This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft File: wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft (raw, json) Hash identifier: 8wShRGhWWtuDmux/RRbTTE6Q6NYwV8ylbL343d7KDvE= Subject key identifier: F4:BB:CC:CC:5D:87:96:BD:D9:75:A0:A1:92:FF:36:B3:29:63:3B:A4 Authority key identifier: C2:E2:4A:6E:3B:37:5E:82:7E:BD:6E:28:8D:9E:55:32:B3:A1:B6:84 Certificate issuer: /CN=c2e24a6e3b375e827ebd6e288d9e5532b3a1b684 Certificate serial: 019B6FFDBB4F52920D7DF5AF81C418CEB77A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft Manifest number: 1734 Signing time: Tue 30 Dec 2025 16:00:58 +0000 Manifest this update: Tue 30 Dec 2025 16:00:58 +0000 Manifest next update: Wed 31 Dec 2025 16:00:58 +0000 Files and hashes: 1: 1-sPggFgoLgEYQ3a9DEa-ikM_oT0.roa (hash: aDnt2VZtITmENjGl4t0nf2cwLhZtXyAhYwK+dLEZq10=) 2: wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl (hash: JKCyC5326sC6AU3hCZFHJ5o8/EjkxfalwbA0occCqmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:fd:bb:4f:52:92:0d:7d:f5:af:81:c4:18:ce:b7:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2e24a6e3b375e827ebd6e288d9e5532b3a1b684 Validity Not Before: Dec 30 16:00:58 2025 GMT Not After : Dec 31 16:00:58 2025 GMT Subject: CN=f4bbcccc5d8796bdd975a0a192ff36b329633ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4a:09:33:68:08:19:b8:24:88:f2:1b:a5:2c: e4:a7:b3:e7:10:f8:46:b0:1d:13:f3:4c:48:8c:47: e2:a5:d7:f8:09:99:b3:a8:98:72:a3:1d:16:a1:5a: bf:38:12:9f:c8:eb:a0:29:7b:6f:c1:e5:f1:9a:a5: be:fa:7a:4e:e4:a2:22:a9:e6:0c:b1:7d:d9:e8:45: 9e:14:64:a1:c7:7e:00:b0:ec:46:b3:94:b8:e5:da: 12:ef:98:64:09:b3:d2:f9:ec:20:dc:19:61:fe:9f: 3e:2f:f2:bd:a9:fb:7c:8a:28:5d:1b:35:59:10:3d: d8:11:0e:a5:39:91:45:5a:0f:fa:bb:5e:45:09:3d: 38:00:12:b2:f1:7f:e7:95:2a:2f:a4:ad:3c:47:fe: 0d:64:2d:cd:72:e7:18:09:28:ab:0b:f8:42:a8:86: ea:48:2d:27:eb:cc:ae:d3:07:02:40:71:89:53:1f: 75:a5:e6:86:30:00:e1:11:4d:c0:f5:3f:91:a0:77: a3:8e:cb:11:42:fa:10:7a:21:09:e4:ed:1d:47:00: 90:f0:74:7a:55:06:4d:36:07:a2:21:6f:7c:c8:48: 94:2e:1c:3e:d5:63:e3:9d:f6:66:09:57:ba:ff:ee: 4e:be:7b:ab:5c:bd:54:3e:a5:1a:da:48:a4:a5:37: 23:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BB:CC:CC:5D:87:96:BD:D9:75:A0:A1:92:FF:36:B3:29:63:3B:A4 X509v3 Authority Key Identifier: keyid:C2:E2:4A:6E:3B:37:5E:82:7E:BD:6E:28:8D:9E:55:32:B3:A1:B6:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:c6:f2:90:e2:a7:97:75:85:a1:f5:ba:02:81:f0:f7:72:32: 