This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.mft File: 1-wWpxUjW406NFfwGYyqjiZJy9Ow.mft (raw, json) Hash identifier: uFJL9rsM+iDpP3C7Vl1LCHUgEioLpvN9jf9OVtslgpk= Subject key identifier: 84:F2:5A:05:1B:E3:A1:49:91:47:04:8B:EF:AB:33:EA:E3:5B:66:45 Authority key identifier: FB:05:A9:C5:48:D6:E3:4E:8D:15:FC:06:63:2A:A3:89:92:72:F4:EC Certificate issuer: /CN=fb05a9c548d6e34e8d15fc06632aa3899272f4ec Certificate serial: 019B0DB6D29022FAEFAD3D45F04E4948DD7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wWpxUjW406NFfwGYyqjiZJy9Ow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.mft Manifest number: 0BC1 Signing time: Thu 11 Dec 2025 14:00:43 +0000 Manifest this update: Thu 11 Dec 2025 14:00:43 +0000 Manifest next update: Fri 12 Dec 2025 14:00:43 +0000 Files and hashes: 1: 1-wWpxUjW406NFfwGYyqjiZJy9Ow.crl (hash: Xv3Xw4s2/oXwhSsi6l/rlVkGS2yDK/F3pQpJB/9batE=) 2: a1BlZIKaFtEFXShwRMtJXEWXi4M.roa (hash: ERqfuGIzGK00GO92FhZ0NbE6+Ekdpbfy2+flZQSTXhs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.mft rsync://rpki.ripe.net/repository/DEFAULT/1-wWpxUjW406NFfwGYyqjiZJy9Ow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:d2:90:22:fa:ef:ad:3d:45:f0:4e:49:48:dd:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb05a9c548d6e34e8d15fc06632aa3899272f4ec Validity Not Before: Dec 11 14:00:43 2025 GMT Not After : Dec 12 14:00:43 2025 GMT Subject: CN=84f25a051be3a1499147048befab33eae35b6645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cd:7f:e1:98:6b:e2:25:d2:ca:33:b6:a9:fb: 22:14:01:7e:6d:ed:02:7c:c2:51:32:06:ef:1f:90: e5:3a:6e:3d:35:81:1e:22:da:45:a8:7a:16:1b:9b: 62:c6:43:a6:c7:c8:8e:4c:5a:4c:29:d8:17:94:3f: 0a:26:f8:cd:95:c0:9c:eb:3f:fd:66:7a:a3:7d:e6: a0:b1:d5:66:a6:a4:ce:6e:b7:95:64:59:62:37:9d: 1d:e6:bb:57:c4:f2:ed:83:53:ec:bb:0f:ee:19:5a: 49:30:bc:3b:ae:c4:e4:70:02:a3:61:36:79:2e:ed: ff:88:6c:9c:f4:38:ae:10:04:ab:73:57:e7:c0:bd: 0c:be:b8:db:c7:66:bb:fe:8a:2a:ba:ca:7e:53:86: d4:e0:93:45:32:43:96:81:c9:aa:eb:70:1b:f6:7f: b0:64:37:89:6e:f3:41:87:b7:93:ba:a0:9a:8e:2a: 20:b0:93:02:19:26:84:d6:a9:60:cb:ab:d9:2e:4f: be:c3:25:6a:b5:9d:c9:af:f5:4f:03:46:9d:db:1a: de:3b:20:46:92:0e:2f:cd:bf:a0:4f:f3:b6:cd:d0: 62:d2:24:c9:92:ed:1a:8a:ff:f5:8a:63:b0:a7:e8: 04:70:bf:65:2b:80:e2:75:c9:ab:9b:a2:27:29:44: 25:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F2:5A:05:1B:E3:A1:49:91:47:04:8B:EF:AB:33:EA:E3:5B:66:45 X509v3 Authority Key Identifier: keyid:FB:05:A9:C5:48:D6:E3:4E:8D:15:FC:06:63:2A:A3:89:92:72:F4:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wWpxUjW406NFfwGYyqjiZJy9Ow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:1a:b6:60:9c:bd:b8:20:d4:2e:54:84:59:f5:5a:63:ce:9b: ec:40:ae:8f:e5:99:f4:9c:72:f4:b6:a5:4f:55:2b:38:e8:f4: d5:6b:f6:4f:b0:54:1b:ed:a2:28:f8:47:d1:62:9d:96:65:de: c0:18:ba:f6:86:9e:23:02:38:ab:1f:88:d9:a0:31:59:53:17: c9:ca:7d:62:39:2a:09:a5:7c:a6:a6:8c:15:4f:e3:a7:36:01: 4f:d9:6a:bc:06:4d:2a:24:9b:d1:4c:a3:ef:07:38:1e:ab:f2: 87:66:93:a4:bf:39:0e:bb:20:e4:ed:ed:51:4a:42:06:b1:af: 2c:17:20:4e:07:45:10:ee:13:6f:8e:32:35:dd:d3:d9:65:ca: 36:2e:13:cb:5c:52:df:a2:c9:6a:d5:7d:6a:18:34:c5:62:8c: 33:0b:e2:a5:6d:fa:5e:c6:a6:88:60:4b:03:fa:bb:cc:e9:bb: 5c:9b:f1:1a:f2:10:85:92:07:ca:60:09:cd:88:4b:4a:07:8d: 4a:e8:93:fa:8f:e8:07:bf:35:45:58:a9:72:c0:09:dd:41:55: 4e:0e:82:9a:13:93:6d:c7:92:f7:dc:d1:80:e3:5a:96:10:ea: 7c:c3:aa:17:6d:1a:24:32:47:62:04:3e:e6:99:a8:35:2b:da: dc:11:28:91 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsNttKQIvrvrT1F8E5JSN19MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMDVhOWM1NDhkNmUzNGU4ZDE1ZmMwNjYzMmFhMzg5OTI3 MmY0ZWMwHhcNMjUxMjExMTQwMDQzWhcNMjUxMjEyMTQwMDQzWjAzMTEwLwYDVQQD Eyg4NGYyNWEwNTFiZTNhMTQ5OTE0NzA0OGJlZmFiMzNlYWUzNWI2NjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc1/4Zhr4iXSyjO2qfsiFAF+be0C fMJRMgbvH5DlOm49NYEeItpFqHoWG5tixkOmx8iOTFpMKdgXlD8KJvjNlcCc6z/9 ZnqjfeagsdVmpqTObreVZFliN50d5rtXxPLtg1Psuw/uGVpJMLw7rsTkcAKjYTZ5 Lu3/iGyc9DiuEASrc1fnwL0Mvrjbx2a7/ooqusp+U4bU4JNFMkOWgcmq63Ab9n+w ZDeJbvNBh7eTuqCajiogsJMCGSaE1qlgy6vZLk++wyVqtZ3Jr/VPA0ad2xreOyBG kg4vzb+gT/O2zdBi0iTJku0aiv/1imOwp+gEcL9lK4Didcmrm6InKUQlGQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFITyWgUb46FJkUcEi++rM+rjW2ZFMB8GA1UdIwQY MBaAFPsFqcVI1uNOjRX8BmMqo4mScvTsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS13V3B4VWpXNDA2TkZmd0dZeXFqaVpKeTlPdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvZWQ1MDIwLTE1NDktNDAxMy1iNTEy LWNmNmZkMDZmNDhlZi8xLzEtd1dweFVqVzQwNk5GZndHWXlxamlaSnk5T3cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzE4L2VkNTAyMC0xNTQ5LTQwMTMtYjUxMi1jZjZmZDA2ZjQ4 ZWYvMS8xLXdXcHhValc0MDZORmZ3R1l5cWppWkp5OU93LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBq2 YJy9uCDULlSEWfVaY86b7ECuj+WZ9Jxy9LalT1UrOOj01Wv2T7BUG+2iKPhH0WKd lmXewBi69oaeIwI4qx+I2aAxWVMXycp9YjkqCaV8pqaMFU/jpzYBT9lqvAZNKiSb 0Uyj7wc4Hqvyh2aTpL85Drsg5O3tUUpCBrGvLBcgTgdFEO4Tb44yNd3T2WXKNi4T y1xS36LJatV9ahg0xWKMMwvipW36XsamiGBLA/q7zOm7XJvxGvIQhZIHymAJzYhL SgeNSuiT+o/oB781RVipcsAJ3UFVTg6CmhOTbceS99zRgONalhDqfMOqF20aJDJH YgQ+5pmoNSva3BEokQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:39 2025 by rpki-client