This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft File: wNBDfN98up85Z-syighobQbkfVY.mft (raw, json) Hash identifier: LsF0deIafrUX21rvt+dVIHvnkPJI8biethVvv1n0TCw= Subject key identifier: 43:C4:A9:12:86:A1:55:CB:47:0E:1F:DA:B6:01:3E:62:F2:04:E7:66 Authority key identifier: C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56 Certificate issuer: /CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56 Certificate serial: 019B0F006BE266947DC28DEAADA101D94925 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft Manifest number: 0513 Signing time: Thu 11 Dec 2025 20:00:44 +0000 Manifest this update: Thu 11 Dec 2025 20:00:44 +0000 Manifest next update: Fri 12 Dec 2025 20:00:44 +0000 Files and hashes: 1: RVpE5x4ewK-16qeOmC4zQhoP4D0.roa (hash: hUGCkNpwy4m/7VpqWBt6q2aDAeStLb3YaDGvbWD+DDQ=) 2: wNBDfN98up85Z-syighobQbkfVY.crl (hash: iO2ZIx0Kzr9H6Y/FoqzjTA8dgoEDjaUtoRCdWaHUdmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:6b:e2:66:94:7d:c2:8d:ea:ad:a1:01:d9:49:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56 Validity Not Before: Dec 11 20:00:44 2025 GMT Not After : Dec 12 20:00:44 2025 GMT Subject: CN=43c4a91286a155cb470e1fdab6013e62f204e766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5c:b7:94:80:b1:9b:27:09:8d:aa:e8:91:96: 15:96:31:6b:c0:6f:07:35:14:5e:5d:b7:f4:32:10: b2:06:a2:c1:c0:c5:bd:fb:43:d7:2f:e6:c7:42:33: 6c:af:9b:40:dc:d0:82:48:ab:13:c1:e2:98:0e:24: ba:45:ce:72:79:08:8a:8b:17:c3:ea:18:de:6e:40: 28:d1:a3:88:f6:e5:15:cb:a6:4a:a7:65:13:7c:a1: d1:bb:d4:a5:9d:ed:4b:90:9e:7b:a4:b8:b4:ff:2c: 3a:4e:01:dd:95:fc:c7:ad:5a:49:2d:50:75:74:cc: dd:44:4c:af:f2:42:74:7f:d2:66:6f:4a:e9:cf:6f: bd:44:86:5c:be:a6:f4:c6:05:b5:60:ef:bb:a5:7c: d7:5c:85:6f:fa:0a:65:f6:7d:d7:01:d8:6e:e3:b3: 97:97:a7:26:69:1f:f9:ae:36:64:97:7b:52:d0:ba: 2a:d9:27:4c:3e:53:12:d2:36:be:99:ab:5c:3b:e4: 8c:2a:ab:25:00:37:1d:d0:8e:af:48:80:b5:0f:34: cc:5b:f2:4b:b7:27:18:b4:fc:85:44:a8:6f:80:47: ce:3b:62:9c:50:c2:c3:58:49:b5:40:17:0d:3b:53: 20:94:87:41:26:da:db:de:9a:be:9d:07:a5:c5:7b: df:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C4:A9:12:86:A1:55:CB:47:0E:1F:DA:B6:01:3E:62:F2:04:E7:66 X509v3 Authority Key Identifier: keyid:C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:16:0e:c8:8c:60:68:ef:a7:25:d4:dc:ad:4e:70:69:1e:aa: d2:15:05:d2:98:09:ae:02:48:40:59:4d:2a:98:3c:db:f2:19: 