This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft File: wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft (raw, json) Hash identifier: mJgjQ832UpeMmnHRlA+Xvlh6mwS5p4mibVUkXwVJZb8= Subject key identifier: 18:7F:BE:72:78:22:54:6B:87:16:0C:D8:CD:FA:AA:D5:5C:3C:19:4E Authority key identifier: C2:E2:4A:6E:3B:37:5E:82:7E:BD:6E:28:8D:9E:55:32:B3:A1:B6:84 Certificate issuer: /CN=c2e24a6e3b375e827ebd6e288d9e5532b3a1b684 Certificate serial: 019B39EB1F9FD8547D8B88666ED369FBC13B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft Manifest number: 1718 Signing time: Sat 20 Dec 2025 04:01:08 +0000 Manifest this update: Sat 20 Dec 2025 04:01:08 +0000 Manifest next update: Sun 21 Dec 2025 04:01:08 +0000 Files and hashes: 1: 1-sPggFgoLgEYQ3a9DEa-ikM_oT0.roa (hash: aDnt2VZtITmENjGl4t0nf2cwLhZtXyAhYwK+dLEZq10=) 2: wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl (hash: ozl/RJio1X7qitajQ/ZCy14+/pAQ2Ll9W9KV9Uy1wGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:1f:9f:d8:54:7d:8b:88:66:6e:d3:69:fb:c1:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2e24a6e3b375e827ebd6e288d9e5532b3a1b684 Validity Not Before: Dec 20 04:01:08 2025 GMT Not After : Dec 21 04:01:08 2025 GMT Subject: CN=187fbe727822546b87160cd8cdfaaad55c3c194e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:83:ba:63:da:bd:77:44:0c:c7:40:5b:8a:02: f1:63:6a:2d:90:da:33:47:32:c7:6a:37:66:9f:76: 8f:c0:60:cb:fa:f6:4c:f5:30:99:11:de:32:8e:95: ff:82:c4:70:31:81:0a:e1:b6:d8:30:34:44:9c:93: 24:cd:9a:87:19:e6:27:24:0b:36:94:bd:bc:14:0d: 56:55:a4:f2:26:73:94:f1:99:d9:ee:3e:48:34:90: 86:12:57:a3:32:ee:15:1c:d0:ce:1c:b5:9e:2f:84: c3:7a:48:84:dc:7a:c3:73:c8:c8:e3:8a:1d:02:c3: 70:b5:98:72:88:ec:4d:95:9f:bf:9c:df:7f:38:f9: 48:1b:8f:45:7e:3e:15:1b:47:6f:b8:9e:f8:a5:42: 09:39:71:45:91:2e:f5:3c:1e:1e:94:2e:86:f1:9c: c0:e9:2d:27:7d:ef:e5:06:17:25:98:a7:20:1a:f9: fa:bc:b2:a6:30:44:a4:fd:2f:ac:38:7e:ed:5a:f4: e0:79:e0:53:21:03:7c:07:5a:aa:4d:c4:16:9d:7c: 91:5c:09:88:26:1d:36:31:c1:67:d3:7c:11:bf:eb: cb:19:7d:3f:cb:a9:7b:39:69:ac:d1:89:11:76:60: 7d:35:a4:85:a3:9a:fc:b7:8d:cc:6f:98:e6:17:bd: 68:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7F:BE:72:78:22:54:6B:87:16:0C:D8:CD:FA:AA:D5:5C:3C:19:4E X509v3 Authority Key Identifier: keyid:C2:E2:4A:6E:3B:37:5E:82:7E:BD:6E:28:8D:9E:55:32:B3:A1:B6:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:3b:72:6d:ad:bd:b7:d2:56:57:ef:8e:48:a9:30:02:03:c2: 