This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft File: wBxQlI83N__gw7drJBzpBWKIhdU.mft (raw, json) Hash identifier: lX2pbML1wCQaem1KBes+30hlIGKxj5jmiDvevfWs9N4= Subject key identifier: 2F:FF:C0:A5:26:10:F8:8A:FA:9E:20:1F:E3:A8:BB:48:42:1A:F0:86 Authority key identifier: C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5 Certificate issuer: /CN=c01c50948f3737ffe0c3b76b241ce905628885d5 Certificate serial: 019B5C093569939093A947C45F362EBE6196 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 19:01:05 +0000 Manifest this update: Fri 26 Dec 2025 19:01:05 +0000 Manifest next update: Sat 27 Dec 2025 19:01:05 +0000 Files and hashes: 1: XGDEPbtc7WSL9UqjAgvMfvuw4zE.roa (hash: kp+3RGyWysprTwe33mB6LBHrd9lT7FkQfMmhfRn83iM=) 2: wBxQlI83N__gw7drJBzpBWKIhdU.crl (hash: 79xTFDNDZ2cAaNodjzWWAkq0bAUWoSwXoBjBhAAXsJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:09:35:69:93:90:93:a9:47:c4:5f:36:2e:be:61:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c01c50948f3737ffe0c3b76b241ce905628885d5 Validity Not Before: Dec 26 19:01:05 2025 GMT Not After : Dec 27 19:01:05 2025 GMT Subject: CN=2fffc0a52610f88afa9e201fe3a8bb48421af086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:72:c1:74:2a:d7:b9:ba:65:4f:91:0f:52: 86:e7:5d:e8:88:a9:c8:d3:a1:ab:f1:10:3c:ab:9e: 73:fc:4a:72:95:eb:e3:8f:1b:b6:12:f8:7f:c9:9d: ee:ea:10:1a:82:bd:0a:33:c6:2c:c5:23:4d:93:e5: 7d:f8:15:f1:af:8c:16:82:a6:ab:f4:f3:19:62:27: a2:0c:9f:47:6b:72:68:08:6a:b7:c5:50:de:f4:09: a8:af:9c:88:38:79:50:91:78:6b:f9:5d:5f:51:10: 78:a6:85:3a:e8:af:95:d2:1e:98:62:45:b5:bd:07: fc:84:88:5d:fc:98:ee:a6:ac:d6:24:9b:83:9b:42: 41:2d:29:fc:3d:58:cf:cb:02:cd:db:00:39:49:a7: b1:84:90:db:a3:0d:e8:70:49:46:90:67:7c:ee:1f: d6:78:ab:e2:33:40:16:6e:e9:f5:fd:52:1a:04:69: 3d:7a:8d:aa:86:dd:d4:01:4b:df:44:22:fc:04:cd: e7:d5:03:b5:9e:3c:59:62:a6:58:a3:7b:ae:93:3c: ad:fc:ea:d6:55:15:a8:53:d4:66:3b:f5:e0:80:ee: 8c:1a:13:97:bf:68:6e:18:4f:1c:62:a0:3a:48:b7: 19:37:e8:35:24:3a:38:df:90:bf:52:90:67:63:93: cd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:FF:C0:A5:26:10:F8:8A:FA:9E:20:1F:E3:A8:BB:48:42:1A:F0:86 X509v3 Authority Key Identifier: keyid:C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e0:7e:13:ba:28:f2:72:f3:83:16:75:73:ff:b7:9a:e0:41: 44:a3:e1:8c:6c:54:fe:7a:35:63:d1:12:95:34:eb:5c:09:de: 