This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft File: wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft (raw, json) Hash identifier: bSjk/Mbg8Gn3tW/qso+2hDGBnojbHRAgbCK/5Mdm/lQ= Subject key identifier: 12:A1:8D:4C:A9:27:67:22:95:AC:6B:E6:89:E6:01:01:95:2B:8A:B4 Authority key identifier: C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08 Certificate issuer: /CN=c14d63d39707d45a8c683cb52e47171d136ce508 Certificate serial: 019B115C7F50876F7293B7BC92F9E4B5A47F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft Manifest number: 1044 Signing time: Fri 12 Dec 2025 07:00:33 +0000 Manifest this update: Fri 12 Dec 2025 07:00:33 +0000 Manifest next update: Sat 13 Dec 2025 07:00:33 +0000 Files and hashes: 1: VWUmt1-Lc9mwWkzpXFUMDbb2UqE.roa (hash: Tjmb/lxEFBxZz68PrILtJGnl1lSlmzqzB3RT5UoyTR8=) 2: wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl (hash: lOh3zfI5uTMwreCLd3HBbkP+QqqoxHNyQ0PSLGGS1Dk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:5c:7f:50:87:6f:72:93:b7:bc:92:f9:e4:b5:a4:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c14d63d39707d45a8c683cb52e47171d136ce508 Validity Not Before: Dec 12 07:00:33 2025 GMT Not After : Dec 13 07:00:33 2025 GMT Subject: CN=12a18d4ca927672295ac6be689e60101952b8ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d8:71:51:c2:bf:14:7f:0a:2b:e2:94:93:13: 26:04:59:dc:b7:9f:8f:d7:66:c9:d4:df:c1:25:a8: 0b:6d:18:d1:99:76:ee:af:53:80:91:2f:ff:4f:28: 08:2f:bf:c8:01:9c:eb:1c:5e:92:8f:eb:c9:df:20: e9:7f:cb:33:20:fa:ec:5b:05:bc:d7:87:ba:90:27: 02:bb:92:97:93:05:71:fe:4d:19:54:e0:d4:84:5f: 30:de:cc:89:41:63:b5:7a:47:dd:e6:13:2e:77:d9: 79:e7:d2:17:78:85:86:fd:4c:d5:4d:d4:06:86:a9: 4c:5f:8f:5a:db:1d:84:fd:84:2f:0d:2a:81:cf:f5: e7:bf:35:18:8b:35:1a:0e:46:b6:ed:d9:2c:dc:53: c6:37:65:66:c4:cd:a8:8d:f9:0c:00:9f:a2:6e:cc: ab:b2:34:66:5f:99:6a:bd:ef:6f:ab:84:03:0a:b6: 8b:a4:04:e6:63:87:9e:1d:b9:65:9e:e6:d9:16:44: f0:5f:3f:76:bb:ca:a3:eb:d4:bf:69:8b:77:c1:c2: 01:15:5d:2f:b2:41:2b:cb:b8:60:fe:36:07:56:de: db:97:b0:9b:ea:4d:2a:16:a5:c9:3b:28:b7:71:0f: 99:98:75:8c:6b:ab:c9:cc:8b:73:7b:0b:c6:6e:30: 49:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A1:8D:4C:A9:27:67:22:95:AC:6B:E6:89:E6:01:01:95:2B:8A:B4 X509v3 Authority Key Identifier: keyid:C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:dc:41:9d:7c:b7:18:c8:d7:85:e8:5d:89:96:07:64:21:1a: 