This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.mft File: Wu3LM00555eBfi60dwPAGLTcSdU.mft (raw, json) Hash identifier: 1WpgJNdd5i0jCjJ37PyQeH0v+BvETmXinO8CtqZra/o= Subject key identifier: 59:AF:C2:91:FC:B0:E3:B3:8F:21:E9:5B:9B:38:4F:66:3D:7C:3E:57 Authority key identifier: 5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5 Certificate issuer: /CN=5aedcb334d39e797817e2eb47703c018b4dc49d5 Certificate serial: 019B3569FC04DACE63383F935806609EF4B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.mft Manifest number: 0D74 Signing time: Fri 19 Dec 2025 07:01:36 +0000 Manifest this update: Fri 19 Dec 2025 07:01:36 +0000 Manifest next update: Sat 20 Dec 2025 07:01:36 +0000 Files and hashes: 1: Wu3LM00555eBfi60dwPAGLTcSdU.crl (hash: QiFmRr9b1UKSjHry4p4a1j/KyXHM+/jTa+isETn01pc=) 2: Wyb52zGEnneuzfD2tuztnuglkZM.roa (hash: pRaWUV+rJLCM+NItD33S9b/zkSegxof0Tte2Clq6a78=) 3: dcyYzxG1C_w_nBNFlVJtruOvAh0.roa (hash: plCR5uHg69g6tAPVlizUtVtwRqfn4K3Hux+I6ZCYSag=) 4: vxDWfcBErbw3QM5tYdBzh-7Akm8.roa (hash: qv/OhT65F1U2TWpmssPcn9SlD/6ghmK29vjWP8rBXfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.crl rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.mft rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:fc:04:da:ce:63:38:3f:93:58:06:60:9e:f4:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aedcb334d39e797817e2eb47703c018b4dc49d5 Validity Not Before: Dec 19 07:01:36 2025 GMT Not After : Dec 20 07:01:36 2025 GMT Subject: CN=59afc291fcb0e3b38f21e95b9b384f663d7c3e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c7:be:49:0c:5c:e3:9f:e4:f6:6e:c1:ec:e3: 82:06:c4:cc:14:a6:3b:f3:40:b0:55:c2:71:16:86: d8:e4:38:f0:9a:c8:41:1d:99:58:b2:41:d0:17:ba: 16:08:b9:bb:43:d1:59:85:73:40:e8:47:2b:93:0a: 95:93:16:dc:9b:7f:62:51:de:05:74:07:a6:2e:b4: 00:18:4f:12:53:95:80:42:e9:e1:7a:20:26:c6:e3: 98:af:dd:bc:70:25:5b:67:e7:0e:2e:5e:a0:b8:38: 76:f2:50:10:45:53:61:49:37:d3:52:81:64:da:7b: db:89:93:12:5c:1b:2e:94:b1:ba:0f:00:7f:95:b5: 18:ba:98:10:7e:e9:49:28:80:c1:08:3c:d9:0a:fd: d4:e7:90:ff:78:26:06:5e:7c:22:bb:e7:77:76:76: 65:47:47:b3:e0:30:3a:ea:9a:5d:42:bb:01:f5:05: a7:aa:94:50:37:70:a4:7a:dc:7d:52:09:7c:ac:44: 7f:ff:52:dc:1c:db:91:0c:97:be:65:10:13:e5:cf: 5e:69:fc:7e:dd:ca:a4:ac:7e:3e:49:6e:46:30:5f: 91:a9:98:5a:68:c1:eb:ef:26:ce:1e:38:73:af:50: f5:19:7c:08:d6:50:15:65:fd:5c:a9:9f:ce:e6:68: 2c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AF:C2:91:FC:B0:E3:B3:8F:21:E9:5B:9B:38:4F:66:3D:7C:3E:57 X509v3 Authority Key Identifier: keyid:5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:58:35:44:42:a1:a9:6d:3c:52:a9:98:d6:e8:f9:02:59:18: 1a:d4:d7:07:8f:10:52:f4:ed:74:93:9d:b3:b4:10:90:20:7e: 7a:f9:6a:bf:ae:fd:6e:cc:f4:d9:1b:5d:7f:72:d9:47:4e:d2: 19:23:34:61:f1:77:4b:08:9e:cf:37:2c:18:92:3c:96:78:fb: ad:17:d8:eb:97:68:6d:91:5f:42:67:c3:e2:be:2a:c4:b1:87: 57:32:74:dd:d0:d1:25:95:01:5f:6e:56:a5:cd:0c:61:33:5e: 50:10:f9:47:4a:32:19:39:b8:66:3e:a1:b9:2d:2c:63:f9:33: 8c:7d:b9:30:9a:41:d0:62:1b:5c:0f:23:df:22:e7:28:95:7b: 76:73:b7:a3:90:ed:2d:ae:21:ca:d5:0b:75:c4:cb:f8:17:01: 05:c2:ee:f6:a9:7c:71:7a:0c:78:94:a0:be:9c:ed:9e:d8:bd: 5b:7a:6f:bb:47:be:ec:1f:8f:b3:15:ad:86:2f:57:7e:3e:6f: d3:48:6c:63:e3:de:7e:e4:f7:c3:55:ef:3d:ae:ea:20:9e:d6: c5:20:69:1b:13:20:2e:fe:ef:e0:9a:a7:90:d5:44:34:a5:c5: 7b:41:11:11:43:e0:6f:64:0a:62:93:13:66:a9:b0:17:28:b0: 03:25:73:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1afwE2s5jOD+TWAZgnvSyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZWRjYjMzNGQzOWU3OTc4MTdlMmViNDc3MDNjMDE4YjRk YzQ5ZDUwHhcNMjUxMjE5MDcwMTM2WhcNMjUxMjIwMDcwMTM2WjAzMTEwLwYDVQQD Eyg1OWFmYzI5MWZjYjBlM2IzOGYyMWU5NWI5YjM4NGY2NjNkN2MzZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMe+SQxc45/k9m7B7OOCBsTMFKY7 80CwVcJxFobY5DjwmshBHZlYskHQF7oWCLm7Q9FZhXNA6EcrkwqVkxbcm39iUd4F dAemLrQAGE8SU5WAQunheiAmxuOYr928cCVbZ+cOLl6guDh28lAQRVNhSTfTUoFk 2nvbiZMSXBsulLG6DwB/lbUYupgQfulJKIDBCDzZCv3U55D/eCYGXnwiu+d3dnZl R0ez4DA66ppdQrsB9QWnqpRQN3Cketx9Ugl8rER//1LcHNuRDJe+ZRAT5c9eafx+ 3cqkrH4+SW5GMF+RqZhaaMHr7ybOHjhzr1D1GXwI1lAVZf1cqZ/O5mgszwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmvwpH8sOOzjyHpW5s4T2Y9fD5XMB8GA1UdIwQY MBaAFFrtyzNNOeeXgX4utHcDwBi03EnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3UzTE0wMDU1NWVCZmk2MGR3UEFHTFRjU2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iOTVjYTAtODUzZi00OGFiLTliNDEt ZTBhZWUxYmJmOWUzLzEvV3UzTE0wMDU1NWVCZmk2MGR3UEFHTFRjU2RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9iOTVjYTAtODUzZi00OGFiLTliNDEtZTBhZWUxYmJmOWUz LzEvV3UzTE0wMDU1NWVCZmk2MGR3UEFHTFRjU2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1g1REKh qW08UqmY1uj5AlkYGtTXB48QUvTtdJOds7QQkCB+evlqv679bsz02Rtdf3LZR07S GSM0YfF3SwiezzcsGJI8lnj7rRfY65dobZFfQmfD4r4qxLGHVzJ03dDRJZUBX25W pc0MYTNeUBD5R0oyGTm4Zj6huS0sY/kzjH25MJpB0GIbXA8j3yLnKJV7dnO3o5Dt La4hytULdcTL+BcBBcLu9ql8cXoMeJSgvpztnti9W3pvu0e+7B+PsxWthi9Xfj5v 00hsY+PefuT3w1XvPa7qIJ7WxSBpGxMgLv7v4JqnkNVENKXFe0EREUPgb2QKYpMT ZqmwFyiwAyVzhg== -----END CERTIFICATE-----Generated at Fri Dec 19 14:30:37 2025 by rpki-client