This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft File: wXPRwALuqv2ht1iN1WIcTm_Jn64.mft (raw, json) Hash identifier: 7UsYl2MqSzAErbs+rWuAmNWxh4wOase42q4Feg6r/5c= Subject key identifier: 18:6D:B8:D9:FD:34:8B:2E:F6:D1:B9:98:D8:19:13:6B:E1:54:15:A1 Authority key identifier: C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE Certificate issuer: /CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae Certificate serial: 019B19BC00FAB976294BAB83C1DFDA71BF0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft Manifest number: 063A Signing time: Sat 13 Dec 2025 22:01:49 +0000 Manifest this update: Sat 13 Dec 2025 22:01:49 +0000 Manifest next update: Sun 14 Dec 2025 22:01:49 +0000 Files and hashes: 1: JVqwz5mxYEMKGOHUiJ_GpSZnGN0.roa (hash: h8BGg/oG3iccU6NMytqMgx4YDS4KmCfVV7fVMEeYu2Y=) 2: wXPRwALuqv2ht1iN1WIcTm_Jn64.crl (hash: CfTtOEu3wUMaSXGTL+FsAzyKpA298RIc78MvdinN244=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:00:fa:b9:76:29:4b:ab:83:c1:df:da:71:bf:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae Validity Not Before: Dec 13 22:01:49 2025 GMT Not After : Dec 14 22:01:49 2025 GMT Subject: CN=186db8d9fd348b2ef6d1b998d819136be15415a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fc:2a:cd:9f:44:5b:89:b7:cb:39:6e:07:0e: fc:12:b4:f2:44:55:f2:2a:99:b5:1c:2e:f7:04:2c: 4f:b4:0f:72:27:ae:72:8b:f8:39:19:df:9a:73:09: 17:01:71:eb:f1:e1:1a:b2:84:98:5c:8a:43:19:4b: b5:e4:21:c9:fd:d8:e8:28:d0:df:9c:14:cd:0a:17: f8:c3:36:2d:67:41:e3:ab:13:99:9e:07:89:71:b5: 00:b9:57:4d:37:46:fb:4b:74:8a:ba:95:55:02:ad: 90:a7:aa:78:2c:de:f9:24:6c:bd:6e:cc:c2:fe:cf: 4a:cb:d2:f9:55:9e:6f:46:13:ab:1e:5e:3b:15:d2: d9:e3:d8:ae:52:94:58:14:58:e2:83:f8:e8:da:b3: 37:14:b5:90:d2:c7:4e:4c:81:0b:67:d1:23:6f:a7: de:df:c7:6e:a5:08:8e:10:0e:38:23:e1:8d:31:91: 16:e0:d5:a8:95:da:d5:52:fe:b7:9c:e6:00:0a:dc: 3d:56:72:fe:07:bc:77:93:2b:e4:ce:01:95:de:d1: e3:b1:6e:f3:bc:a6:b8:2f:55:cc:1b:0b:23:14:8a: 1c:92:e7:4d:8e:85:ff:da:a4:81:66:fe:d3:3c:f1: d0:ca:31:e4:aa:6f:b8:dc:89:79:e4:76:a5:b4:94: 9a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6D:B8:D9:FD:34:8B:2E:F6:D1:B9:98:D8:19:13:6B:E1:54:15:A1 X509v3 Authority Key Identifier: keyid:C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:7e:7d:5f:9b:12:50:e3:b7:e6:78:8e:b1:70:ba:5b:5c:31: 35:99:6c:69:41:4d:b4:4a:3a:62:64:69:1f:f3:0f:f2:5c:30: 