This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft File: wU7kzo087uI-Amb8r1RIIK5BB4g.mft (raw, json) Hash identifier: 2KO6mFPGZzHp6da7nV1Pfe2JOiD7qf6t5v06TIN8MjE= Subject key identifier: 1C:C1:81:C5:39:C4:08:BC:DB:B1:B4:D2:19:83:C1:50:5E:2F:38:02 Authority key identifier: C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88 Certificate issuer: /CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788 Certificate serial: 019B3CEC5758A9E85D0B4EC11FBAEDCB2522 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft Manifest number: 03E3 Signing time: Sat 20 Dec 2025 18:01:20 +0000 Manifest this update: Sat 20 Dec 2025 18:01:20 +0000 Manifest next update: Sun 21 Dec 2025 18:01:20 +0000 Files and hashes: 1: StpUpn9lX23TO-Oe-4PI79KxNG0.roa (hash: Y4gPgVsX/dvV/I4lGCjA++A6e1J5MarmPPrWMNyloHc=) 2: wU7kzo087uI-Amb8r1RIIK5BB4g.crl (hash: lXpx+e56onisARUjgcSq8ajlAmpvU/iXIKQz2FcywVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:57:58:a9:e8:5d:0b:4e:c1:1f:ba:ed:cb:25:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788 Validity Not Before: Dec 20 18:01:20 2025 GMT Not After : Dec 21 18:01:20 2025 GMT Subject: CN=1cc181c539c408bcdbb1b4d21983c1505e2f3802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:32:51:32:ce:34:b6:27:1e:96:ff:f4:d5:ef: 4d:57:02:24:92:fa:ac:ba:77:8b:75:cd:0d:da:df: b7:34:09:a3:13:74:84:bd:65:23:0e:df:4a:b4:9f: 54:de:70:22:18:87:88:02:f0:1d:cf:a1:77:0f:b0: 74:51:f9:ab:25:94:11:b8:8a:d4:fe:c2:70:7c:47: 65:19:29:fb:d8:af:2e:d4:94:e6:64:9a:1a:e8:ed: c8:43:92:dd:d9:67:41:70:05:90:a8:4c:11:54:1a: f0:40:b8:f5:32:19:64:7b:b1:3a:98:d0:4a:07:76: d6:64:26:5a:32:af:17:36:38:49:2b:60:80:e2:9b: 13:b0:58:f9:18:0e:5c:0d:a4:93:7e:99:57:b7:72: 72:87:78:ac:50:a4:cf:21:29:95:59:26:ae:dc:ca: c9:71:4d:5e:38:42:6b:39:3a:bc:35:0a:0d:42:4e: 40:94:a8:db:8f:c7:8d:6a:ea:d5:53:47:cc:d6:61: 6a:4f:f9:43:89:3a:51:42:17:2e:f6:3d:95:d0:81: 3c:ee:3f:59:35:d9:c3:54:c9:fe:d0:95:ca:f2:7b: 19:de:17:3e:f1:26:7f:86:86:20:6e:94:c1:eb:46: 5f:0d:28:ae:79:e3:e7:52:d5:36:67:33:6f:f6:b5: 46:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C1:81:C5:39:C4:08:BC:DB:B1:B4:D2:19:83:C1:50:5E:2F:38:02 X509v3 Authority Key Identifier: keyid:C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:75:2b:8d:75:ae:3e:ff:f5:bf:26:26:e0:dd:3f:ca:bb:b3: 47:78:ff:4c:14:db:6e:b8:26:6d:a5:a9:88:f1:e1:f3:93:00: 