This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft File: wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft (raw, json) Hash identifier: kf3L6TdTWB2CsOKdPvWIPiRvKg2XGKCGxve6jg9gXdg= Subject key identifier: 2A:FD:40:23:CA:FE:2A:BA:40:16:24:7B:4D:0F:A1:73:27:EE:E3:9E Authority key identifier: C2:E2:4A:6E:3B:37:5E:82:7E:BD:6E:28:8D:9E:55:32:B3:A1:B6:84 Certificate issuer: /CN=c2e24a6e3b375e827ebd6e288d9e5532b3a1b684 Certificate serial: 019B495E563FA6AC0F95F7FABEF2831CDB96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft Manifest number: 1720 Signing time: Tue 23 Dec 2025 04:01:17 +0000 Manifest this update: Tue 23 Dec 2025 04:01:17 +0000 Manifest next update: Wed 24 Dec 2025 04:01:17 +0000 Files and hashes: 1: 1-sPggFgoLgEYQ3a9DEa-ikM_oT0.roa (hash: aDnt2VZtITmENjGl4t0nf2cwLhZtXyAhYwK+dLEZq10=) 2: wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl (hash: j0iRyUPqg6V9sNa0+O9eR8jGh1IWzc+g+n+VseuOf7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5e:56:3f:a6:ac:0f:95:f7:fa:be:f2:83:1c:db:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2e24a6e3b375e827ebd6e288d9e5532b3a1b684 Validity Not Before: Dec 23 04:01:17 2025 GMT Not After : Dec 24 04:01:17 2025 GMT Subject: CN=2afd4023cafe2aba4016247b4d0fa17327eee39e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:83:86:5f:51:f4:45:99:20:2a:66:b3:3d:88: c5:7f:e0:95:24:ee:19:4d:c1:3f:18:d4:f2:12:41: de:7b:74:69:18:0e:e8:70:30:46:51:80:4a:ae:33: 34:46:9f:35:cf:e4:eb:9c:3b:e9:55:c6:14:77:c5: 4c:7a:cf:1c:1b:a5:62:41:e3:c2:85:a2:7d:0e:83: 42:78:70:ed:f9:04:5a:3a:d4:78:da:5e:c0:70:a2: f1:83:c9:d2:d3:32:d9:96:50:36:10:9b:42:af:f0: 3f:c3:44:1f:70:34:10:cc:89:4f:84:ae:01:cf:d3: 78:b7:9f:8d:98:4f:05:c9:57:ec:57:63:ba:2c:bd: 39:c4:b2:40:97:da:f6:e4:12:04:20:35:9b:27:be: 2e:16:63:41:89:47:be:49:9f:c5:c8:ab:3f:6d:0b: 9b:c8:cc:eb:64:a1:f8:35:ac:f0:d3:9a:4c:f2:70: 4f:a4:f3:de:e2:d8:87:fb:e6:52:5d:0e:e1:72:e8: fc:4b:91:48:5f:26:96:be:49:9d:d3:05:b6:d4:b3: 34:75:4e:37:1b:da:48:ca:a1:d4:4e:b2:01:b3:fe: ef:7f:8b:69:95:c4:7f:0f:ef:0d:50:fc:fd:5e:79: b7:76:7a:02:31:9d:a7:4d:a3:b4:7b:f1:55:32:b2: 34:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FD:40:23:CA:FE:2A:BA:40:16:24:7B:4D:0F:A1:73:27:EE:E3:9E X509v3 Authority Key Identifier: keyid:C2:E2:4A:6E:3B:37:5E:82:7E:BD:6E:28:8D:9E:55:32:B3:A1:B6:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5a:ed:a3:5b:01:f5:ad:00:37:e6:5f:51:89:78:ab:ad:0d: 