This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft File: wLjiV5ep3EPC5GOUsMixsQirQ7k.mft (raw, json) Hash identifier: Fkq8Vcsq6QKfb4W27GH9UULd3rgOpn8khdLdMyJpzKE= Subject key identifier: AD:CF:34:D5:FB:23:53:3C:49:F0:A0:72:84:A5:95:C0:F8:B4:7C:DC Authority key identifier: C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9 Certificate issuer: /CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9 Certificate serial: 019B19BAEDF972E47E67103D151D3CDB8972 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft Manifest number: 0606 Signing time: Sat 13 Dec 2025 22:00:39 +0000 Manifest this update: Sat 13 Dec 2025 22:00:39 +0000 Manifest next update: Sun 14 Dec 2025 22:00:39 +0000 Files and hashes: 1: 3oLf6nYLu-Xr7qpLQICeS2w7Tus.roa (hash: XtsupCW4EVcqvMqJHKb5yPLyEGcRcTQPpgXjTIHJ3Z4=) 2: wLjiV5ep3EPC5GOUsMixsQirQ7k.crl (hash: MKvOOYU4fLqKkrfYRydE4TgRhfjzyOprsZ1sT8oT+VU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:ba:ed:f9:72:e4:7e:67:10:3d:15:1d:3c:db:89:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9 Validity Not Before: Dec 13 22:00:39 2025 GMT Not After : Dec 14 22:00:39 2025 GMT Subject: CN=adcf34d5fb23533c49f0a07284a595c0f8b47cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:32:ef:7c:94:ae:ad:60:3e:9b:32:b0:06: a1:2b:14:8e:f4:5d:2b:aa:fe:3e:0f:2e:57:84:ff: ba:9a:a9:f0:2f:11:7b:ef:99:fe:a1:0d:4f:c2:e5: be:c8:ef:0e:2e:2a:c7:7b:bd:a1:36:11:b5:43:7c: aa:e9:10:b2:70:dc:19:89:2b:95:d7:cc:b6:32:a5: a1:ba:4f:9f:87:82:15:ff:a3:c7:6e:d1:55:32:b9: 69:53:f8:17:8b:48:17:12:3c:23:89:2d:96:9d:9e: 82:40:9a:8a:10:97:1b:b7:cd:02:ea:af:3a:0a:f7: 1c:9f:61:e2:01:1e:85:a0:d0:44:8f:81:20:6f:a0: f0:46:6c:25:3d:c1:3c:e7:a1:27:86:32:17:da:a0: 43:e9:86:35:bc:2b:fc:d7:cd:ff:3d:be:d0:ad:15: 7d:29:8a:65:03:4e:01:b0:f5:88:36:26:76:25:1c: e6:f0:11:cd:7f:95:c0:58:ac:7b:e5:af:c3:b8:44: 2a:ef:82:58:f8:ab:4e:7b:48:8f:d6:42:dc:bf:27: bd:df:59:56:76:4a:b0:e6:f0:10:98:67:d6:b7:7c: 84:95:5b:66:c8:b7:30:26:60:d3:04:fd:5e:3e:9c: ea:d5:ca:95:a6:b2:0c:d0:43:ba:40:db:aa:a4:05: a0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:CF:34:D5:FB:23:53:3C:49:F0:A0:72:84:A5:95:C0:F8:B4:7C:DC X509v3 Authority Key Identifier: keyid:C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:bd:bb:e5:42:73:78:8c:79:74:99:2c:2a:b2:ef:6d:fc:40: 4b:a3:ec:1c:5e:00:96:6c:9a:43:e7:a3:55:ad:03:7d:ca:de: 