This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft File: wQKF31sDng8E4t_s4opaj77G6Tg.mft (raw, json) Hash identifier: nvdELemosPOC3pcwbP9e1iDhrt2X7ngNo/fiNQAriPI= Subject key identifier: 1D:E8:B2:6B:F3:A8:6E:0D:D0:C3:80:6D:00:B6:03:39:54:2C:24:3D Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38 Certificate issuer: /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938 Certificate serial: 019B3B349FD0EB9619D5F17FDBFA401939BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft Manifest number: 10C5 Signing time: Sat 20 Dec 2025 10:01:03 +0000 Manifest this update: Sat 20 Dec 2025 10:01:03 +0000 Manifest next update: Sun 21 Dec 2025 10:01:03 +0000 Files and hashes: 1: 2GK7KjijxkSp5rFI9ZFtp0atb8k.roa (hash: wdEjqmgar3oUItYyi55t1/3r4eSEpgrdLi/xchL3smU=) 2: XqKPzfmuCzaXuReNqmun-bylVl0.roa (hash: fIH8TXgcjjHXQ/BvOpbDJ0pldyGYRtZMTKQJxTQ5HkU=) 3: ty37WXzEM_QABRJJkI6c7K_G8EQ.roa (hash: KUqDTpdF99zPoKmTMTv8GshjWBlrKcQSI4Ly51l4brg=) 4: wQKF31sDng8E4t_s4opaj77G6Tg.crl (hash: IXle3XMXeAwszrB9lhwLsgQPzqzdn+zjG5SwMpLJ/Ks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:9f:d0:eb:96:19:d5:f1:7f:db:fa:40:19:39:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938 Validity Not Before: Dec 20 10:01:03 2025 GMT Not After : Dec 21 10:01:03 2025 GMT Subject: CN=1de8b26bf3a86e0dd0c3806d00b60339542c243d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:50:8d:2a:2d:28:68:12:64:89:a6:ea:12:ca: c9:c8:22:d1:25:26:74:3e:dd:1a:57:1e:ed:5e:de: 24:fc:21:a2:9d:f4:39:20:b2:34:b3:32:a4:6b:ab: 83:fc:66:d6:52:3d:13:64:88:e9:d7:f9:60:c8:5b: 7e:c1:69:91:94:ac:e1:5e:77:cf:54:dc:93:5b:5e: 61:77:e5:d5:65:0e:3d:9c:b6:17:64:36:9a:58:3b: ef:43:ac:a1:5c:e7:07:be:7c:26:79:fa:8c:d5:59: 6c:66:5a:cd:ae:84:6c:f4:5d:18:c8:62:07:19:aa: b1:fb:0b:aa:2f:da:b6:b3:c5:4b:bb:24:fa:ea:64: ae:92:fe:98:d9:04:14:9c:91:cf:c2:b0:f1:ef:79: b5:f5:fe:82:72:0b:3e:b7:fc:f6:77:9d:3d:5e:bf: 8d:b4:c1:d7:73:f4:93:44:98:b2:af:86:52:a9:01: 39:a6:d9:29:35:3d:78:82:3b:7c:49:2b:a5:53:be: d6:f6:81:d2:8b:ab:86:8c:88:1f:1a:1d:74:69:00: 60:7f:d6:a8:43:4c:50:c8:7a:50:f2:db:b3:01:0e: 1a:cf:aa:28:54:d5:0b:ef:bb:6d:ad:97:94:08:66: 80:6b:ea:5e:3a:06:3b:56:a9:8b:04:2a:a2:f0:3b: 9a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E8:B2:6B:F3:A8:6E:0D:D0:C3:80:6D:00:B6:03:39:54:2C:24:3D X509v3 Authority Key Identifier: keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:21:86:99:10:fb:2c:9d:4b:21:6b:14:b7:c6:ff:79:92:81: 