This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft File: WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft (raw, json) Hash identifier: swuuceVdam4oA72455H933o/M/sIcb6jEp8frE279ao= Subject key identifier: 41:8E:47:54:6E:25:CD:9D:00:8D:68:09:1B:40:F6:E3:40:A3:E7:E2 Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B Certificate issuer: /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b Certificate serial: 019B1E7380DE854EF714621AB6C6C61C0BF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft Manifest number: 0848 Signing time: Sun 14 Dec 2025 20:00:44 +0000 Manifest this update: Sun 14 Dec 2025 20:00:44 +0000 Manifest next update: Mon 15 Dec 2025 20:00:44 +0000 Files and hashes: 1: Vm3FZcwyN5QxEii_ssxb-za5Fkk.roa (hash: InHAGmxk/rpqwiHkXwhjwEsvW1iLiHdwr3I++HGignQ=) 2: WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl (hash: vzyxdUPv0SKO05lHkQVwTc8j/KOBI/t0JFmKFhrOwxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:73:80:de:85:4e:f7:14:62:1a:b6:c6:c6:1c:0b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b Validity Not Before: Dec 14 20:00:44 2025 GMT Not After : Dec 15 20:00:44 2025 GMT Subject: CN=418e47546e25cd9d008d68091b40f6e340a3e7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c7:bf:07:08:63:d4:23:e6:15:f2:7c:bc:fb: 9a:00:47:b7:7e:0d:83:7c:bd:ba:89:22:c1:e8:aa: 5f:1b:b2:1f:b1:0b:1c:3c:99:57:56:50:44:02:2c: 86:4a:23:7e:d8:4c:a4:30:77:9a:d0:ae:a6:ad:79: 2e:d9:b7:b9:e7:55:d1:cc:ac:88:fb:1b:0d:f7:52: 78:b2:01:07:19:09:f2:f6:d2:eb:11:d4:22:13:ed: 2b:0b:45:3f:3a:ac:52:96:dc:3b:10:c2:99:d3:12: 40:f5:74:df:27:83:14:b6:d0:3b:e2:38:63:79:c6: ad:3a:4f:6e:4c:11:bc:02:ee:02:d2:e6:3b:13:19: f4:18:10:9b:b5:c4:e2:19:ce:f3:92:ec:e4:32:9c: 25:01:0e:a4:63:63:75:96:be:57:7b:1a:1d:ed:d6: 2f:f2:4a:84:a9:f6:e1:31:5d:e0:c4:6e:ef:9e:d9: e4:30:44:38:08:16:93:ff:56:7d:77:e3:5c:cf:d7: a4:0e:83:95:c4:97:4f:ce:65:21:af:e5:23:d5:5b: b7:88:6c:c3:3f:a8:fe:30:7a:64:9c:c5:78:00:a9: f8:ac:ad:24:ed:c2:38:2e:57:a3:6a:32:ba:f3:b7: d3:24:cc:79:79:57:3a:b7:8c:23:e1:ae:6a:a8:d2: be:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8E:47:54:6E:25:CD:9D:00:8D:68:09:1B:40:F6:E3:40:A3:E7:E2 X509v3 Authority Key Identifier: keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:61:89:41:f5:b2:9e:4d:3b:31:62:84:1b:48:93:79:c2:c7: 6e:8d:f7:70:54:58:69:82:03:8f:fc:2a:d5:29:19:02:ea:4e: 3a:ba:ea:af:4a:75:52:91:df:02:0e:22:3a:05:b8:03:d0:99: 5c:ac:da:99:aa:f7:77:38:7d:ab:5c:6c:44:c2:5c:01:e5:82: f4:bd:13:81:ab:bc:8f:4b:c5:bd:64:a2:fd:52:94:bf:d9:76: 5d:23:ea:af:a4:9d:87:13:11:0d:b2:65:0b:5c:24:5a:fe:dc: 90:f2:64:f6:31:d8:45:6d:b5:99:d8:8e:a5:71:d7:f7:4c:08: f9:e1:f9:20:0d:b3:43:6a:0c:ac:46:48:08:27:59:28:13:16: 5e:c0:6f:6a:76:e4:1f:97:54:31:85:fe:68:de:f0:a0:53:0c: ec:27:05:ad:3f:1f:b4:16:e1:47:eb:ac:10:99:68:55:a3:29: 42:c5:a8:bf:40:af:c3:f5:97:6f:4d:34:cc:9f:fa:63:a2:aa: 4d:a0:e4:28:a5:0c:a0:02:35:87:e6:c6:68:f8:aa:10:25:4b: 31:1f:96:b5:f4:ba:f3:68:db:49:ed:e3:63:1b:56:21:2a:70: f0:d2:c1:c6:59:e6:c8:91:b0:23:06:f4:e7:2d:ca:89:89:d9: db:33:48:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsec4DehU73FGIatsbGHAv5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NDU3YzY4NWM1YjE1YzNhZjRkNDNiNjBlNGQ0YzBhMGVl ZWQ2OGIwHhcNMjUxMjE0MjAwMDQ0WhcNMjUxMjE1MjAwMDQ0WjAzMTEwLwYDVQQD Eyg0MThlNDc1NDZlMjVjZDlkMDA4ZDY4MDkxYjQwZjZlMzQwYTNlN2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMe/Bwhj1CPmFfJ8vPuaAEe3fg2D fL26iSLB6KpfG7IfsQscPJlXVlBEAiyGSiN+2EykMHea0K6mrXku2be551XRzKyI +xsN91J4sgEHGQny9tLrEdQiE+0rC0U/OqxSltw7EMKZ0xJA9XTfJ4MUttA74jhj ecatOk9uTBG8Au4C0uY7Exn0GBCbtcTiGc7zkuzkMpwlAQ6kY2N1lr5Xexod7dYv 8kqEqfbhMV3gxG7vntnkMEQ4CBaT/1Z9d+Ncz9ekDoOVxJdPzmUhr+Uj1Vu3iGzD P6j+MHpknMV4AKn4rK0k7cI4LlejajK687fTJMx5eVc6t4wj4a5qqNK+1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGOR1RuJc2dAI1oCRtA9uNAo+fiMB8GA1UdIwQY MBaAFFlFfGhcWxXDr01Dtg5NTAoO7taLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2Qt MGJmMmExYjJjY2NiLzEvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2QtMGJmMmExYjJjY2Ni LzEvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGGJQfWy nk07MWKEG0iTecLHbo33cFRYaYIDj/wq1SkZAupOOrrqr0p1UpHfAg4iOgW4A9CZ XKzamar3dzh9q1xsRMJcAeWC9L0Tgau8j0vFvWSi/VKUv9l2XSPqr6SdhxMRDbJl C1wkWv7ckPJk9jHYRW21mdiOpXHX90wI+eH5IA2zQ2oMrEZICCdZKBMWXsBvanbk H5dUMYX+aN7woFMM7CcFrT8ftBbhR+usEJloVaMpQsWov0Cvw/WXb000zJ/6Y6Kq TaDkKKUMoAI1h+bGaPiqECVLMR+WtfS682jbSe3jYxtWISpw8NLBxlnmyJGwIwb0 5y3KiYnZ2zNIOA== -----END CERTIFICATE-----Generated at Mon Dec 15 04:55:45 2025 by rpki-client