This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft File: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft (raw, json) Hash identifier: RZV8I48FomsUXe6juvTU+j8ha1g6zYh0zxgK9ATCIuQ= Subject key identifier: 3A:3F:4D:1D:D8:97:A0:2A:08:B6:C6:6C:7D:98:7D:0E:28:F1:FE:5B Authority key identifier: C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF Certificate issuer: /CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff Certificate serial: 019B43C9C3E52D3C6D3A68321CAD0F1DDC1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft Manifest number: 06D5 Signing time: Mon 22 Dec 2025 02:00:54 +0000 Manifest this update: Mon 22 Dec 2025 02:00:54 +0000 Manifest next update: Tue 23 Dec 2025 02:00:54 +0000 Files and hashes: 1: g5yuydF4Poe4QOJQ8dgMQtQLFlA.roa (hash: ztDU3PoyCa7wU7AjEFCTcvzcTrmXKsTMTZ/tLyZjIE8=) 2: nPjV6lYXInJfXl86tbhvs9WXUa4.roa (hash: asKBhySwit3PBxbedsUA8HTRnekoYKrc5tk7Wn5QFGc=) 3: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl (hash: S8UkP/ho2K5iaGqTDJEATjnyW+tFBM1yGRHI0orRkOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:c3:e5:2d:3c:6d:3a:68:32:1c:ad:0f:1d:dc:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff Validity Not Before: Dec 22 02:00:54 2025 GMT Not After : Dec 23 02:00:54 2025 GMT Subject: CN=3a3f4d1dd897a02a08b6c66c7d987d0e28f1fe5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2d:f0:46:67:df:74:a4:ba:46:68:8d:b2:3c: e2:bd:90:cf:f9:58:9f:48:db:70:8d:fa:68:72:5e: 60:47:31:1d:34:c6:ea:68:a1:71:11:f9:d1:71:18: e7:92:46:9c:38:e5:8e:18:d0:9b:8a:ec:8b:02:23: 0f:5d:e3:7e:bd:21:db:36:fe:2b:84:84:8b:66:c6: ec:73:56:29:60:c9:95:1c:13:5c:e9:38:a7:08:3a: 8c:21:e1:be:d0:e9:e9:36:06:4a:c9:34:d4:9b:25: de:dd:80:f5:7f:51:46:1d:57:02:e6:ba:1b:c6:8c: d6:ad:76:f5:2a:1d:73:ad:14:a6:69:7d:a4:a6:a9: a5:38:9f:c9:d8:6a:bb:98:5c:d1:90:14:c8:7e:ae: e3:c5:f5:88:6b:f1:99:41:19:ff:a6:51:59:44:cb: 2f:e8:37:46:76:25:44:4e:22:a6:25:62:e1:e7:64: fb:3a:8c:8a:35:25:d8:f6:9f:6b:4b:b0:89:b8:19: 22:c0:6e:47:f4:70:24:01:b3:fc:fc:4e:fe:ff:fe: 56:ea:2e:ba:c9:84:a5:a6:de:e6:fa:0b:69:2e:07: b4:e5:a1:b2:f7:58:19:bd:1a:82:4d:63:cb:58:38: f4:ea:7b:c1:45:19:29:0c:57:7c:43:b6:67:48:18: c3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3F:4D:1D:D8:97:A0:2A:08:B6:C6:6C:7D:98:7D:0E:28:F1:FE:5B X509v3 Authority Key Identifier: keyid:C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:6a:62:8e:3d:bd:bc:c1:a9:6d:db:81:e3:fa:1d:24:9d:5e: 