This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft File: v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft (raw, json) Hash identifier: qU5GN9sNjJULimSXNxSSl1wvuLl5A6zH/7r3J9EoLLY= Subject key identifier: 65:2A:F6:F0:D6:D0:3C:C3:2B:39:2F:B0:3C:98:5D:19:8C:F0:37:27 Authority key identifier: BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3 Certificate issuer: /CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3 Certificate serial: 019B115CE4B083970511610E83E387B6F578 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft Manifest number: 0ECD Signing time: Fri 12 Dec 2025 07:00:59 +0000 Manifest this update: Fri 12 Dec 2025 07:00:59 +0000 Manifest next update: Sat 13 Dec 2025 07:00:59 +0000 Files and hashes: 1: Fuwpc4A-TRfgVPSV8ewciJSWczY.roa (hash: Y0uk9yq3kYnde4ofaqo2ePCwnF8vYGybwjzGM4J+Glo=) 2: v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl (hash: G6CKJ2k2CV/xrVBBNFhsPJXLXllY3av0B824ALaLiVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 07:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5c:e4:b0:83:97:05:11:61:0e:83:e3:87:b6:f5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3 Validity Not Before: Dec 12 07:00:59 2025 GMT Not After : Dec 13 07:00:59 2025 GMT Subject: CN=652af6f0d6d03cc32b392fb03c985d198cf03727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:14:9d:63:38:31:6f:5c:40:6e:72:e7:42:11: 14:33:65:f1:89:37:0a:e0:30:11:9c:ea:15:d8:a5: db:9f:4f:de:9d:a2:54:6c:a6:5f:1e:2f:20:3e:35: c7:79:c1:5b:1d:90:b1:3f:38:3f:8e:9d:61:5c:72: 2e:cf:f7:ad:96:50:97:7f:2b:9c:42:8e:fa:3c:68: 21:2b:d6:61:8d:f9:c3:46:5f:e8:38:48:39:f1:a0: fb:4c:26:72:ae:88:e6:ef:f5:f1:09:31:1c:13:31: c0:84:e6:71:87:60:ad:42:40:ec:7b:ff:90:e1:4b: 09:ad:0b:ff:76:35:bf:22:b2:5b:4e:1d:7f:eb:aa: 93:78:27:7d:e3:7c:a6:8c:6f:86:90:da:23:eb:aa: c8:f5:ed:1c:91:45:45:bd:d8:87:e5:3e:c4:56:a8: e3:78:bb:46:fc:d1:7b:0a:17:ee:33:5c:dc:53:3f: c8:c6:8c:af:fa:19:a1:cf:ff:c1:88:94:d8:cd:45: d6:d6:e8:b9:3e:d8:7f:a5:35:2d:b9:fa:b9:05:3f: c6:c8:65:72:03:5c:23:e9:80:23:23:a8:b9:df:5d: 9e:3c:d9:e7:01:24:cf:69:5b:6c:19:da:eb:df:dc: a7:a4:cd:3b:c3:49:9d:d8:54:cc:08:cf:0c:27:8a: a6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2A:F6:F0:D6:D0:3C:C3:2B:39:2F:B0:3C:98:5D:19:8C:F0:37:27 X509v3 Authority Key Identifier: keyid:BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:aa:d9:11:0a:b8:b9:52:ed:c5:4d:00:36:df:9c:06:76:38: 