This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft File: wcJrtXS4m4wYZvhHS7HLADJk7CA.mft (raw, json) Hash identifier: LROzK0m0LAHU0i2iLQFVX8TSTwPb005Mrwj206ybrW8= Subject key identifier: A7:F4:B9:D8:70:EE:21:5E:4F:95:80:87:D2:26:78:CF:2C:57:E5:6F Authority key identifier: C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20 Certificate issuer: /CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20 Certificate serial: 019B3CEBF97E8667F83988D1874C3536F6C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft Manifest number: 0816 Signing time: Sat 20 Dec 2025 18:00:56 +0000 Manifest this update: Sat 20 Dec 2025 18:00:56 +0000 Manifest next update: Sun 21 Dec 2025 18:00:56 +0000 Files and hashes: 1: H8Cq2hKbd_raQeCt0efxgfoaB4I.roa (hash: RUeP+naWIGNfUeaNzoap2yVUas20CdFw2eVfjen4R5E=) 2: XfKLRFVMoC15KLcrzjJhZWM3w8Q.roa (hash: 25hZw2F6xwasOHU65AIF0S+NpXK61ycgU51PVxUloRM=) 3: jWpsvTVNS1Ff638kpa7ScxTuuk4.roa (hash: 63THTjmppr49Yj/Ay+jWsinwc396xB57u7trQc+8Nhg=) 4: wcJrtXS4m4wYZvhHS7HLADJk7CA.crl (hash: bAHfXkG5SA7HfslOD8LLl9qwcAPK72t5wrnFmfTMPCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:f9:7e:86:67:f8:39:88:d1:87:4c:35:36:f6:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20 Validity Not Before: Dec 20 18:00:56 2025 GMT Not After : Dec 21 18:00:56 2025 GMT Subject: CN=a7f4b9d870ee215e4f958087d22678cf2c57e56f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e3:9b:d2:52:bc:7a:86:18:08:75:f3:18:75: 1b:b7:d4:56:a6:1b:4e:0c:a8:1a:a9:26:94:73:cc: c2:96:88:e0:d2:39:f2:e7:fd:ae:3e:a9:f5:5f:f6: 2f:17:b2:30:74:7f:30:2e:ee:c3:e3:86:02:1e:b0: 6c:d6:8d:70:68:ac:92:10:c0:0f:4a:ca:cb:70:63: a9:e2:b8:c5:49:68:99:b1:fb:02:01:4a:9b:5e:4c: 06:02:6a:e9:26:6f:ab:f2:9a:d6:fa:ff:dd:ef:67: 59:e5:d3:68:6d:9a:6a:b0:e7:4a:b5:83:5f:34:cc: 88:6d:03:d5:54:30:a2:f8:b9:e6:f3:42:e9:1f:19: b9:c6:3c:a0:b2:75:6a:eb:20:d5:57:9a:10:59:71: a4:dc:55:eb:b2:51:bf:90:de:50:02:f1:26:07:9a: e8:b8:b0:a2:b4:87:5d:62:65:dc:f8:3b:c1:bd:9c: e0:fa:42:db:f9:e6:69:55:8c:32:65:22:52:0e:a8: 64:e8:42:98:6f:cf:3a:92:78:c9:12:34:a0:ec:8e: 09:7f:b6:06:27:e5:b5:99:9f:5d:43:db:78:6f:18: fe:fb:d9:de:9e:d8:cf:13:94:e1:71:7a:44:0c:dd: bd:3d:3e:40:12:d1:14:e2:07:51:dd:20:bb:92:b1: ff:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F4:B9:D8:70:EE:21:5E:4F:95:80:87:D2:26:78:CF:2C:57:E5:6F X509v3 Authority Key Identifier: