This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft File: wBV0y54ONb-XVO-RdQFLx0YAjw4.mft (raw, json) Hash identifier: eRS6hBf6tXv2kbfop9xgET2bWwp7WyAo23EpkwxQ2Vg= Subject key identifier: 31:37:AA:BF:A3:3C:37:1B:92:ED:EB:8C:B1:8A:56:47:29:E3:AC:68 Authority key identifier: C0:15:74:CB:9E:0E:35:BF:97:54:EF:91:75:01:4B:C7:46:00:8F:0E Certificate issuer: /CN=c01574cb9e0e35bf9754ef9175014bc746008f0e Certificate serial: 019AF72F61D0DBCA592FD97A64A595B1A77B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft Manifest number: 0426 Signing time: Sun 07 Dec 2025 05:01:08 +0000 Manifest this update: Sun 07 Dec 2025 05:01:08 +0000 Manifest next update: Mon 08 Dec 2025 05:01:08 +0000 Files and hashes: 1: nEKK32oFQy3X2Yzvdv8fEhGcazg.roa (hash: LMYqTrguswdi0QtX9F4iCp/SyY8hGayYOolliB1rgCg=) 2: wBV0y54ONb-XVO-RdQFLx0YAjw4.crl (hash: +pdh13GowVHUyf4h49H2Asq+0Mxh+xtWsmH4pb50M8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 05:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:2f:61:d0:db:ca:59:2f:d9:7a:64:a5:95:b1:a7:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c01574cb9e0e35bf9754ef9175014bc746008f0e Validity Not Before: Dec 7 05:01:08 2025 GMT Not After : Dec 8 05:01:08 2025 GMT Subject: CN=3137aabfa33c371b92edeb8cb18a564729e3ac68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:35:e2:a8:79:d3:55:9c:dc:d0:a1:cd:8f:9d: 93:67:b8:03:57:b8:5e:26:54:b2:4b:da:57:ff:e7: ec:4b:75:d1:ca:27:a5:2d:86:10:28:70:0e:ef:b2: 8b:0f:a1:d3:70:a6:a8:3f:b5:a0:c3:e8:56:9a:17: 83:3d:f1:52:00:55:c5:ea:60:cb:31:e6:da:92:b5: 47:d7:04:50:51:39:78:a4:c8:2c:cf:7e:0e:9f:2b: 24:f7:2f:96:a1:86:11:50:c0:f1:bd:7b:d2:c2:4c: 32:05:5b:5c:5a:45:b6:9b:0f:8d:65:19:6c:8f:a3: c6:44:a7:37:1a:c1:d1:84:21:6f:ae:2f:7a:8d:f9: de:b8:8c:ba:dc:2b:15:49:56:7c:37:76:6c:3a:04: 80:20:68:8e:34:cf:32:4e:f0:48:7b:72:00:bf:91: ee:db:51:5c:51:fb:24:85:20:e1:b6:3a:82:f6:88: a2:1f:10:19:c8:12:0a:ab:91:9e:3f:13:50:3e:a7: da:90:69:32:03:6b:4c:7d:ed:03:e5:d3:ac:08:c3: 5a:61:56:69:00:cc:25:8a:bf:ba:6c:7b:be:2f:3f: 03:33:76:1f:3d:a9:df:79:6d:75:a0:df:49:fb:6a: 93:f8:39:c9:a5:f4:35:95:9f:2c:69:d3:e1:a0:12: 0c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:37:AA:BF:A3:3C:37:1B:92:ED:EB:8C:B1:8A:56:47:29:E3:AC:68 X509v3 Authority Key Identifier: keyid:C0:15:74:CB:9E:0E:35:BF:97:54:EF:91:75:01:4B:C7:46:00:8F:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:41:1c:84:c3:5b:8a:3a:5e:46:a2:fc:02:b2:2e:59:80:2a: ca:c0:dc:5b:2d:d3:f0:cb:03:29:bc:f9:b4:20:04:2b:65:02: 0f:91:0a:7f:18:2a:67:08:fc:57:8c:52:88:dd:05:eb:89:78: 82:c7:50:dd:f2:b8:82:4c:82:77:bc:bf:de:73:7f:cb:23:51: 45:b0:e2:86:04:c1:d4:48:3f:7c:a5:90:57:20:2c:94:12:65: 84:e6:8b:c8:91:8f:05:88:6a:02:22:ea:df:2c:6b:08:7b:20: ec:41:89:91:98:6b:80:a2:10:8d:42:24:dd:c8:ab:8c:1f:a8: fa:95:d2:c7:15:7a:6c:8e:a1:2b:8e:c5:c0:66:13:96:31:52: 71:28:d1:d5:7e:35:e0:85:f0:63:80:d4:d9:4f:12:8f:02:ea: 64:62:78:6c:34:11:bd:a8:ea:b9:ab:b3:7b:34:fd:6c:6c:8e: f4:a7:a2:c8:1f:b8:23:67:a4:fd:87:91:f5:81:d4:4a:20:0e: 60:45:e1:d3:7d:d4:49:ba:7a:10:1a:0e:3b:c6:31:5f:41:5f: 9a:c5:d8:1d:68:1e:41:4a:2e:3e:bb:0d:aa:30:66:be:d7:8a: 4b:26:6a:ad:02:85:89:28:59:9c:73:ca:75:49:2d:2e:67:12: cd:86:3a:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3L2HQ28pZL9l6ZKWVsad7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTU3NGNiOWUwZTM1YmY5NzU0ZWY5MTc1MDE0YmM3NDYw MDhmMGUwHhcNMjUxMjA3MDUwMTA4WhcNMjUxMjA4MDUwMTA4WjAzMTEwLwYDVQQD EygzMTM3YWFiZmEzM2MzNzFiOTJlZGViOGNiMThhNTY0NzI5ZTNhYzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TXiqHnTVZzc0KHNj52TZ7gDV7he JlSyS9pX/+fsS3XRyielLYYQKHAO77KLD6HTcKaoP7Wgw+hWmheDPfFSAFXF6mDL MebakrVH1wRQUTl4pMgsz34Onysk9y+WoYYRUMDxvXvSwkwyBVtcWkW2mw+NZRls j6PGRKc3GsHRhCFvri96jfneuIy63CsVSVZ8N3ZsOgSAIGiONM8yTvBIe3IAv5Hu 21FcUfskhSDhtjqC9oiiHxAZyBIKq5GePxNQPqfakGkyA2tMfe0D5dOsCMNaYVZp AMwlir+6bHu+Lz8DM3YfPanfeW11oN9J+2qT+DnJpfQ1lZ8sadPhoBIMAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDE3qr+jPDcbku3rjLGKVkcp46xoMB8GA1UdIwQY MBaAFMAVdMueDjW/l1TvkXUBS8dGAI8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0JWMHk1NE9OYi1YVk8tUmRRRkx4MFlBanc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zOTY4OTAtZTk2Yy00ZDFmLTkzNmMt OGZlZTdlYzdjM2NkLzEvd0JWMHk1NE9OYi1YVk8tUmRRRkx4MFlBanc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8zOTY4OTAtZTk2Yy00ZDFmLTkzNmMtOGZlZTdlYzdjM2Nk LzEvd0JWMHk1NE9OYi1YVk8tUmRRRkx4MFlBanc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfEEchMNb ijpeRqL8ArIuWYAqysDcWy3T8MsDKbz5tCAEK2UCD5EKfxgqZwj8V4xSiN0F64l4 gsdQ3fK4gkyCd7y/3nN/yyNRRbDihgTB1Eg/fKWQVyAslBJlhOaLyJGPBYhqAiLq 3yxrCHsg7EGJkZhrgKIQjUIk3cirjB+o+pXSxxV6bI6hK47FwGYTljFScSjR1X41 4IXwY4DU2U8SjwLqZGJ4bDQRvajquauzezT9bGyO9KeiyB+4I2ek/YeR9YHUSiAO YEXh033USbp6EBoOO8YxX0FfmsXYHWgeQUouPrsNqjBmvteKSyZqrQKFiShZnHPK dUktLmcSzYY6Tw== -----END CERTIFICATE-----Generated at Sun Dec 7 12:02:30 2025 by rpki-client