26:d0:9d:cc:fb:1a:41:53:2a:cc:a4:73:d5:d7:fc:81:80:f1: a2:c9:b0:e9:74:36:7c:c1:59:7a:e5:7a:fb:ca:3c:af:45:9e: c6:5f:f3:1d:a6:60:ae:ce:1b:6f:69:7b:54:42:b4:32:8d:3a: 5b:44:0a:76:e6:f3:d0:92:86:f8:64:7f:3a:e4:df:98:94:1c: 9c:25:95:49:18:1a:64:4b:04:3a:df:64:84:6c:a9:da:87:eb: ff:01:45:0b:ab:ba:62:d9:a0:c4:51:01:e8:98:3a:75:8e:76: 2e:67:53:d7:12:78:8b:ab:55:f7:1b:e4:71:f6:d6:03:ba:cf: bf:33:00:17:ae:81:1c:6a:7c:ab:ce:cb:c8:39:52:e9:cd:e0: 3f:39:f8:5e:b1:02:08:9c:55:95:78:05:1d:3b:9f:02:55:39: e3:6e:3e:c7:10:d2:62:e2:83:b7:4b:33:27:28:20:f4:49:2a: b7:89:47:f2:ee:40:d6:f4:9d:b1:a6:f6:6f:53:98:68:41:48: 78:83:07:2d:24:17:43:20:da:87:6b:dd:a6:5e:a2:43:1e:62: 11:e5:65:ae:3b:2f:82:55:62:76:e5:46:46:09:42:51:35:3c: b4:21:67:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXOSwg5cFEWEOg+OHtvV4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNTU5OWMyNjc1NWY0YTRkNGY1NDBlMmZmZDdiNzRhMzkw NTNkYTMwHhcNMjUxMjEyMDcwMDU5WhcNMjUxMjEzMDcwMDU5WjAzMTEwLwYDVQQD Eyg2NTJhZjZmMGQ2ZDAzY2MzMmIzOTJmYjAzYzk4NWQxOThjZjAzNzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBSdYzgxb1xAbnLnQhEUM2XxiTcK 4DARnOoV2KXbn0/enaJUbKZfHi8gPjXHecFbHZCxPzg/jp1hXHIuz/etllCXfyuc Qo76PGghK9ZhjfnDRl/oOEg58aD7TCZyrojm7/XxCTEcEzHAhOZxh2CtQkDse/+Q 4UsJrQv/djW/IrJbTh1/66qTeCd943ymjG+GkNoj66rI9e0ckUVFvdiH5T7EVqjj eLtG/NF7ChfuM1zcUz/Ixoyv+hmhz//BiJTYzUXW1ui5Pth/pTUtufq5BT/GyGVy A1wj6YAjI6i5312ePNnnASTPaVtsGdrr39ynpM07w0md2FTMCM8MJ4qmaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUq9vDW0DzDKzkvsDyYXRmM8DcnMB8GA1UdIwQY MBaAFL9VmcJnVfSk1PVA4v/Xt0o5BT2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjFXWndtZFY5S1RVOVVEaV85ZTNTamtGUGFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8xMDE2OTYtODNkZC00MzZmLWI0N2Mt M2UxYjg0MzJmYzcwLzEvdjFXWndtZFY5S1RVOVVEaV85ZTNTamtGUGFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8xMDE2OTYtODNkZC00MzZmLWI0N2MtM2UxYjg0MzJmYzcw LzEvdjFXWndtZFY5S1RVOVVEaV85ZTNTamtGUGFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqrZEQq4 uVLtxU0ANt+cBnY4JtCdzPsaQVMqzKRz1df8gYDxosmw6XQ2fMFZeuV6+8o8r0We xl/zHaZgrs4bb2l7VEK0Mo06W0QKdubz0JKG+GR/OuTfmJQcnCWVSRgaZEsEOt9k hGyp2ofr/wFFC6u6YtmgxFEB6Jg6dY52LmdT1xJ4i6tV9xvkcfbWA7rPvzMAF66B HGp8q87LyDlS6c3gPzn4XrECCJxVlXgFHTufAlU5424+xxDSYuKDt0szJygg9Ekq t4lH8u5A1vSdsab2b1OYaEFIeIMHLSQXQyDah2vdpl6iQx5iEeVlrjsvglViduVG RglCUTU8tCFnuA== -----END CERTIFICATE-----Generated at Fri Dec 12 13:20:05 2025 by rpki-client