This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json) Hash identifier: vNFkwzCBL9LJzSvn+/K35ZrHeE6i2V8fzqdrSyZMR20= Subject key identifier: CD:2A:70:50:64:06:C6:8A:3E:EC:04:35:2E:A1:2C:AD:33:FA:6D:C3 Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88 Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288 Certificate serial: 019B27E472A4ADDDC8DF352A846C97CDB7BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft Manifest number: 054F Signing time: Tue 16 Dec 2025 16:00:41 +0000 Manifest this update: Tue 16 Dec 2025 16:00:41 +0000 Manifest next update: Wed 17 Dec 2025 16:00:41 +0000 Files and hashes: 1: 84jYv05HnlXjbNLOmoRHkF8n8LQ.roa (hash: /X9ewNFlsp/9ZFMAjrGm5l3SwfH8c42hlaaVDkUgEww=) 2: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: 7vSOnwesIXMJQyc4/xvEXaDJcAi1a3ryOiUV7c7GmOo=) 3: y8uNxN4Qz-KJWpwgdJjEk856rFg.roa (hash: gCH8Gmi7LtX/qDiok3OTFvIkgdYcX5Le/2ybuhXBvN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:e4:72:a4:ad:dd:c8:df:35:2a:84:6c:97:cd:b7:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288 Validity Not Before: Dec 16 16:00:41 2025 GMT Not After : Dec 17 16:00:41 2025 GMT Subject: CN=cd2a70506406c68a3eec04352ea12cad33fa6dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0d:91:43:e4:16:06:bc:5f:93:1b:64:12:40: a9:03:8c:cf:0d:69:01:11:f0:74:34:ef:d3:99:dc: 58:aa:b2:95:f0:bc:77:0a:42:e8:22:12:b8:1b:10: 8a:ca:4c:e9:d5:32:aa:77:79:71:10:3c:9e:19:51: 4e:1f:e0:b6:ed:41:0d:c1:d0:0d:05:e6:8e:c7:d9: 92:ec:1a:e2:6d:8d:11:5b:7c:46:99:c5:2d:26:c8: 4e:7b:39:94:eb:85:fa:72:86:f0:be:d4:93:65:4c: aa:66:3e:b7:28:28:b2:f1:bd:89:06:f7:94:65:d3: 76:de:48:ef:60:c1:d3:ed:20:dd:bb:84:f7:96:e9: 18:6e:7b:44:49:4b:72:6a:9b:52:86:c6:22:c7:b0: 48:2d:12:26:9a:09:b4:ce:05:5c:d3:95:c6:9b:f0: f8:c0:23:6d:79:0a:c6:be:f9:31:fa:4f:f9:b4:77: d5:a0:dc:14:ca:28:0a:7d:68:4d:77:84:4a:44:61: 66:3f:e7:f4:86:ea:f2:da:12:33:fe:d5:1e:e9:5d: 14:33:77:41:b7:54:bb:96:66:48:26:8c:b3:54:33: 55:01:0e:e6:0b:9c:bb:a3:dc:a9:12:b9:16:27:3e: f1:d3:8b:54:8e:02:4e:88:65:4e:47:7c:91:e7:76: 4e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2A:70:50:64:06:C6:8A:3E:EC:04:35:2E:A1:2C:AD:33:FA:6D:C3 X509v3 Authority Key Identifier: keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:4b:9c:c2:d0:b8:5d:c8:43:05:50:48:07:3e:69:b9:e1:73: ec:58:9a:ec:51:cc:49:3c:ac:cc:6d:13:94:59:d0:2b:45:e8: 8a:4e:0f:4c:f5:3e:bd:7f:66:92:6e:21:1b:20:b2:94:62:11: c6:4c:97:ea:df:7d:98:d6:a4:ab:7c:e8:49:34:fe:04:b1:fe: bf:5b:a9:7a:f7:c5:65:ed:48:19:70:bc:5a:02:bc:3f:9a:39: 72:54:e1:9e:76:ec:ff:36:b9:4f:0e:c4:2d:7d:11:59:d7:89: 67:d3:03:85:93:32:d9:bd:72:a5:69:42:87:61:d5:60:42:fe: fd:4f:e6:19:30:25:68:e8:f2:bb:8d:57:f2:4d:7d:55:18:a8: 1b:15:3d:74:aa:67:26:54:df:da:50:21:79:4d:1d:36:d3:62: 82:b6:06:5e:da:23:c8:86:da:31:40:ae:b0:8e:67:aa:3f:11: 31:7e:b2:f7:39:e1:92:06:9f:9c:d3:67:51:7d:f7:7b:6f:55: 8d:71:25:ac:ae:63:10:b7:d4:5d:ac:94:68:e8:2c:61:f2:fa: f3:d0:d5:8e:25:86:c5:39:5c:e7:4c:be:c7:54:5b:69:39:89: 65:1a:09:ce:d1:25:ea:51:23:cd:d3:3f:72:33:3d:83:6e:52: fa:f1:6b:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsn5HKkrd3I3zUqhGyXzbe/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMjMyYWUzOGE5MjMzYWI3ZmMxYjQyOWE1MDI5MjIwYWZh N2IyODgwHhcNMjUxMjE2MTYwMDQxWhcNMjUxMjE3MTYwMDQxWjAzMTEwLwYDVQQD EyhjZDJhNzA1MDY0MDZjNjhhM2VlYzA0MzUyZWExMmNhZDMzZmE2ZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g2RQ+QWBrxfkxtkEkCpA4zPDWkB EfB0NO/TmdxYqrKV8Lx3CkLoIhK4GxCKykzp1TKqd3lxEDyeGVFOH+C27UENwdAN BeaOx9mS7BribY0RW3xGmcUtJshOezmU64X6cobwvtSTZUyqZj63KCiy8b2JBveU ZdN23kjvYMHT7SDdu4T3lukYbntESUtyaptShsYix7BILRImmgm0zgVc05XGm/D4 wCNteQrGvvkx+k/5tHfVoNwUyigKfWhNd4RKRGFmP+f0hury2hIz/tUe6V0UM3dB t1S7lmZIJoyzVDNVAQ7mC5y7o9ypErkWJz7x04tUjgJOiGVOR3yR53ZO5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0qcFBkBsaKPuwENS6hLK0z+m3DMB8GA1UdIwQY MBaAFFojKuOKkjOrf8G0KaUCkiCvp7KIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82YWVmOWUtZmU0ZC00M2U3LWExY2It MTBhNDg1YzBiMGYyLzEvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS82YWVmOWUtZmU0ZC00M2U3LWExY2ItMTBhNDg1YzBiMGYy LzEvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEucwtC4 XchDBVBIBz5pueFz7Fia7FHMSTyszG0TlFnQK0Xoik4PTPU+vX9mkm4hGyCylGIR xkyX6t99mNakq3zoSTT+BLH+v1upevfFZe1IGXC8WgK8P5o5clThnnbs/za5Tw7E LX0RWdeJZ9MDhZMy2b1ypWlCh2HVYEL+/U/mGTAlaOjyu41X8k19VRioGxU9dKpn JlTf2lAheU0dNtNigrYGXtojyIbaMUCusI5nqj8RMX6y9znhkgafnNNnUX33e29V jXElrK5jELfUXayUaOgsYfL689DVjiWGxTlc50y+x1RbaTmJZRoJztEl6lEjzdM/ cjM9g25S+vFrfg== -----END CERTIFICATE-----Generated at Tue Dec 16 22:36:20 2025 by rpki-client