This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft File: wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft (raw, json) Hash identifier: xO5pdFLTgpxqgIQSPfDZypaFNjtpJkccCAG3enTEvrI= Subject key identifier: C6:0A:78:67:F1:E0:B3:8E:8D:1C:02:BF:A2:70:32:4A:1B:2A:B0:13 Authority key identifier: C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE Certificate issuer: /CN=c13b90faac5efcf93195619da16f3a47effe99fe Certificate serial: 019B6D3345AE332945E4E4467991B28EFB14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft Manifest number: 17A0 Signing time: Tue 30 Dec 2025 03:00:35 +0000 Manifest this update: Tue 30 Dec 2025 03:00:35 +0000 Manifest next update: Wed 31 Dec 2025 03:00:35 +0000 Files and hashes: 1: iyuy2kmWqZNHXuAfcuh0lwdEN5U.roa (hash: 80r40j4f0TX0nXOpgOJuceIx9IUXe6MHRj3CO+H5lVg=) 2: wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl (hash: akXvDMPmqvcIpQIzmL60ck8erh0s60I0a7L+eZ29Ccc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:45:ae:33:29:45:e4:e4:46:79:91:b2:8e:fb:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c13b90faac5efcf93195619da16f3a47effe99fe Validity Not Before: Dec 30 03:00:35 2025 GMT Not After : Dec 31 03:00:35 2025 GMT Subject: CN=c60a7867f1e0b38e8d1c02bfa270324a1b2ab013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f5:34:0f:20:35:7a:ce:09:ab:12:1b:12:ff: 5e:ab:28:68:0c:be:18:92:1f:92:d6:97:1f:e7:22: 14:db:38:69:cc:7f:0d:8e:06:85:f5:17:ee:ca:b9: d6:48:fe:1e:59:72:d8:a2:1e:f1:b5:24:eb:2b:63: d3:50:fb:cb:c1:6a:20:8e:94:f1:66:ed:55:b3:63: ad:82:39:d2:24:82:a2:36:a5:af:d0:e4:26:27:28: 9b:ed:fe:10:94:94:c3:51:b2:14:31:7d:8d:b8:a8: a7:1c:e2:64:12:60:e8:11:0f:be:1f:20:94:5c:e9: fb:74:32:cf:2f:33:86:63:53:35:11:dc:fc:ef:66: 56:6d:49:2a:7b:a4:97:ca:04:73:d1:c8:c2:6e:47: 41:1b:9f:fd:52:40:a9:01:22:b9:6e:4b:07:2a:6d: de:af:7d:60:fc:1d:8d:8d:3a:b2:26:9f:f7:cd:10: 01:c6:ce:a1:b4:74:92:88:02:e7:8f:22:d5:76:89: 08:e4:bc:be:4a:6f:a1:2b:42:75:8a:ae:1e:93:ee: 44:4d:80:0e:93:01:0d:b7:95:e0:f5:45:70:af:39: 02:ac:92:dd:45:81:99:ec:a7:a5:70:c9:8b:f6:dc: d7:2b:57:8c:3f:78:4c:29:62:cf:8b:1c:2a:cb:69: d9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0A:78:67:F1:E0:B3:8E:8D:1C:02:BF:A2:70:32:4A:1B:2A:B0:13 X509v3 Authority Key Identifier: keyid:C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:28:4c:bf:bc:ba:df:67:9b:ac:4b:ed:bf:ef:ac:fa:e5:90: 