This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json) Hash identifier: hTpIljoWGCgIvaD+ltPmL7yUJcfIKb8qLn9X/58h4rA= Subject key identifier: 85:09:1E:35:FB:D8:F5:3D:13:14:66:2D:5B:4A:4B:3D:A0:1A:1A:D1 Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87 Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87 Certificate serial: 019B05C6E6393822F77331C48706B1190C85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft Manifest number: 09A6 Signing time: Wed 10 Dec 2025 01:01:19 +0000 Manifest this update: Wed 10 Dec 2025 01:01:19 +0000 Manifest next update: Thu 11 Dec 2025 01:01:19 +0000 Files and hashes: 1: oXdvfaAw2HX5k9hgoYRskK2gnZ0.roa (hash: RsMteruai2QKgImCyNPBir6yRcbFaU5c9mP5yO+ruyE=) 2: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: diRKcCH3kiscx16wMyra0l00GkUhmM+7v69pvRg17Ac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:c6:e6:39:38:22:f7:73:31:c4:87:06:b1:19:0c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87 Validity Not Before: Dec 10 01:01:19 2025 GMT Not After : Dec 11 01:01:19 2025 GMT Subject: CN=85091e35fbd8f53d1314662d5b4a4b3da01a1ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e1:4e:6c:77:c0:b4:4d:31:9b:a0:95:2a:f8: 3e:ce:7a:61:6e:e9:66:a4:df:95:0f:24:e7:7e:78: f2:88:b3:e9:ee:6d:c7:b9:e0:95:fa:06:2e:80:9b: 61:83:2e:9f:db:62:81:2f:13:0c:3e:53:e7:70:92: c2:01:49:eb:a0:25:0f:c8:1e:e3:bb:4d:72:8f:fe: 99:03:12:50:9f:57:ae:6d:b6:eb:8d:24:68:5d:8c: 58:33:95:b6:b9:b4:14:69:2a:79:95:cd:58:f3:58: 44:0d:dc:a2:97:05:27:31:ac:23:1a:bf:96:66:25: 55:13:37:8e:e0:63:df:3d:1e:2c:2b:6d:29:bc:02: 44:38:16:0e:16:0b:00:c0:ff:7c:0c:ee:2a:9f:33: b6:00:34:d2:83:29:ac:2e:df:ad:91:2f:b8:24:da: 8d:a0:85:c7:fe:52:e9:b1:69:0d:37:ca:6c:8c:30: 8e:ee:67:33:dc:01:87:72:1f:b9:36:31:90:40:d8: 51:2b:a0:81:21:ea:8c:6f:52:17:87:bd:84:17:dd: bc:99:51:1c:79:8c:60:2f:6e:53:3a:11:34:4e:a8: e7:eb:34:60:04:66:f5:93:bf:f9:d2:e5:83:84:2f: 27:58:a1:7e:64:ab:d2:b9:d8:3b:cd:ce:ed:30:fe: d9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:09:1E:35:FB:D8:F5:3D:13:14:66:2D:5B:4A:4B:3D:A0:1A:1A:D1 X509v3 Authority Key Identifier: keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:31:ac:35:24:59:12:32:34:d1:3b:3d:6f:a5:f3:f5:5d:88: 2e:b5:d5:68:81:bf:c8:0e:5f:7f:1a:c0:84:2f:83:45:6a:39: b0:b3:3b:88:75:80:44:6b:49:35:e3:88:fc:0b:e1:fc:ab:5f: 6a:c1:1e:cf:ad:98:14:a7:25:ee:f9:b7:79:de:0d:e0:4a:dc: 3d:50:9d:94:5c:37:21:29:bb:1a:44:8f:80:d3:64:4d:5a:8c: 17:70:3c:26:54:0c:63:64:69:1b:8e:06:3a:01:6f:96:ef:4c: 8d:06:2a:3f:b7:32:44:2a:a5:d8:d3:e3:af:a5:13:a1:cd:20: b1:a2:4a:cc:a7:8d:d0:4f:cb:e4:6a:9f:59:96:c8:a3:52:a0: 57:b4:bd:70:9d:7b:31:cc:9b:bc:48:ed:1c:1a:41:26:9b:16: 0c:19:5b:71:17:eb:10:4b:af:5f:a9:eb:c5:0d:a8:54:98:82: 99:7d:14:81:be:a8:be:02:88:d4:9b:db:e0:d6:3d:f9:bb:eb: 9e:8a:66:00:b9:47:12:e3:5b:b9:51:87:84:01:cf:36:54:3f: bd:ec:36:da:11:50:49:99:8a:85:8d:53:20:b1:c2:21:01:94: 1b:98:ea:f5:5d:f9:e2:00:2d:a3:11:53:c2:db:c7:25:23:60: 73:cf:54:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFxuY5OCL3czHEhwaxGQyFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMjEyNTg5NzRlZThlMDU0NTYwYzcxNzZmODM0N2Q0MzU1 YjlhODcwHhcNMjUxMjEwMDEwMTE5WhcNMjUxMjExMDEwMTE5WjAzMTEwLwYDVQQD Eyg4NTA5MWUzNWZiZDhmNTNkMTMxNDY2MmQ1YjRhNGIzZGEwMWExYWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOFObHfAtE0xm6CVKvg+znphbulm pN+VDyTnfnjyiLPp7m3HueCV+gYugJthgy6f22KBLxMMPlPncJLCAUnroCUPyB7j u01yj/6ZAxJQn1eubbbrjSRoXYxYM5W2ubQUaSp5lc1Y81hEDdyilwUnMawjGr+W ZiVVEzeO4GPfPR4sK20pvAJEOBYOFgsAwP98DO4qnzO2ADTSgymsLt+tkS+4JNqN oIXH/lLpsWkNN8psjDCO7mcz3AGHch+5NjGQQNhRK6CBIeqMb1IXh72EF928mVEc eYxgL25TOhE0Tqjn6zRgBGb1k7/50uWDhC8nWKF+ZKvSudg7zc7tMP7ZoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUJHjX72PU9ExRmLVtKSz2gGhrRMB8GA1UdIwQY MBaAFMIhJYl07o4FRWDHF2+DR9Q1W5qHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wODQ4MmYtYTdjNS00NjI3LWEwNjgt MjVmNzlkMmQ4YzE3LzEvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8wODQ4MmYtYTdjNS00NjI3LWEwNjgtMjVmNzlkMmQ4YzE3 LzEvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuDGsNSRZ EjI00Ts9b6Xz9V2ILrXVaIG/yA5ffxrAhC+DRWo5sLM7iHWARGtJNeOI/Avh/Ktf asEez62YFKcl7vm3ed4N4ErcPVCdlFw3ISm7GkSPgNNkTVqMF3A8JlQMY2RpG44G OgFvlu9MjQYqP7cyRCql2NPjr6UToc0gsaJKzKeN0E/L5GqfWZbIo1KgV7S9cJ17 McybvEjtHBpBJpsWDBlbcRfrEEuvX6nrxQ2oVJiCmX0Ugb6ovgKI1Jvb4NY9+bvr nopmALlHEuNbuVGHhAHPNlQ/vew22hFQSZmKhY1TILHCIQGUG5jq9V354gAtoxFT wtvHJSNgc89Upg== -----END CERTIFICATE-----Generated at Wed Dec 10 09:02:37 2025 by rpki-client