This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft File: wRq5FoIcWjFIzhJSungByqKrSRQ.mft (raw, json) Hash identifier: yNh1t9i13b1eT2RaNy5K9blGkVsRZ5vfU3SXgOHHLz0= Subject key identifier: B8:2F:F5:9D:CE:CF:62:B6:8E:2E:1E:C1:CC:F0:12:1B:0E:DB:C3:61 Authority key identifier: C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14 Certificate issuer: /CN=c11ab916821c5a3148ce1252ba7801caa2ab4914 Certificate serial: 019B31C42DECCC05399300CF9DB7EE0D8770 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 14:01:38 +0000 Manifest this update: Thu 18 Dec 2025 14:01:38 +0000 Manifest next update: Fri 19 Dec 2025 14:01:38 +0000 Files and hashes: 1: jmxXPs-eFsLMyQfsEqQE-gTcJzg.roa (hash: JMdb9ncK/VZi/Drly8ri6tbObrJ2pnr+vB9E79datFA=) 2: wRq5FoIcWjFIzhJSungByqKrSRQ.crl (hash: kozK025MWNgbufNoxcweUXfLdsRMCWtvlq0FnB/vyl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c4:2d:ec:cc:05:39:93:00:cf:9d:b7:ee:0d:87:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c11ab916821c5a3148ce1252ba7801caa2ab4914 Validity Not Before: Dec 18 14:01:38 2025 GMT Not After : Dec 19 14:01:38 2025 GMT Subject: CN=b82ff59dcecf62b68e2e1ec1ccf0121b0edbc361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:82:1b:aa:79:4e:f7:57:d7:f9:eb:c7:b3:eb: 86:30:c6:4c:22:f1:e9:58:10:74:1d:16:5f:a9:14: 06:b2:3e:5c:45:c5:bb:6e:e5:76:57:ef:87:e1:c4: a6:22:9e:2f:53:9c:9f:81:2d:b9:b5:d4:15:87:26: 9f:94:09:0d:08:90:87:e7:af:da:65:5d:bb:27:45: eb:59:e6:a1:b0:92:fe:7e:90:b3:f0:b9:c7:43:ff: cc:85:13:c3:b4:62:d0:7f:6f:4f:1b:86:72:95:a4: ab:75:fb:8f:e6:5c:81:8b:43:9e:26:a8:6e:83:73: 85:92:6b:d0:8c:c0:79:78:01:98:ad:3a:d2:a7:7a: b3:f7:b7:ae:f4:e7:fc:1b:f5:09:c5:a9:77:50:f3: 6d:ec:63:70:a0:09:7c:40:d4:ee:2b:97:21:06:dd: ed:a6:21:1e:49:64:8d:ce:3a:c4:a2:a6:d1:6c:5a: 50:80:0a:fa:9d:f7:0d:01:91:3c:e7:28:e7:3d:0d: ec:d0:34:62:07:a7:da:f1:7b:c8:35:f5:b8:91:c1: 45:a7:2c:80:8a:3f:47:b5:02:90:45:f0:bf:d0:ba: 39:1e:24:e0:f9:61:4b:c1:8a:c8:ba:65:48:ef:32: 1b:76:e1:db:f9:47:33:50:83:85:bf:0b:f0:a9:74: ae:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2F:F5:9D:CE:CF:62:B6:8E:2E:1E:C1:CC:F0:12:1B:0E:DB:C3:61 X509v3 Authority Key Identifier: keyid:C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:dd:47:18:7e:d8:56:a4:36:e0:8a:cb:b3:33:09:62:b9:d0: 9f:0e:c4:38:01:a3:39:02:ad:53:ae:2d:fe:7a:3b:6e:32:0b: b2:1c:93:ce:9a:08:43:bc:36:98:9e:16:37:ef:c8:bc:78:d0: 25:74:87:8a:d8:15:46:d8:38:94:07:53:29:2c:ff:70:f0:02: 14:66:5a:19:02:26:78:15:4a:f5:27:d0:8b:26:ad:ef:3d:1f: ea:6b:00:3f:39:f4:0c:5e:f7:64:4a:b1:63:00:dd:c4:b7:03: 56:b6:c8:54:a5:96:fc:86:15:fd:a2:28:96:aa:1c:29:82:3b: 93:09:c8:09:13:39:bc:e7:58:52:43:6f:41:26:80:ff:32:48: a3:61:ce:87:25:f7:ba:97:86:4a:4d:78:44:ac:6c:ab:f7:c0: e0:77:12:93:38:88:be:be:12:0a:7d:76:43:99:f7:86:6e:29: fe:33:37:ea:ef:5a:a4:3c:b3:0b:9e:61:6a:6e:65:ab:2f:17: 4b:ba:db:58:de:b1:95:93:96:2b:87:ff:b1:18:53:72:8e:c4: f1:19:e0:df:d0:ca:32:c7:d0:cf:23:0c:5e:57:7c:76:05:be: 62:1c:7a:02:df:8d:49:17:94:79:2a:57:a0:79:81:63:82:b3: 75:c5:ad:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxxC3szAU5kwDPnbfuDYdwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMWFiOTE2ODIxYzVhMzE0OGNlMTI1MmJhNzgwMWNhYTJh YjQ5MTQwHhcNMjUxMjE4MTQwMTM4WhcNMjUxMjE5MTQwMTM4WjAzMTEwLwYDVQQD EyhiODJmZjU5ZGNlY2Y2MmI2OGUyZTFlYzFjY2YwMTIxYjBlZGJjMzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04IbqnlO91fX+evHs+uGMMZMIvHp WBB0HRZfqRQGsj5cRcW7buV2V++H4cSmIp4vU5yfgS25tdQVhyaflAkNCJCH56/a ZV27J0XrWeahsJL+fpCz8LnHQ//MhRPDtGLQf29PG4ZylaSrdfuP5lyBi0OeJqhu g3OFkmvQjMB5eAGYrTrSp3qz97eu9Of8G/UJxal3UPNt7GNwoAl8QNTuK5chBt3t piEeSWSNzjrEoqbRbFpQgAr6nfcNAZE85yjnPQ3s0DRiB6fa8XvINfW4kcFFpyyA ij9HtQKQRfC/0Lo5HiTg+WFLwYrIumVI7zIbduHb+UczUIOFvwvwqXSukQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgv9Z3Oz2K2ji4ewczwEhsO28NhMB8GA1UdIwQY MBaAFMEauRaCHFoxSM4SUrp4Acqiq0kUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1JxNUZvSWNXakZJemhKU3VuZ0J5cUtyU1JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kMjM2MmUtMzI1Ni00MjQ0LTg1OGEt ZWU1NmYxYWZjMzY2LzEvd1JxNUZvSWNXakZJemhKU3VuZ0J5cUtyU1JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9kMjM2MmUtMzI1Ni00MjQ0LTg1OGEtZWU1NmYxYWZjMzY2 LzEvd1JxNUZvSWNXakZJemhKU3VuZ0J5cUtyU1JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEd1HGH7Y VqQ24IrLszMJYrnQnw7EOAGjOQKtU64t/no7bjILshyTzpoIQ7w2mJ4WN+/IvHjQ JXSHitgVRtg4lAdTKSz/cPACFGZaGQImeBVK9SfQiyat7z0f6msAPzn0DF73ZEqx YwDdxLcDVrbIVKWW/IYV/aIolqocKYI7kwnICRM5vOdYUkNvQSaA/zJIo2HOhyX3 upeGSk14RKxsq/fA4HcSkziIvr4SCn12Q5n3hm4p/jM36u9apDyzC55ham5lqy8X S7rbWN6xlZOWK4f/sRhTco7E8Rng39DKMsfQzyMMXld8dgW+Yhx6At+NSReUeSpX oHmBY4KzdcWtjQ== -----END CERTIFICATE-----Generated at Thu Dec 18 15:30:57 2025 by rpki-client