This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft File: wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft (raw, json) Hash identifier: WC4W10+IYqPUfq/KWR7yJNDrtxMMlypJYPfHs88XN8I= Subject key identifier: 21:A1:57:E6:CA:08:EB:18:BA:88:DC:78:53:7B:D6:45:39:36:CD:76 Authority key identifier: C2:E2:4A:6E:3B:37:5E:82:7E:BD:6E:28:8D:9E:55:32:B3:A1:B6:84 Certificate issuer: /CN=c2e24a6e3b375e827ebd6e288d9e5532b3a1b684 Certificate serial: 019B0F6E2E457C2149FFA0D56C6158149E4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft Manifest number: 1702 Signing time: Thu 11 Dec 2025 22:00:37 +0000 Manifest this update: Thu 11 Dec 2025 22:00:37 +0000 Manifest next update: Fri 12 Dec 2025 22:00:37 +0000 Files and hashes: 1: 1-sPggFgoLgEYQ3a9DEa-ikM_oT0.roa (hash: aDnt2VZtITmENjGl4t0nf2cwLhZtXyAhYwK+dLEZq10=) 2: wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl (hash: VoFtIzwcUE7W8S5L6ZsX994IDlBDvUV4LPBXQLj6WE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:2e:45:7c:21:49:ff:a0:d5:6c:61:58:14:9e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2e24a6e3b375e827ebd6e288d9e5532b3a1b684 Validity Not Before: Dec 11 22:00:37 2025 GMT Not After : Dec 12 22:00:37 2025 GMT Subject: CN=21a157e6ca08eb18ba88dc78537bd6453936cd76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:db:5b:4a:b4:b9:0b:a4:d1:39:a3:5c:77:35: 55:9a:09:6a:97:cf:a0:00:fd:55:e3:fc:a4:3e:81: db:d0:33:61:cc:5c:06:de:cb:6f:c8:79:17:bd:87: be:49:c2:fe:b2:43:dd:e3:00:88:b6:84:ba:c6:a1: 44:7f:4f:1e:dc:d7:3b:39:4e:4d:ea:6f:f0:0c:38: 4a:b5:37:8f:e5:8e:59:e9:96:6b:72:11:be:02:d1: f0:a7:b8:cc:ac:96:e6:61:26:08:53:cd:b3:f0:e8: 6f:c2:f4:f0:a3:3f:9a:6e:d7:11:92:e2:51:e2:70: 5f:65:a1:9b:cb:0c:88:63:e3:65:ec:74:84:f4:7e: 7e:71:2d:df:c3:89:0d:df:d8:98:f2:f7:b0:ce:b7: 7c:da:4e:42:d4:65:c0:35:99:50:45:cc:4a:2b:c9: 94:95:fc:65:40:79:74:b5:93:06:1a:28:98:79:66: 9d:4d:11:4a:58:8e:b5:13:77:c7:51:88:a9:e5:22: 0e:2a:b3:2b:3f:a9:f5:08:99:94:f9:c1:d9:dc:f7: 8b:5e:ad:ef:66:44:09:5c:2c:18:e6:84:11:cb:74: 68:03:00:72:dc:0d:80:f7:08:e7:98:32:26:24:e2: 74:1c:10:cd:60:98:fa:06:c4:52:77:ac:7b:f4:0c: b5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A1:57:E6:CA:08:EB:18:BA:88:DC:78:53:7B:D6:45:39:36:CD:76 X509v3 Authority Key Identifier: keyid:C2:E2:4A:6E:3B:37:5E:82:7E:BD:6E:28:8D:9E:55:32:B3:A1:B6:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:de:8d:e9:47:a5:a4:85:89:b2:bb:96:32:ce:d5:7b:2f:c6: