This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft File: WueVPpRZ3AlIbw3cWfKkBbVmklA.mft (raw, json) Hash identifier: TsrnFlCaoXOHvk8uzvG61W4XG34n5LIynssycpHv6fA= Subject key identifier: 5A:CA:15:D5:1A:98:C0:A0:B3:24:6F:FF:D8:2D:18:B8:28:E9:5B:A4 Authority key identifier: 5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50 Certificate issuer: /CN=5ae7953e9459dc09486f0ddc59f2a405b5669250 Certificate serial: 019B3532F91BF1BED41E26053E13709D1DF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft Manifest number: 16EB Signing time: Fri 19 Dec 2025 06:01:31 +0000 Manifest this update: Fri 19 Dec 2025 06:01:31 +0000 Manifest next update: Sat 20 Dec 2025 06:01:31 +0000 Files and hashes: 1: DBk26ni3rWAWrcHCnCAPZ2xkK4Q.roa (hash: Qk/2nxHHAgzzRwHK2tRfQQjLdz8MwTUa/j75IBrERBE=) 2: WueVPpRZ3AlIbw3cWfKkBbVmklA.crl (hash: zsUkeuIYE9cnfvwgeiD9LY+XA0KXY2ZqitqwsKfCwFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:f9:1b:f1:be:d4:1e:26:05:3e:13:70:9d:1d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ae7953e9459dc09486f0ddc59f2a405b5669250 Validity Not Before: Dec 19 06:01:31 2025 GMT Not After : Dec 20 06:01:31 2025 GMT Subject: CN=5aca15d51a98c0a0b3246fffd82d18b828e95ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:20:ec:ea:5e:48:e9:3c:61:cb:21:f7:ee:c3: e2:4c:2d:b1:65:43:5a:c7:7f:cd:be:6d:0b:c5:fe: 7a:36:d7:6c:3b:ec:85:b8:72:19:84:f2:ab:94:5b: ab:8b:47:03:54:03:ed:f3:58:f9:16:d6:d6:9f:c7: 1d:fb:8c:aa:25:75:78:68:9a:81:0e:e8:7a:a1:5c: d9:09:92:25:b6:69:77:68:bb:05:dc:da:e1:dc:ce: 85:0e:fc:32:45:87:f8:ca:9e:b8:0b:30:a5:27:38: 9e:8f:51:b7:31:99:9b:96:96:8f:0a:7d:e3:76:8b: 17:13:92:26:5f:8e:c3:bb:f8:e0:0b:09:7f:dc:24: 1f:9c:11:90:f9:3b:a2:ef:f3:da:f2:1f:3a:b5:5e: da:e1:22:70:f1:34:9e:6a:37:2e:28:04:34:d6:cd: c7:72:72:aa:e4:98:91:27:49:75:bd:bd:c7:00:fb: 4a:bf:f3:f7:4f:2a:19:9a:c8:56:8a:1f:7e:02:08: 86:8b:f5:2b:ac:6b:b0:0a:d7:8a:7d:d1:eb:e1:27: df:d8:3b:55:e2:73:e9:87:41:f7:64:12:85:a0:95: cb:e4:2d:18:22:76:b9:16:c1:e2:bd:a5:c3:79:91: d5:6c:76:52:f2:4e:f6:67:63:c1:62:a5:98:b0:af: 4c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CA:15:D5:1A:98:C0:A0:B3:24:6F:FF:D8:2D:18:B8:28:E9:5B:A4 X509v3 Authority Key Identifier: keyid:5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:61:be:8e:89:42:ae:9a:67:65:4a:03:25:dd:c3:26:e4:47: 