This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft File: wSrJsU_SYajSdjqtQXQyvrxJoNY.mft (raw, json) Hash identifier: XpPial0REsJHVJMfphpRW9WQit0aTe7CdKvHFX1b5hU= Subject key identifier: 73:AB:2F:C7:AE:EB:A4:8D:A2:9D:03:F4:D8:D2:2C:B8:5D:E1:01:56 Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 019B1238AD2140E6B846225996B54BE0BE75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft Manifest number: 149C Signing time: Fri 12 Dec 2025 11:01:02 +0000 Manifest this update: Fri 12 Dec 2025 11:01:02 +0000 Manifest next update: Sat 13 Dec 2025 11:01:02 +0000 Files and hashes: 1: 9qmcHM-VcZ83QpuDDXRDTZzjRPA.roa (hash: T9bQyp4qC173zpUrvp23zRV6IJ2BWrYnmOmyqxCjQto=) 2: L5uizbtROk6GB-R7fgrPSdF9458.roa (hash: TQEmzD8dtp5XF7xVELdssPYaS3183qisGdaHaztP3Ns=) 3: PF3fO-eTWo6-cPGvdPVhKKttSws.roa (hash: f6FdvkS18ddS/HJEFfzmPq90ce/EiZOtTBozEQTvOIE=) 4: PmQwjeWPX1uc6kgeCDNacsuKkvM.roa (hash: a5MkN/N9VDjUV72wDiMVAY0/sIKzPUhqOt4JzBP4rPc=) 5: gu1qAVxYV1JNHUi7sma3zTVhxOY.roa (hash: 35rYj48R9KZMpiK938BtDR3yOfaylU/kY6qRQtuDujg=) 6: h6hIuizM5NfGODakvbCHb0dbPy8.roa (hash: xkEHjrBFDDiSHn/sjBQGlKLjsMLThbhwgH9fRua5IZs=) 7: lbe3R6qsC7flHOItm2HZ_rtUMYs.roa (hash: v1yUIN+YIJofBB2LuxpKb3viTsG7VddaXzM7Y68aNOE=) 8: pOAHo_xz8DPS-PlS6NdmOeIWwMQ.roa (hash: 19j4bFy6Qzt1lfA2YhipAm48g4iEQA4VOYkVWjiA/os=) 9: t662D9vApr8ZiFSjITs7a3oVIQY.roa (hash: ysoT6z2U1fG/7XYJruqmcsqEJYDDWfQicEyYt1W7TQQ=) 10: wSrJsU_SYajSdjqtQXQyvrxJoNY.crl (hash: BrcKsltrLBYkCMyDkqzadClAjdZOrrUlRrf4ZAmqY9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:38:ad:21:40:e6:b8:46:22:59:96:b5:4b:e0:be:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Dec 12 11:01:02 2025 GMT Not After : Dec 13 11:01:02 2025 GMT Subject: CN=73ab2fc7aeeba48da29d03f4d8d22cb85de10156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7f:8f:4f:f5:21:d8:4a:5e:45:e7:f0:b3:c3: 81:3b:89:91:66:e4:81:85:e0:a7:76:41:e6:ba:35: d5:02:bc:20:a4:3b:61:32:4c:e2:d2:7e:97:7e:94: a5:d0:3e:74:e8:d1:fe:cb:05:ce:a3:e2:f8:a6:a4: 09:f3:ff:5a:9a:f4:78:c1:1b:3e:4a:94:9d:8d:1f: 78:5a:7e:26:77:c4:75:3b:a6:97:2b:98:09:0b:29: 68:15:81:d2:a0:b4:0f:3c:c5:60:8e:07:57:79:1d: 24:1a:38:d8:5c:6b:9a:74:40:22:66:2c:f6:cf:67: 1e:8f:a6:2e:b6:ad:e7:25:d5:66:63:9c:22:f8:43: 5b:2f:59:a9:23:8e:d9:14:a5:31:6d:b1:09:46:40: 5f:9c:5a:18:9c:77:30:d3:7d:14:15:fa:c4:0b:fe: 87:03:2b:a2:7f:e6:ec:ce:f2:75:40:eb:22:18:ca: 