88:fa:12:95:08:c5:0c:1d:76:98:45:53:53:be:03:07:37:7e: c2:17:75:b6:f0:e4:7e:82:49:70:9f:dd:5f:d6:4c:51:a4:ec: ff:46:e2:a8:f2:01:83:5f:72:3d:bf:b3:3f:aa:b5:57:42:9a: 3b:7f:82:28:41:a4:49:d9:c7:28:ca:0f:bc:c2:b6:8f:8b:64: 46:af:38:b8:d9:30:64:d0:71:0d:6a:82:7a:13:47:97:24:18: b9:01:17:a4:0f:7f:29:c6:be:32:6a:54:e5:23:d7:2d:bf:6c: 39:76:0b:6c:49:ba:41:c4:5d:fc:d3:75:55:0c:cc:b8:14:80: e0:3b:d9:9a:1e:ee:7f:37:8b:6a:9a:50:11:3b:4f:86:c1:0b: 8b:ff:59:a3:b4:4e:d0:1f:ac:ca:d2:59:a1:e9:bb:e3:24:1c: 75:47:4a:07:ac:a5:d9:fc:1a:a9:ad:c5:3d:e9:4f:7b:ae:31: c7:b8:9a:1b:9d:8c:81:f0:f0:a9:fb:2b:2f:ac:43:c3:08:2a: 82:2e:82:19:10:17:3b:24:10:0a:c2:e7:e8:d2:c1:e4:3b:9b: d4:f0:e1:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZuu35cuR+ZxA9FR0824lyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYjhlMjU3OTdhOWRjNDNjMmU0NjM5NGIwYzhiMWIxMDhh YjQzYjkwHhcNMjUxMjEzMjIwMDM5WhcNMjUxMjE0MjIwMDM5WjAzMTEwLwYDVQQD EyhhZGNmMzRkNWZiMjM1MzNjNDlmMGEwNzI4NGE1OTVjMGY4YjQ3Y2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt0y73yUrq1gPpsysAahKxSO9F0r qv4+Dy5XhP+6mqnwLxF775n+oQ1PwuW+yO8OLirHe72hNhG1Q3yq6RCycNwZiSuV 18y2MqWhuk+fh4IV/6PHbtFVMrlpU/gXi0gXEjwjiS2WnZ6CQJqKEJcbt80C6q86 Cvccn2HiAR6FoNBEj4Egb6DwRmwlPcE856EnhjIX2qBD6YY1vCv8183/Pb7QrRV9 KYplA04BsPWINiZ2JRzm8BHNf5XAWKx75a/DuEQq74JY+KtOe0iP1kLcvye931lW dkqw5vAQmGfWt3yElVtmyLcwJmDTBP1ePpzq1cqVprIM0EO6QNuqpAWgqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3PNNX7I1M8SfCgcoSllcD4tHzcMB8GA1UdIwQY MBaAFMC44leXqdxDwuRjlLDIsbEIq0O5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0xqaVY1ZXAzRVBDNUdPVXNNaXhzUWlyUTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xZGUyMTMtZjM1Mi00M2E0LWI4OGIt NTNlYWNkODk2M2ExLzEvd0xqaVY1ZXAzRVBDNUdPVXNNaXhzUWlyUTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8xZGUyMTMtZjM1Mi00M2E0LWI4OGItNTNlYWNkODk2M2Ex LzEvd0xqaVY1ZXAzRVBDNUdPVXNNaXhzUWlyUTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFr275UJz eIx5dJksKrLvbfxAS6PsHF4AlmyaQ+ejVa0DfcreiPoSlQjFDB12mEVTU74DBzd+ whd1tvDkfoJJcJ/dX9ZMUaTs/0biqPIBg19yPb+zP6q1V0KaO3+CKEGkSdnHKMoP vMK2j4tkRq84uNkwZNBxDWqCehNHlyQYuQEXpA9/Kca+MmpU5SPXLb9sOXYLbEm6 QcRd/NN1VQzMuBSA4DvZmh7ufzeLappQETtPhsELi/9Zo7RO0B+sytJZoem74yQc dUdKB6yl2fwaqa3FPelPe64xx7iaG52MgfDwqfsrL6xDwwgqgi6CGRAXOyQQCsLn 6NLB5Dub1PDhqg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:50:38 2025 by rpki-client