69:7e:5d:a0:ee:b1:91:40:bc:de:ea:e6:2f:78:36:2f:37:2e: 21:6f:a1:01:9c:9f:59:38:33:dd:d6:27:b7:c6:7f:76:77:86: be:c0:db:80:cf:cb:a4:e9:9a:d3:77:5e:87:f8:e6:7d:dc:3f: bf:31:03:a3:5d:c9:35:cc:80:04:6c:ff:2b:d1:0b:85:ae:4c: ef:4c:5c:c6:30:2d:63:ea:db:d5:71:9f:73:7c:36:d2:67:1b: f4:c1:26:48:bf:45:f4:1e:51:79:17:96:3d:4a:00:64:ba:98: 50:6b:cb:cd:e5:17:aa:fd:a0:19:eb:d0:e9:29:db:10:6f:f1: a6:be:b7:04:ca:1b:f0:7a:46:1b:00:69:7e:da:92:15:75:3b: a1:02:fa:da:ad:43:88:24:2e:b0:35:d6:2a:0e:fd:87:0f:ab: a9:6d:e3:91:e8:d3:f7:ab:25:86:b4:b9:11:49:5b:1f:4d:13: b1:ba:51:20:3f:47:55:2b:31:19:43:17:93:f0:52:f7:7e:29: 0f:2e:7d:95:97:e8:b6:4c:66:a0:ca:9c:72:bb:14:dd:5b:2b: e4:90:bc:d7:b4:3a:6f:4f:3d:6c:15:32:02:6a:b7:b1:64:37: da:3e:e2:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56x+f2FR9i4hmbtNp+8E7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZTI0YTZlM2IzNzVlODI3ZWJkNmUyODhkOWU1NTMyYjNh MWI2ODQwHhcNMjUxMjIwMDQwMTA4WhcNMjUxMjIxMDQwMTA4WjAzMTEwLwYDVQQD EygxODdmYmU3Mjc4MjI1NDZiODcxNjBjZDhjZGZhYWFkNTVjM2MxOTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIO6Y9q9d0QMx0BbigLxY2otkNoz RzLHajdmn3aPwGDL+vZM9TCZEd4yjpX/gsRwMYEK4bbYMDREnJMkzZqHGeYnJAs2 lL28FA1WVaTyJnOU8ZnZ7j5INJCGElejMu4VHNDOHLWeL4TDekiE3HrDc8jI44od AsNwtZhyiOxNlZ+/nN9/OPlIG49Ffj4VG0dvuJ74pUIJOXFFkS71PB4elC6G8ZzA 6S0nfe/lBhclmKcgGvn6vLKmMESk/S+sOH7tWvTgeeBTIQN8B1qqTcQWnXyRXAmI Jh02McFn03wRv+vLGX0/y6l7OWms0YkRdmB9NaSFo5r8t43Mb5jmF71o4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBh/vnJ4IlRrhxYM2M36qtVcPBlOMB8GA1UdIwQY MBaAFMLiSm47N16Cfr1uKI2eVTKzobaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3VKS2JqczNYb0otdlc0b2paNVZNck9odG9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9mOTE2YmMtMjliMS00ZjA5LTgzZGUt ZDU0NGFjMDYyZDFmLzEvd3VKS2JqczNYb0otdlc0b2paNVZNck9odG9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9mOTE2YmMtMjliMS00ZjA5LTgzZGUtZDU0NGFjMDYyZDFm LzEvd3VKS2JqczNYb0otdlc0b2paNVZNck9odG9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANztyba29 t9JWV++OSKkwAgPCaX5doO6xkUC83urmL3g2LzcuIW+hAZyfWTgz3dYnt8Z/dneG vsDbgM/LpOma03deh/jmfdw/vzEDo13JNcyABGz/K9ELha5M70xcxjAtY+rb1XGf c3w20mcb9MEmSL9F9B5ReReWPUoAZLqYUGvLzeUXqv2gGevQ6SnbEG/xpr63BMob 8HpGGwBpftqSFXU7oQL62q1DiCQusDXWKg79hw+rqW3jkejT96slhrS5EUlbH00T sbpRID9HVSsxGUMXk/BS934pDy59lZfotkxmoMqccrsU3Vsr5JC817Q6b089bBUy Amq3sWQ32j7ifw== -----END CERTIFICATE-----Generated at Sat Dec 20 13:18:59 2025 by rpki-client