This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft File: wFlbbIrobPkGmro-um3fKmgjfwg.mft (raw, json) Hash identifier: dqTtoLG3ywLLC8WjozHfnHk0MXtmvVuETjuD0r2HxGI= Subject key identifier: D2:C9:29:33:19:A3:33:C3:40:26:D3:47:9B:39:FD:32:24:71:08:4D Authority key identifier: C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08 Certificate issuer: /CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08 Certificate serial: 019B454A2D6DDDB262424B7FC73F609208BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft Manifest number: 0738 Signing time: Mon 22 Dec 2025 09:00:47 +0000 Manifest this update: Mon 22 Dec 2025 09:00:47 +0000 Manifest next update: Tue 23 Dec 2025 09:00:47 +0000 Files and hashes: 1: 8UgkBAZONepNyI81FukUfi25Kao.roa (hash: rpUHlCnR+nUi3dHMj1nsfDs3V156wUfOtUa+u9zdDrQ=) 2: wFlbbIrobPkGmro-um3fKmgjfwg.crl (hash: Tvjk0HSyMhb2FrCoMXCkQPTlt/eaJUyzv8UR6NlvA1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:2d:6d:dd:b2:62:42:4b:7f:c7:3f:60:92:08:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08 Validity Not Before: Dec 22 09:00:47 2025 GMT Not After : Dec 23 09:00:47 2025 GMT Subject: CN=d2c9293319a333c34026d3479b39fd322471084d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d7:b0:a2:d2:fc:dd:86:cc:7a:d4:28:ca:88: 2d:d3:65:c7:69:1b:ee:50:dd:7b:59:ab:90:cf:61: 53:1a:bc:c0:e6:f2:32:58:04:9f:bf:9e:15:c6:51: 16:d6:cf:82:6e:71:38:87:a7:46:36:8d:ad:fd:84: c5:8c:db:53:60:31:61:96:d0:2f:01:1a:6f:4e:68: ec:32:44:60:70:af:5d:d0:40:d5:c2:01:41:f9:35: 09:9e:15:fc:6b:a5:64:69:8e:d1:0d:89:63:63:de: 5f:c4:02:a9:12:83:79:74:67:6a:25:ef:36:60:17: c2:aa:bf:00:df:e5:92:d9:45:8a:63:13:ee:4d:fe: 76:a0:c9:e4:a7:59:5b:77:d5:73:81:0a:2d:85:cd: cc:41:f1:14:17:b2:dc:66:f0:7e:88:d9:1b:64:c3: 57:d3:9f:c9:b1:d1:f4:0c:34:e3:a0:8e:f6:33:2f: 93:56:b2:0f:3f:ae:2a:6f:87:23:00:94:0a:52:a6: 7f:80:35:a7:c2:88:c5:57:d9:ca:dc:d5:6f:a6:11: 56:0f:d8:f7:09:8a:32:df:13:9e:10:9b:42:58:06: 9e:8a:7f:a7:38:ae:5b:f6:e7:eb:83:0d:cd:83:1c: 9b:a3:e8:8e:7d:16:b9:fd:c5:18:6c:00:20:59:30: 27:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C9:29:33:19:A3:33:C3:40:26:D3:47:9B:39:FD:32:24:71:08:4D X509v3 Authority Key Identifier: keyid:C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:cc:6f:57:35:c2:d4:0f:c1:c0:19:81:9f:9e:33:e3:b0:44: 53:24:bf:69:f3:91:61:a0:27:9a:20:11:6a:95:ce:e3:e0:02: 