This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft File: wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft (raw, json) Hash identifier: lnJtextnz/XSnvv9EF5cU0DBImsrAydhaUg1F5x2WNg= Subject key identifier: FF:CC:F7:E3:AB:03:C8:2E:2C:BE:08:8A:AC:B4:FB:9C:F6:00:08:B6 Authority key identifier: C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91 Certificate issuer: /CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091 Certificate serial: 019B6EB3C56C10F8C85F4FADA316682B427D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft Manifest number: 0E84 Signing time: Tue 30 Dec 2025 10:00:33 +0000 Manifest this update: Tue 30 Dec 2025 10:00:33 +0000 Manifest next update: Wed 31 Dec 2025 10:00:33 +0000 Files and hashes: 1: GzFkstv5wkhfRB-938uIDYh-Wxo.roa (hash: 4jcDDGU9h854aDRD3uRk10AMRg0wkYSddBT/bLLaKOg=) 2: wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl (hash: RLELms07ucH8kK86bJjZXEpLPyFSnP+SioGM47Y5LJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:b3:c5:6c:10:f8:c8:5f:4f:ad:a3:16:68:2b:42:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091 Validity Not Before: Dec 30 10:00:33 2025 GMT Not After : Dec 31 10:00:33 2025 GMT Subject: CN=ffccf7e3ab03c82e2cbe088aacb4fb9cf60008b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:66:39:be:99:6a:7d:48:15:c8:75:42:c4:d0: 88:fa:ff:b9:f5:84:08:50:83:11:e4:d4:9d:c5:d3: fb:96:49:36:da:49:a8:04:24:53:b9:30:9b:7f:2a: 66:68:09:f9:9a:ef:5b:11:dc:fe:26:b9:77:a4:86: a3:e9:fe:b6:7a:6b:06:15:d6:81:fe:15:63:c0:40: 49:0f:46:05:2e:f2:6c:fd:2e:b1:c4:18:ba:0c:d6: 76:c2:f1:10:88:f0:d9:a1:d0:ff:10:89:81:50:97: 12:0d:bf:d6:72:9c:91:9a:26:86:7e:29:69:6b:7f: 23:08:13:5f:84:6d:02:5b:f4:18:9b:18:b6:4b:8f: cc:83:18:ea:4b:de:b0:9f:ea:2a:97:87:d0:cd:00: 53:b5:a5:fa:60:f0:88:00:6e:bb:1b:28:9e:52:62: 7e:4a:62:dc:f1:65:29:5a:e8:6a:4c:3d:5c:fc:f2: 41:dc:f4:bf:10:14:b5:a9:96:41:1b:03:09:50:4e: 0e:3d:fc:2f:d3:bc:4b:a4:2d:08:46:5f:bc:ea:1d: c3:04:46:e0:0f:81:e1:ae:53:38:e3:02:dc:a2:0c: a4:94:ce:94:82:42:ad:eb:ed:3a:58:2f:fc:b9:a4: 25:85:f9:c1:8e:ba:53:64:3a:e1:43:f0:74:df:84: dc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CC:F7:E3:AB:03:C8:2E:2C:BE:08:8A:AC:B4:FB:9C:F6:00:08:B6 X509v3 Authority Key Identifier: keyid:C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:eb:75:ea:73:ae:72:c6:0f:99:d4:03:cd:ab:a4:a6:64:8b: fe:55:b7:f4:c0:f9:b3:d7:f2:c3:e2:80:30:32:2d:e6:b1:c4: 