This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft File: wSrJsU_SYajSdjqtQXQyvrxJoNY.mft (raw, json) Hash identifier: NT9aqxj8zuHNZCJ9kSw+pAd6o0U8T/J70qhaP3KuEoI= Subject key identifier: 44:32:19:F8:19:37:67:81:B2:13:30:C9:DC:BA:F1:AA:EF:7D:EF:E5 Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Certificate serial: 019B3CB4B19A47E30729F2F3C0B73E54F5B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft Manifest number: 14B2 Signing time: Sat 20 Dec 2025 17:00:33 +0000 Manifest this update: Sat 20 Dec 2025 17:00:33 +0000 Manifest next update: Sun 21 Dec 2025 17:00:33 +0000 Files and hashes: 1: 9qmcHM-VcZ83QpuDDXRDTZzjRPA.roa (hash: T9bQyp4qC173zpUrvp23zRV6IJ2BWrYnmOmyqxCjQto=) 2: L5uizbtROk6GB-R7fgrPSdF9458.roa (hash: TQEmzD8dtp5XF7xVELdssPYaS3183qisGdaHaztP3Ns=) 3: PF3fO-eTWo6-cPGvdPVhKKttSws.roa (hash: f6FdvkS18ddS/HJEFfzmPq90ce/EiZOtTBozEQTvOIE=) 4: PmQwjeWPX1uc6kgeCDNacsuKkvM.roa (hash: a5MkN/N9VDjUV72wDiMVAY0/sIKzPUhqOt4JzBP4rPc=) 5: gu1qAVxYV1JNHUi7sma3zTVhxOY.roa (hash: 35rYj48R9KZMpiK938BtDR3yOfaylU/kY6qRQtuDujg=) 6: h6hIuizM5NfGODakvbCHb0dbPy8.roa (hash: xkEHjrBFDDiSHn/sjBQGlKLjsMLThbhwgH9fRua5IZs=) 7: lbe3R6qsC7flHOItm2HZ_rtUMYs.roa (hash: v1yUIN+YIJofBB2LuxpKb3viTsG7VddaXzM7Y68aNOE=) 8: pOAHo_xz8DPS-PlS6NdmOeIWwMQ.roa (hash: 19j4bFy6Qzt1lfA2YhipAm48g4iEQA4VOYkVWjiA/os=) 9: t662D9vApr8ZiFSjITs7a3oVIQY.roa (hash: ysoT6z2U1fG/7XYJruqmcsqEJYDDWfQicEyYt1W7TQQ=) 10: wSrJsU_SYajSdjqtQXQyvrxJoNY.crl (hash: 8aW0GlRVtoZMIV/HUu/Jfbsac03zjcHh0whI9VhCj74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:b1:9a:47:e3:07:29:f2:f3:c0:b7:3e:54:f5:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6 Validity Not Before: Dec 20 17:00:33 2025 GMT Not After : Dec 21 17:00:33 2025 GMT Subject: CN=443219f819376781b21330c9dcbaf1aaef7defe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:67:11:f1:38:0b:c5:d7:fb:f6:35:e9:7a:92: 39:ed:b6:06:fe:f7:35:42:84:13:74:97:be:bc:11: 30:26:7a:f4:4a:9f:d6:93:84:7b:81:7c:56:bc:3c: 8c:15:00:7c:38:9c:e3:bb:30:36:df:56:61:a2:e2: f9:95:cd:e7:4a:8b:71:e6:08:43:32:ce:85:ff:06: 85:cc:65:e8:fb:ea:c8:49:8c:c9:2d:a8:73:b6:15: f2:34:fb:a6:5e:86:b2:08:52:a8:a6:a7:e6:cf:f4: 8a:85:ce:42:d0:72:19:7e:ea:d7:7c:fb:5a:d0:68: 7f:21:32:7e:d9:55:d2:ab:7d:72:87:0a:af:63:45: 77:93:76:8b:b4:62:6c:8d:da:94:22:95:d5:a8:3e: 86:9f:ce:20:b8:9d:f5:53:bb:78:15:df:6c:f1:c6: 08:1d:27:fd:8d:a8:e7:b7:68:31:34:4b:72:ad:20: 31:98:bf:a3:1c:75:fe:44:2f:aa:d9:d7:ff:bb:75: 89:fe:8f:42:05:61:b7:fa:16:ac:ee:2f:46:00:bf: 52:8c:86:c2:39:2a:9d:99:0f:0b:bb:3d:b9:97:2c: 4a:ae:4f:51:9c:7a:a4:01:d8:de:14:b2:47:93:34: 