This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft File: wtKsHXyezPVli4jxb2E9ez6OjHI.mft (raw, json) Hash identifier: Lt9uuezAnWBt+TZf3iPihyKPIM7xjW4XBvGv1mkb63w= Subject key identifier: AE:48:DF:95:BC:0A:68:04:74:B9:A6:C3:C5:08:3B:9C:D9:66:63:00 Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72 Certificate issuer: /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72 Certificate serial: 019B066C3BB7E34E2B34EFDD99E7895AAA9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft Manifest number: 0E44 Signing time: Wed 10 Dec 2025 04:01:54 +0000 Manifest this update: Wed 10 Dec 2025 04:01:54 +0000 Manifest next update: Thu 11 Dec 2025 04:01:54 +0000 Files and hashes: 1: iyhHvdxrCDpCx0rthc1y2PDRVeM.roa (hash: tsQpmBoieuwyK9NLkB/rFB9zv5VDj/xDszDJZlsYm+M=) 2: kYICD71uUIhZT1NgaYWPu4i9VEs.roa (hash: tlKuBt17kCCF6TmwuYmDos64rg+wgJTpFtqRY1+6cVg=) 3: rxulmmTM3aUPLuBlu9rO1gYtU0E.roa (hash: mlQ5fN4qWCNRmduR+b96aoxJGllKwLF1otEUmt6MRxw=) 4: wtKsHXyezPVli4jxb2E9ez6OjHI.crl (hash: O9lbJkktkBOxCnr4jVa34ovEgPvr5k5zgXGeWpby3jI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 04:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:6c:3b:b7:e3:4e:2b:34:ef:dd:99:e7:89:5a:aa:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72 Validity Not Before: Dec 10 04:01:54 2025 GMT Not After : Dec 11 04:01:54 2025 GMT Subject: CN=ae48df95bc0a680474b9a6c3c5083b9cd9666300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:93:67:13:36:ca:9e:be:dd:11:e2:db:aa: 8b:b6:70:45:ef:c1:4b:49:aa:bc:5d:86:ff:23:a7: 09:00:f0:7b:be:73:ae:ea:67:17:15:fa:ae:fa:23: 64:91:99:15:1b:96:98:bf:22:86:dc:79:4c:5a:6a: 2a:12:f9:ce:4d:5e:e9:36:ec:3c:2d:98:d4:e5:6f: d8:b6:11:fb:e8:df:38:b6:64:f9:4d:ff:db:30:a0: 48:ad:62:94:ff:0f:17:bb:4c:86:02:53:4e:5d:50: cb:dd:66:b3:cd:75:eb:9b:f0:59:8a:32:54:52:48: 70:99:43:44:95:4f:a1:40:d2:9a:76:69:15:5a:19: cf:c2:a5:32:d5:ac:67:85:9a:4d:9f:f9:d6:0b:3c: ad:74:bd:c6:71:d7:a1:ba:35:04:28:28:5a:48:d1: c3:a9:f0:73:10:fe:eb:4d:8b:ef:04:0b:d4:1b:6a: 2d:75:35:73:a8:da:aa:f9:92:e2:fa:3f:d3:f9:2b: c0:7e:85:a5:79:a1:6b:24:34:f2:c4:92:53:d6:62: e6:c7:3e:c9:13:79:4e:b7:46:fb:87:47:2d:f2:69: ed:9e:5c:2b:7a:aa:37:5b:e3:a8:7a:39:ad:8d:2e: e5:db:05:a2:07:5c:fd:a7:1b:0c:08:09:7a:d6:e4: 56:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:48:DF:95:BC:0A:68:04:74:B9:A6:C3:C5:08:3B:9C:D9:66:63:00 X509v3 Authority Key Identifier: keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:1e:28:e6:d5:9c:04:4b:71:5f:22:c9:d1:8e:aa:b3:7d:df: c9:09:a7:8c:81:8a:52:3c:c1:50:ff:29:92:ae:64:a9:40:2d: 66:5e:e9:77:ee:5b:9a:49:1c:85:a8:ff:83:b1:87:0d:ca:cf: 54:dc:b1:7a:27:46:44:b3:0c:08:12:0f:93:d3:22:e8:86:52: 51:d1:eb:6f:2a:79:16:06:dc:ad:0c:df:2f:b0:e8:d0:ec:89: a1:12:60:aa:5e:e7:dc:6d:8e:fd:5b:56:2d:0c:4a:ac:45:b0: 20:00:8f:69:2c:cf:0e:9f:45:83:a5:36:d5:6b:6a:c4:c3:f0: 9b:cd:70:36:76:6e:ed:4b:b3:ae:5d:70:18:a4:96:63:51:bb: 81:40:42:6d:30:22:34:26:7e:5d:3b:b6:23:a7:e0:65:0a:19: d9:15:d3:fa:73:c9:56:95:e9:f0:2a:ed:6a:b0:b1:f3:d6:9c: a4:19:0c:2c:f9:6b:28:2e:fa:cc:88:ef:f9:d0:21:90:38:bf: aa:7f:f8:f7:66:66:ee:41:f6:87:09:bc:81:0c:6e:48:92:06: 1e:fc:e2:a9:f1:19:d7:e4:1e:37:a2:41:2e:b0:84:5e:13:68: 80:41:dc:9c:07:95:57:67:4e:d2:fb:82:38:10:9c:aa:f9:bf: 38:5d:2c:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGbDu3404rNO/dmeeJWqqcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDJhYzFkN2M5ZWNjZjU2NThiODhmMTZmNjEzZDdiM2U4 ZThjNzIwHhcNMjUxMjEwMDQwMTU0WhcNMjUxMjExMDQwMTU0WjAzMTEwLwYDVQQD EyhhZTQ4ZGY5NWJjMGE2ODA0NzRiOWE2YzNjNTA4M2I5Y2Q5NjY2MzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0STZxM2yp6+3RHi26qLtnBF78FL Saq8XYb/I6cJAPB7vnOu6mcXFfqu+iNkkZkVG5aYvyKG3HlMWmoqEvnOTV7pNuw8 LZjU5W/YthH76N84tmT5Tf/bMKBIrWKU/w8Xu0yGAlNOXVDL3WazzXXrm/BZijJU UkhwmUNElU+hQNKadmkVWhnPwqUy1axnhZpNn/nWCzytdL3GcdehujUEKChaSNHD qfBzEP7rTYvvBAvUG2otdTVzqNqq+ZLi+j/T+SvAfoWleaFrJDTyxJJT1mLmxz7J E3lOt0b7h0ct8mntnlwreqo3W+OoejmtjS7l2wWiB1z9pxsMCAl61uRWjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK5I35W8CmgEdLmmw8UIO5zZZmMAMB8GA1UdIwQY MBaAFMLSrB18nsz1ZYuI8W9hPXs+joxyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RLc0hYeWV6UFZsaTRqeGIyRTllejZPakhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84YjFiYzItNTkyNi00YWNlLWIxNmYt MTk3ZmU4MzY1NjQzLzEvd3RLc0hYeWV6UFZsaTRqeGIyRTllejZPakhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC84YjFiYzItNTkyNi00YWNlLWIxNmYtMTk3ZmU4MzY1NjQz LzEvd3RLc0hYeWV6UFZsaTRqeGIyRTllejZPakhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARR4o5tWc BEtxXyLJ0Y6qs33fyQmnjIGKUjzBUP8pkq5kqUAtZl7pd+5bmkkchaj/g7GHDcrP VNyxeidGRLMMCBIPk9Mi6IZSUdHrbyp5FgbcrQzfL7Do0OyJoRJgql7n3G2O/VtW LQxKrEWwIACPaSzPDp9Fg6U21WtqxMPwm81wNnZu7Uuzrl1wGKSWY1G7gUBCbTAi NCZ+XTu2I6fgZQoZ2RXT+nPJVpXp8CrtarCx89acpBkMLPlrKC76zIjv+dAhkDi/ qn/492Zm7kH2hwm8gQxuSJIGHvziqfEZ1+QeN6JBLrCEXhNogEHcnAeVV2dO0vuC OBCcqvm/OF0swg== -----END CERTIFICATE-----Generated at Wed Dec 10 12:24:05 2025 by rpki-client