68:04:9a:c2:48:30:53:61:67:a7:f3:3b:d1:2c:f5:7e:ad:62: da:e6:fa:67:12:5d:3f:87:06:d2:a6:c9:0b:c7:19:8c:89:74: 0a:0a:04:b5:d6:17:30:76:39:d8:d1:c0:72:75:f5:4b:93:70: 76:ea:02:71:c6:16:eb:f1:c3:09:8c:b3:71:a9:a1:3b:17:7b: 03:ed:53:ac:42:4e:11:06:34:c0:1d:8f:05:55:51:11:f8:1e: b3:41:0b:0a:54:f4:1b:27:c9:b9:6c:09:4b:f8:f0:91:b7:c2: d7:c3:da:fe:14:d6:0a:3e:ff:78:1f:c2:05:77:9c:49:bb:85: f7:9e:38:8c:6f:cf:ec:cc:15:f4:0d:81:44:8c:bb:8e:83:7b: 25:1a:6b:e9:a6:27:0d:df:65:05:50:8d:84:d0:18:c9:2d:ed: df:e1:ca:b9:12:07:42:90:ae:d7:de:09:6a:e7:56:16:c6:cc: 0a:86:6e:56:47:28:60:a2:88:ad:91:3b:b4:fb:1b:05:23:be: 74:e2:ee:19:53:c8:d9:e7:e1:f2:c2:02:85:d2:85:c4:1c:54: 2c:e6:26:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvAD6uXYpS6uDwd/acb8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNzNkMWMwMDJlZWFhZmRhMWI3NTg4ZGQ1NjIxYzRlNmZj OTlmYWUwHhcNMjUxMjEzMjIwMTQ5WhcNMjUxMjE0MjIwMTQ5WjAzMTEwLwYDVQQD EygxODZkYjhkOWZkMzQ4YjJlZjZkMWI5OThkODE5MTM2YmUxNTQxNWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/wqzZ9EW4m3yzluBw78ErTyRFXy Kpm1HC73BCxPtA9yJ65yi/g5Gd+acwkXAXHr8eEasoSYXIpDGUu15CHJ/djoKNDf nBTNChf4wzYtZ0HjqxOZngeJcbUAuVdNN0b7S3SKupVVAq2Qp6p4LN75JGy9bszC /s9Ky9L5VZ5vRhOrHl47FdLZ49iuUpRYFFjig/jo2rM3FLWQ0sdOTIELZ9Ejb6fe 38dupQiOEA44I+GNMZEW4NWoldrVUv63nOYACtw9VnL+B7x3kyvkzgGV3tHjsW7z vKa4L1XMGwsjFIockudNjoX/2qSBZv7TPPHQyjHkqm+43Il55HaltJSaxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhtuNn9NIsu9tG5mNgZE2vhVBWhMB8GA1UdIwQY MBaAFMFz0cAC7qr9obdYjdViHE5vyZ+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1hQUndBTHVxdjJodDFpTjFXSWNUbV9KbjY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jNGZlMDQtMDYzYi00N2I3LWJlYmIt YjJjMGE0ZTdhZmMzLzEvd1hQUndBTHVxdjJodDFpTjFXSWNUbV9KbjY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9jNGZlMDQtMDYzYi00N2I3LWJlYmItYjJjMGE0ZTdhZmMz LzEvd1hQUndBTHVxdjJodDFpTjFXSWNUbV9KbjY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm359X5sS UOO35niOsXC6W1wxNZlsaUFNtEo6YmRpH/MP8lwwaASawkgwU2Fnp/M70Sz1fq1i 2ub6ZxJdP4cG0qbJC8cZjIl0CgoEtdYXMHY52NHAcnX1S5NwduoCccYW6/HDCYyz camhOxd7A+1TrEJOEQY0wB2PBVVREfges0ELClT0GyfJuWwJS/jwkbfC18Pa/hTW Cj7/eB/CBXecSbuF9544jG/P7MwV9A2BRIy7joN7JRpr6aYnDd9lBVCNhNAYyS3t 3+HKuRIHQpCu194JaudWFsbMCoZuVkcoYKKIrZE7tPsbBSO+dOLuGVPI2efh8sIC hdKFxBxULOYmsA== -----END CERTIFICATE-----Generated at Sun Dec 14 00:04:28 2025 by rpki-client