01:8b:ae:6d:6f:73:e7:25:39:19:b7:bf:5d:8c:12: ef:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:32:19:F8:19:37:67:81:B2:13:30:C9:DC:BA:F1:AA:EF:7D:EF:E5 X509v3 Authority Key Identifier: keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:5e:bd:d5:84:81:97:0c:aa:3b:e4:4c:88:a5:f7:43:91:c9: f1:6c:21:fb:73:d3:e1:3e:c4:b5:eb:3c:44:d6:54:aa:26:10: 5d:d6:95:36:56:1e:fa:37:45:81:e8:3d:9d:35:d5:37:cc:17: 6f:41:f0:75:de:b0:67:fe:dc:c7:12:a9:bc:e0:39:ef:60:e6: a3:98:f4:16:35:10:b0:32:31:57:d2:8e:00:fc:d2:31:ba:6b: 90:02:9b:9f:01:9c:9c:cb:3c:66:76:87:02:d6:6d:e1:d9:ca: 5b:32:05:9d:8d:bd:c5:c1:4d:0d:97:8b:9f:5e:84:3c:93:a8: 5f:74:48:89:0e:e5:b9:ac:c7:49:be:c6:34:10:99:14:76:e8: b9:be:4e:2a:c9:91:f4:ce:9f:a9:11:24:2d:70:64:bc:f1:0d: 3d:2e:f7:2a:31:92:e6:da:30:8e:25:1e:94:d8:76:ad:1c:05: f8:20:01:24:38:99:bc:6a:51:8d:4d:5e:fa:f7:de:15:e6:bd: a3:2e:82:09:f9:81:8d:9b:b9:bb:af:9b:b2:ca:49:68:8a:b8: b5:ae:fa:98:9d:49:64:eb:06:4e:c0:55:18:3e:1c:8d:80:11: 8f:bb:72:4d:65:d3:9f:0c:cd:0f:6d:0b:76:7d:1f:33:91:87: 9e:a2:2d:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tLGaR+MHKfLzwLc+VPWwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmFjOWIxNGZkMjYxYThkMjc2M2FhZDQxNzQzMmJlYmM0 OWEwZDYwHhcNMjUxMjIwMTcwMDMzWhcNMjUxMjIxMTcwMDMzWjAzMTEwLwYDVQQD Eyg0NDMyMTlmODE5Mzc2NzgxYjIxMzMwYzlkY2JhZjFhYWVmN2RlZmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGcR8TgLxdf79jXpepI57bYG/vc1 QoQTdJe+vBEwJnr0Sp/Wk4R7gXxWvDyMFQB8OJzjuzA231ZhouL5lc3nSotx5ghD Ms6F/waFzGXo++rISYzJLahzthXyNPumXoayCFKopqfmz/SKhc5C0HIZfurXfPta 0Gh/ITJ+2VXSq31yhwqvY0V3k3aLtGJsjdqUIpXVqD6Gn84guJ31U7t4Fd9s8cYI HSf9jajnt2gxNEtyrSAxmL+jHHX+RC+q2df/u3WJ/o9CBWG3+has7i9GAL9SjIbC OSqdmQ8Luz25lyxKrk9RnHqkAdjeFLJHkzQBi65tb3PnJTkZt79djBLvfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQyGfgZN2eBshMwydy68arvfe/lMB8GA1UdIwQY MBaAFMEqybFP0mGo0nY6rUF0Mr68SaDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYt MjE2N2NmMDFjZjRhLzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MDExZGQtYzJkOS00MzQxLTkyMzYtMjE2N2NmMDFjZjRh LzEvd1NySnNVX1NZYWpTZGpxdFFYUXl2cnhKb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1691YSB lwyqO+RMiKX3Q5HJ8Wwh+3PT4T7Etes8RNZUqiYQXdaVNlYe+jdFgeg9nTXVN8wX b0Hwdd6wZ/7cxxKpvOA572Dmo5j0FjUQsDIxV9KOAPzSMbprkAKbnwGcnMs8ZnaH AtZt4dnKWzIFnY29xcFNDZeLn16EPJOoX3RIiQ7luazHSb7GNBCZFHboub5OKsmR 9M6fqREkLXBkvPENPS73KjGS5towjiUelNh2rRwF+CABJDiZvGpRjU1e+vfeFea9 oy6CCfmBjZu5u6+bsspJaIq4ta76mJ1JZOsGTsBVGD4cjYARj7tyTWXTnwzND20L dn0fM5GHnqItLg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:24:41 2025 by rpki-client