9d:63:dd:96:b8:25:42:f9:8e:3f:05:12:2c:2f:44:fe:76:9d: a4:27:3c:20:0b:91:36:53:9b:65:b8:91:f3:a0:2c:c3:9f:7b: 42:bb:57:3f:30:2e:5e:a2:a3:f5:ab:28:24:ae:e1:61:f7:31: 61:15:a4:95:af:fe:92:51:f2:b0:88:ca:64:55:82:59:6b:eb: b8:47:4a:ba:24:d6:60:37:cc:91:fc:3a:c3:f2:94:88:7c:ed: 8a:77:00:25:81:a9:77:c6:c6:48:4e:1f:ff:67:72:05:9a:1f: b4:9f:5e:cd:7a:95:ca:ac:9c:45:4c:79:5f:b0:f0:1c:3f:79: f1:53:e5:70:29:45:69:8b:96:5d:2b:af:33:79:89:d1:1f:de: f7:71:4b:bd:af:71:ed:0f:60:25:b0:93:0b:af:e8:ce:e5:9e: f0:5b:af:1f:e5:21:e2:0b:ee:e2:31:8c:da:a8:4a:87:4a:11: c6:1d:04:6e:c9:6a:89:77:7e:c1:ba:35:f1:8f:1f:b1:7b:b2: fb:1d:a5:b3:bf:f8:26:80:55:6d:19:f2:1a:1b:6b:3f:04:af: 25:16:40:7a:b6:b8:3e:a4:bd:26:db:f8:10:34:c7:3e:6b:c4: e5:80:c7:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXlY/pqwPlff6vvKDHNuWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZTI0YTZlM2IzNzVlODI3ZWJkNmUyODhkOWU1NTMyYjNh MWI2ODQwHhcNMjUxMjIzMDQwMTE3WhcNMjUxMjI0MDQwMTE3WjAzMTEwLwYDVQQD EygyYWZkNDAyM2NhZmUyYWJhNDAxNjI0N2I0ZDBmYTE3MzI3ZWVlMzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoOGX1H0RZkgKmazPYjFf+CVJO4Z TcE/GNTyEkHee3RpGA7ocDBGUYBKrjM0Rp81z+TrnDvpVcYUd8VMes8cG6ViQePC haJ9DoNCeHDt+QRaOtR42l7AcKLxg8nS0zLZllA2EJtCr/A/w0QfcDQQzIlPhK4B z9N4t5+NmE8FyVfsV2O6LL05xLJAl9r25BIEIDWbJ74uFmNBiUe+SZ/FyKs/bQub yMzrZKH4Nazw05pM8nBPpPPe4tiH++ZSXQ7hcuj8S5FIXyaWvkmd0wW21LM0dU43 G9pIyqHUTrIBs/7vf4tplcR/D+8NUPz9Xnm3dnoCMZ2nTaO0e/FVMrI00wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCr9QCPK/iq6QBYke00PoXMn7uOeMB8GA1UdIwQY MBaAFMLiSm47N16Cfr1uKI2eVTKzobaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3VKS2JqczNYb0otdlc0b2paNVZNck9odG9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9mOTE2YmMtMjliMS00ZjA5LTgzZGUt ZDU0NGFjMDYyZDFmLzEvd3VKS2JqczNYb0otdlc0b2paNVZNck9odG9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9mOTE2YmMtMjliMS00ZjA5LTgzZGUtZDU0NGFjMDYyZDFm LzEvd3VKS2JqczNYb0otdlc0b2paNVZNck9odG9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1rto1sB 9a0AN+ZfUYl4q60NnWPdlrglQvmOPwUSLC9E/nadpCc8IAuRNlObZbiR86Asw597 QrtXPzAuXqKj9asoJK7hYfcxYRWkla/+klHysIjKZFWCWWvruEdKuiTWYDfMkfw6 w/KUiHztincAJYGpd8bGSE4f/2dyBZoftJ9ezXqVyqycRUx5X7DwHD958VPlcClF aYuWXSuvM3mJ0R/e93FLva9x7Q9gJbCTC6/ozuWe8FuvH+Uh4gvu4jGM2qhKh0oR xh0EbslqiXd+wbo18Y8fsXuy+x2ls7/4JoBVbRnyGhtrPwSvJRZAera4PqS9Jtv4 EDTHPmvE5YDHJA== -----END CERTIFICATE-----Generated at Tue Dec 23 12:58:38 2025 by rpki-client