This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft File: wRq5FoIcWjFIzhJSungByqKrSRQ.mft (raw, json) Hash identifier: TktXM/+/Tj/pOC7vOR0dBNUDVjTlxyt/dSSZrjmf9bY= Subject key identifier: 9A:90:66:D6:43:44:97:B8:64:31:22:BE:D2:5E:77:01:A4:45:AD:29 Authority key identifier: C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14 Certificate issuer: /CN=c11ab916821c5a3148ce1252ba7801caa2ab4914 Certificate serial: 019B3B6BF78C9E835870A4C32E228B237CBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 11:01:29 +0000 Manifest this update: Sat 20 Dec 2025 11:01:29 +0000 Manifest next update: Sun 21 Dec 2025 11:01:29 +0000 Files and hashes: 1: jmxXPs-eFsLMyQfsEqQE-gTcJzg.roa (hash: JMdb9ncK/VZi/Drly8ri6tbObrJ2pnr+vB9E79datFA=) 2: wRq5FoIcWjFIzhJSungByqKrSRQ.crl (hash: ndeCypoITvqeOIxz0zxYkz88U5NsxxgkyGnkDkZRdbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:f7:8c:9e:83:58:70:a4:c3:2e:22:8b:23:7c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c11ab916821c5a3148ce1252ba7801caa2ab4914 Validity Not Before: Dec 20 11:01:29 2025 GMT Not After : Dec 21 11:01:29 2025 GMT Subject: CN=9a9066d6434497b8643122bed25e7701a445ad29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1e:fc:bd:dc:f6:5e:77:0b:be:a5:58:fc:60: cf:b5:68:76:95:57:f5:f3:95:17:93:9b:e3:94:24: d2:47:b4:12:b2:dc:1e:ae:35:a9:71:8b:96:db:16: 5e:fd:84:4f:25:71:82:0a:26:77:4c:be:99:92:54: 65:86:8f:8a:ed:0a:5a:21:90:2f:30:b1:56:a1:cf: 60:b7:61:d4:11:97:77:62:cf:fa:9d:ff:ea:0b:92: 64:d1:e9:e9:4c:22:00:7a:61:f8:53:8d:37:1b:54: fb:e4:fb:e4:7a:0b:2a:d6:2c:9b:e3:10:01:de:e3: bf:c2:e4:23:b3:b1:2d:59:5f:2a:39:8d:64:0f:3e: f8:22:95:62:54:e5:7a:11:8a:1b:d5:16:d8:de:d9: b3:16:ff:87:2c:1b:78:f2:91:45:2d:d8:12:23:6b: c9:a9:44:5c:8e:e0:48:0a:3e:fe:b8:21:ba:49:ea: 3e:18:2c:ce:b5:0d:5d:29:36:5b:e9:3b:b0:76:8e: 1d:c1:4f:97:1d:87:91:00:7e:73:25:35:85:e2:d6: 43:8f:a1:fd:b5:55:61:81:8b:40:ae:2c:1e:1d:07: 82:ae:f0:ac:24:58:4d:7b:be:a6:26:db:68:aa:38: 81:ba:c7:59:a7:7c:d1:62:88:52:bb:32:65:82:7d: 34:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:90:66:D6:43:44:97:B8:64:31:22:BE:D2:5E:77:01:A4:45:AD:29 X509v3 Authority Key Identifier: keyid:C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:d4:c0:36:eb:11:fa:08:1b:e0:9c:fe:85:f7:0a:a3:86:e5: 3c:1e:09:bf:81:d6:39:b3:16:47:25:78:e5:38:5f:0c:34:75: cd:f0:04:e0:ef:3e:09:16:65:4c:14:71:39:80:6d:7f:21:2f: 33:8b:0d:9e:6f:74:0d:77:61:7b:64:4b:4e:ea:1f:46:a0:d6: d8:68:b2:85:c2:46:51:8f:fd:44:ab:6d:f0:96:65:03:6f:1b: f7:ab:b7:e2:75:a5:a2:71:1e:f6:a4:e6:87:94:4b:71:c7:c4: fd:8f:e1:53:57:1b:8c:14:37:42:0c:5d:6d:d4:3d:a3:c8:ca: 1a:a9:e8:53:eb:f4:94:f9:52:16:96:27:ab:aa:41:75:30:50: de:f6:11:ae:d9:66:4b:51:43:98:c7:7e:47:f3:94:4b:31:ea: a7:11:e1:8b:0b:d7:73:eb:68:2d:dd:39:06:8f:d1:a6:1c:3d: 72:69:03:dd:8f:bd:a3:36:32:b9:ba:ba:2e:d1:c9:77:ed:64: 89:c9:22:67:42:c8:70:7a:50:1e:40:e2:54:9b:72:80:03:50: b9:2b:2d:69:9d:56:d6:0d:0c:6a:8e:70:c8:7c:a1:1f:7a:8c: ef:0d:50:70:22:3f:d8:05:3c:42:c1:00:a8:11:e2:4a:27:14: d5:cd:38:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a/eMnoNYcKTDLiKLI3y6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMWFiOTE2ODIxYzVhMzE0OGNlMTI1MmJhNzgwMWNhYTJh YjQ5MTQwHhcNMjUxMjIwMTEwMTI5WhcNMjUxMjIxMTEwMTI5WjAzMTEwLwYDVQQD Eyg5YTkwNjZkNjQzNDQ5N2I4NjQzMTIyYmVkMjVlNzcwMWE0NDVhZDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB78vdz2XncLvqVY/GDPtWh2lVf1 85UXk5vjlCTSR7QSstwerjWpcYuW2xZe/YRPJXGCCiZ3TL6ZklRlho+K7QpaIZAv MLFWoc9gt2HUEZd3Ys/6nf/qC5Jk0enpTCIAemH4U403G1T75Pvkegsq1iyb4xAB 3uO/wuQjs7EtWV8qOY1kDz74IpViVOV6EYob1RbY3tmzFv+HLBt48pFFLdgSI2vJ qURcjuBICj7+uCG6Seo+GCzOtQ1dKTZb6Tuwdo4dwU+XHYeRAH5zJTWF4tZDj6H9 tVVhgYtAriweHQeCrvCsJFhNe76mJttoqjiBusdZp3zRYohSuzJlgn00LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqQZtZDRJe4ZDEivtJedwGkRa0pMB8GA1UdIwQY MBaAFMEauRaCHFoxSM4SUrp4Acqiq0kUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1JxNUZvSWNXakZJemhKU3VuZ0J5cUtyU1JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kMjM2MmUtMzI1Ni00MjQ0LTg1OGEt ZWU1NmYxYWZjMzY2LzEvd1JxNUZvSWNXakZJemhKU3VuZ0J5cUtyU1JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9kMjM2MmUtMzI1Ni00MjQ0LTg1OGEtZWU1NmYxYWZjMzY2 LzEvd1JxNUZvSWNXakZJemhKU3VuZ0J5cUtyU1JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkdTANusR +ggb4Jz+hfcKo4blPB4Jv4HWObMWRyV45ThfDDR1zfAE4O8+CRZlTBRxOYBtfyEv M4sNnm90DXdhe2RLTuofRqDW2GiyhcJGUY/9RKtt8JZlA28b96u34nWlonEe9qTm h5RLccfE/Y/hU1cbjBQ3QgxdbdQ9o8jKGqnoU+v0lPlSFpYnq6pBdTBQ3vYRrtlm S1FDmMd+R/OUSzHqpxHhiwvXc+toLd05Bo/Rphw9cmkD3Y+9ozYyubq6LtHJd+1k ickiZ0LIcHpQHkDiVJtygANQuSstaZ1W1g0Mao5wyHyhH3qM7w1QcCI/2AU8QsEA qBHiSicU1c04+g== -----END CERTIFICATE-----Generated at Sat Dec 20 19:59:08 2025 by rpki-client