This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft File: wLjiV5ep3EPC5GOUsMixsQirQ7k.mft (raw, json) Hash identifier: HR9DIjV8HH5Nh/g2yiedyYfnishRBjOAZ6etNIIbgKo= Subject key identifier: 05:91:89:CB:EE:00:40:AB:C7:BF:E6:DE:92:85:67:07:43:41:C6:C9 Authority key identifier: C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9 Certificate issuer: /CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9 Certificate serial: 019B3C7EF1FDCAC7A8FD39D33B3D9E1C9EB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft Manifest number: 0618 Signing time: Sat 20 Dec 2025 16:01:50 +0000 Manifest this update: Sat 20 Dec 2025 16:01:50 +0000 Manifest next update: Sun 21 Dec 2025 16:01:50 +0000 Files and hashes: 1: 3oLf6nYLu-Xr7qpLQICeS2w7Tus.roa (hash: XtsupCW4EVcqvMqJHKb5yPLyEGcRcTQPpgXjTIHJ3Z4=) 2: wLjiV5ep3EPC5GOUsMixsQirQ7k.crl (hash: y1YEnxlgoTQGivh1HOwgSRI+RDRjsfujbeEYWBiSUbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:f1:fd:ca:c7:a8:fd:39:d3:3b:3d:9e:1c:9e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9 Validity Not Before: Dec 20 16:01:50 2025 GMT Not After : Dec 21 16:01:50 2025 GMT Subject: CN=059189cbee0040abc7bfe6de928567074341c6c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:92:95:76:4a:42:ce:ab:a2:0f:8d:0f:f8:36: 31:fc:21:7c:74:26:78:20:87:d5:ad:2a:64:de:c8: 7d:18:9f:c1:ce:c3:e5:90:c9:9a:1b:87:05:35:73: 42:33:9e:ed:07:2d:0d:bb:48:0d:5f:27:45:50:bb: 3a:f4:ed:30:b3:1a:5a:47:e1:04:b7:6f:42:cb:f3: 95:64:e1:47:f7:e9:52:ad:b0:7e:00:71:1f:6a:c6: 98:7f:e0:41:8c:cf:99:84:62:46:08:e1:50:96:df: f7:2c:f3:72:1b:77:1d:fa:85:6a:a1:9c:be:38:43: 71:66:6b:ad:1c:fd:e2:40:b5:8d:51:81:c9:b9:ce: 1c:12:b3:68:dc:c6:a8:19:26:7f:dc:25:08:59:bb: e6:12:48:5f:f9:9f:28:7d:0f:f4:78:66:6f:85:a5: 17:05:01:04:68:d2:aa:98:b5:34:5e:41:6c:8c:73: b0:c0:29:68:80:dc:52:7d:22:c0:45:f1:60:8b:ac: 54:57:cc:18:4f:09:63:26:f3:58:c5:0c:ae:d2:46: 8f:30:56:e3:b7:2e:e8:89:2a:ce:e1:8f:f3:e8:10: 22:fb:74:3c:44:dd:c5:9d:3a:67:a4:d1:88:07:e7: 9c:bd:3a:08:5a:98:11:1e:0c:09:c6:af:0b:57:aa: d4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:91:89:CB:EE:00:40:AB:C7:BF:E6:DE:92:85:67:07:43:41:C6:C9 X509v3 Authority Key Identifier: keyid:C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e8:19:9a:e0:fd:88:72:d9:12:26:eb:62:f2:5a:50:e0:04: 7e:6f:12:f2:8e:76:e4:50:76:9f:e8:ea:7b:b7:b0:c2:d0:51: 