This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft File: wC4yPxvhY8TX-LiKrY2q--AQbW8.mft (raw, json) Hash identifier: 1Io6Lh1mUprJXbZkGF8qW4mKJt4jgv9DyQGIWs+bJfw= Subject key identifier: 5B:0E:39:05:6D:1E:9F:30:B2:36:81:7A:CC:45:0B:89:60:16:2C:AF Authority key identifier: C0:2E:32:3F:1B:E1:63:C4:D7:F8:B8:8A:AD:8D:AA:FB:E0:10:6D:6F Certificate issuer: /CN=c02e323f1be163c4d7f8b88aad8daafbe0106d6f Certificate serial: 019B34C4EE4116162F54B615E3D948A4107F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft Manifest number: 02A2 Signing time: Fri 19 Dec 2025 04:01:19 +0000 Manifest this update: Fri 19 Dec 2025 04:01:19 +0000 Manifest next update: Sat 20 Dec 2025 04:01:19 +0000 Files and hashes: 1: wC4yPxvhY8TX-LiKrY2q--AQbW8.crl (hash: RDVhYdtqvEG8BWmqNk7UolxW/drNC2uT+IKpCCkzcIE=) 2: z4hyHniAgsjhip0WWSLXoanCOdQ.roa (hash: M3AlMbZsNGFOvYnoOV0xvC8E+XBvcvrqkI0jCnJgG2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.crl rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:ee:41:16:16:2f:54:b6:15:e3:d9:48:a4:10:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c02e323f1be163c4d7f8b88aad8daafbe0106d6f Validity Not Before: Dec 19 04:01:19 2025 GMT Not After : Dec 20 04:01:19 2025 GMT Subject: CN=5b0e39056d1e9f30b236817acc450b8960162caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4d:6f:b0:03:3e:61:1d:2d:04:b8:87:ab:38: 5d:4f:5c:0a:11:9a:37:b9:7c:2f:bf:ff:80:10:15: 37:70:7e:e5:c8:40:9c:96:d6:7a:2c:15:36:91:0a: 9d:2b:56:7b:cd:b2:46:15:39:09:2e:8b:59:69:3b: 09:95:8e:81:25:9c:1a:2e:63:30:a1:c1:15:c9:b6: 76:07:d0:cf:d9:50:13:f6:f2:f3:7e:93:52:91:e7: 9e:f4:1f:7e:f5:c4:54:f7:e0:04:ba:10:9e:42:08: 28:9e:7d:b4:08:74:af:04:b2:9d:5b:fa:c2:86:9d: 98:00:9a:b3:97:34:6c:a5:d6:38:49:18:4a:11:74: 48:21:6f:5c:a0:b9:6e:b4:d0:dd:d9:1e:0b:0b:b6: 76:11:51:8d:e8:3b:a9:91:c1:d6:a1:ab:01:81:21: 12:dd:96:a2:f8:d5:71:f3:e0:7b:d6:8a:5b:2f:6c: 2c:2b:9c:4d:fd:50:b2:7a:fd:05:51:9f:cf:08:2c: d7:87:11:ab:28:ce:40:aa:09:34:29:59:39:6f:b2: 2f:15:38:fc:42:32:1b:b6:6f:db:4d:49:24:25:6a: 90:b6:cf:58:10:b1:ee:bf:6d:16:ad:e8:18:68:7a: 13:b8:82:1e:6f:db:1c:3f:91:9f:e2:35:08:10:bb: a5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0E:39:05:6D:1E:9F:30:B2:36:81:7A:CC:45:0B:89:60:16:2C:AF X509v3 Authority Key Identifier: keyid:C0:2E:32:3F:1B:E1:63:C4:D7:F8:B8:8A:AD:8D:AA:FB:E0:10:6D:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:82:aa:42:ce:b2:39:47:ca:7d:72:34:67:9f:2c:55:ce:d0: 