55:d6:78:7a:15:01:cd:11:28:12:b4:1b:76:af:fc:32:70:c8: 2a:ec:e1:3f:e5:ae:47:84:08:d3:9b:ee:dd:d2:1a:6c:6f:42: ef:95:9a:5e:3d:41:ed:c5:e7:0c:e3:17:0b:02:a9:78:4a:cc: 79:3a:e3:77:93:4c:49:22:99:53:61:8f:20:f5:e0:3f:13:6b: 80:16:de:d0:5f:d5:fe:57:08:08:21:c9:0c:ac:bd:76:ac:c5: 40:56:b0:d7:92:2b:75:2a:90:91:0e:f3:27:c9:e3:a9:c2:88: 6a:a0:4d:ae:bf:92:d7:be:b8:1b:79:9e:1f:1a:a9:ca:19:7e: 49:8c:77:06:04:cc:3a:73:3a:af:61:9d:24:d3:7e:df:bb:2e: 9c:24:fb:15:a9:f4:ff:ef:40:ec:4f:2a:49:23:f3:6c:1f:47: 97:e7:b1:9e:2a:14:2c:04:85:4f:f3:56:cf:c6:fd:26:36:a5: 6e:ae:ac:6e:2a:c5:6c:33:47:86:6a:75:b9:a8:65:26:e2:bd: 63:59:0c:6b:9a:86:f1:9e:85:49:10:78:32:f4:28:a5:08:f8: ff:67:af:34:73:76:a5:3a:26:d6:2b:77:13:88:fa:79:2d:cf: ea:aa:f5:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttM0WuMylF5ORGeZGyjvsUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxM2I5MGZhYWM1ZWZjZjkzMTk1NjE5ZGExNmYzYTQ3ZWZm ZTk5ZmUwHhcNMjUxMjMwMDMwMDM1WhcNMjUxMjMxMDMwMDM1WjAzMTEwLwYDVQQD EyhjNjBhNzg2N2YxZTBiMzhlOGQxYzAyYmZhMjcwMzI0YTFiMmFiMDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvU0DyA1es4JqxIbEv9eqyhoDL4Y kh+S1pcf5yIU2zhpzH8NjgaF9RfuyrnWSP4eWXLYoh7xtSTrK2PTUPvLwWogjpTx Zu1Vs2OtgjnSJIKiNqWv0OQmJyib7f4QlJTDUbIUMX2NuKinHOJkEmDoEQ++HyCU XOn7dDLPLzOGY1M1Edz872ZWbUkqe6SXygRz0cjCbkdBG5/9UkCpASK5bksHKm3e r31g/B2NjTqyJp/3zRABxs6htHSSiALnjyLVdokI5Ly+Sm+hK0J1iq4ek+5ETYAO kwENt5Xg9UVwrzkCrJLdRYGZ7KelcMmL9tzXK1eMP3hMKWLPixwqy2nZfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYKeGfx4LOOjRwCv6JwMkobKrATMB8GA1UdIwQY MBaAFME7kPqsXvz5MZVhnaFvOkfv/pn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1R1US1xeGVfUGt4bFdHZG9XODZSLV8tbWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zYTYxY2MtNzI4Ni00ZmIwLTk1MDgt YzEzNWE2ZWRiODYxLzEvd1R1US1xeGVfUGt4bFdHZG9XODZSLV8tbWY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zYTYxY2MtNzI4Ni00ZmIwLTk1MDgtYzEzNWE2ZWRiODYx LzEvd1R1US1xeGVfUGt4bFdHZG9XODZSLV8tbWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyhMv7y6 32ebrEvtv++s+uWQVdZ4ehUBzREoErQbdq/8MnDIKuzhP+WuR4QI05vu3dIabG9C 75WaXj1B7cXnDOMXCwKpeErMeTrjd5NMSSKZU2GPIPXgPxNrgBbe0F/V/lcICCHJ DKy9dqzFQFaw15IrdSqQkQ7zJ8njqcKIaqBNrr+S1764G3meHxqpyhl+SYx3BgTM OnM6r2GdJNN+37sunCT7Fan0/+9A7E8qSSPzbB9Hl+exnioULASFT/NWz8b9Jjal bq6sbirFbDNHhmp1uahlJuK9Y1kMa5qG8Z6FSRB4MvQopQj4/2evNHN2pTom1it3 E4j6eS3P6qr1eg== -----END CERTIFICATE-----Generated at Tue Dec 30 07:17:28 2025 by rpki-client