This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft File: WUmzHrtuTLvQzHcMxvTVD3jw63s.mft (raw, json) Hash identifier: IJbSukgTOUVVk58P2OZD1hbh38FKiiMDGD2oTH9Zpvk= Subject key identifier: 97:C4:DC:BE:42:A6:04:C3:CD:18:B0:E1:CC:90:FA:9F:CB:A4:BD:61 Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B Certificate issuer: /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b Certificate serial: 019B41A4CA3081A8EE9FF3CD04D4539402C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 16:01:17 +0000 Manifest this update: Sun 21 Dec 2025 16:01:17 +0000 Manifest next update: Mon 22 Dec 2025 16:01:17 +0000 Files and hashes: 1: IopWMeRqXOypB_fRacr3ZaxFtQI.roa (hash: FppOmUQRJ7eFBYEwXngpnxhSpl+Hc5qsOfWlbbkaJzw=) 2: Jr5TTPsXLbcmeb3jXm4kwRQ-J5g.roa (hash: 7oDZ/1zx1zR8r5+3OuEyrGxtjVcipWg0/FsvL6uuU3M=) 3: OL6yc8ZRNNzUrmUlMJiUidDHuh8.roa (hash: yRgWUM0pwyoXJeRdU0MzJI562R7I/kz9Vz80Sl7k9NU=) 4: WUmzHrtuTLvQzHcMxvTVD3jw63s.crl (hash: Zji9k2pBG6o0e13oJCc2Vgyz+LghzIHsdblEZIQw7/I=) 5: s4RqD1BS5l0_C1DY6qiIvroBiqY.roa (hash: zMF8j8B+bWyi3iOyQzBoW2FngUlQmNbr8zpHXcZBvR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:ca:30:81:a8:ee:9f:f3:cd:04:d4:53:94:02:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b Validity Not Before: Dec 21 16:01:17 2025 GMT Not After : Dec 22 16:01:17 2025 GMT Subject: CN=97c4dcbe42a604c3cd18b0e1cc90fa9fcba4bd61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f2:13:c0:d7:f3:b9:a9:f8:e7:99:81:af:6b: 18:20:72:2f:af:a6:7b:ea:e8:45:7b:aa:9e:36:6e: 92:20:7e:59:39:98:39:a2:57:8d:b3:7b:f3:59:cd: 3c:93:83:ea:85:d0:35:7a:9b:31:fb:35:36:01:5b: be:e5:48:ab:47:de:f2:64:1a:26:ac:09:40:2c:ae: 3a:ff:45:94:9d:4a:73:cd:98:e4:bd:20:a9:7c:79: 38:53:4f:98:e2:65:a4:7a:c7:fb:f2:fd:21:26:21: 79:d4:57:70:24:6f:54:fa:9c:75:e0:d3:3f:98:e5: 28:de:f6:b6:00:2c:15:ee:93:90:dd:91:f7:e6:ae: 2d:71:d1:e6:c4:cb:54:47:06:c9:86:c1:1f:b7:c3: 17:8b:8a:2b:b9:63:18:74:d9:6a:de:8a:b0:da:dc: 0a:56:cb:a5:53:74:e0:2c:5b:84:3a:23:c8:73:33: 34:8b:d1:ef:58:36:5a:72:ed:ad:39:f2:78:80:b6: 11:19:4b:2a:dc:1f:9f:95:2e:7d:b9:f7:4d:f8:05: 33:78:7c:65:41:3c:cd:a6:79:56:fa:67:e7:db:cc: 1b:9f:d8:24:b3:36:18:46:12:2f:db:12:32:e3:b3: 72:bb:a8:7f:39:f6:52:4c:09:38:4f:1e:4d:4a:84: a3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C4:DC:BE:42:A6:04:C3:CD:18:B0:E1:CC:90:FA:9F:CB:A4:BD:61 X509v3 