This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft File: wUMgTpetea1qHwlA70GxbyB7SJ0.mft (raw, json) Hash identifier: UCFaaxnimpTNXUEf6EcOhsW3WDmh4OMDCrdZYVZ6kLw= Subject key identifier: F6:95:40:6C:CB:94:B6:C0:FC:8B:E8:E5:D8:51:3E:16:3E:CB:46:6B Authority key identifier: C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D Certificate issuer: /CN=c143204e97ad79ad6a1f0940ef41b16f207b489d Certificate serial: 019B59765DCB3F1ECAB3EAD60E997F324532 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft Manifest number: F7 Signing time: Fri 26 Dec 2025 07:01:27 +0000 Manifest this update: Fri 26 Dec 2025 07:01:27 +0000 Manifest next update: Sat 27 Dec 2025 07:01:27 +0000 Files and hashes: 1: We_eJU8uhiQBtd3wrWn-ZlbXQRc.roa (hash: 6QN0Fg3SAd13aQtCCegpoqGppEXLz5qo/Z2EDHmRRaY=) 2: psikfGn6FpQqhh0DSl5jsvwmwiU.roa (hash: cPs/n9SJJJcAsyUWs++t4L7KylflYtT7QnrTpSDlQIQ=) 3: wUMgTpetea1qHwlA70GxbyB7SJ0.crl (hash: kkSHqb2zDB37yFYk0s9krsRj0/pyrxSUAvxp5inWmQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:5d:cb:3f:1e:ca:b3:ea:d6:0e:99:7f:32:45:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c143204e97ad79ad6a1f0940ef41b16f207b489d Validity Not Before: Dec 26 07:01:27 2025 GMT Not After : Dec 27 07:01:27 2025 GMT Subject: CN=f695406ccb94b6c0fc8be8e5d8513e163ecb466b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b3:1b:1a:8c:50:e6:a0:8d:92:21:8c:60:92: 4c:04:bd:a1:90:22:94:5a:ca:4a:cf:c1:09:03:10: fa:2c:6c:7d:eb:2c:80:00:15:2e:c7:0b:c2:ea:b6: a9:d5:04:78:41:f2:2a:87:f6:92:1c:6f:8c:b6:48: 9c:b9:6c:5c:56:de:d2:d6:34:52:58:c5:6a:4e:8d: 92:80:52:87:50:10:eb:c3:63:b1:00:2a:00:65:1a: 89:c8:94:dd:92:6f:22:d6:82:e1:b9:4b:58:b4:3d: 84:d2:68:17:4c:6d:52:a2:8b:62:fc:7a:29:4a:02: 72:55:84:27:5b:ac:cb:a9:f4:f7:9d:1c:89:dd:ca: 3e:eb:9e:0f:d6:a4:2a:c3:7f:67:19:32:c6:db:f0: ed:3b:d7:2f:58:aa:b9:b7:42:d4:99:ed:3b:21:2f: 45:13:80:d4:29:08:4a:cb:2c:fa:d2:e3:c5:3d:07: 1e:92:48:15:2f:85:bb:79:6b:37:b6:c4:4e:c5:41: fb:90:04:82:39:04:80:0c:c7:c1:cf:91:b0:bc:ff: 1e:74:0c:b4:ed:6d:ac:90:8f:f3:20:00:08:6a:4a: 71:fc:1b:24:11:d5:48:48:c3:82:0e:69:b7:42:06: 8b:d2:f8:73:21:9e:9d:f6:cc:39:16:2e:9d:76:67: 05:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:95:40:6C:CB:94:B6:C0:FC:8B:E8:E5:D8:51:3E:16:3E:CB:46:6B X509v3 Authority Key Identifier: keyid:C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:37:a2:23:3b:a0:c9:4f:9b:dc:73:6d:95:53:de:83:cb:ab: ad:e4:80:b8:cc:69:4a:ef:25:92:56:a3:10:21:d5:8f:28:44: 13:1d:98:16:df:38:d4:a0:09:3b:b7:dd:c3:40:35:00:ec:80: 95:ae:9b:4a:d3:c0:65:0f:76:1f:bc:7b:ac:48:b5:31:ee:f4: 50:eb:cb:f6:31:e9:a1:46:fd:43:eb:dc:e5:ec:a0:30:2d:16: 5c:a2:58:1a:82:da:e0:b4:66:85:14:af:3c:fb:65:05:79:2c: 2f:56:d1:5f:12:fc:d0:6b:bd:67:7f:07:ee:b0:2f:3d:52:45: 87:06:d7:ed:98:f7:54:6a:6b:11:28:78:66:38:64:4a:aa:3a: 15:90:4c:b4:0f:db:9d:ee:48:c2:ce:09:b9:bb:0a:3c:6b:cc: 48:2c:bc:15:d4:14:d1:0e:02:3d:13:80:13:c1:ed:c0:a7:58: ae:82:d4:8f:72:ad:df:93:a0:a0:1f:bf:7e:f0:54:10:29:94: 40:26:f0:2f:43:95:14:78:1c:33:49:bd:a9:44:4a:34:a3:3c: fd:ad:55:49:cb:fd:fd:07:e6:c6:33:5f:e9:88:3e:d3:76:b2: fb:ee:50:11:02:19:ae:72:b2:ba:81:e4:a2:a0:be:20:4c:e8: 08:b2:ee:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdl3LPx7Ks+rWDpl/MkUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNDMyMDRlOTdhZDc5YWQ2YTFmMDk0MGVmNDFiMTZmMjA3 YjQ4OWQwHhcNMjUxMjI2MDcwMTI3WhcNMjUxMjI3MDcwMTI3WjAzMTEwLwYDVQQD EyhmNjk1NDA2Y2NiOTRiNmMwZmM4YmU4ZTVkODUxM2UxNjNlY2I0NjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrMbGoxQ5qCNkiGMYJJMBL2hkCKU WspKz8EJAxD6LGx96yyAABUuxwvC6rap1QR4QfIqh/aSHG+MtkicuWxcVt7S1jRS WMVqTo2SgFKHUBDrw2OxACoAZRqJyJTdkm8i1oLhuUtYtD2E0mgXTG1Sooti/Hop SgJyVYQnW6zLqfT3nRyJ3co+654P1qQqw39nGTLG2/DtO9cvWKq5t0LUme07IS9F E4DUKQhKyyz60uPFPQcekkgVL4W7eWs3tsROxUH7kASCOQSADMfBz5GwvP8edAy0 7W2skI/zIAAIakpx/BskEdVISMOCDmm3QgaL0vhzIZ6d9sw5Fi6ddmcFdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPaVQGzLlLbA/Ivo5dhRPhY+y0ZrMB8GA1UdIwQY MBaAFMFDIE6XrXmtah8JQO9BsW8ge0idMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1VNZ1RwZXRlYTFxSHdsQTcwR3hieUI3U0owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iMDE0NGUtOWYzMC00ZjlmLWE4N2Yt ZDI5YTVkOTE4ZmQ4LzEvd1VNZ1RwZXRlYTFxSHdsQTcwR3hieUI3U0owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9iMDE0NGUtOWYzMC00ZjlmLWE4N2YtZDI5YTVkOTE4ZmQ4 LzEvd1VNZ1RwZXRlYTFxSHdsQTcwR3hieUI3U0owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjeiIzug yU+b3HNtlVPeg8urreSAuMxpSu8lklajECHVjyhEEx2YFt841KAJO7fdw0A1AOyA la6bStPAZQ92H7x7rEi1Me70UOvL9jHpoUb9Q+vc5eygMC0WXKJYGoLa4LRmhRSv PPtlBXksL1bRXxL80Gu9Z38H7rAvPVJFhwbX7Zj3VGprESh4ZjhkSqo6FZBMtA/b ne5Iws4JubsKPGvMSCy8FdQU0Q4CPROAE8HtwKdYroLUj3Kt35OgoB+/fvBUECmU QCbwL0OVFHgcM0m9qURKNKM8/a1VScv9/QfmxjNf6Yg+03ay++5QEQIZrnKyuoHk oqC+IEzoCLLuog== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:22 2025 by rpki-client