4c:de:32:50:df:d5:c8:2a:6a:8b:63:ea:6a:a1:3f:ae:f8:99: b9:34:42:8e:0d:b0:3e:30:e2:e6:86:d0:fc:2d:70:50:a3:f9: 60:1f:37:00:d6:0b:61:39:9e:a0:f6:11:fc:4f:51:ba:af:a0: 42:2a:c3:86:39:06:3d:c1:1e:f0:02:6b:77:43:a1:b7:24:94: d2:76:5e:04:7d:63:f2:05:41:44:f9:18:21:ed:b0:ac:2b:9d: 82:e2:21:4f:ca:df:68:66:ea:39:db:81:65:fc:d3:a3:51:de: 6b:1b:09:a7:27:36:e0:97:a9:a1:65:91:26:1e:69:3d:2c:94: b4:4d:67:43:92:49:7a:82:cd:6f:52:4a:1f:2c:61:94:0a:a9: 7a:a4:bc:7f:74:04:be:1e:9b:6d:21:0d:15:6b:48:78:c5:fb: 1b:96:99:66:23:fb:11:63:94:3c:a0:1f:25:d3:39:b8:c0:e0: 14:e9:f5:15:0d:5c:fd:e7:da:2f:75:74:ec:44:4a:19:e2:c0: 20:49:93:39:ed:50:c4:d2:2d:08:61:aa:52:b6:f8:3c:fc:00: 47:3b:17:4b:8b:12:82:8c:ee:3f:fc:f3:19:35:d6:f8:3e:12: 0c:6f:f0:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDycPlLTxtOmgyHK0PHdwbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMjRiNjllZDRhMjNiN2IzZTA2NzRhM2Y5OTQ2MDFkNzNi N2JhZmYwHhcNMjUxMjIyMDIwMDU0WhcNMjUxMjIzMDIwMDU0WjAzMTEwLwYDVQQD EygzYTNmNGQxZGQ4OTdhMDJhMDhiNmM2NmM3ZDk4N2QwZTI4ZjFmZTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3i3wRmffdKS6RmiNsjzivZDP+Vif SNtwjfpocl5gRzEdNMbqaKFxEfnRcRjnkkacOOWOGNCbiuyLAiMPXeN+vSHbNv4r hISLZsbsc1YpYMmVHBNc6TinCDqMIeG+0OnpNgZKyTTUmyXe3YD1f1FGHVcC5rob xozWrXb1Kh1zrRSmaX2kpqmlOJ/J2Gq7mFzRkBTIfq7jxfWIa/GZQRn/plFZRMsv 6DdGdiVETiKmJWLh52T7OoyKNSXY9p9rS7CJuBkiwG5H9HAkAbP8/E7+//5W6i66 yYSlpt7m+gtpLge05aGy91gZvRqCTWPLWDj06nvBRRkpDFd8Q7ZnSBjDJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDo/TR3Yl6AqCLbGbH2YfQ4o8f5bMB8GA1UdIwQY MBaAFMIktp7Uojt7PgZ0o/mUYB1zt7r/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2lTMm50U2lPM3MtQm5Tai1aUmdIWE8zdXY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wYWYxOTktZmU0Ny00ZjViLTljNjgt MTViOTQ0NTc3Yzg2LzEvd2lTMm50U2lPM3MtQm5Tai1aUmdIWE8zdXY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8wYWYxOTktZmU0Ny00ZjViLTljNjgtMTViOTQ0NTc3Yzg2 LzEvd2lTMm50U2lPM3MtQm5Tai1aUmdIWE8zdXY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWpijj29 vMGpbduB4/odJJ1eTN4yUN/VyCpqi2PqaqE/rviZuTRCjg2wPjDi5obQ/C1wUKP5 YB83ANYLYTmeoPYR/E9Ruq+gQirDhjkGPcEe8AJrd0OhtySU0nZeBH1j8gVBRPkY Ie2wrCudguIhT8rfaGbqOduBZfzTo1HeaxsJpyc24JepoWWRJh5pPSyUtE1nQ5JJ eoLNb1JKHyxhlAqpeqS8f3QEvh6bbSENFWtIeMX7G5aZZiP7EWOUPKAfJdM5uMDg FOn1FQ1c/efaL3V07ERKGeLAIEmTOe1QxNItCGGqUrb4PPwARzsXS4sSgozuP/zz GTXW+D4SDG/wgQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:52:12 2025 by rpki-client