8e:1f:7b:8c:49:6b:c0:50:f8:44:d4:1f:7f:c3:cc:3f:79:1a: 48:65:75:76:ee:06:be:95:51:83:df:f0:d1:39:dc:b3:34:e6: 70:3e:df:4b:63:c7:00:6f:59:19:de:ab:c4:ef:35:2c:8b:97: 82:96:5a:06:19:45:20:40:1e:ff:99:8e:5e:f2:64:db:c3:d3: 6c:e6:1a:93:30:19:98:9b:60:19:fb:1b:43:4b:52:ae:d5:af: c0:15:d6:e5:04:9e:80:c5:9c:ad:1a:13:8f:2f:de:cc:70:da: 10:26:ab:9c:34:56:c7:a1:83:13:62:a4:2c:a5:81:77:8a:4f: 68:62:26:9b:3f:d1:7d:c2:e7:3b:38:4b:49:ef:a6:b1:0a:19: e3:9d:ab:ca:2a:33:7f:6f:79:47:8e:dd:44:30:7c:52:5d:90: f2:9e:bf:0a:9e:fb:46:c1:9a:c0:74:99:3d:90:4b:6b:93:82: cd:ea:91:ce:84:18:52:f4:49:f9:f3:03:69:3a:f1:21:0a:f0: 6e:24:14:2d:e0:e7:e4:1e:8b:c5:ac:9f:f4:b8:22:ab:1d:34: 54:54:ae:d4:c6:30:63:6d:06:46:b2:b8:28:3f:90:02:f2:dd: 5a:a0:41:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xO5BFhYvVLYV49lIpBB/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMmUzMjNmMWJlMTYzYzRkN2Y4Yjg4YWFkOGRhYWZiZTAx MDZkNmYwHhcNMjUxMjE5MDQwMTE5WhcNMjUxMjIwMDQwMTE5WjAzMTEwLwYDVQQD Eyg1YjBlMzkwNTZkMWU5ZjMwYjIzNjgxN2FjYzQ1MGI4OTYwMTYyY2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE1vsAM+YR0tBLiHqzhdT1wKEZo3 uXwvv/+AEBU3cH7lyECcltZ6LBU2kQqdK1Z7zbJGFTkJLotZaTsJlY6BJZwaLmMw ocEVybZ2B9DP2VAT9vLzfpNSkeee9B9+9cRU9+AEuhCeQggonn20CHSvBLKdW/rC hp2YAJqzlzRspdY4SRhKEXRIIW9coLlutNDd2R4LC7Z2EVGN6DupkcHWoasBgSES 3Zai+NVx8+B71opbL2wsK5xN/VCyev0FUZ/PCCzXhxGrKM5Aqgk0KVk5b7IvFTj8 QjIbtm/bTUkkJWqQts9YELHuv20WregYaHoTuIIeb9scP5Gf4jUIELulCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsOOQVtHp8wsjaBesxFC4lgFiyvMB8GA1UdIwQY MBaAFMAuMj8b4WPE1/i4iq2NqvvgEG1vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0M0eVB4dmhZOFRYLUxpS3JZMnEtLUFRYlc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hYWVkNmItMTQzNC00N2M2LWE3NGQt MWRmMWVjY2RkYzg3LzEvd0M0eVB4dmhZOFRYLUxpS3JZMnEtLUFRYlc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9hYWVkNmItMTQzNC00N2M2LWE3NGQtMWRmMWVjY2RkYzg3 LzEvd0M0eVB4dmhZOFRYLUxpS3JZMnEtLUFRYlc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXoKqQs6y OUfKfXI0Z58sVc7Qjh97jElrwFD4RNQff8PMP3kaSGV1du4GvpVRg9/w0TncszTm cD7fS2PHAG9ZGd6rxO81LIuXgpZaBhlFIEAe/5mOXvJk28PTbOYakzAZmJtgGfsb Q0tSrtWvwBXW5QSegMWcrRoTjy/ezHDaECarnDRWx6GDE2KkLKWBd4pPaGImmz/R fcLnOzhLSe+msQoZ452ryiozf295R47dRDB8Ul2Q8p6/Cp77RsGawHSZPZBLa5OC zeqRzoQYUvRJ+fMDaTrxIQrwbiQULeDn5B6Lxayf9Lgiqx00VFSu1MYwY20GRrK4 KD+QAvLdWqBBCA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:22:36 2025 by rpki-client