This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft File: wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft (raw, json) Hash identifier: zRN0XyT6em4n/Z6GEW/IueU96XOODIwa7h1poHAVhKE= Subject key identifier: 14:03:9C:A6:98:45:AA:93:B2:5A:46:4F:FA:BA:90:FE:FF:EF:49:E1 Authority key identifier: C0:F8:DB:B2:14:A6:14:9F:3D:4D:42:A0:C4:13:2D:57:25:99:27:52 Certificate issuer: /CN=c0f8dbb214a6149f3d4d42a0c4132d5725992752 Certificate serial: 019B318CF4423F240A1671C69A6E8BF5FC50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft Manifest number: 0265 Signing time: Thu 18 Dec 2025 13:01:19 +0000 Manifest this update: Thu 18 Dec 2025 13:01:19 +0000 Manifest next update: Fri 19 Dec 2025 13:01:19 +0000 Files and hashes: 1: 2qyhqFKpARK1F2ET6I7_YKaOPc0.roa (hash: qGM3ZFQucsF8/9E/V05Xc9DkgTgt/0zHmMZ5RCHxskE=) 2: wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl (hash: 7GL8vOxJ6HP07PlY2v1DSjVsiLJ1qoFJp0fMe8zO0fI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:f4:42:3f:24:0a:16:71:c6:9a:6e:8b:f5:fc:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0f8dbb214a6149f3d4d42a0c4132d5725992752 Validity Not Before: Dec 18 13:01:19 2025 GMT Not After : Dec 19 13:01:19 2025 GMT Subject: CN=14039ca69845aa93b25a464ffaba90feffef49e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2f:33:fc:78:95:fa:b4:b1:43:1c:f1:a3:31: b6:91:c1:72:fe:f4:55:18:49:95:6d:97:69:ae:92: 1c:24:80:b0:53:89:de:c7:8d:97:8d:a6:a7:03:b3: 52:28:77:a8:91:9d:08:15:f9:9d:8f:59:50:a6:cc: f0:61:66:39:a3:2c:21:71:ef:5b:0e:53:d6:8e:6f: c0:dc:cb:28:26:6d:42:53:52:73:b1:c3:c5:fe:15: 11:c9:99:08:db:f0:97:c9:4c:af:09:0e:c9:89:4d: 8e:02:20:c6:6d:83:95:ef:a9:30:8b:4c:1f:ee:95: b9:6c:b2:64:c8:34:8d:c5:0e:66:49:b3:69:1c:da: b5:ce:1e:ab:51:7d:92:ae:38:2b:8a:53:a3:5d:14: 9e:71:5a:92:da:54:2e:1e:fb:fb:5a:de:56:10:e0: ff:a7:c5:0e:ba:e6:66:c9:c1:a0:1f:96:c2:7b:f8: a3:40:dc:48:82:af:c9:87:67:76:0c:a9:09:d8:69: a5:fa:a3:6b:90:28:d2:c8:c6:c7:25:87:b8:43:7d: ca:7a:84:8f:4d:b8:12:4a:25:b7:50:09:7a:04:f0: 56:d6:d9:50:fa:13:8b:86:6c:0f:e9:e1:43:a2:f3: 5b:c8:69:11:28:c7:d6:ae:de:44:65:75:c6:54:5c: 7a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:03:9C:A6:98:45:AA:93:B2:5A:46:4F:FA:BA:90:FE:FF:EF:49:E1 X509v3 Authority Key Identifier: keyid:C0:F8:DB:B2:14:A6:14:9F:3D:4D:42:A0:C4:13:2D:57:25:99:27:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:c5:65:00:c5:e5:5b:79:e2:e8:07:75:ab:be:7a:08:de:ef: 