This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft File: _WNpJxttE6au3Koj67KeKbeWpGs.mft (raw, json) Hash identifier: l5Tnpd5BVmmXb6t2IC7vapW1u7zTGc7HfWa63AJ7k0Y= Subject key identifier: D5:ED:1F:EC:D0:A4:C0:01:8D:5A:E6:D2:1D:C0:11:E6:2A:0F:27:9E Authority key identifier: FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B Certificate issuer: /CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b Certificate serial: 019B3CEC9BB8E6F1F1A0F21C5F6AFFCB3D3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft Manifest number: 11BE Signing time: Sat 20 Dec 2025 18:01:37 +0000 Manifest this update: Sat 20 Dec 2025 18:01:37 +0000 Manifest next update: Sun 21 Dec 2025 18:01:37 +0000 Files and hashes: 1: _WNpJxttE6au3Koj67KeKbeWpGs.crl (hash: LOb5/HhPfISC0wzNSV1zbwRA7qqMt4Ff/gW9mFekM7w=) 2: jJZ2HGBh9sf4zKvFBoawkCSE36M.roa (hash: /j0hgJuEgbh9wJPPT5skbRnDVTk4N5FaC35FuOjVz1M=) 3: lhJ5RbjQbCIcx6Snzw8-3JVMgGE.roa (hash: VcH6B7wbqshRYaE0Py9Bav3UnTpHMEOSu603CVWuDjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:9b:b8:e6:f1:f1:a0:f2:1c:5f:6a:ff:cb:3d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b Validity Not Before: Dec 20 18:01:37 2025 GMT Not After : Dec 21 18:01:37 2025 GMT Subject: CN=d5ed1fecd0a4c0018d5ae6d21dc011e62a0f279e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9d:42:10:5b:d7:df:da:69:a4:d7:32:04:73: a3:4e:42:f8:5e:18:34:ca:f4:3a:48:ae:fc:55:bd: 5d:76:1e:73:3e:a7:5b:14:75:07:f3:53:87:10:2d: ed:6e:a4:5d:a0:e7:2e:67:3f:2f:25:2d:a4:cc:f5: 9c:f2:b6:98:e8:8c:ed:ac:9e:3c:4b:5e:06:2d:27: 06:a2:97:30:41:13:48:a4:ef:66:ef:48:63:4a:43: 36:49:da:05:0b:4b:96:83:1e:6d:42:3e:24:f6:ac: d5:69:4e:d6:cc:13:62:dc:a3:6e:e7:eb:af:95:83: 64:f2:cd:eb:db:b2:53:97:f6:a5:dc:a7:62:ca:a7: b6:b1:b2:44:b5:40:2a:04:e9:29:ef:10:8a:0c:5a: 2a:e6:5e:a1:b5:59:0e:3f:13:a0:d2:01:46:bc:43: c8:4d:65:c4:eb:3f:28:c8:39:8a:a2:07:45:e2:f2: 46:67:99:ee:a8:5f:40:85:f2:fd:98:55:32:19:3f: 93:f8:6f:8a:00:56:b0:ec:db:d0:0d:4d:45:6b:6b: a1:8d:5c:d2:a8:3c:76:1c:3f:36:42:6e:1a:9f:1a: 4a:74:13:a3:d3:3c:f9:2b:8e:18:5f:8e:86:5f:76: 0c:af:95:5f:4f:19:d0:dd:2a:a1:e3:88:8a:8b:a0: e3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:ED:1F:EC:D0:A4:C0:01:8D:5A:E6:D2:1D:C0:11:E6:2A:0F:27:9E X509v3 Authority Key Identifier: keyid:FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ea:11:e2:4c:b1:d7:2f:c7:eb:1b:82:67:b4:c3:dc:8b:ca: 