj/P3/LdOJh9IIEtjs2o4rn2m//Rc12GLE7C vncHxrEUE8dyeouwoYgMeE3ctuinVwCnmJ5B717NwopTJgSG5Xh2lUd0Hiq882ZL +EOVllrkK2pi9JyEo8vumTyF/ykhl6fDQyTyl/BpK5psalUv+wyIewo2FAnenCIp 86Kbn8IUu1vJVA== -----END CERTIFICATE-----Generated at Mon Dec 15 12:01:18 2025 by rpki-client