62:7c:12:ba:72:05:ee:c4:c7:e5:91:d4:cb:0a:aa:65:ed:b6: 85:d8:33:11:db:32:73:fa:8d:c5:e4:ec:c2:ed:15:28:41:51: 19:93:92:0a:31:18:f8:b8:de:c7:1c:87:86:38:eb:ef:f1:ea: 73:82:ba:39:4e:32:38:08:5b:1a:b7:34:62:21:35:bd:ce:8c: 91:3c:92:26:3f:ba:41:e3:19:56:ac:b3:f7:5c:6a:db:9e:5a: 54:a9:30:a7:7e:f0:e4:a9:5e:0e:32:c1:04:ad:0d:42:c3:08: 12:85:3d:72:8c:ae:ad:45:cd:12:c1:65:83:c6:5e:17:f5:0e: 18:bf:48:c7:ce:f6:c6:54:1e:40:00:a6:1e:b2:03:1f:ea:8f: 2f:cc:d2:05:37:88:b8:7d:c2:88:c7:2b:88:da:73:f2:53:1e: 7b:5a:aa:89:13:a2:02:0b:78:82:6d:23:7e:59:03:00:df:28: 02:9f:29:86:5d:05:08:a1:aa:9f:f1:7a:cb:17:7b:6f:b4:fe: 54:72:ab:c9:fd:fe:48:c6:f2:7f:9c:94:ff:a1:82:43:a0:d2: 12:64:5d:54:e1:a7:d1:bc:26:51:81:47:43:53:29:3b:c3:df: 32:c7:ec:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjPRCPyQKFnHGmm6L9fxQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZjhkYmIyMTRhNjE0OWYzZDRkNDJhMGM0MTMyZDU3MjU5 OTI3NTIwHhcNMjUxMjE4MTMwMTE5WhcNMjUxMjE5MTMwMTE5WjAzMTEwLwYDVQQD EygxNDAzOWNhNjk4NDVhYTkzYjI1YTQ2NGZmYWJhOTBmZWZmZWY0OWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC8z/HiV+rSxQxzxozG2kcFy/vRV GEmVbZdprpIcJICwU4nex42XjaanA7NSKHeokZ0IFfmdj1lQpszwYWY5oywhce9b DlPWjm/A3MsoJm1CU1JzscPF/hURyZkI2/CXyUyvCQ7JiU2OAiDGbYOV76kwi0wf 7pW5bLJkyDSNxQ5mSbNpHNq1zh6rUX2SrjgrilOjXRSecVqS2lQuHvv7Wt5WEOD/ p8UOuuZmycGgH5bCe/ijQNxIgq/Jh2d2DKkJ2Gml+qNrkCjSyMbHJYe4Q33KeoSP TbgSSiW3UAl6BPBW1tlQ+hOLhmwP6eFDovNbyGkRKMfWrt5EZXXGVFx6sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQDnKaYRaqTslpGT/q6kP7/70nhMB8GA1UdIwQY MBaAFMD427IUphSfPU1CoMQTLVclmSdSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1BqYnNoU21GSjg5VFVLZ3hCTXRWeVdaSjFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wNzQ5YzAtZGVjMy00ZjAxLTliZDct MzQ0OGE4ODljZTc1LzEvd1BqYnNoU21GSjg5VFVLZ3hCTXRWeVdaSjFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8wNzQ5YzAtZGVjMy00ZjAxLTliZDctMzQ0OGE4ODljZTc1 LzEvd1BqYnNoU21GSjg5VFVLZ3hCTXRWeVdaSjFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsVlAMXl W3ni6Ad1q756CN7vYnwSunIF7sTH5ZHUywqqZe22hdgzEdsyc/qNxeTswu0VKEFR GZOSCjEY+LjexxyHhjjr7/Hqc4K6OU4yOAhbGrc0YiE1vc6MkTySJj+6QeMZVqyz 91xq255aVKkwp37w5KleDjLBBK0NQsMIEoU9coyurUXNEsFlg8ZeF/UOGL9Ix872 xlQeQACmHrIDH+qPL8zSBTeIuH3CiMcriNpz8lMee1qqiROiAgt4gm0jflkDAN8o Ap8phl0FCKGqn/F6yxd7b7T+VHKryf3+SMbyf5yU/6GCQ6DSEmRdVOGn0bwmUYFH Q1MpO8PfMsfsUw== -----END CERTIFICATE-----Generated at Thu Dec 18 21:07:58 2025 by rpki-client