61:83:7a:09:c4:52:98:68:4c:ed:24:9b:ea:f3:ff:10:b5:8b: 55:2b:68:5d:2c:e0:3e:1d:e7:77:51:5f:36:bf:f3:f3:1a:9a: 5f:2d:95:c8:59:1c:44:2c:c2:9b:fc:0d:d9:22:f4:ea:64:d9: a6:fe:0d:7a:1b:dc:18:f3:6d:e4:47:3c:ef:2d:26:6f:f9:dc: 4b:ed:78:0b:72:a7:24:3a:4e:27:fd:e3:36:6c:6c:c4:cd:40: 6b:73:7f:9c:76:ba:74:c0:8f:65:d5:e3:48:ae:3b:d0:ec:29: 27:3d:5e:47:0d:e3:9e:db:e6:cf:f2:c6:ce:e9:36:f3:18:81: 93:c0:cc:2c:cd:ab:b6:0c:95:1c:b8:a7:0c:63:fa:11:77:ca: 41:01:be:09:38:9a:32:44:eb:99:ff:e9:77:fb:5d:df:12:28: da:d1:97:c6:ee:ae:59:91:db:a5:8f:43:42:ed:2e:7c:a1:b2: ef:3d:54:f6:3e:0b:2c:2e:d1:0c:ab:9b:1d:02:e0:6c:6d:4f: 31:3a:77:31:3c:2d:ec:b2:ae:5b:c0:19:53:f5:ab:09:c3:61: a1:13:ab:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtus8VsEPjIX0+toxZoK0J9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMWJiNDRlZGUyYWZlMGJmYTlkNzhiYTI5MzI0OTU1Zjdm YzYwOTEwHhcNMjUxMjMwMTAwMDMzWhcNMjUxMjMxMTAwMDMzWjAzMTEwLwYDVQQD EyhmZmNjZjdlM2FiMDNjODJlMmNiZTA4OGFhY2I0ZmI5Y2Y2MDAwOGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGY5vplqfUgVyHVCxNCI+v+59YQI UIMR5NSdxdP7lkk22kmoBCRTuTCbfypmaAn5mu9bEdz+Jrl3pIaj6f62emsGFdaB /hVjwEBJD0YFLvJs/S6xxBi6DNZ2wvEQiPDZodD/EImBUJcSDb/WcpyRmiaGfilp a38jCBNfhG0CW/QYmxi2S4/MgxjqS96wn+oql4fQzQBTtaX6YPCIAG67GyieUmJ+ SmLc8WUpWuhqTD1c/PJB3PS/EBS1qZZBGwMJUE4OPfwv07xLpC0IRl+86h3DBEbg D4HhrlM44wLcogyklM6UgkKt6+06WC/8uaQlhfnBjrpTZDrhQ/B034TceQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/M9+OrA8guLL4Iiqy0+5z2AAi2MB8GA1UdIwQY MBaAFMMbtE7eKv4L+p14uikySVX3/GCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3h1MFR0NHFfZ3Y2blhpNktUSkpWZmY4WUpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS83MDNmMDAtN2YzOS00ZDk1LThjNTgt NGJiYjgzOGEyNzc5LzEvd3h1MFR0NHFfZ3Y2blhpNktUSkpWZmY4WUpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS83MDNmMDAtN2YzOS00ZDk1LThjNTgtNGJiYjgzOGEyNzc5 LzEvd3h1MFR0NHFfZ3Y2blhpNktUSkpWZmY4WUpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVet16nOu csYPmdQDzaukpmSL/lW39MD5s9fyw+KAMDIt5rHEYYN6CcRSmGhM7SSb6vP/ELWL VStoXSzgPh3nd1FfNr/z8xqaXy2VyFkcRCzCm/wN2SL06mTZpv4NehvcGPNt5Ec8 7y0mb/ncS+14C3KnJDpOJ/3jNmxsxM1Aa3N/nHa6dMCPZdXjSK470OwpJz1eRw3j ntvmz/LGzuk28xiBk8DMLM2rtgyVHLinDGP6EXfKQQG+CTiaMkTrmf/pd/td3xIo 2tGXxu6uWZHbpY9DQu0ufKGy7z1U9j4LLC7RDKubHQLgbG1PMTp3MTwt7LKuW8AZ U/WrCcNhoROrYg== -----END CERTIFICATE-----Generated at Tue Dec 30 15:01:03 2025 by rpki-client