This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft File: wQKF31sDng8E4t_s4opaj77G6Tg.mft (raw, json) Hash identifier: Crog98WJu15hSpp7+SkxkMeNxnmSXZak+ZP28ya+f2I= Subject key identifier: 54:34:7B:78:D4:34:AA:EF:CD:30:BA:2E:A5:F1:19:FB:52:A4:CC:AD Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38 Certificate issuer: /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938 Certificate serial: 019B0EC9CEB67052FBDA20AE6945DE71A763 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft Manifest number: 10AE Signing time: Thu 11 Dec 2025 19:01:05 +0000 Manifest this update: Thu 11 Dec 2025 19:01:05 +0000 Manifest next update: Fri 12 Dec 2025 19:01:05 +0000 Files and hashes: 1: 2GK7KjijxkSp5rFI9ZFtp0atb8k.roa (hash: wdEjqmgar3oUItYyi55t1/3r4eSEpgrdLi/xchL3smU=) 2: XqKPzfmuCzaXuReNqmun-bylVl0.roa (hash: fIH8TXgcjjHXQ/BvOpbDJ0pldyGYRtZMTKQJxTQ5HkU=) 3: ty37WXzEM_QABRJJkI6c7K_G8EQ.roa (hash: KUqDTpdF99zPoKmTMTv8GshjWBlrKcQSI4Ly51l4brg=) 4: wQKF31sDng8E4t_s4opaj77G6Tg.crl (hash: /Lhix4dsbNDDC0wxCvZSyKMVVHjh2u/wKou1sqLnks8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:ce:b6:70:52:fb:da:20:ae:69:45:de:71:a7:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938 Validity Not Before: Dec 11 19:01:05 2025 GMT Not After : Dec 12 19:01:05 2025 GMT Subject: CN=54347b78d434aaefcd30ba2ea5f119fb52a4ccad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:19:6a:4f:18:10:2d:5f:85:8e:b4:6c:7b:c6: 35:d5:50:f0:75:b4:54:dc:80:c0:66:e6:c4:dd:81: 3e:f6:c6:ad:a8:80:79:ea:0f:d3:e6:07:39:fb:d8: 21:f5:f1:84:7c:21:02:a6:a7:06:a0:66:9c:2b:1f: 8e:eb:6a:61:cc:cb:ca:b7:6e:f5:f4:4f:4b:99:94: ab:b4:2c:ce:e6:51:4b:d2:1e:f8:2f:7c:f7:53:2e: ce:95:7c:ac:bc:fb:57:d4:eb:05:62:e3:dc:00:2d: ab:ef:2b:24:f7:c0:d1:da:2e:91:1e:74:09:02:26: c5:a3:7c:80:56:10:26:ba:21:fb:ba:97:01:11:62: 96:36:38:f3:29:e5:78:3d:18:e0:60:74:df:8a:99: d3:b6:5d:9d:fb:2b:0d:38:a7:be:05:1b:8a:1b:29: d0:07:17:31:a2:b7:34:93:c9:8e:20:e1:18:f6:03: 13:75:a5:31:c8:bc:bc:76:e2:b9:cb:ad:7c:8f:24: 2f:5a:e6:3a:65:26:96:86:62:84:45:93:90:a2:16: e4:02:f6:cf:90:bd:c8:2c:2d:ee:b0:c2:cd:b7:c0: ef:47:9c:67:f6:a8:8c:10:62:d4:33:20:9f:1d:49: 8b:7a:3d:88:cc:a6:59:e2:bc:7f:84:4d:03:93:a3: 01:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:34:7B:78:D4:34:AA:EF:CD:30:BA:2E:A5:F1:19:FB:52:A4:CC:AD X509v3 Authority Key Identifier: keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d2:b9:5e:fd:dc:a8:1a:3e:ad:2a:88:40:9b:5c:2b:ba:cd: 