2a:84:93:92:9e:d0:54:f1:19:50:27:6f:c6:9c:06:44:bb:88: 20:ca:12:4a:d7:d0:58:33:58:e7:ca:4b:a4:b1:25:99:b8:2d: 13:18:04:94:cc:9f:34:d0:9c:67:cb:32:7d:1e:ee:3a:06:10: 1e:60:4f:7d:c8:c5:cb:7c:b5:17:a9:14:12:81:b6:24:a7:8b: 7e:dc:4e:b7:d6:fd:43:06:a0:7d:75:19:73:22:04:3f:e7:c0: 81:81:c4:f1:c6:ff:26:7e:4b:94:ab:d5:32:8c:66:52:42:88: 1c:ab:19:97:45:5c:ce:1c:91:f4:a7:bb:a6:43:ac:88:1a:8c: 6d:39:09:23:af:7c:b8:f7:72:f4:34:1c:20:cb:22:a8:8a:ae: fe:07:6e:00:41:ec:0f:3f:2b:a1:8f:a1:45:5a:0b:64:59:de: 9a:24:91:e8:63:19:51:12:9e:ac:70:f0:2a:67:45:87:09:00: fd:e5:18:5d:d9:bb:27:94:1f:e7:98:e6:9c:bb:64:2f:7d:5c: ee:21:6d:ef:4a:d0:8b:0f:b4:cc:2c:67:d1:ab:81:4c:b3:ba: df:ce:b4:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fvH9yseo/TnTOz2eHJ65MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYjhlMjU3OTdhOWRjNDNjMmU0NjM5NGIwYzhiMWIxMDhh YjQzYjkwHhcNMjUxMjIwMTYwMTUwWhcNMjUxMjIxMTYwMTUwWjAzMTEwLwYDVQQD EygwNTkxODljYmVlMDA0MGFiYzdiZmU2ZGU5Mjg1NjcwNzQzNDFjNmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJKVdkpCzquiD40P+DYx/CF8dCZ4 IIfVrSpk3sh9GJ/BzsPlkMmaG4cFNXNCM57tBy0Nu0gNXydFULs69O0wsxpaR+EE t29Cy/OVZOFH9+lSrbB+AHEfasaYf+BBjM+ZhGJGCOFQlt/3LPNyG3cd+oVqoZy+ OENxZmutHP3iQLWNUYHJuc4cErNo3MaoGSZ/3CUIWbvmEkhf+Z8ofQ/0eGZvhaUX BQEEaNKqmLU0XkFsjHOwwClogNxSfSLARfFgi6xUV8wYTwljJvNYxQyu0kaPMFbj ty7oiSrO4Y/z6BAi+3Q8RN3FnTpnpNGIB+ecvToIWpgRHgwJxq8LV6rUIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWRicvuAECrx7/m3pKFZwdDQcbJMB8GA1UdIwQY MBaAFMC44leXqdxDwuRjlLDIsbEIq0O5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0xqaVY1ZXAzRVBDNUdPVXNNaXhzUWlyUTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xZGUyMTMtZjM1Mi00M2E0LWI4OGIt NTNlYWNkODk2M2ExLzEvd0xqaVY1ZXAzRVBDNUdPVXNNaXhzUWlyUTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8xZGUyMTMtZjM1Mi00M2E0LWI4OGItNTNlYWNkODk2M2Ex LzEvd0xqaVY1ZXAzRVBDNUdPVXNNaXhzUWlyUTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOgZmuD9 iHLZEibrYvJaUOAEfm8S8o525FB2n+jqe7ewwtBRKoSTkp7QVPEZUCdvxpwGRLuI IMoSStfQWDNY58pLpLElmbgtExgElMyfNNCcZ8syfR7uOgYQHmBPfcjFy3y1F6kU EoG2JKeLftxOt9b9QwagfXUZcyIEP+fAgYHE8cb/Jn5LlKvVMoxmUkKIHKsZl0Vc zhyR9Ke7pkOsiBqMbTkJI698uPdy9DQcIMsiqIqu/gduAEHsDz8roY+hRVoLZFne miSR6GMZURKerHDwKmdFhwkA/eUYXdm7J5Qf55jmnLtkL31c7iFt70rQiw+0zCxn 0auBTLO63860cg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:42:49 2025 by rpki-client