6c:e2:0b:94:f2:e1:49:7a:17:48:0b:34:1b:6b:54:14:82:5e: 80:6f:42:57:08:d3:c0:0b:ce:2e:a3:a3:17:d5:f0:e1:d9:77: b7:ca:27:e2:fc:01:4b:95:9d:2e:30:a5:ec:fb:18:1c:4f:e5: 1f:ae:fb:b1:65:7e:f5:8c:3c:1e:37:83:2f:d0:c6:9c:74:d8: 7f:a8:b1:a8:5f:48:87:40:d4:92:34:5f:57:f1:3b:3d:bc:ce: 13:66:89:a7:ae:42:fe:30:fe:fa:29:26:d3:72:35:a2:e9:51: 9c:56:18:56:10:88:92:77:11:a4:9e:f2:26:a4:8d:81:b9:aa: be:88:dd:33:b0:48:d9:79:5f:4a:7d:05:ed:58:b7:f5:71:c3: 43:30:6c:40:f2:de:db:f9:23:0a:4e:ba:7a:1d:e2:bb:22:07: 76:65:ee:04:46:5f:94:f6:2f:93:e5:f3:d1:a2:f1:96:f0:d0: 1a:21:e7:0d:88:a1:3a:be:2a:2d:0d:b4:1b:fb:79:1e:ff:ff: cf:50:85:01:b0:b4:c2:6e:35:de:87:c2:f6:25:15:1d:d9:9d: 50:7c:10:2b:b2:aa:60:24:79:37:ae:94:79:bb:6c:d9:6f:6e: b7:40:e7:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87Ju45vHxoPIcX2r/yz08MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkNjM2OTI3MWI2ZDEzYTZhZWRjYWEyM2ViYjI5ZTI5Yjc5 NmE0NmIwHhcNMjUxMjIwMTgwMTM3WhcNMjUxMjIxMTgwMTM3WjAzMTEwLwYDVQQD EyhkNWVkMWZlY2QwYTRjMDAxOGQ1YWU2ZDIxZGMwMTFlNjJhMGYyNzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ1CEFvX39pppNcyBHOjTkL4Xhg0 yvQ6SK78Vb1ddh5zPqdbFHUH81OHEC3tbqRdoOcuZz8vJS2kzPWc8raY6IztrJ48 S14GLScGopcwQRNIpO9m70hjSkM2SdoFC0uWgx5tQj4k9qzVaU7WzBNi3KNu5+uv lYNk8s3r27JTl/al3Kdiyqe2sbJEtUAqBOkp7xCKDFoq5l6htVkOPxOg0gFGvEPI TWXE6z8oyDmKogdF4vJGZ5nuqF9AhfL9mFUyGT+T+G+KAFaw7NvQDU1Fa2uhjVzS qDx2HD82Qm4anxpKdBOj0zz5K44YX46GX3YMr5VfTxnQ3Sqh44iKi6DjXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXtH+zQpMABjVrm0h3AEeYqDyeeMB8GA1UdIwQY MBaAFP1jaScbbROmrtyqI+uynim3lqRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1dOcEp4dHRFNmF1M0tvajY3S2VLYmVXcEdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lZDVlMTUtNGYxNC00OWU2LWE2ZGQt NDUzNTFmOWRiYjUyLzEvX1dOcEp4dHRFNmF1M0tvajY3S2VLYmVXcEdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9lZDVlMTUtNGYxNC00OWU2LWE2ZGQtNDUzNTFmOWRiYjUy LzEvX1dOcEp4dHRFNmF1M0tvajY3S2VLYmVXcEdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjOoR4kyx 1y/H6xuCZ7TD3IvKbOILlPLhSXoXSAs0G2tUFIJegG9CVwjTwAvOLqOjF9Xw4dl3 t8on4vwBS5WdLjCl7PsYHE/lH677sWV+9Yw8HjeDL9DGnHTYf6ixqF9Ih0DUkjRf V/E7PbzOE2aJp65C/jD++ikm03I1oulRnFYYVhCIkncRpJ7yJqSNgbmqvojdM7BI 2XlfSn0F7Vi39XHDQzBsQPLe2/kjCk66eh3iuyIHdmXuBEZflPYvk+Xz0aLxlvDQ GiHnDYihOr4qLQ20G/t5Hv//z1CFAbC0wm413ofC9iUVHdmdUHwQK7KqYCR5N66U ebts2W9ut0DnKA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:27:43 2025 by rpki-client