67:ec:37:fa:5b:eb:15:70:1b:78:c3:61:a9:b2:b0:70:79:75: 8f:4a:62:17:25:ae:1e:a0:9c:10:38:ee:2b:07:9f:21:c5:2f: 0d:2a:3e:d9:ee:20:45:7b:ba:2c:71:b3:43:3b:fd:03:a3:d0: c9:70:a8:81:e3:0d:bf:95:d3:f6:2f:be:d6:26:8c:2f:aa:62: a5:e6:9a:ba:88:48:72:a8:37:cf:10:6c:29:2e:71:2c:87:03: 20:5d:e6:bb:4d:aa:63:17:37:ad:d1:46:1d:44:44:84:12:49: fe:7b:28:68:87:6e:ed:ae:3d:e7:01:6e:51:d1:4f:9d:29:9e: 42:0e:9b:46:07:34:83:0d:9d:27:04:08:aa:db:31:70:30:17: 0b:c0:3c:48:0f:8e:16:40:09:37:f1:1e:15:75:31:19:61:c3: 47:c6:f1:b9:c2:5c:eb:45:2b:0b:aa:83:ed:f6:89:54:f7:ad: ff:19:1d:22:8b:93:53:f0:d6:76:f2:66:19:e2:e9:06:66:e0: 4a:e8:ba:1c:98:79:45:4a:cb:f5:d5:95:f4:f8:3d:94:d0:fa: a5:89:17:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSi1t3bJiQkt/xz9gkgi9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNTk1YjZjOGFlODZjZjkwNjlhYmEzZWJhNmRkZjJhNjgy MzdmMDgwHhcNMjUxMjIyMDkwMDQ3WhcNMjUxMjIzMDkwMDQ3WjAzMTEwLwYDVQQD EyhkMmM5MjkzMzE5YTMzM2MzNDAyNmQzNDc5YjM5ZmQzMjI0NzEwODRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNewotL83YbMetQoyogt02XHaRvu UN17WauQz2FTGrzA5vIyWASfv54VxlEW1s+CbnE4h6dGNo2t/YTFjNtTYDFhltAv ARpvTmjsMkRgcK9d0EDVwgFB+TUJnhX8a6VkaY7RDYljY95fxAKpEoN5dGdqJe82 YBfCqr8A3+WS2UWKYxPuTf52oMnkp1lbd9VzgQothc3MQfEUF7LcZvB+iNkbZMNX 05/JsdH0DDTjoI72My+TVrIPP64qb4cjAJQKUqZ/gDWnwojFV9nK3NVvphFWD9j3 CYoy3xOeEJtCWAaein+nOK5b9ufrgw3Ngxybo+iOfRa5/cUYbAAgWTAncwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLJKTMZozPDQCbTR5s5/TIkcQhNMB8GA1UdIwQY MBaAFMBZW2yK6Gz5Bpq6Prpt3ypoI38IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0ZsYmJJcm9iUGtHbXJvLXVtM2ZLbWdqZndnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hOWJmYjUtMTYyZC00YzdlLWI3MDAt MTkxYjJhZTNmYTVhLzEvd0ZsYmJJcm9iUGtHbXJvLXVtM2ZLbWdqZndnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hOWJmYjUtMTYyZC00YzdlLWI3MDAtMTkxYjJhZTNmYTVh LzEvd0ZsYmJJcm9iUGtHbXJvLXVtM2ZLbWdqZndnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAucxvVzXC 1A/BwBmBn54z47BEUyS/afORYaAnmiARapXO4+ACZ+w3+lvrFXAbeMNhqbKwcHl1 j0piFyWuHqCcEDjuKwefIcUvDSo+2e4gRXu6LHGzQzv9A6PQyXCogeMNv5XT9i++ 1iaML6pipeaauohIcqg3zxBsKS5xLIcDIF3mu02qYxc3rdFGHUREhBJJ/nsoaIdu 7a495wFuUdFPnSmeQg6bRgc0gw2dJwQIqtsxcDAXC8A8SA+OFkAJN/EeFXUxGWHD R8bxucJc60UrC6qD7faJVPet/xkdIouTU/DWdvJmGeLpBmbgSui6HJh5RUrL9dWV 9Pg9lND6pYkXjA== -----END CERTIFICATE-----Generated at Mon Dec 22 10:38:00 2025 by rpki-client