This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json) Hash identifier: rm9rndZYEE+QklNk4DYmKsAxU8J4ZO1BgDiGZcEaGQw= Subject key identifier: D0:9F:2E:FE:62:C8:03:2C:93:07:72:B2:2A:14:07:53:78:89:A2:87 Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88 Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288 Certificate serial: 019B2407B8BB059A58BE94CAE93B606E72A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft Manifest number: 054D Signing time: Mon 15 Dec 2025 22:00:44 +0000 Manifest this update: Mon 15 Dec 2025 22:00:44 +0000 Manifest next update: Tue 16 Dec 2025 22:00:44 +0000 Files and hashes: 1: 84jYv05HnlXjbNLOmoRHkF8n8LQ.roa (hash: /X9ewNFlsp/9ZFMAjrGm5l3SwfH8c42hlaaVDkUgEww=) 2: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: XLrWBwk3wH0pMVgd+ixV9ckmEZzuKA//VDNCr/LdVvM=) 3: y8uNxN4Qz-KJWpwgdJjEk856rFg.roa (hash: gCH8Gmi7LtX/qDiok3OTFvIkgdYcX5Le/2ybuhXBvN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:07:b8:bb:05:9a:58:be:94:ca:e9:3b:60:6e:72:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288 Validity Not Before: Dec 15 22:00:44 2025 GMT Not After : Dec 16 22:00:44 2025 GMT Subject: CN=d09f2efe62c8032c930772b22a1407537889a287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:73:98:f1:25:c0:5b:7d:7d:8a:ca:c0:5f:c1: 96:d5:12:6e:c2:d6:49:28:a0:8f:6f:1c:49:4e:59: 8a:26:77:40:f4:48:46:50:ad:09:79:c0:ca:81:d2: 6b:aa:b8:8b:86:ae:28:c1:ec:95:1e:c5:c7:af:76: 2d:7a:75:4b:5c:69:e7:d2:32:60:ab:e5:05:b4:0e: c9:6b:54:68:c3:9c:0c:5b:64:6c:46:8d:e3:ac:a2: c4:d6:b3:32:dc:b2:57:71:95:c9:41:99:e8:c9:3d: 5a:b2:e0:fb:22:bb:16:a6:87:4f:e8:0a:40:29:9b: 40:38:c7:ff:1a:3c:ec:a3:10:77:c0:f6:b9:b3:9c: 9f:df:20:a6:f3:46:08:ff:63:e3:3a:da:58:14:8e: 37:55:54:47:fe:a5:6a:de:16:22:2c:f8:9d:a5:09: 5e:27:04:f9:92:fa:11:5f:7e:12:5d:fa:d1:4a:d5: dc:06:cf:16:83:ab:1b:13:de:45:f7:ad:51:12:47: 6d:18:15:4a:e7:3a:97:8e:3e:04:14:28:b8:26:16: 89:44:95:3b:24:65:30:38:93:d6:60:ed:28:56:fe: ce:78:f8:7d:91:ed:aa:d0:5f:d1:3e:63:c2:c2:25: b2:1e:c8:da:f6:ba:38:02:25:f7:a7:f3:cd:60:38: 5b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9F:2E:FE:62:C8:03:2C:93:07:72:B2:2A:14:07:53:78:89:A2:87 X509v3 Authority Key Identifier: keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e1:42:a1:9c:0e:d6:52:40:b8:a8:e0:91:66:ac:dc:a4:d0: 42:0e:21:da:b0:2f:5d:cd:00:c0:7d:b5:9f:5b:10:5d:29:eb: 61:86:f3:75:1a:d2:a0:ed:15:c9:f6:0d:e3:26:61:04:df:85: 91:ef:b2:75:af:65:10:32:2d:4a:ce:70:a7:67:3f:94:af:17: 13:76:2e:6e:52:7c:e2:e2:3c:3a:96:86:ee:0b:4e:b0:9d:e3: cb:ed:66:b1:f3:24:b4:9d:c3:93:50:bf:d1:87:bd:f3:56:9f: 3c:25:ca:85:c3:f0:1e:0d:ad:ae:06:ea:df:cd:36:5a:27:95: 78:a7:69:04:83:3b:aa:ac:8b:e0:14:53:ba:5d:96:53:b0:5e: 77:c8:15:b7:87:d2:00:4b:fc:1c:38:10:39:4b:41:ea:9d:19: 97:7d:72:89:ad:d5:b4:11:d9:ba:36:98:ee:b1:52:41:38:79: 19:85:32:a2:ff:cf:06:76:f4:21:09:56:09:02:60:a5:60:f7: 47:70:03:99:c7:f3:6b:77:45:81:fe:3c:00:b9:31:e7:aa:ac: 02:f3:c8:36:3f:85:ed:7e:0d:c7:2b:67:fc:33:0e:14:1c:c5: 96:df:1c:c2:51:1c:64:eb:a2:93:ce:40:fd:8f:13:c2:d6:25: c7:3d:ad:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskB7i7BZpYvpTK6TtgbnKjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMjMyYWUzOGE5MjMzYWI3ZmMxYjQyOWE1MDI5MjIwYWZh N2IyODgwHhcNMjUxMjE1MjIwMDQ0WhcNMjUxMjE2MjIwMDQ0WjAzMTEwLwYDVQQD EyhkMDlmMmVmZTYyYzgwMzJjOTMwNzcyYjIyYTE0MDc1Mzc4ODlhMjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnOY8SXAW319isrAX8GW1RJuwtZJ KKCPbxxJTlmKJndA9EhGUK0JecDKgdJrqriLhq4oweyVHsXHr3YtenVLXGnn0jJg q+UFtA7Ja1Row5wMW2RsRo3jrKLE1rMy3LJXcZXJQZnoyT1asuD7IrsWpodP6ApA KZtAOMf/GjzsoxB3wPa5s5yf3yCm80YI/2PjOtpYFI43VVRH/qVq3hYiLPidpQle JwT5kvoRX34SXfrRStXcBs8Wg6sbE95F961REkdtGBVK5zqXjj4EFCi4JhaJRJU7 JGUwOJPWYO0oVv7OePh9ke2q0F/RPmPCwiWyHsja9ro4AiX3p/PNYDhbMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCfLv5iyAMskwdysioUB1N4iaKHMB8GA1UdIwQY MBaAFFojKuOKkjOrf8G0KaUCkiCvp7KIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82YWVmOWUtZmU0ZC00M2U3LWExY2It MTBhNDg1YzBiMGYyLzEvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS82YWVmOWUtZmU0ZC00M2U3LWExY2ItMTBhNDg1YzBiMGYy LzEvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeFCoZwO 1lJAuKjgkWas3KTQQg4h2rAvXc0AwH21n1sQXSnrYYbzdRrSoO0VyfYN4yZhBN+F ke+yda9lEDItSs5wp2c/lK8XE3YublJ84uI8OpaG7gtOsJ3jy+1msfMktJ3Dk1C/ 0Ye981afPCXKhcPwHg2trgbq3802WieVeKdpBIM7qqyL4BRTul2WU7Bed8gVt4fS AEv8HDgQOUtB6p0Zl31yia3VtBHZujaY7rFSQTh5GYUyov/PBnb0IQlWCQJgpWD3 R3ADmcfza3dFgf48ALkx56qsAvPINj+F7X4Nxytn/DMOFBzFlt8cwlEcZOuik85A /Y8TwtYlxz2tJA== -----END CERTIFICATE-----Generated at Tue Dec 16 01:09:14 2025 by rpki-client