This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft File: wSrJsU_SYajSdjqtQXQyvrxJoNY.mft (raw, json) Hash identifier: NYC6cJraq+A4Z6kDr/qv+B5Ll6PCkRf1b/gvR1dtiUc= Subject key identifier: C6:CA:86:66:47:3F:30:CA:B4:25:F7:D6:E1:C4:C9:3E:8F:9F:BB:38 Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 019B21AB7038335547F7AE86126121E95B6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft Manifest number: 14A4 Signing time: Mon 15 Dec 2025 11:00:42 +0000 Manifest this update: Mon 15 Dec 2025 11:00:42 +0000 Manifest next update: Tue 16 Dec 2025 11:00:42 +0000 Files and hashes: 1: 9qmcHM-VcZ83QpuDDXRDTZzjRPA.roa (hash: T9bQyp4qC173zpUrvp23zRV6IJ2BWrYnmOmyqxCjQto=) 2: L5uizbtROk6GB-R7fgrPSdF9458.roa (hash: TQEmzD8dtp5XF7xVELdssPYaS3183qisGdaHaztP3Ns=) 3: PF3fO-eTWo6-cPGvdPVhKKttSws.roa (hash: f6FdvkS18ddS/HJEFfzmPq90ce/EiZOtTBozEQTvOIE=) 4: PmQwjeWPX1uc6kgeCDNacsuKkvM.roa (hash: a5MkN/N9VDjUV72wDiMVAY0/sIKzPUhqOt4JzBP4rPc=) 5: gu1qAVxYV1JNHUi7sma3zTVhxOY.roa (hash: 35rYj48R9KZMpiK938BtDR3yOfaylU/kY6qRQtuDujg=) 6: h6hIuizM5NfGODakvbCHb0dbPy8.roa (hash: xkEHjrBFDDiSHn/sjBQGlKLjsMLThbhwgH9fRua5IZs=) 7: lbe3R6qsC7flHOItm2HZ_rtUMYs.roa (hash: v1yUIN+YIJofBB2LuxpKb3viTsG7VddaXzM7Y68aNOE=) 8: pOAHo_xz8DPS-PlS6NdmOeIWwMQ.roa (hash: 19j4bFy6Qzt1lfA2YhipAm48g4iEQA4VOYkVWjiA/os=) 9: t662D9vApr8ZiFSjITs7a3oVIQY.roa (hash: ysoT6z2U1fG/7XYJruqmcsqEJYDDWfQicEyYt1W7TQQ=) 10: wSrJsU_SYajSdjqtQXQyvrxJoNY.crl (hash: SLOBnakViglbTQPaiGEW70jmSSJxEUhFO3j167HYMa0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:70:38:33:55:47:f7:ae:86:12:61:21:e9:5b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Dec 15 11:00:42 2025 GMT Not After : Dec 16 11:00:42 2025 GMT Subject: CN=c6ca8666473f30cab425f7d6e1c4c93e8f9fbb38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5d:a9:ee:34:34:66:7d:ab:b7:a7:81:05:07: d3:4d:b8:55:80:b7:fb:2c:b0:61:7a:45:1b:dd:26: 2c:53:94:a5:46:0a:86:85:59:5b:f1:67:3b:8d:34: dc:3a:24:eb:d3:4d:63:9f:2b:82:28:48:b7:f5:2c: ec:58:2c:4a:a9:aa:f7:36:33:72:8c:17:fb:43:91: a3:d2:a3:5f:36:da:aa:f7:49:33:bd:6e:a5:92:6a: c2:61:b8:d7:f0:99:cb:e4:ab:a7:d4:10:84:e1:12: 82:24:ec:57:00:b2:81:57:b0:52:e7:42:cf:85:1b: 59:f6:34:04:2b:b1:be:6e:f2:48:f5:a4:27:8e:c3: 91:37:91:85:98:c2:61:3b:cf:74:41:58:78:9a:44: b1:6b:f9:d9:a5:b6:81:36:55:60:2f:0e:18:1d:80: f1:d4:87:94:e0:5e:ff:44:8c:ff:a3:1e:ce:86:26: 