6b:6d:38:db:ab:8e:90:cc:67:54:4b:cf:9b:b1:fb:f3:70:0b: ae:7b:a7:a9:3b:23:bb:89:15:1e:46:27:06:98:a8:9f:df:f5: d5:54:fb:e3:24:a9:48:f7:ee:cf:46:ee:fa:cc:91:1a:77:a6: 11:b5:dc:0a:5a:79:41:6c:55:2a:81:4a:5c:da:09:9e:b1:34: a9:7a:6a:1e:f4:c8:ac:7d:1f:5b:72:20:cb:51:d1:b5:8f:f6: b3:82:66:88:6e:0f:03:d5:5b:28:d6:8c:8b:7c:19:5e:9c:c1: 42:04:8f:bc:e0:12:eb:41:82:7f:86:7a:97:a6:28:7a:d0:76: 07:ab:ca:dd:70:ae:57:8e:b8:08:cf:f6:2b:a1:ec:0f:e1:b6: 7b:ed:0c:f9:0d:a9:4e:69:3a:7b:3a:43:71:5e:ce:9a:cc:5f: b7:83:32:a6:fa:a2:3c:61:02:45:e7:25:55:3a:ca:ab:e3:9c: 16:07:c9:ab:8b:ef:1c:f5:28:e0:b0:7a:d0:11:1c:36:21:f2: 43:d4:66:31:59:24:52:95:1d:fe:1d:de:7f:f2:e9:16:b7:fe: 4b:f8:ba:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87FdYqehdC07BH7rtyyUiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNGVlNGNlOGQzY2VlZTIzZTAyNjZmY2FmNTQ0ODIwYWU0 MTA3ODgwHhcNMjUxMjIwMTgwMTIwWhcNMjUxMjIxMTgwMTIwWjAzMTEwLwYDVQQD EygxY2MxODFjNTM5YzQwOGJjZGJiMWI0ZDIxOTgzYzE1MDVlMmYzODAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjJRMs40ticelv/01e9NVwIkkvqs uneLdc0N2t+3NAmjE3SEvWUjDt9KtJ9U3nAiGIeIAvAdz6F3D7B0UfmrJZQRuIrU /sJwfEdlGSn72K8u1JTmZJoa6O3IQ5Ld2WdBcAWQqEwRVBrwQLj1Mhlke7E6mNBK B3bWZCZaMq8XNjhJK2CA4psTsFj5GA5cDaSTfplXt3Jyh3isUKTPISmVWSau3MrJ cU1eOEJrOTq8NQoNQk5AlKjbj8eNaurVU0fM1mFqT/lDiTpRQhcu9j2V0IE87j9Z NdnDVMn+0JXK8nsZ3hc+8SZ/hoYgbpTB60ZfDSiueePnUtU2ZzNv9rVGiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzBgcU5xAi827G00hmDwVBeLzgCMB8GA1UdIwQY MBaAFMFO5M6NPO7iPgJm/K9USCCuQQeIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1U3a3pvMDg3dUktQW1iOHIxUklJSzVCQjRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wMGEyZmMtYzg3Mi00NGY2LTljZTQt NDg0MzgyMDJkYmFiLzEvd1U3a3pvMDg3dUktQW1iOHIxUklJSzVCQjRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8wMGEyZmMtYzg3Mi00NGY2LTljZTQtNDg0MzgyMDJkYmFi LzEvd1U3a3pvMDg3dUktQW1iOHIxUklJSzVCQjRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmHUrjXWu Pv/1vyYm4N0/yruzR3j/TBTbbrgmbaWpiPHh85MAa20426uOkMxnVEvPm7H783AL rnunqTsju4kVHkYnBpion9/11VT74ySpSPfuz0bu+syRGnemEbXcClp5QWxVKoFK XNoJnrE0qXpqHvTIrH0fW3Igy1HRtY/2s4JmiG4PA9VbKNaMi3wZXpzBQgSPvOAS 60GCf4Z6l6YoetB2B6vK3XCuV464CM/2K6HsD+G2e+0M+Q2pTmk6ezpDcV7Omsxf t4MypvqiPGECReclVTrKq+OcFgfJq4vvHPUo4LB60BEcNiHyQ9RmMVkkUpUd/h3e f/LpFrf+S/i6eA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:09:07 2025 by rpki-client