2b:9b:88:21:c8:8f:e6:54:ae:fd:be:3a:4e:e2:df: 90:72:95:7c:33:01:51:ec:01:d2:e0:80:26:62:e4: 15:04:36:4d:66:ef:fc:59:2d:48:6a:47:9b:6d:82: 3b:42:c1:a1:eb:20:f2:1c:f6:8d:bb:ff:f5:c3:97: 1a:d6:03:25:e3:9e:dc:ec:04:a8:1b:f7:73:18:9a: 1b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AB:2F:C7:AE:EB:A4:8D:A2:9D:03:F4:D8:D2:2C:B8:5D:E1:01:56 X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:bc:76:13:52:01:ab:8b:5c:3b:5f:12:b8:b7:f9:58:bb:ce: f6:39:ce:f1:8d:57:0f:c5:d7:d2:4f:6a:1e:a7:26:38:ab:67: e6:2a:c8:8a:a0:43:21:6c:31:aa:0d:c5:7d:c4:1f:e2:6d:48: e3:7a:47:29:3f:43:86:19:f6:6f:35:5c:77:25:03:68:8c:f4: e5:73:43:19:df:e8:60:7f:7e:0f:40:ed:d1:4e:c1:67:e6:6c: ec:e8:04:47:a2:0d:12:82:14:f3:00:38:8d:84:9e:f2:24:f2: ba:4d:f4:af:d8:c9:3d:ae:e2:5b:c7:8b:ee:96:ae:c6:71:e5: 1c:da:7c:17:cc:cf:19:9d:ff:c2:20:a7:1b:ba:79:8c:2d:27: 03:9a:15:d9:ec:68:ec:16:64:fe:8c:42:17:34:bc:bc:09:9c: ab:ff:97:da:6f:19:e9:1a:1d:e6:82:dc:7b:51:69:13:a3:62: 34:b1:1a:97:0d:af:50:83:14:4b:55:c1:dc:d2:14:ff:25:61: 87:30:6e:32:2d:00:76:b7:de:35:22:3b:16:f6:65:c8:e8:b2: 61:9d:f1:ef:ca:53:a9:48:ea:06:50:ef:37:6c:80:0a:c0:d6: 44:c6:e2:f2:5c:68:50:a3:49:3b:91:b6:4a:13:ca:bf:33:64: b2:e2:f2:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSOK0hQOa4RiJZlrVL4L51MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjUxMjEyMTEwMTAyWhcNMjUxMjEzMTEwMTAyWjAzMTEwLwYDVQQD Eyg3M2FiMmZjN2FlZWJhNDhkYTI5ZDAzZjRkOGQyMmNiODVkZTEwMTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX+PT/Uh2EpeRefws8OBO4mRZuSB heCndkHmujXVArwgpDthMkzi0n6XfpSl0D506NH+ywXOo+L4pqQJ8/9amvR4wRs+ SpSdjR94Wn4md8R1O6aXK5gJCyloFYHSoLQPPMVgjgdXeR0kGjjYXGuadEAiZiz2 z2cej6Yutq3nJdVmY5wi+ENbL1mpI47ZFKUxbbEJRkBfnFoYnHcw030UFfrEC/6H Ayuif+bszvJ1QOsiGMorm4ghyI/mVK79vjpO4t+QcpV8MwFR7AHS4IAmYuQVBDZN Zu/8WS1IakebbYI7QsGh6yDyHPaNu//1w5ca1gMl457c7ASoG/dzGJob+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOrL8eu66SNop0D9NjSLLhd4QFWMB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7x2E1IB q4tcO18SuLf5WLvO9jnO8Y1XD8XX0k9qHqcmOKtn5irIiqBDIWwxqg3FfcQf4m1I 43pHKT9Dhhn2bzVcdyUDaIz05XNDGd/oYH9+D0Dt0U7BZ+Zs7OgER6INEoIU8wA4 jYSe8iTyuk30r9jJPa7iW8eL7pauxnHlHNp8F8zPGZ3/wiCnG7p5jC0nA5oV2exo 7BZk/oxCFzS8vAmcq/+X2m8Z6Rod5oLce1FpE6NiNLEalw2vUIMUS1XB3NIU/yVh hzBuMi0AdrfeNSI7FvZlyOiyYZ3x78pTqUjqBlDvN2yACsDWRMbi8lxoUKNJO5G2 ShPKvzNksuLyJQ== -----END CERTIFICATE-----Generated at Fri Dec 12 16:26:30 2025 by rpki-client