20:5b:f1:07:a0:93:5a:f4:be:3f:4a:d9:91:1b:6c:68:78:4c: 3a:03:cf:22:16:c4:23:70:35:12:8e:ae:fc:07:2f:b7:f2:4c: 44:65:d9:c9:03:b8:c2:6b:d1:55:6c:6e:4a:35:87:39:e2:75: 6c:fc:64:cd:38:15:2c:15:21:1e:d9:de:58:16:d5:ca:38:0f: e5:2c:01:60:ed:0e:0c:1a:a7:af:18:77:5d:4d:56:3d:64:07: 18:23:5c:b3:9f:79:c7:e2:39:0e:d4:d3:6d:65:db:7c:02:ed: 12:cc:3f:3b:95:a2:b8:ea:86:5a:b9:eb:fe:f6:ee:8e:c3:0f: b5:37:84:65:60:77:1d:9e:80:19:69:72:48:b0:5c:9c:84:66: 26:86:10:48:c0:a2:3f:c9:ff:6f:75:b6:dd:35:1f:18:97:64: 8e:77:46:95:c7:36:a2:fc:f0:b6:f4:b7:a3:d7:f1:53:93:40: 01:fb:3a:67:fa:62:61:04:d4:5a:37:c4:8b:5f:79:51:9f:0c: 1d:b8:a9:c3:ac:95:22:00:bd:8f:23:88:58:a3:74:a0:41:bf: da:ff:72:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCTVpk5CTqUfEXzYuvmGWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMWM1MDk0OGYzNzM3ZmZlMGMzYjc2YjI0MWNlOTA1NjI4 ODg1ZDUwHhcNMjUxMjI2MTkwMTA1WhcNMjUxMjI3MTkwMTA1WjAzMTEwLwYDVQQD EygyZmZmYzBhNTI2MTBmODhhZmE5ZTIwMWZlM2E4YmI0ODQyMWFmMDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqdywXQq17m6ZU+RD1KG513oiKnI 06Gr8RA8q55z/Epylevjjxu2Evh/yZ3u6hAagr0KM8YsxSNNk+V9+BXxr4wWgqar 9PMZYieiDJ9Ha3JoCGq3xVDe9Amor5yIOHlQkXhr+V1fURB4poU66K+V0h6YYkW1 vQf8hIhd/JjupqzWJJuDm0JBLSn8PVjPywLN2wA5SaexhJDbow3ocElGkGd87h/W eKviM0AWbun1/VIaBGk9eo2qht3UAUvfRCL8BM3n1QO1njxZYqZYo3uukzyt/OrW VRWoU9RmO/XggO6MGhOXv2huGE8cYqA6SLcZN+g1JDo435C/UpBnY5PNVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC//wKUmEPiK+p4gH+Oou0hCGvCGMB8GA1UdIwQY MBaAFMAcUJSPNzf/4MO3ayQc6QViiIXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0J4UWxJODNOX19ndzdkckpCenBCV0tJaGRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wYTc4MzEtN2UzMC00ZWQ1LWE3YzYt Y2QxNDk2ZGU4NDVlLzEvd0J4UWxJODNOX19ndzdkckpCenBCV0tJaGRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8wYTc4MzEtN2UzMC00ZWQ1LWE3YzYtY2QxNDk2ZGU4NDVl LzEvd0J4UWxJODNOX19ndzdkckpCenBCV0tJaGRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALuB+E7oo 8nLzgxZ1c/+3muBBRKPhjGxU/no1Y9ESlTTrXAneIFvxB6CTWvS+P0rZkRtsaHhM OgPPIhbEI3A1Eo6u/Acvt/JMRGXZyQO4wmvRVWxuSjWHOeJ1bPxkzTgVLBUhHtne WBbVyjgP5SwBYO0ODBqnrxh3XU1WPWQHGCNcs595x+I5DtTTbWXbfALtEsw/O5Wi uOqGWrnr/vbujsMPtTeEZWB3HZ6AGWlySLBcnIRmJoYQSMCiP8n/b3W23TUfGJdk jndGlcc2ovzwtvS3o9fxU5NAAfs6Z/piYQTUWjfEi195UZ8MHbipw6yVIgC9jyOI WKN0oEG/2v9ygA== -----END CERTIFICATE-----Generated at Fri Dec 26 21:22:54 2025 by rpki-client