keyid:C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:28:1a:49:9f:a3:53:2d:af:25:14:14:11:18:41:d7:bb:da: c9:0d:ff:ca:80:24:04:0b:b6:8a:d9:99:3d:76:d2:1d:7d:76: 91:5b:ad:ec:d1:b4:22:bd:df:c1:d1:47:b1:a3:59:04:0c:c5: 18:d7:64:2f:d5:89:68:87:6e:b5:a9:1e:24:23:92:e6:eb:30: 5f:fc:24:03:bc:20:72:d3:56:7e:62:35:9d:12:10:af:16:66: 31:15:43:28:45:41:48:87:54:7f:5c:39:8c:36:9f:79:27:11: c0:98:3b:4a:13:eb:de:9d:1c:4e:b3:01:ee:aa:13:40:07:c6: bf:42:0e:94:00:89:aa:97:47:61:8e:80:80:f6:f3:10:c5:0a: ab:cd:43:7f:de:c5:70:16:83:cb:62:7e:d2:73:40:f5:cb:0b: 1f:d9:34:77:4f:55:f5:6e:87:b0:05:d1:23:b6:bd:f6:1b:90: 0e:1c:47:ef:27:e5:2b:87:1f:c9:3a:ae:3c:ff:48:26:d2:6d: e5:2b:5a:36:ee:30:29:18:34:42:e4:bb:08:08:df:e4:76:8d: a0:06:f4:75:65:42:b3:da:f7:e9:70:ae:1e:c4:d9:88:60:ca: 63:b2:dd:21:ee:73:7e:03:ee:10:54:4d:85:c5:aa:f0:69:d8: 02:6c:15:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86/l+hmf4OYjRh0w1NvbHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYzI2YmI1NzRiODliOGMxODY2Zjg0NzRiYjFjYjAwMzI2 NGVjMjAwHhcNMjUxMjIwMTgwMDU2WhcNMjUxMjIxMTgwMDU2WjAzMTEwLwYDVQQD EyhhN2Y0YjlkODcwZWUyMTVlNGY5NTgwODdkMjI2NzhjZjJjNTdlNTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+Ob0lK8eoYYCHXzGHUbt9RWphtO DKgaqSaUc8zClojg0jny5/2uPqn1X/YvF7IwdH8wLu7D44YCHrBs1o1waKySEMAP SsrLcGOp4rjFSWiZsfsCAUqbXkwGAmrpJm+r8prW+v/d72dZ5dNobZpqsOdKtYNf NMyIbQPVVDCi+Lnm80LpHxm5xjygsnVq6yDVV5oQWXGk3FXrslG/kN5QAvEmB5ro uLCitIddYmXc+DvBvZzg+kLb+eZpVYwyZSJSDqhk6EKYb886knjJEjSg7I4Jf7YG J+W1mZ9dQ9t4bxj++9nentjPE5ThcXpEDN29PT5AEtEU4gdR3SC7krH/hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKf0udhw7iFeT5WAh9ImeM8sV+VvMB8GA1UdIwQY MBaAFMHCa7V0uJuMGGb4R0uxywAyZOwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kZjM4ZGEtNzVjZC00ZTIxLWFkMzgt ZjJhMmE1ZDUwNDVlLzEvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kZjM4ZGEtNzVjZC00ZTIxLWFkMzgtZjJhMmE1ZDUwNDVl LzEvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSgaSZ+j Uy2vJRQUERhB17vayQ3/yoAkBAu2itmZPXbSHX12kVut7NG0Ir3fwdFHsaNZBAzF GNdkL9WJaIdutakeJCOS5uswX/wkA7wgctNWfmI1nRIQrxZmMRVDKEVBSIdUf1w5 jDafeScRwJg7ShPr3p0cTrMB7qoTQAfGv0IOlACJqpdHYY6AgPbzEMUKq81Df97F cBaDy2J+0nNA9csLH9k0d09V9W6HsAXRI7a99huQDhxH7yflK4cfyTquPP9IJtJt 5StaNu4wKRg0QuS7CAjf5HaNoAb0dWVCs9r36XCuHsTZiGDKY7LdIe5zfgPuEFRN hcWq8GnYAmwVjQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:49:19 2025 by rpki-client