This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft File: wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft (raw, json) Hash identifier: J22aDBQ/7bAHOxOu9ozV7U/caZAb82H+wLpG2rFZThc= Subject key identifier: 86:1F:59:61:7D:74:A3:DE:EC:A8:03:80:1C:2D:77:89:98:95:CD:94 Authority key identifier: C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08 Certificate issuer: /CN=c14d63d39707d45a8c683cb52e47171d136ce508 Certificate serial: 019B3BD96611C9B49FD6AB342EA48862128B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft Manifest number: 105A Signing time: Sat 20 Dec 2025 13:01:01 +0000 Manifest this update: Sat 20 Dec 2025 13:01:01 +0000 Manifest next update: Sun 21 Dec 2025 13:01:01 +0000 Files and hashes: 1: VWUmt1-Lc9mwWkzpXFUMDbb2UqE.roa (hash: Tjmb/lxEFBxZz68PrILtJGnl1lSlmzqzB3RT5UoyTR8=) 2: wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl (hash: CE423Gp6COp+LXVA2klZnHhUfH3zHS9Cmg/ME5s8Y5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:66:11:c9:b4:9f:d6:ab:34:2e:a4:88:62:12:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c14d63d39707d45a8c683cb52e47171d136ce508 Validity Not Before: Dec 20 13:01:01 2025 GMT Not After : Dec 21 13:01:01 2025 GMT Subject: CN=861f59617d74a3deeca803801c2d77899895cd94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:98:9e:c4:c4:ae:4b:d3:f0:6b:26:4c:8c:d7: a7:dc:f4:b0:70:83:68:85:ee:51:d9:97:65:be:f2: 94:09:ea:bc:23:20:6b:6a:df:cd:ec:99:e3:34:a4: 3e:38:09:0c:bf:63:9a:8c:2f:c9:bf:da:c5:bf:79: b0:63:e6:f4:ff:22:f6:41:ff:7d:54:01:5b:5f:af: d3:f9:df:a5:11:65:34:fa:7d:68:db:81:8c:6f:a9: 83:eb:cc:80:99:f7:aa:a7:f9:47:db:c3:46:b3:34: e8:8b:95:24:ff:24:46:5b:0c:de:88:53:80:68:be: 7a:76:0c:b2:b1:0b:84:b0:7b:55:ea:6c:58:cf:35: 38:d5:42:de:de:3d:c3:11:18:b2:db:6d:89:14:8f: c1:0a:da:b4:2b:b5:75:12:51:94:5a:73:3d:13:9e: 5d:32:d5:53:56:a6:1f:7c:34:29:96:d5:db:c5:69: 46:9f:ed:31:e8:d2:e4:f0:18:82:d5:fc:95:f7:7c: c6:d8:37:22:3e:24:0e:48:9a:26:f2:7a:54:7a:07: 74:68:89:00:ce:34:5d:05:2b:67:8a:29:4a:3d:7b: ed:12:18:ea:49:20:79:9f:f1:d5:c3:fb:99:c9:f7: ee:46:8b:81:3a:ea:11:b6:8a:65:0b:cc:fb:68:57: 17:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1F:59:61:7D:74:A3:DE:EC:A8:03:80:1C:2D:77:89:98:95:CD:94 X509v3 Authority Key Identifier: keyid:C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:7d:4f:dc:c4:73:3a:f9:ba:9c:f2:14:b0:71:a9:c6:ac:a7: e0:14:6a:2d:a0:5b:58:a5:d2:8f:27:20:bc:b5:ae:9b:c3:b6: b5:aa:24:26:9e:89:5f:07:57:0d:15:78:15:cd:6b:76:b1:26: 9e:63:31:80:e0:50:20:c2:e0:94:4d:8c:91:9b:b4:36:7d:d6: b0:58:4d:7e:f5:64:2d:b5:2f:82:57:13:94:21:de:2c:5d:00: e2:d8:9a:91:1a:ff:74:e9:b2:15:93:52:ea:d7:0b:18:c0:40: bd:c3:fc:7a:20:86:4f:7b:3e:c4:bd:61:c8:67:75:ca:4f:2e: 4e:35:aa:50:eb:65:32:22:4a:ec:a1:33:20:96:a6:da:6a:51: ed:fd:8d:43:6c:48:47:56:3c:0e:a6:28:2b:c7:db:72:43:8b: 05:d9:2e:c5:0e:84:c9:9e:69:0c:3d:b9:27:1b:ed:ae:d6:82: 07:4e:70:3a:94:32:49:29:ac:1f:c2:e9:46:af:81:fa:ac:f0: 46:d1:4b:07:80:7b:31:2e:18:1c:2b:7b:ac:89:92:0a:6f:c0: b8:44:8e:22:4b:53:9b:d4:14:08:84:22:9d:80:39:ec:08:0a: c9:8f:db:f4:62:10:2b:60:e4:ac:bd:c7:37:7e:69:1b:74:7e: 43:bb:6a:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72WYRybSf1qs0LqSIYhKLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNGQ2M2QzOTcwN2Q0NWE4YzY4M2NiNTJlNDcxNzFkMTM2 Y2U1MDgwHhcNMjUxMjIwMTMwMTAxWhcNMjUxMjIxMTMwMTAxWjAzMTEwLwYDVQQD Eyg4NjFmNTk2MTdkNzRhM2RlZWNhODAzODAxYzJkNzc4OTk4OTVjZDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZiexMSuS9PwayZMjNen3PSwcINo he5R2ZdlvvKUCeq8IyBrat/N7JnjNKQ+OAkMv2OajC/Jv9rFv3mwY+b0/yL2Qf99 VAFbX6/T+d+lEWU0+n1o24GMb6mD68yAmfeqp/lH28NGszToi5Uk/yRGWwzeiFOA aL56dgyysQuEsHtV6mxYzzU41ULe3j3DERiy222JFI/BCtq0K7V1ElGUWnM9E55d MtVTVqYffDQpltXbxWlGn+0x6NLk8BiC1fyV93zG2DciPiQOSJom8npUegd0aIkA zjRdBStniilKPXvtEhjqSSB5n/HVw/uZyffuRouBOuoRtoplC8z7aFcX8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYfWWF9dKPe7KgDgBwtd4mYlc2UMB8GA1UdIwQY MBaAFMFNY9OXB9RajGg8tS5HFx0TbOUIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1UxajA1Y0gxRnFNYUR5MUxrY1hIUk5zNVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xNDhjNmMtYmExMC00M2EzLTg0ODIt NWExZGFhOTRkZTQyLzEvd1UxajA1Y0gxRnFNYUR5MUxrY1hIUk5zNVFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xNDhjNmMtYmExMC00M2EzLTg0ODItNWExZGFhOTRkZTQy LzEvd1UxajA1Y0gxRnFNYUR5MUxrY1hIUk5zNVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPn1P3MRz Ovm6nPIUsHGpxqyn4BRqLaBbWKXSjycgvLWum8O2taokJp6JXwdXDRV4Fc1rdrEm nmMxgOBQIMLglE2MkZu0Nn3WsFhNfvVkLbUvglcTlCHeLF0A4tiakRr/dOmyFZNS 6tcLGMBAvcP8eiCGT3s+xL1hyGd1yk8uTjWqUOtlMiJK7KEzIJam2mpR7f2NQ2xI R1Y8DqYoK8fbckOLBdkuxQ6EyZ5pDD25JxvtrtaCB05wOpQySSmsH8LpRq+B+qzw RtFLB4B7MS4YHCt7rImSCm/AuESOIktTm9QUCIQinYA57AgKyY/b9GIQK2DkrL3H N35pG3R+Q7tqAQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:16:20 2025 by rpki-client