13:c5:18:d6:fc:a8:2e:a7:ee:07:07:3d:0a:29:11:55:15:6b: 69:50:a8:42:bd:ef:b7:26:bf:a3:12:4b:5c:62:bd:21:3b:b6: be:3b:f2:ea:21:86:8b:ac:6c:ce:35:0c:33:df:c7:d9:64:19: 49:06:51:1f:25:34:7e:70:06:af:bb:fb:5c:39:2f:03:18:26: 72:70:77:d3:f2:4b:3b:7c:5e:25:40:cf:3a:af:39:25:06:6e: 22:b1:b2:93:9b:99:af:a3:32:86:d6:5b:39:06:d3:9a:fa:06: 58:94:6d:96:5d:be:15:0f:f3:0a:8c:53:c1:d4:8f:68:ed:3f: ca:5e:0f:d8:62:5b:b9:7a:4c:5a:90:a1:36:76:3f:2e:9d:cd: 01:9a:bf:cf:d0:5c:b3:48:5a:68:74:45:a3:82:71:54:78:7f: 8f:19:57:a4:fc:38:4d:7f:cf:cf:58:1e:25:10:fa:ac:03:37: 02:52:b3:c2:a8:e9:42:16:be:2a:f1:76:3f:37:35:f4:35:95: 54:16:3b:a6:f4:82:e8:b3:0b:28:b3:3a:cd:ce:1f:eb:e5:be: 71:36:b1:58:83:22:a5:b9:c8:5c:79:0b:25:d3:f4:bc:79:ee: 8f:a5:86:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mvkb8b7UHiYFPhNwnR30MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZTc5NTNlOTQ1OWRjMDk0ODZmMGRkYzU5ZjJhNDA1YjU2 NjkyNTAwHhcNMjUxMjE5MDYwMTMxWhcNMjUxMjIwMDYwMTMxWjAzMTEwLwYDVQQD Eyg1YWNhMTVkNTFhOThjMGEwYjMyNDZmZmZkODJkMThiODI4ZTk1YmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyDs6l5I6TxhyyH37sPiTC2xZUNa x3/Nvm0Lxf56NtdsO+yFuHIZhPKrlFuri0cDVAPt81j5FtbWn8cd+4yqJXV4aJqB Duh6oVzZCZIltml3aLsF3Nrh3M6FDvwyRYf4yp64CzClJziej1G3MZmblpaPCn3j dosXE5ImX47Du/jgCwl/3CQfnBGQ+Tui7/Pa8h86tV7a4SJw8TSeajcuKAQ01s3H cnKq5JiRJ0l1vb3HAPtKv/P3TyoZmshWih9+AgiGi/UrrGuwCteKfdHr4Sff2DtV 4nPph0H3ZBKFoJXL5C0YIna5FsHivaXDeZHVbHZS8k72Z2PBYqWYsK9M8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrKFdUamMCgsyRv/9gtGLgo6VukMB8GA1UdIwQY MBaAFFrnlT6UWdwJSG8N3FnypAW1ZpJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zYzI2NzYtOTI0NS00YjNjLWJiN2Yt OGEyOTEyMDc1MGJmLzEvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zYzI2NzYtOTI0NS00YjNjLWJiN2YtOGEyOTEyMDc1MGJm LzEvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2G+jolC rppnZUoDJd3DJuRHE8UY1vyoLqfuBwc9CikRVRVraVCoQr3vtya/oxJLXGK9ITu2 vjvy6iGGi6xszjUMM9/H2WQZSQZRHyU0fnAGr7v7XDkvAxgmcnB30/JLO3xeJUDP Oq85JQZuIrGyk5uZr6MyhtZbOQbTmvoGWJRtll2+FQ/zCoxTwdSPaO0/yl4P2GJb uXpMWpChNnY/Lp3NAZq/z9Bcs0haaHRFo4JxVHh/jxlXpPw4TX/Pz1geJRD6rAM3 AlKzwqjpQha+KvF2Pzc19DWVVBY7pvSC6LMLKLM6zc4f6+W+cTaxWIMipbnIXHkL JdP0vHnuj6WGcA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:45:28 2025 by rpki-client