38:21:b7:91:79:1a:b4:49:b3:ff:a1:cd:5e:7b:6b:7d:21:b3: 80:f7:96:94:fa:92:92:d3:df:04:a2:6f:14:1f:ea:e6:79:44: 58:f3:94:67:9b:28:c5:87:97:36:58:14:80:ac:8a:31:d5:a6: 53:3a:de:b3:fe:a6:f7:d1:d1:54:71:af:8e:aa:49:69:62:db: 92:ca:2b:fa:7f:81:fa:12:87:35:21:ff:a2:69:e3:64:1f:79: 0f:c6:6f:75:9c:e6:33:ec:87:9f:17:1d:26:41:52:9c:a8:65: 6b:3b:37:79:c2:04:1d:17:2a:78:ee:7b:4b:b2:a4:34:21:8d: b5:53:81:2a:98:2f:04:cc:91:0c:87:34:fe:48:49:8f:34:1b: 64:aa:24:9d:df:c3:b7:88:dd:45:3e:31:ec:e6:7a:9c:18:f1: 94:88:1f:8b:53:75:a7:2d:1a:88:d6:d0:e1:d8:9b:85:e3:dd: 21:a4:33:80:0f:08:7b:a2:79:59:fb:e2:5e:75:18:b6:5c:95: 43:61:51:76:cc:bf:40:12:69:38:38:31:e8:46:03:0d:db:d0: 7b:d4:d4:c6:af:96:9e:e0:13:c1:6e:a1:68:28:1b:c5:8f:7f: 33:43:30:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtv/btPUpINffWvgcQYzrd6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZTI0YTZlM2IzNzVlODI3ZWJkNmUyODhkOWU1NTMyYjNh MWI2ODQwHhcNMjUxMjMwMTYwMDU4WhcNMjUxMjMxMTYwMDU4WjAzMTEwLwYDVQQD EyhmNGJiY2NjYzVkODc5NmJkZDk3NWEwYTE5MmZmMzZiMzI5NjMzYmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkoJM2gIGbgkiPIbpSzkp7PnEPhG sB0T80xIjEfipdf4CZmzqJhyox0WoVq/OBKfyOugKXtvweXxmqW++npO5KIiqeYM sX3Z6EWeFGShx34AsOxGs5S45doS75hkCbPS+ewg3Blh/p8+L/K9qft8iihdGzVZ ED3YEQ6lOZFFWg/6u15FCT04ABKy8X/nlSovpK08R/4NZC3NcucYCSirC/hCqIbq SC0n68yu0wcCQHGJUx91peaGMADhEU3A9T+RoHejjssRQvoQeiEJ5O0dRwCQ8HR6 VQZNNgeiIW98yEiULhw+1WPjnfZmCVe6/+5OvnurXL1UPqUa2kikpTcjnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPS7zMxdh5a92XWgoZL/NrMpYzukMB8GA1UdIwQY MBaAFMLiSm47N16Cfr1uKI2eVTKzobaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3VKS2JqczNYb0otdlc0b2paNVZNck9odG9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9mOTE2YmMtMjliMS00ZjA5LTgzZGUt ZDU0NGFjMDYyZDFmLzEvd3VKS2JqczNYb0otdlc0b2paNVZNck9odG9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9mOTE2YmMtMjliMS00ZjA5LTgzZGUtZDU0NGFjMDYyZDFm LzEvd3VKS2JqczNYb0otdlc0b2paNVZNck9odG9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuMbykOKn l3WFofW6AoHw93IyOCG3kXkatEmz/6HNXntrfSGzgPeWlPqSktPfBKJvFB/q5nlE WPOUZ5soxYeXNlgUgKyKMdWmUzres/6m99HRVHGvjqpJaWLbksor+n+B+hKHNSH/ omnjZB95D8ZvdZzmM+yHnxcdJkFSnKhlazs3ecIEHRcqeO57S7KkNCGNtVOBKpgv BMyRDIc0/khJjzQbZKoknd/Dt4jdRT4x7OZ6nBjxlIgfi1N1py0aiNbQ4dibhePd IaQzgA8Ie6J5WfviXnUYtlyVQ2FRdsy/QBJpODgx6EYDDdvQe9TUxq+WnuATwW6h aCgbxY9/M0Mwsw== -----END CERTIFICATE-----Generated at Tue Dec 30 18:41:44 2025 by rpki-client