This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft File: wMfxuj-ucTZOkysFYNYCxXJd2o4.mft (raw, json) Hash identifier: USr6ZUXQeTfmn+Fe0/btU2ET/GnlN+lilTFav/N5RPU= Subject key identifier: A4:1A:99:B7:B3:F7:CB:72:D4:5E:BD:DE:5D:84:D9:3A:B0:5F:48:9F Authority key identifier: C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E Certificate issuer: /CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e Certificate serial: 019B50E0A1D7455F607C0D9508C0A36E1846 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft Manifest number: 0C0B Signing time: Wed 24 Dec 2025 15:00:57 +0000 Manifest this update: Wed 24 Dec 2025 15:00:57 +0000 Manifest next update: Thu 25 Dec 2025 15:00:57 +0000 Files and hashes: 1: Ts1wD-6dXK6YF6lbWc4Bp6qGGOU.roa (hash: l6AYzjv5b4VOeQIHxSNacHxCFNVxW6gn4dbeXJ7uQKA=) 2: wMfxuj-ucTZOkysFYNYCxXJd2o4.crl (hash: qwinD3Ebh0Ni1rRr2QoY1p+ErZy+U56N2UONWHIybkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:a1:d7:45:5f:60:7c:0d:95:08:c0:a3:6e:18:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e Validity Not Before: Dec 24 15:00:57 2025 GMT Not After : Dec 25 15:00:57 2025 GMT Subject: CN=a41a99b7b3f7cb72d45ebdde5d84d93ab05f489f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6b:ed:ce:5a:59:ec:3e:74:9f:13:77:01:3a: 28:e5:39:f0:c1:97:38:03:b8:3a:49:51:2d:c3:40: 74:84:59:33:02:a9:f1:73:8b:f6:26:12:d0:5f:fb: 3e:19:03:8b:78:34:d1:f5:2a:ea:ca:0a:ba:79:0f: d0:d9:03:74:37:bd:8d:fe:11:de:e2:51:fe:b3:d4: 85:d0:88:d5:f1:38:1c:95:87:06:a3:fc:73:7c:89: 59:c3:fd:54:21:90:88:ee:5f:8d:73:5f:a7:a0:4b: 52:22:20:44:61:ff:14:9b:30:76:77:e8:08:98:ed: 0e:92:3b:d5:34:07:ab:81:b0:8f:86:fd:41:b0:89: 76:58:e1:a4:30:5e:36:6b:e7:b2:ae:66:f8:f9:37: 0c:7a:bf:3c:0d:a7:e0:52:cf:b5:f8:b8:8b:bc:40: 08:57:b2:95:5f:44:88:4c:27:90:d1:de:9d:ba:de: 52:96:c6:0b:bd:81:1b:8c:07:a1:75:ce:cf:02:ca: 73:b8:04:8d:2b:58:f9:f7:6f:c1:48:9b:06:f0:e9: e1:6a:cc:a1:68:24:16:44:3c:57:d9:a2:d8:36:a1: 5a:c5:08:ea:25:c6:d8:82:18:7d:4a:48:9c:bb:c3: 07:64:9d:1b:5f:76:af:c1:a1:b1:1a:6f:63:bb:ac: b9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1A:99:B7:B3:F7:CB:72:D4:5E:BD:DE:5D:84:D9:3A:B0:5F:48:9F X509v3 Authority Key Identifier: keyid:C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:c3:72:8a:ba:5e:8d:9d:bb:2b:f7:3e:49:a6:4d:16:d0:d7: 87:7b:a3:fc:cc:60:2a:c9:d5:2e:46:99:fa:ac:99:84:6c:83: e8:4d:67:46:a1:d6:3f:49:d9:dc:27:4e:e2:bb:12:02:77:c5: 9c:3f:6d:83:ba:10:08:3d:fd:ed:f3:52:54:4b:35:5d:c4:c3: de:78:3b:ff:5b:78:c1:11:5a:3c:03:a4:fe:39:e3:ea:6f:7c: a4:da:27:45:83:0e:fa:a9:81:23:e2:39:7b:04:a7:8f:58:a1: fe:cd:76:b4:d8:5b:be:86:b6:3e:55:19:e7:86:11:da:79:a5: 21:4a:07:19:dd:d5:a7:8b:8a:b9:bc:43:64:2c:83:86:78:35: cc:73:1f:54:9f:00:8c:26:b5:e9:6b:92:5e:cc:e3:68:8f:21: 78:ff:88:0c:95:61:0a:1c:1d:4a:b7:be:b7:b7:0f:08:2a:47: 8d:04:3a:a6:9f:e1:f2:11:07:b6:ae:6e:2a:63:7a:39:52:4a: ba:3e:7c:d3:01:a9:a2:a9:1a:db:70:d9:80:68:0e:dc:1c:ab: b9:e3:18:48:14:f9:41:d5:c0:79:e4:4d:1b:22:5d:db:fb:5a: e5:d8:36:5d:45:06:f0:d1:60:53:07:0b:26:8a:8f:95:50:6e: 4a:1d:62:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4KHXRV9gfA2VCMCjbhhGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYzdmMWJhM2ZhZTcxMzY0ZTkzMmIwNTYwZDYwMmM1NzI1 ZGRhOGUwHhcNMjUxMjI0MTUwMDU3WhcNMjUxMjI1MTUwMDU3WjAzMTEwLwYDVQQD EyhhNDFhOTliN2IzZjdjYjcyZDQ1ZWJkZGU1ZDg0ZDkzYWIwNWY0ODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWvtzlpZ7D50nxN3AToo5TnwwZc4 A7g6SVEtw0B0hFkzAqnxc4v2JhLQX/s+GQOLeDTR9Srqygq6eQ/Q2QN0N72N/hHe 4lH+s9SF0IjV8TgclYcGo/xzfIlZw/1UIZCI7l+Nc1+noEtSIiBEYf8UmzB2d+gI mO0OkjvVNAergbCPhv1BsIl2WOGkMF42a+eyrmb4+TcMer88DafgUs+1+LiLvEAI V7KVX0SITCeQ0d6dut5SlsYLvYEbjAehdc7PAspzuASNK1j592/BSJsG8Onhasyh aCQWRDxX2aLYNqFaxQjqJcbYghh9Skicu8MHZJ0bX3avwaGxGm9ju6y5PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQambez98ty1F693l2E2TqwX0ifMB8GA1UdIwQY MBaAFMDH8bo/rnE2TpMrBWDWAsVyXdqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yYzY1OTAtYWIyOS00NmI0LWE2YWUt ZGEzODhiYzM0ZWZiLzEvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yYzY1OTAtYWIyOS00NmI0LWE2YWUtZGEzODhiYzM0ZWZi LzEvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZcNyirpe jZ27K/c+SaZNFtDXh3uj/MxgKsnVLkaZ+qyZhGyD6E1nRqHWP0nZ3CdO4rsSAnfF nD9tg7oQCD397fNSVEs1XcTD3ng7/1t4wRFaPAOk/jnj6m98pNonRYMO+qmBI+I5 ewSnj1ih/s12tNhbvoa2PlUZ54YR2nmlIUoHGd3Vp4uKubxDZCyDhng1zHMfVJ8A jCa16WuSXszjaI8heP+IDJVhChwdSre+t7cPCCpHjQQ6pp/h8hEHtq5uKmN6OVJK uj580wGpoqka23DZgGgO3ByrueMYSBT5QdXAeeRNGyJd2/ta5dg2XUUG8NFgUwcL JoqPlVBuSh1i7w== -----END CERTIFICATE-----Generated at Thu Dec 25 01:22:01 2025 by rpki-client