This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft File: wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft (raw, json) Hash identifier: 0qvJycuwbo/inQrlc/9a4dGIQGd1xuW5pFw/5EvZJL0= Subject key identifier: CA:80:CF:CF:76:33:A8:2C:45:97:69:DE:30:AC:13:24:8A:4B:1F:AB Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce Certificate serial: 019B0E92FCF084BA9924C3EB2D5F791C6150 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft Manifest number: 0C0D Signing time: Thu 11 Dec 2025 18:01:12 +0000 Manifest this update: Thu 11 Dec 2025 18:01:12 +0000 Manifest next update: Fri 12 Dec 2025 18:01:12 +0000 Files and hashes: 1: ICJFcNTwvBoTxR73h6RFC09rjcE.roa (hash: xTLqPPxBhdwsAxy9x/9cuJE08DZBHQ351Kx0d+iQE1E=) 2: MyqYBnhuQWC6jBgr6LglN2EYGOA.roa (hash: Di9sEIDs+wFzdjcM3rM7YUWhcIoWp5vrG4QyfmG810k=) 3: XrIe3RxS0PfS1KQwk38a9UzdLbU.roa (hash: TAdXiNpnMI8M4W6FRb8OCRV5yipTVzRnXpEPH/f9GFs=) 4: eM9eBjal4_y1POkPGbCQnwiZoSY.roa (hash: K0YjjeAMEyPylhZxZo/IupUyAhS45lKcJpo4UDpKlMI=) 5: sxZhzxshG4iLVLbCSoDb6rUQtZY.roa (hash: R1ZlZu84C6XGwKU+59ocGLP/4NsYVwyR2vdR/42i2m0=) 6: te98bJGGUvJI2dvVEFniebRE2-Q.roa (hash: YFZNKLPi4G/NTA6BGaRrsOjmLUpnVxIljNwYkPRZo1o=) 7: vMfdW02jbLqHp-27brKBsBhbgHY.roa (hash: oHK3CDonAtcVu8dAAlZMcFQZnOMNxTDFalDW/2pvfts=) 8: wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl (hash: ztzqCzmPHyIvP1VXXHieMd1r3EvbSOWSyGau6F+VuqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:fc:f0:84:ba:99:24:c3:eb:2d:5f:79:1c:61:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce Validity Not Before: Dec 11 18:01:12 2025 GMT Not After : Dec 12 18:01:12 2025 GMT Subject: CN=ca80cfcf7633a82c459769de30ac13248a4b1fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2b:6e:03:28:49:2f:e7:fe:7c:29:ba:e1:b7: 89:60:f1:e3:87:dd:e0:36:66:aa:be:22:2f:a8:ab: ac:ce:0d:52:ef:81:b2:32:90:f8:83:42:a3:5f:4e: fe:e9:32:12:7f:47:76:fd:57:62:05:04:75:a6:b1: e6:a7:48:a4:a2:a6:3a:81:f1:bf:e1:cb:89:9b:e7: 92:00:b4:f2:c8:fb:5c:3c:be:c3:85:46:ea:06:24: 00:3a:ee:27:9e:b2:4e:d0:f9:41:f5:b6:1a:65:39: fd:a9:2d:49:10:79:98:e2:c0:33:21:65:78:85:d7: 97:1c:05:b9:af:25:c8:c2:da:81:22:0e:87:a2:ee: 48:a6:7d:1c:b0:36:00:26:41:1d:2d:3d:7a:ed:5b: 2a:05:8e:ec:8a:39:dc:95:c8:4f:37:4a:ca:e1:86: 5f:a1:b5:65:1e:2c:5f:de:36:94:f9:2e:9c:df:47: 6e:fd:98:bf:01:34:01:39:02:12:5f:5f:45:52:d3: 43:4f:ea:af:32:b5:69:7e:f0:bb:32:9b:b8:9c:66: a5:be:99:49:30:45:73:a8:0c:f9:93:e9:48:fd:09: a4:eb:d4:d4:ba:8a:46:be:bc:73:9e:99:99:c5:59: bf:5b:9c:e9:22:9d:a3:47:d8:01:c9:c5:47:d2:32: 31:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:80:CF:CF:76:33:A8:2C:45:97:69:DE:30:AC:13:24:8A:4B:1F:AB X509v3 Authority Key Identifier: keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:f6:bc:d8:d4:dd:d1:77:36:2a:7b:4a:b5:c1:4f:dc:73:8e: a9:f1:05:31:88:21:51:5c:d8:68:0f:cc:64:46:b5:2b:b1:b2: fb:e8:b2:1e:db:e7:ec:bf:aa:08:74:e3:22:dc:86:34:5f:04: 5f:41:09:f1:5f:e6:6f:f6:ec:6f:61:95:b9:11:c1:47:e9:5f: 72:35:b6:06:72:65:fc:ca:6f:c7:51:f4:46:53:ba:6f:16:b3: 0f:4b:4c:e5:da:e8:56:07:ce:08:ba:8f:5f:f1:94:2a:88:00: 56:35:c3:63:a1:cc:aa:6a:db:68:7b:44:d7:4c:69:49:27:65: a9:1a:1a:2d:09:23:66:c9:cf:8f:88:92:60:68:f4:4c:b4:1d: e9:65:d6:e2:40:24:2e:8c:67:f4:21:55:92:d8:4e:68:a6:6b: 0d:36:5b:dd:4f:75:5a:a7:67:9f:be:b8:69:80:33:33:fd:ae: 89:bb:95:8a:ea:bb:b1:2a:e7:54:74:e7:92:60:c3:62:ea:7c: ad:4b:12:f6:bb:4f:5f:5d:a4:28:18:30:ff:c8:b1:d7:90:7f: b4:60:e4:20:17:76:e9:b2:95:32:34:07:51:cb:b4:10:c4:8f: 83:21:05:b5:fe:9b:1a:3f:f7:9d:1c:ea:0d:70:57:32:19:54: 57:17:34:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkvzwhLqZJMPrLV95HGFQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDVhZGM1YzQyNjJkZmY2YjNmM2U2MDY4MzBjN2Y5NzFk NzY2Y2UwHhcNMjUxMjExMTgwMTEyWhcNMjUxMjEyMTgwMTEyWjAzMTEwLwYDVQQD EyhjYTgwY2ZjZjc2MzNhODJjNDU5NzY5ZGUzMGFjMTMyNDhhNGIxZmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ituAyhJL+f+fCm64beJYPHjh93g NmaqviIvqKuszg1S74GyMpD4g0KjX07+6TISf0d2/VdiBQR1prHmp0ikoqY6gfG/ 4cuJm+eSALTyyPtcPL7DhUbqBiQAOu4nnrJO0PlB9bYaZTn9qS1JEHmY4sAzIWV4 hdeXHAW5ryXIwtqBIg6Hou5Ipn0csDYAJkEdLT167VsqBY7sijnclchPN0rK4YZf obVlHixf3jaU+S6c30du/Zi/ATQBOQISX19FUtNDT+qvMrVpfvC7Mpu4nGalvplJ MEVzqAz5k+lI/Qmk69TUuopGvrxznpmZxVm/W5zpIp2jR9gBycVH0jIx7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqAz892M6gsRZdp3jCsEySKSx+rMB8GA1UdIwQY MBaAFMEFrcXEJi3/az8+YGgwx/lx12bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODkt NTE1ODQ1ZTZjMzE3LzEvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODktNTE1ODQ1ZTZjMzE3 LzEvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPa82NTd 0Xc2KntKtcFP3HOOqfEFMYghUVzYaA/MZEa1K7Gy++iyHtvn7L+qCHTjItyGNF8E X0EJ8V/mb/bsb2GVuRHBR+lfcjW2BnJl/Mpvx1H0RlO6bxazD0tM5droVgfOCLqP X/GUKogAVjXDY6HMqmrbaHtE10xpSSdlqRoaLQkjZsnPj4iSYGj0TLQd6WXW4kAk Loxn9CFVkthOaKZrDTZb3U91Wqdnn764aYAzM/2uibuViuq7sSrnVHTnkmDDYup8 rUsS9rtPX12kKBgw/8ix15B/tGDkIBd26bKVMjQHUcu0EMSPgyEFtf6bGj/3nRzq DXBXMhlUVxc0xA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:26:21 2025 by rpki-client