76:75:4d:67:9e:08:af:54:c0:03:23:cf:3d:1c:c5:78:6e:7e: 98:b7:63:cb:fd:f0:8f:b7:3e:42:5c:a9:e2:52:ca:81:4a:85: 9b:8e:16:e7:15:c5:df:66:2d:f8:b8:af:9d:11:59:2e:6e:cb: cc:22:ab:2c:af:7f:a0:64:eb:55:32:3a:5c:2d:6c:77:4d:c0: bf:ab:2b:e3:d3:a3:aa:7e:dc:cb:2a:b7:f1:73:65:bf:cc:2d: 58:24:2b:e1:7e:1c:1c:d5:43:d8:e5:da:bd:7d:4e:15:b4:09: f4:ea:6d:42:94:04:53:5d:3f:88:91:dd:01:f1:02:94:02:da: 32:d3:d7:1f:81:20:3d:61:7c:06:e3:a7:ba:56:82:56:a0:1a: b8:21:04:d4:aa:4c:aa:09:06:b6:16:1e:30:32:6f:52:9e:6e: 22:f2:15:2b:d4:a7:47:c7:5b:47:ea:b0:12:84:e7:cd:22:8f: 68:f9:c6:9a:18:26:45:4d:6a:2b:a1:c4:0b:91:52:b2:f1:e9: aa:ef:df:8d:68:80:3f:fc:91:b1:2a:ad:c2:ea:27:6a:ee:b5: 41:4f:99:a4:4c:07:5d:6c:c7:85:04:d2:e2:b9:f8:00:84:41: bb:d9:0c:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRXH9Qh29yk7e8kvnktaR/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNGQ2M2QzOTcwN2Q0NWE4YzY4M2NiNTJlNDcxNzFkMTM2 Y2U1MDgwHhcNMjUxMjEyMDcwMDMzWhcNMjUxMjEzMDcwMDMzWjAzMTEwLwYDVQQD EygxMmExOGQ0Y2E5Mjc2NzIyOTVhYzZiZTY4OWU2MDEwMTk1MmI4YWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApthxUcK/FH8KK+KUkxMmBFnct5+P 12bJ1N/BJagLbRjRmXbur1OAkS//TygIL7/IAZzrHF6Sj+vJ3yDpf8szIPrsWwW8 14e6kCcCu5KXkwVx/k0ZVODUhF8w3syJQWO1ekfd5hMud9l559IXeIWG/UzVTdQG hqlMX49a2x2E/YQvDSqBz/XnvzUYizUaDka27dks3FPGN2VmxM2ojfkMAJ+ibsyr sjRmX5lqve9vq4QDCraLpATmY4eeHbllnubZFkTwXz92u8qj69S/aYt3wcIBFV0v skEry7hg/jYHVt7bl7Cb6k0qFqXJOyi3cQ+ZmHWMa6vJzItzewvGbjBJfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKhjUypJ2cilaxr5onmAQGVK4q0MB8GA1UdIwQY MBaAFMFNY9OXB9RajGg8tS5HFx0TbOUIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1UxajA1Y0gxRnFNYUR5MUxrY1hIUk5zNVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xNDhjNmMtYmExMC00M2EzLTg0ODIt NWExZGFhOTRkZTQyLzEvd1UxajA1Y0gxRnFNYUR5MUxrY1hIUk5zNVFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xNDhjNmMtYmExMC00M2EzLTg0ODItNWExZGFhOTRkZTQy LzEvd1UxajA1Y0gxRnFNYUR5MUxrY1hIUk5zNVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNxBnXy3 GMjXhehdiZYHZCEadnVNZ54Ir1TAAyPPPRzFeG5+mLdjy/3wj7c+Qlyp4lLKgUqF m44W5xXF32Yt+LivnRFZLm7LzCKrLK9/oGTrVTI6XC1sd03Av6sr49Ojqn7cyyq3 8XNlv8wtWCQr4X4cHNVD2OXavX1OFbQJ9OptQpQEU10/iJHdAfEClALaMtPXH4Eg PWF8BuOnulaCVqAauCEE1KpMqgkGthYeMDJvUp5uIvIVK9SnR8dbR+qwEoTnzSKP aPnGmhgmRU1qK6HEC5FSsvHpqu/fjWiAP/yRsSqtwuonau61QU+ZpEwHXWzHhQTS 4rn4AIRBu9kM3w== -----END CERTIFICATE-----Generated at Fri Dec 12 09:00:11 2025 by rpki-client