75:b5:10:2c:85:ef:b8:4b:b2:b5:c6:41:71:22:24:d6:ca:11: 86:7b:01:b1:8d:4b:14:8a:b6:c8:0a:5c:e2:ea:bb:ec:0c:48: 1a:4a:42:34:24:fa:7e:e0:2f:98:0b:95:4f:8c:ba:b6:6c:ab: d9:17:2a:5a:f3:0a:96:71:a2:07:df:87:49:c0:5a:93:8a:9d: e4:c3:e4:e2:52:8d:15:44:8a:4b:3c:54:bd:09:af:0d:e9:18: af:83:8f:f2:12:d9:04:a5:35:58:94:e8:ae:c4:a2:c2:41:97: 7a:2f:89:8a:97:95:5d:e6:67:e9:c7:15:ed:04:0a:47:60:4b: 51:1e:ac:4f:01:09:6c:0c:91:46:73:49:10:61:07:02:70:28: 01:31:00:0f:ea:0e:2c:80:11:ec:be:9f:c7:e1:1b:19:06:a1: e0:f6:c8:e1:d6:c9:2c:1a:ca:99:dc:f7:a7:cd:ce:fe:21:de: 40:77:f9:e9:72:0c:0b:05:a5:8e:2a:62:25:c3:34:95:98:c5: ea:b3:81:01:90:60:0b:c2:39:6a:97:b1:6b:60:e1:bd:47:56: 56:78:4c:81:ba:68:aa:09:4a:14:0e:a1:3b:13:a4:a6:17:8c: 39:60:d6:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyc62cFL72iCuaUXecadjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDI4NWRmNWIwMzllMGYwNGUyZGZlY2UyOGE1YThmYmVj NmU5MzgwHhcNMjUxMjExMTkwMTA1WhcNMjUxMjEyMTkwMTA1WjAzMTEwLwYDVQQD Eyg1NDM0N2I3OGQ0MzRhYWVmY2QzMGJhMmVhNWYxMTlmYjUyYTRjY2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRlqTxgQLV+FjrRse8Y11VDwdbRU 3IDAZubE3YE+9satqIB56g/T5gc5+9gh9fGEfCECpqcGoGacKx+O62phzMvKt271 9E9LmZSrtCzO5lFL0h74L3z3Uy7OlXysvPtX1OsFYuPcAC2r7ysk98DR2i6RHnQJ AibFo3yAVhAmuiH7upcBEWKWNjjzKeV4PRjgYHTfipnTtl2d+ysNOKe+BRuKGynQ Bxcxorc0k8mOIOEY9gMTdaUxyLy8duK5y618jyQvWuY6ZSaWhmKERZOQohbkAvbP kL3ILC3usMLNt8DvR5xn9qiMEGLUMyCfHUmLej2IzKZZ4rx/hE0Dk6MBRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQ0e3jUNKrvzTC6LqXxGftSpMytMB8GA1UdIwQY MBaAFMEChd9bA54PBOLf7OKKWo++xuk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FLRjMxc0RuZzhFNHRfczRvcGFqNzdHNlRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZWJkNDItMDdhMy00Y2I1LTg1MmUt NTJhZmM3N2NhMThmLzEvd1FLRjMxc0RuZzhFNHRfczRvcGFqNzdHNlRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hZWJkNDItMDdhMy00Y2I1LTg1MmUtNTJhZmM3N2NhMThm LzEvd1FLRjMxc0RuZzhFNHRfczRvcGFqNzdHNlRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNK5Xv3c qBo+rSqIQJtcK7rNdbUQLIXvuEuytcZBcSIk1soRhnsBsY1LFIq2yApc4uq77AxI GkpCNCT6fuAvmAuVT4y6tmyr2RcqWvMKlnGiB9+HScBak4qd5MPk4lKNFUSKSzxU vQmvDekYr4OP8hLZBKU1WJTorsSiwkGXei+JipeVXeZn6ccV7QQKR2BLUR6sTwEJ bAyRRnNJEGEHAnAoATEAD+oOLIAR7L6fx+EbGQah4PbI4dbJLBrKmdz3p83O/iHe QHf56XIMCwWljipiJcM0lZjF6rOBAZBgC8I5apexa2DhvUdWVnhMgbpoqglKFA6h OxOkpheMOWDW1w== -----END CERTIFICATE-----Generated at Fri Dec 12 00:11:26 2025 by rpki-client