5a:93:8c:ed:72:1f:0e:ba:41:08:78:2a:87:30:54:3a:79:ec: 73:06:19:20:af:86:7d:f2:28:c6:fa:b0:dc:10:2e:3e:8b:35: 25:8e:6c:57:9e:c8:e3:21:b0:dd:5d:79:ad:61:9c:3c:b8:c9: c9:ef:24:d2:85:02:e4:c8:2d:fe:07:51:1a:4d:5f:3a:4a:ac: d2:0b:3f:c8:00:15:77:6e:4b:2c:60:3a:9e:72:7e:5d:b8:ef: ba:8a:1a:12:9a:68:8a:97:a3:02:71:1a:54:9d:06:ad:b1:fc: 00:1b:30:78:7b:5e:fd:08:50:f0:3e:34:bf:5d:f5:3f:e6:51: d9:7f:61:ab:2c:fd:c4:1e:97:e0:4f:e3:1e:8a:17:ed:1e:b3: 7f:3f:22:59:08:bd:7a:c0:dd:15:ac:36:f9:0d:9a:14:0a:b9: 0b:af:45:6e:69:49:7e:5a:f9:b4:85:1d:c3:16:05:0b:a7:6a: 77:b2:83:eb:56:cd:06:a7:3f:a1:28:5c:d8:f1:7b:82:3b:45: cb:d5:e5:7a:e1:72:5a:bf:5c:6b:aa:03:63:83:58:16:74:37: 9c:e6:b7:f8:b1:8e:b1:7d:9d:c4:17:d6:09:e7:09:4b:4d:18: fb:92:9e:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NJ/Q65YZ1fF/2/pAGTm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDI4NWRmNWIwMzllMGYwNGUyZGZlY2UyOGE1YThmYmVj NmU5MzgwHhcNMjUxMjIwMTAwMTAzWhcNMjUxMjIxMTAwMTAzWjAzMTEwLwYDVQQD EygxZGU4YjI2YmYzYTg2ZTBkZDBjMzgwNmQwMGI2MDMzOTU0MmMyNDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFCNKi0oaBJkiabqEsrJyCLRJSZ0 Pt0aVx7tXt4k/CGinfQ5ILI0szKka6uD/GbWUj0TZIjp1/lgyFt+wWmRlKzhXnfP VNyTW15hd+XVZQ49nLYXZDaaWDvvQ6yhXOcHvnwmefqM1VlsZlrNroRs9F0YyGIH Gaqx+wuqL9q2s8VLuyT66mSukv6Y2QQUnJHPwrDx73m19f6Ccgs+t/z2d509Xr+N tMHXc/STRJiyr4ZSqQE5ptkpNT14gjt8SSulU77W9oHSi6uGjIgfGh10aQBgf9ao Q0xQyHpQ8tuzAQ4az6ooVNUL77ttrZeUCGaAa+peOgY7VqmLBCqi8Dua5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3osmvzqG4N0MOAbQC2AzlULCQ9MB8GA1UdIwQY MBaAFMEChd9bA54PBOLf7OKKWo++xuk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FLRjMxc0RuZzhFNHRfczRvcGFqNzdHNlRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZWJkNDItMDdhMy00Y2I1LTg1MmUt NTJhZmM3N2NhMThmLzEvd1FLRjMxc0RuZzhFNHRfczRvcGFqNzdHNlRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hZWJkNDItMDdhMy00Y2I1LTg1MmUtNTJhZmM3N2NhMThm LzEvd1FLRjMxc0RuZzhFNHRfczRvcGFqNzdHNlRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyGGmRD7 LJ1LIWsUt8b/eZKBWpOM7XIfDrpBCHgqhzBUOnnscwYZIK+GffIoxvqw3BAuPos1 JY5sV57I4yGw3V15rWGcPLjJye8k0oUC5Mgt/gdRGk1fOkqs0gs/yAAVd25LLGA6 nnJ+XbjvuooaEppoipejAnEaVJ0GrbH8ABsweHte/QhQ8D40v131P+ZR2X9hqyz9 xB6X4E/jHooX7R6zfz8iWQi9esDdFaw2+Q2aFAq5C69FbmlJflr5tIUdwxYFC6dq d7KD61bNBqc/oShc2PF7gjtFy9XleuFyWr9ca6oDY4NYFnQ3nOa3+LGOsX2dxBfW CecJS00Y+5KexQ== -----END CERTIFICATE-----Generated at Sat Dec 20 15:59:26 2025 by rpki-client