This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft File: wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft (raw, json) Hash identifier: UWKPqdOT/mpywbOmA0vV78faru3ugpmVAz3u9Dja574= Subject key identifier: 65:2D:8D:10:B2:E4:64:73:1C:29:BE:5E:C5:EC:46:E4:58:5A:49:0B Authority key identifier: C1:4F:05:BC:18:F5:3B:80:FC:29:C0:AD:1B:28:38:92:BD:FE:36:CF Certificate issuer: /CN=c14f05bc18f53b80fc29c0ad1b283892bdfe36cf Certificate serial: 019B424A23FD47BCEF72C94EC6DC5C389929 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft Manifest number: 027B Signing time: Sun 21 Dec 2025 19:01:53 +0000 Manifest this update: Sun 21 Dec 2025 19:01:53 +0000 Manifest next update: Mon 22 Dec 2025 19:01:53 +0000 Files and hashes: 1: _M9B2KOz2UeSzhUegvYxGA2BwYo.roa (hash: D0dhCF5CGV5Me0OwA23AKaMmK0KyGQzZrCqAnO1Fksg=) 2: wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl (hash: 7JgQZDZtmsrCxpBvbLtyZaWlNvya/uOxJgSo8ygLpck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:23:fd:47:bc:ef:72:c9:4e:c6:dc:5c:38:99:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c14f05bc18f53b80fc29c0ad1b283892bdfe36cf Validity Not Before: Dec 21 19:01:53 2025 GMT Not After : Dec 22 19:01:53 2025 GMT Subject: CN=652d8d10b2e464731c29be5ec5ec46e4585a490b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:71:f3:2f:a7:b4:6a:cd:4d:4b:22:b2:53:a3: fb:40:ae:97:57:c1:5a:d5:be:ae:f9:93:ac:49:f4: 12:b7:fd:2e:55:3e:5f:eb:a4:c2:37:30:62:4b:44: fd:b5:0d:57:38:91:87:fc:f9:7f:5c:ab:3b:f7:66: 8e:f4:f3:1f:3e:af:ca:b2:4a:cb:08:61:da:c9:c2: 8e:7c:68:1a:54:e6:07:cf:eb:9b:f4:2d:21:7a:4a: f6:a2:03:05:35:39:c9:7b:ff:c4:c4:2b:29:84:94: 3f:4d:44:ca:91:1b:fb:d1:02:31:11:04:80:b4:fb: 8c:92:83:90:e3:c8:86:5b:46:d4:5c:15:56:25:6f: ed:96:f9:59:78:31:57:1f:b2:e0:06:eb:99:67:51: 2a:57:f3:a5:c5:23:ff:5f:65:ec:6d:ae:f2:8c:56: 77:09:a0:1e:5c:ff:0b:21:b6:62:fd:c3:29:3c:4c: b0:bd:42:ef:b5:39:b5:a6:aa:91:25:45:fb:a3:3b: 70:2f:ef:b3:20:a3:74:e6:d1:93:8d:0e:04:4f:e7: 04:b8:af:4b:de:88:f7:7c:b4:04:27:ed:2c:cd:b2: 3e:08:f9:8d:e5:dc:bb:5f:17:7e:4c:00:69:8d:d8: 43:60:f1:d2:ac:98:a2:20:ae:ec:0a:40:4f:90:01: ab:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2D:8D:10:B2:E4:64:73:1C:29:BE:5E:C5:EC:46:E4:58:5A:49:0B X509v3 Authority Key Identifier: keyid:C1:4F:05:BC:18:F5:3B:80:FC:29:C0:AD:1B:28:38:92:BD:FE:36:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:91:47:7f:61:5e:62:0f:3d:ca:37:5c:cf:45:59:fc:7e:c7: b4:6c:b8:ec:4c:02:6c:e6:f2:2c:60:b3:65:da:82:6e:99:2a: 7e:73:fb:7d:ed:59:a5:96:1d:36:0b:1b:12:2c:ec:8e:fd:b5: 1d:92:d2:63:b8:fb:b4:f4:5b:53:07:4f:88:89:dc:c5:e7:cd: 94:55:da:b7:ad:a4:27:9c:1e:91:c9:e6:32:dd:e5:ae:76:fb: eb:82:a8:aa:ba:06:28:98:54:d8:34:d0:b3:d3:2a:e9:7d:4b: 2d:c3:e2:37:ed:8d:20:de:a3:99:36:fc:7c:bd:21:99:0f:29: 97:7f:cd:53:97:99:f4:5d:df:78:7f:21:91:c4:59:66:81:97: ba:dc:4a:e0:15:53:9b:88:e9:3a:af:4d:71:fd:c0:5e:f5:75: b4:9c:f9:be:09:74:ce:c5:25:4e:d6:28:ed:dd:6e:a2:18:10: ce:00:5f:a9:7e:09:63:c2:ee:f0:6f:a7:1f:ec:f6:26:99:19: f8:28:41:a1:48:9f:a7:1b:3f:81:35:ab:20:c7:81:a0:c9:94: 0d:b8:62:d7:26:95:c0:21:7d:18:52:26:89:49:89:38:08:93: 6e:8e:9b:29:df:98:76:fb:f0:05:ac:27:ac:b8:39:0a:f2:bd: de:f3:a2:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSiP9R7zvcslOxtxcOJkpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNGYwNWJjMThmNTNiODBmYzI5YzBhZDFiMjgzODkyYmRm ZTM2Y2YwHhcNMjUxMjIxMTkwMTUzWhcNMjUxMjIyMTkwMTUzWjAzMTEwLwYDVQQD Eyg2NTJkOGQxMGIyZTQ2NDczMWMyOWJlNWVjNWVjNDZlNDU4NWE0OTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3HzL6e0as1NSyKyU6P7QK6XV8Fa 1b6u+ZOsSfQSt/0uVT5f66TCNzBiS0T9tQ1XOJGH/Pl/XKs792aO9PMfPq/KskrL CGHaycKOfGgaVOYHz+ub9C0hekr2ogMFNTnJe//ExCsphJQ/TUTKkRv70QIxEQSA tPuMkoOQ48iGW0bUXBVWJW/tlvlZeDFXH7LgBuuZZ1EqV/OlxSP/X2Xsba7yjFZ3 CaAeXP8LIbZi/cMpPEywvULvtTm1pqqRJUX7oztwL++zIKN05tGTjQ4ET+cEuK9L 3oj3fLQEJ+0szbI+CPmN5dy7Xxd+TABpjdhDYPHSrJiiIK7sCkBPkAGrQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUtjRCy5GRzHCm+XsXsRuRYWkkLMB8GA1UdIwQY MBaAFMFPBbwY9TuA/CnArRsoOJK9/jbPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1U4RnZCajFPNEQ4S2NDdEd5ZzRrcjMtTnM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lZmMwYmQtM2NjYi00N2I1LThkMzQt MjQ3NjMwMTFkMDI0LzEvd1U4RnZCajFPNEQ4S2NDdEd5ZzRrcjMtTnM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9lZmMwYmQtM2NjYi00N2I1LThkMzQtMjQ3NjMwMTFkMDI0 LzEvd1U4RnZCajFPNEQ4S2NDdEd5ZzRrcjMtTnM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpFHf2Fe Yg89yjdcz0VZ/H7HtGy47EwCbObyLGCzZdqCbpkqfnP7fe1ZpZYdNgsbEizsjv21 HZLSY7j7tPRbUwdPiIncxefNlFXat62kJ5wekcnmMt3lrnb764KoqroGKJhU2DTQ s9Mq6X1LLcPiN+2NIN6jmTb8fL0hmQ8pl3/NU5eZ9F3feH8hkcRZZoGXutxK4BVT m4jpOq9Ncf3AXvV1tJz5vgl0zsUlTtYo7d1uohgQzgBfqX4JY8Lu8G+nH+z2JpkZ +ChBoUifpxs/gTWrIMeBoMmUDbhi1yaVwCF9GFImiUmJOAiTbo6bKd+YdvvwBawn rLg5CvK93vOifg== -----END CERTIFICATE-----Generated at Mon Dec 22 04:02:11 2025 by rpki-client