4c:8b:f7:af:d5:ae:24:f3:e1:db:7e:7d:5e:ce:af: 5c:ca:b3:22:93:e6:22:17:76:2b:a1:6b:de:47:dc: a7:b3:ad:e3:d0:bc:d8:f1:2c:48:5a:32:ed:d7:db: bd:de:18:70:86:23:1c:e8:01:88:50:6a:62:9a:85: 2b:f5:e4:74:1f:cd:ca:cd:28:2a:f0:9d:95:35:71: dc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CA:86:66:47:3F:30:CA:B4:25:F7:D6:E1:C4:C9:3E:8F:9F:BB:38 X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:1e:11:e7:85:48:f6:09:cb:a7:49:89:5d:5f:f4:87:c7:ea: c1:79:9b:d6:17:68:60:de:ba:7b:ec:d2:fa:f4:bc:7a:95:1d: 20:35:0f:f1:90:8d:d6:7f:0f:35:96:25:b6:dd:c2:4f:8e:f0: 39:4b:bb:7b:a6:f5:c7:e9:b1:d6:73:31:bd:64:81:90:2d:b9: 73:47:61:11:27:01:1e:2f:9e:58:ce:d5:82:8d:b8:1c:b4:b5: cb:01:17:a1:4d:8a:7a:ab:fa:a0:73:26:0b:69:3c:97:da:da: 80:af:c6:fc:3d:dd:75:c0:2f:ba:ae:fc:50:46:10:a7:eb:aa: 93:03:44:c5:fe:83:16:08:58:f5:d0:b1:bd:99:88:13:d9:14: 5a:4d:00:0a:30:ce:34:c7:3e:ba:90:72:10:33:10:18:4a:a5: 12:a3:1a:e3:96:1a:eb:ce:6d:a4:84:dd:22:99:c1:29:44:c0: 10:aa:f2:19:f5:e8:e9:13:9b:23:31:16:68:92:fc:f7:6e:e1: 0b:68:65:06:fe:c5:ec:98:95:30:7f:ed:82:6e:0e:dd:0d:b8: 29:e9:fd:30:c4:63:b7:66:e8:5c:d1:ed:a9:61:96:09:3a:b1: c5:e0:ec:95:ae:7c:de:ce:38:f0:c9:84:66:21:2d:6e:3e:0c: 97:fc:cc:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshq3A4M1VH966GEmEh6VttMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjUxMjE1MTEwMDQyWhcNMjUxMjE2MTEwMDQyWjAzMTEwLwYDVQQD EyhjNmNhODY2NjQ3M2YzMGNhYjQyNWY3ZDZlMWM0YzkzZThmOWZiYjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi12p7jQ0Zn2rt6eBBQfTTbhVgLf7 LLBhekUb3SYsU5SlRgqGhVlb8Wc7jTTcOiTr001jnyuCKEi39SzsWCxKqar3NjNy jBf7Q5Gj0qNfNtqq90kzvW6lkmrCYbjX8JnL5Kun1BCE4RKCJOxXALKBV7BS50LP hRtZ9jQEK7G+bvJI9aQnjsORN5GFmMJhO890QVh4mkSxa/nZpbaBNlVgLw4YHYDx 1IeU4F7/RIz/ox7OhiZMi/ev1a4k8+Hbfn1ezq9cyrMik+YiF3YroWveR9yns63j 0LzY8SxIWjLt19u93hhwhiMc6AGIUGpimoUr9eR0H83KzSgq8J2VNXHc1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbKhmZHPzDKtCX31uHEyT6Pn7s4MB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqB4R54VI 9gnLp0mJXV/0h8fqwXmb1hdoYN66e+zS+vS8epUdIDUP8ZCN1n8PNZYltt3CT47w OUu7e6b1x+mx1nMxvWSBkC25c0dhEScBHi+eWM7Vgo24HLS1ywEXoU2Keqv6oHMm C2k8l9ragK/G/D3ddcAvuq78UEYQp+uqkwNExf6DFghY9dCxvZmIE9kUWk0ACjDO NMc+upByEDMQGEqlEqMa45Ya685tpITdIpnBKUTAEKryGfXo6RObIzEWaJL8927h C2hlBv7F7JiVMH/tgm4O3Q24Ken9MMRjt2boXNHtqWGWCTqxxeDsla583s448MmE ZiEtbj4Ml/zMkg== -----END CERTIFICATE-----Generated at Mon Dec 15 13:20:16 2025 by rpki-client