This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft File: wuP6h-sxaafS3XRFMoMCGicDx2k.mft (raw, json) Hash identifier: /7xv02oPrH9rsMzMoyS5Dpo3go72Of/FJEon8J9exMc= Subject key identifier: 30:CC:7C:CE:BA:5E:37:72:C8:C4:6A:93:AB:FE:CF:0E:B2:C5:79:CB Authority key identifier: C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69 Certificate issuer: /CN=c2e3fa87eb3169a7d2dd74453283021a2703c769 Certificate serial: 019B32689A1E84EEB8D63BC71269CF6DA19E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 17:01:14 +0000 Manifest this update: Thu 18 Dec 2025 17:01:14 +0000 Manifest next update: Fri 19 Dec 2025 17:01:14 +0000 Files and hashes: 1: UQeJyG9BAYXx7MdsdkPbT5nATwI.roa (hash: hKLTaUlMIPTXFfDFectFLlcV0ReJ/iVzU3RYDLItnvI=) 2: wuP6h-sxaafS3XRFMoMCGicDx2k.crl (hash: VucMUusKcSXieNuDjMO4I/T9A0gC8YL3qGsFwEEq+g4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:9a:1e:84:ee:b8:d6:3b:c7:12:69:cf:6d:a1:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2e3fa87eb3169a7d2dd74453283021a2703c769 Validity Not Before: Dec 18 17:01:14 2025 GMT Not After : Dec 19 17:01:14 2025 GMT Subject: CN=30cc7cceba5e3772c8c46a93abfecf0eb2c579cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bb:f9:25:c0:05:e1:09:6e:27:ce:5e:ba:34: 51:47:0f:14:b6:68:2b:f2:e8:b0:df:db:9e:0a:b5: 6a:ee:c6:06:01:90:7b:96:46:5a:01:61:d1:7c:25: 30:8b:fb:70:22:e2:61:05:be:93:87:73:7b:05:1b: 34:6c:d9:6c:e6:11:fb:11:10:ff:6f:bc:6e:b0:56: 1b:59:d6:5a:7c:78:3b:72:96:27:c6:ce:1f:32:fe: bc:ff:4e:75:fc:33:22:4e:63:1c:1e:f1:3e:38:c1: 02:7c:de:60:94:50:6f:3e:67:7c:79:eb:b3:4e:eb: a4:0e:27:85:ae:eb:60:d0:00:10:d1:36:f4:15:f7: 48:bf:af:fa:99:4c:21:e2:7c:cd:f8:9d:72:7c:66: 84:4a:dc:d8:48:c0:99:9f:4f:0e:8a:9e:95:0c:de: f8:e5:86:19:59:e8:29:6c:de:e6:0d:4c:24:c0:4a: 14:41:57:4a:e9:e1:30:68:87:3b:94:0d:a0:90:55: 3f:16:10:7e:3a:f7:9a:45:82:1d:6e:36:5a:db:e8: 80:42:31:c7:aa:55:17:1b:fb:e4:33:7f:52:a2:cf: e4:e1:c9:a6:d9:86:cf:e8:5e:a9:bb:44:8b:55:75: cd:b3:10:78:3b:12:55:f9:73:0f:49:1a:dc:45:94: 1b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CC:7C:CE:BA:5E:37:72:C8:C4:6A:93:AB:FE:CF:0E:B2:C5:79:CB X509v3 Authority Key Identifier: keyid:C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b0:59:f6:b6:73:89:2f:d4:b1:a8:c0:0e:66:d4:08:bb:89: 0c:04:eb:f6:e9:49:6c:b3:36:eb:bb:e8:08:33:61:f2:fd:75: 3a:2e:95:32:7a:5d:17:6e:45:4a:10:6f:3a:17:8f:f8:ac:9a: 63:66:03:cf:64:b7:28:08:2a:04:a8:ce:b7:d6:f9:d6:73:e8: 96:b7:e4:f6:70:e6:a8:af:00:da:ae:df:6e:f2:53:8f:f4:03: e5:b9:c0:5f:b0:44:cc:0f:fc:6e:4e:90:60:d3:ce:38:d4:42: 3d:db:09:68:20:17:22:e3:11:04:a9:28:a5:8b:13:4d:86:fd: 21:9a:64:23:11:d6:db:0e:ac:0f:b7:6c:cb:af:19:96:1b:2b: 17:e7:92:67:fc:cc:b0:da:f8:bf:d6:d4:c7:99:07:aa:34:97: fb:ce:12:7b:fc:85:a0:18:12:f0:c2:b6:9a:ac:61:06:05:2a: 09:52:db:37:c5:6d:2d:d7:fc:46:f3:d9:3b:a3:9c:1f:d5:90: 09:86:b3:98:63:e5:2c:bf:54:59:ec:12:2b:44:75:68:9c:df: a8:c2:b1:fb:3d:5d:e0:3d:82:ef:42:b5:81:61:da:85:32:7a: 59:7d:23:67:b4:d2:a0:18:6c:6e:52:5a:7b:8c:a2:84:d2:d9: 06:66:70:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaJoehO641jvHEmnPbaGeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZTNmYTg3ZWIzMTY5YTdkMmRkNzQ0NTMyODMwMjFhMjcw M2M3NjkwHhcNMjUxMjE4MTcwMTE0WhcNMjUxMjE5MTcwMTE0WjAzMTEwLwYDVQQD EygzMGNjN2NjZWJhNWUzNzcyYzhjNDZhOTNhYmZlY2YwZWIyYzU3OWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbv5JcAF4QluJ85eujRRRw8Utmgr 8uiw39ueCrVq7sYGAZB7lkZaAWHRfCUwi/twIuJhBb6Th3N7BRs0bNls5hH7ERD/ b7xusFYbWdZafHg7cpYnxs4fMv68/051/DMiTmMcHvE+OMECfN5glFBvPmd8eeuz TuukDieFrutg0AAQ0Tb0FfdIv6/6mUwh4nzN+J1yfGaEStzYSMCZn08Oip6VDN74 5YYZWegpbN7mDUwkwEoUQVdK6eEwaIc7lA2gkFU/FhB+OveaRYIdbjZa2+iAQjHH qlUXG/vkM39Sos/k4cmm2YbP6F6pu0SLVXXNsxB4OxJV+XMPSRrcRZQbSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDMfM66XjdyyMRqk6v+zw6yxXnLMB8GA1UdIwQY MBaAFMLj+ofrMWmn0t10RTKDAhonA8dpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85OWJhMjAtOWJiNy00MTcxLWFmNTYt ZGZlNTY2NDExMDE2LzEvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi85OWJhMjAtOWJiNy00MTcxLWFmNTYtZGZlNTY2NDExMDE2 LzEvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLBZ9rZz iS/UsajADmbUCLuJDATr9ulJbLM267voCDNh8v11Oi6VMnpdF25FShBvOheP+Kya Y2YDz2S3KAgqBKjOt9b51nPolrfk9nDmqK8A2q7fbvJTj/QD5bnAX7BEzA/8bk6Q YNPOONRCPdsJaCAXIuMRBKkopYsTTYb9IZpkIxHW2w6sD7dsy68ZlhsrF+eSZ/zM sNr4v9bUx5kHqjSX+84Se/yFoBgS8MK2mqxhBgUqCVLbN8VtLdf8RvPZO6OcH9WQ CYazmGPlLL9UWewSK0R1aJzfqMKx+z1d4D2C70K1gWHahTJ6WX0jZ7TSoBhsblJa e4yihNLZBmZw5Q== -----END CERTIFICATE-----Generated at Fri Dec 19 01:10:32 2025 by rpki-client