Authority Key Identifier: keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:84:00:48:5b:8e:05:a6:f4:70:02:61:58:8a:7c:b0:08:a6: 42:d4:d2:73:7c:5e:f6:5b:f0:49:25:d2:55:38:12:53:4d:12: c0:aa:60:df:e3:b0:a1:42:f4:56:53:09:be:cd:d1:3b:8f:5e: 7a:79:f0:52:09:0e:da:13:60:28:93:1f:73:88:26:fc:ce:45: e8:8e:ba:a4:03:2d:0f:99:31:83:e4:09:49:4c:25:de:3a:3f: db:03:6b:ac:fd:1a:d3:1a:e9:36:5a:5a:80:5f:c8:5c:e3:64: 0e:01:f2:9d:32:a8:53:83:d7:47:0a:2c:12:75:f4:af:1d:13: c3:79:8e:40:a8:4b:03:5a:8e:d0:4b:c0:ef:d5:a4:f6:2f:0e: 39:fe:d9:44:a8:d3:fb:55:fb:6e:c3:56:ac:5e:03:c7:eb:68: 9b:d2:6b:23:6e:ff:cc:57:00:cd:a9:36:aa:e3:bd:e1:3e:d8: 81:0c:4f:2c:51:2f:c6:65:80:dc:7e:ec:ab:3d:ef:8a:75:49: 81:ac:a3:97:25:d4:f8:e2:8e:f9:c2:71:49:8b:c6:ae:3a:68: ba:bb:3a:c9:04:20:54:5f:4d:13:24:d1:8e:dd:26:a4:99:7f: 38:ab:95:c1:12:b4:4f:10:5e:81:a4:02:09:05:9c:8e:d4:47: e2:61:6e:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpMowgajun/PNBNRTlALIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NDliMzFlYmI2ZTRjYmJkMGNjNzcwY2M2ZjRkNTBmNzhm MGViN2IwHhcNMjUxMjIxMTYwMTE3WhcNMjUxMjIyMTYwMTE3WjAzMTEwLwYDVQQD Eyg5N2M0ZGNiZTQyYTYwNGMzY2QxOGIwZTFjYzkwZmE5ZmNiYTRiZDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/ITwNfzuan455mBr2sYIHIvr6Z7 6uhFe6qeNm6SIH5ZOZg5oleNs3vzWc08k4PqhdA1epsx+zU2AVu+5UirR97yZBom rAlALK46/0WUnUpzzZjkvSCpfHk4U0+Y4mWkesf78v0hJiF51FdwJG9U+px14NM/ mOUo3va2ACwV7pOQ3ZH35q4tcdHmxMtURwbJhsEft8MXi4oruWMYdNlq3oqw2twK VsulU3TgLFuEOiPIczM0i9HvWDZacu2tOfJ4gLYRGUsq3B+flS59ufdN+AUzeHxl QTzNpnlW+mfn28wbn9gkszYYRhIv2xIy47Nyu6h/OfZSTAk4Tx5NSoSjDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfE3L5CpgTDzRiw4cyQ+p/LpL1hMB8GA1UdIwQY MBaAFFlJsx67bky70Mx3DMb01Q948Ot7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTkt MzE4MGFlNDI3NGYzLzEvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTktMzE4MGFlNDI3NGYz LzEvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYQASFuO Bab0cAJhWIp8sAimQtTSc3xe9lvwSSXSVTgSU00SwKpg3+OwoUL0VlMJvs3RO49e ennwUgkO2hNgKJMfc4gm/M5F6I66pAMtD5kxg+QJSUwl3jo/2wNrrP0a0xrpNlpa gF/IXONkDgHynTKoU4PXRwosEnX0rx0Tw3mOQKhLA1qO0EvA79Wk9i8OOf7ZRKjT +1X7bsNWrF4Dx+tom9JrI27/zFcAzak2quO94T7YgQxPLFEvxmWA3H7sqz3vinVJ gayjlyXU+OKO+cJxSYvGrjpours6yQQgVF9NEyTRjt0mpJl/OKuVwRK0TxBegaQC CQWcjtRH4mFuQg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:01:12 2025 by rpki-client