This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft File: Wu6ShG_jj96OD2KUjKmIPBopt1U.mft (raw, json) Hash identifier: irc8fZuq1mve4NUgMBymoV+qdAfB3nJbwNTGvgeg4ao= Subject key identifier: 74:46:12:48:91:CC:0E:4E:7D:8B:D1:AF:F6:CB:B5:19:86:07:A8:A9 Authority key identifier: 5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55 Certificate issuer: /CN=5aee92846fe38fde8e0f62948ca9883c1a29b755 Certificate serial: 019B108188EC29B4CF227BDA75DBAD007515 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft Manifest number: 0BB2 Signing time: Fri 12 Dec 2025 03:01:23 +0000 Manifest this update: Fri 12 Dec 2025 03:01:23 +0000 Manifest next update: Sat 13 Dec 2025 03:01:23 +0000 Files and hashes: 1: QnsXwvgDL1vpnE_nHW7cZ8l-yys.roa (hash: VNqFUdRBsRfrCU4DQ7mXN2LJBOfMOJgZg+HVbNE534A=) 2: Wu6ShG_jj96OD2KUjKmIPBopt1U.crl (hash: Jx/f5ENwlh0/NWPukw+9tmtfeixcHKk3vKvs43kUUnQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 03:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:88:ec:29:b4:cf:22:7b:da:75:db:ad:00:75:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aee92846fe38fde8e0f62948ca9883c1a29b755 Validity Not Before: Dec 12 03:01:23 2025 GMT Not After : Dec 13 03:01:23 2025 GMT Subject: CN=7446124891cc0e4e7d8bd1aff6cbb5198607a8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fa:c8:5d:2a:96:b9:18:dc:2d:e4:fd:63:7b: 56:59:1d:21:86:dd:d7:ed:da:3e:65:cf:94:e3:e2: 93:3f:8a:09:b7:47:d4:81:23:a4:ec:be:a4:c7:fd: 80:fe:ef:99:b6:a7:4e:1a:52:29:eb:56:c1:18:ee: 9f:38:e3:43:28:05:32:f5:20:b7:8c:61:4f:1d:a5: 9e:7e:c8:e6:e5:8d:4a:60:17:10:65:95:37:87:e3: d4:78:fe:bd:1a:6a:23:84:69:e7:c2:cf:ee:7b:91: 47:ff:26:6f:4c:5f:69:25:f9:d4:c2:58:b5:7e:26: df:f3:67:aa:f0:d9:51:b0:15:9d:01:d7:fb:a1:ed: 7b:be:cf:0c:bc:b5:5c:c2:3e:c7:39:fb:b5:8f:bd: 0b:27:86:c8:03:a6:87:fb:9d:03:f9:ab:67:f6:e6: 06:7b:03:05:a3:52:f8:08:90:27:4a:6b:d4:66:62: 2d:57:64:14:f7:6c:03:c8:dd:02:7b:8c:bc:80:71: c4:83:1a:b0:a4:26:60:b4:78:be:c9:4d:8b:1b:50: 03:94:67:b9:d8:c7:a2:2d:71:14:1f:ca:4b:27:91: 4b:8d:7a:2c:1f:ee:9f:55:90:ac:10:a7:48:c4:32: 41:5f:77:5f:4a:4d:12:3e:df:49:4c:c6:58:b7:c5: e5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:46:12:48:91:CC:0E:4E:7D:8B:D1:AF:F6:CB:B5:19:86:07:A8:A9 X509v3 Authority Key Identifier: keyid:5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:63:7a:f7:6a:38:a5:e6:a8:45:6f:12:f0:3c:a9:e1:bf:11: db:77:39:0b:57:45:40:f1:3e:f2:4a:94:6f:66:96:02:f0:26: 0c:bd:83:1c:94:fb:b8:2d:6c:62:1b:8c:4d:3e:e3:5e:ca:64: 86:17:75:4d:bd:e1:ef:ef:aa:fe:5f:53:3e:49:0b:a9:79:de: da:67:09:70:c3:4d:9c:f7:e1:b3:3a:77:68:62:81:99:c0:97: ff:42:93:22:4a:c1:34:b4:77:b1:b5:a6:7e:29:29:fc:57:cb: 63:94:0a:1e:04:55:90:23:a3:12:08:ab:ea:8f:84:c0:11:99: 48:87:53:f7:2d:22:47:a0:ae:c4:27:6a:62:ee:64:31:d0:2d: f5:3c:3e:62:0b:c4:15:42:cc:ef:88:9d:5b:05:48:56:bb:8c: b3:ab:ff:46:15:c0:c7:3b:e1:f4:2d:31:b6:e2:5d:b9:0a:9b: 3f:4a:f5:e3:73:8e:96:36:68:78:1a:b9:f0:c1:37:71:43:0a: 5c:b6:dd:53:a3:6d:06:65:a2:e6:bd:92:4f:39:76:38:56:1e: 0a:d9:56:c4:1e:da:39:3c:26:f3:be:bf:aa:6c:0e:c7:46:7d: c9:bc:8b:ae:96:34:89:a1:62:e0:75:bc:69:09:76:aa:7f:20: fa:b9:3d:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgYjsKbTPInvaddutAHUVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZWU5Mjg0NmZlMzhmZGU4ZTBmNjI5NDhjYTk4ODNjMWEy OWI3NTUwHhcNMjUxMjEyMDMwMTIzWhcNMjUxMjEzMDMwMTIzWjAzMTEwLwYDVQQD Eyg3NDQ2MTI0ODkxY2MwZTRlN2Q4YmQxYWZmNmNiYjUxOTg2MDdhOGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPrIXSqWuRjcLeT9Y3tWWR0hht3X 7do+Zc+U4+KTP4oJt0fUgSOk7L6kx/2A/u+ZtqdOGlIp61bBGO6fOONDKAUy9SC3 jGFPHaWefsjm5Y1KYBcQZZU3h+PUeP69GmojhGnnws/ue5FH/yZvTF9pJfnUwli1 fibf82eq8NlRsBWdAdf7oe17vs8MvLVcwj7HOfu1j70LJ4bIA6aH+50D+atn9uYG ewMFo1L4CJAnSmvUZmItV2QU92wDyN0Ce4y8gHHEgxqwpCZgtHi+yU2LG1ADlGe5 2MeiLXEUH8pLJ5FLjXosH+6fVZCsEKdIxDJBX3dfSk0SPt9JTMZYt8XlnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRGEkiRzA5OfYvRr/bLtRmGB6ipMB8GA1UdIwQY MBaAFFrukoRv44/ejg9ilIypiDwaKbdVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3U2U2hHX2pqOTZPRDJLVWpLbUlQQm9wdDFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8xZGIwY2ItNzlmZC00ZDY5LTk1MTUt NDJmY2ZiNzU1NzQ0LzEvV3U2U2hHX2pqOTZPRDJLVWpLbUlQQm9wdDFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8xZGIwY2ItNzlmZC00ZDY5LTk1MTUtNDJmY2ZiNzU1NzQ0 LzEvV3U2U2hHX2pqOTZPRDJLVWpLbUlQQm9wdDFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmN692o4 peaoRW8S8Dyp4b8R23c5C1dFQPE+8kqUb2aWAvAmDL2DHJT7uC1sYhuMTT7jXspk hhd1Tb3h7++q/l9TPkkLqXne2mcJcMNNnPfhszp3aGKBmcCX/0KTIkrBNLR3sbWm fikp/FfLY5QKHgRVkCOjEgir6o+EwBGZSIdT9y0iR6CuxCdqYu5kMdAt9Tw+YgvE FULM74idWwVIVruMs6v/RhXAxzvh9C0xtuJduQqbP0r143OOljZoeBq58ME3cUMK XLbdU6NtBmWi5r2STzl2OFYeCtlWxB7aOTwm876/qmwOx0Z9ybyLrpY0iaFi4HW8 aQl2qn8g+rk9Bw== -----END CERTIFICATE-----Generated at Fri Dec 12 13:22:11 2025 by rpki-client