a7:2e:20:4c:1b:e6:af:27:70:97:cb:0e:1d:4d:94:1f:01:7e: 05:da:85:ec:54:a5:27:09:63:81:7f:70:f9:b8:07:fb:32:12: 99:2c:fc:a2:06:9c:d5:fc:9d:5f:1b:0b:0c:39:c8:a2:11:b9: aa:cc:82:a7:46:48:02:dd:08:19:59:35:af:fd:b2:b9:9c:15: f3:1c:e3:d5:4f:7d:bb:52:95:f5:44:9d:4b:90:ca:9a:ac:ec: 46:83:5b:13:4e:c4:54:9e:f3:f1:d1:5d:28:f5:94:8a:43:e3: 93:c3:d8:18:8b:a8:35:b5:66:b2:30:a1:5e:27:87:a4:1d:96: e7:11:27:02:f2:af:5a:20:44:31:55:d3:6e:5a:4f:64:f8:1f: 1f:bd:04:33:67:e1:ff:c5:de:6c:c3:14:44:a3:c8:aa:78:22: 6a:a8:94:a2:6e:07:4e:d7:af:9d:4a:27:d1:df:bc:ca:c1:7b: 7f:40:38:8a:55:60:36:45:d5:f5:43:52:fc:d5:d9:e6:ff:fc: 9c:1b:a1:fb:47:f8:02:e0:08:dc:fc:43:95:b1:18:cb:8d:be: 89:91:2c:e4:41:d2:a7:84:65:fe:e8:70:7d:ee:b4:ad:bf:76: ff:8e:1c:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbi5FfCFJ/6DVbGFYFJ5NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZTI0YTZlM2IzNzVlODI3ZWJkNmUyODhkOWU1NTMyYjNh MWI2ODQwHhcNMjUxMjExMjIwMDM3WhcNMjUxMjEyMjIwMDM3WjAzMTEwLwYDVQQD EygyMWExNTdlNmNhMDhlYjE4YmE4OGRjNzg1MzdiZDY0NTM5MzZjZDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNtbSrS5C6TROaNcdzVVmglql8+g AP1V4/ykPoHb0DNhzFwG3stvyHkXvYe+ScL+skPd4wCItoS6xqFEf08e3Nc7OU5N 6m/wDDhKtTeP5Y5Z6ZZrchG+AtHwp7jMrJbmYSYIU82z8OhvwvTwoz+abtcRkuJR 4nBfZaGbywyIY+Nl7HSE9H5+cS3fw4kN39iY8vewzrd82k5C1GXANZlQRcxKK8mU lfxlQHl0tZMGGiiYeWadTRFKWI61E3fHUYip5SIOKrMrP6n1CJmU+cHZ3PeLXq3v ZkQJXCwY5oQRy3RoAwBy3A2A9wjnmDImJOJ0HBDNYJj6BsRSd6x79Ay1bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGhV+bKCOsYuojceFN71kU5Ns12MB8GA1UdIwQY MBaAFMLiSm47N16Cfr1uKI2eVTKzobaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3VKS2JqczNYb0otdlc0b2paNVZNck9odG9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9mOTE2YmMtMjliMS00ZjA5LTgzZGUt ZDU0NGFjMDYyZDFmLzEvd3VKS2JqczNYb0otdlc0b2paNVZNck9odG9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9mOTE2YmMtMjliMS00ZjA5LTgzZGUtZDU0NGFjMDYyZDFm LzEvd3VKS2JqczNYb0otdlc0b2paNVZNck9odG9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArN6N6Uel pIWJsruWMs7Vey/Gpy4gTBvmrydwl8sOHU2UHwF+BdqF7FSlJwljgX9w+bgH+zIS mSz8ogac1fydXxsLDDnIohG5qsyCp0ZIAt0IGVk1r/2yuZwV8xzj1U99u1KV9USd S5DKmqzsRoNbE07EVJ7z8dFdKPWUikPjk8PYGIuoNbVmsjChXieHpB2W5xEnAvKv WiBEMVXTblpPZPgfH70EM2fh/8XebMMURKPIqngiaqiUom4HTtevnUon0d+8ysF7 f0A4ilVgNkXV9UNS/NXZ5v/8nBuh+0f4AuAI3PxDlbEYy42+iZEs5EHSp4Rl/uhw fe60rb92/44c3A== -----END CERTIFICATE-----Generated at Fri Dec 12 04:03:54 2025 by rpki-client