7d:b0:4d:d7:9f:89:01:cb:fd:b4:7b:d4:db:4b:ea:4f:9f:0c: bd:ff:8a:e2:7e:db:ee:84:84:0e:12:7e:f0:4f:ce:90:aa:eb: 5e:65:1d:9b:6a:e2:2b:55:45:d1:a6:94:98:58:55:c3:b6:88: a2:12:1e:7c:1e:45:7a:56:0e:33:db:66:d8:72:d0:89:34:ec: a5:16:b0:90:67:cf:be:68:33:25:6a:75:54:9c:37:de:36:89: 3f:1d:31:cb:f1:2f:ff:be:8c:9b:5d:25:d2:9c:cb:7c:f9:ae: b2:11:f7:cf:c9:ef:39:db:81:81:92:d3:6c:a8:5b:73:f3:f7: 50:c3:b4:bb:f2:6a:88:4a:b9:0d:b3:94:e9:99:14:02:b4:eb: e6:1a:6e:42:ae:f1:fd:ce:8b:e1:79:60:ce:84:06:a3:68:a9: 29:02:75:7e:be:26:c5:de:91:19:41:e5:7d:58:4d:1e:d3:b2: b7:b6:97:f4:27:a6:46:9f:7e:09:07:d8:32:aa:a4:2a:b1:63: 1f:33:ca:73:0c:3c:d5:6d:f2:64:8f:bf:e6:31:ea:a2:ea:75: 3e:16:ee:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAGviZpR9wo3qraEB2UklMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZDA0MzdjZGY3Y2JhOWYzOTY3ZWIzMjhhMDg2ODZkMDZl NDdkNTYwHhcNMjUxMjExMjAwMDQ0WhcNMjUxMjEyMjAwMDQ0WjAzMTEwLwYDVQQD Eyg0M2M0YTkxMjg2YTE1NWNiNDcwZTFmZGFiNjAxM2U2MmYyMDRlNzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFy3lICxmycJjarokZYVljFrwG8H NRReXbf0MhCyBqLBwMW9+0PXL+bHQjNsr5tA3NCCSKsTweKYDiS6Rc5yeQiKixfD 6hjebkAo0aOI9uUVy6ZKp2UTfKHRu9Slne1LkJ57pLi0/yw6TgHdlfzHrVpJLVB1 dMzdREyv8kJ0f9Jmb0rpz2+9RIZcvqb0xgW1YO+7pXzXXIVv+gpl9n3XAdhu47OX l6cmaR/5rjZkl3tS0Loq2SdMPlMS0ja+matcO+SMKqslADcd0I6vSIC1DzTMW/JL tycYtPyFRKhvgEfOO2KcUMLDWEm1QBcNO1MglIdBJtrb3pq+nQelxXvfGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPEqRKGoVXLRw4f2rYBPmLyBOdmMB8GA1UdIwQY MBaAFMDQQ3zffLqfOWfrMooIaG0G5H1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd05CRGZOOTh1cDg1Wi1zeWlnaG9iUWJrZlZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lNDYxNjgtOTgxOC00YjUxLTk0YWQt YzYxOGRlYzA3NDYyLzEvd05CRGZOOTh1cDg1Wi1zeWlnaG9iUWJrZlZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9lNDYxNjgtOTgxOC00YjUxLTk0YWQtYzYxOGRlYzA3NDYy LzEvd05CRGZOOTh1cDg1Wi1zeWlnaG9iUWJrZlZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhYOyIxg aO+nJdTcrU5waR6q0hUF0pgJrgJIQFlNKpg82/IZfbBN15+JAcv9tHvU20vqT58M vf+K4n7b7oSEDhJ+8E/OkKrrXmUdm2riK1VF0aaUmFhVw7aIohIefB5FelYOM9tm 2HLQiTTspRawkGfPvmgzJWp1VJw33jaJPx0xy/Ev/76Mm10l0pzLfPmushH3z8nv OduBgZLTbKhbc/P3UMO0u/JqiEq5DbOU6ZkUArTr5hpuQq7x/c6L4XlgzoQGo2ip KQJ1fr4mxd6RGUHlfVhNHtOyt7aX9CemRp9+CQfYMqqkKrFjHzPKcww81W3yZI+/ 5jHqoup1PhbuKQ== -----END CERTIFICATE-----Generated at Fri Dec 12 04:01:51 2025 by rpki-client