This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft File: 85-Wwg4Q928D7UeBW3pqXv2-A9U.mft (raw, json) Hash identifier: PmU0CcPFeghLkSocpkvOxZaq6tiBuz0QQ6cHdJVPkAY= Subject key identifier: DE:B2:7B:5C:E1:3D:A6:12:E3:D3:39:C5:CE:AC:F3:C9:0A:AF:9C:0C Authority key identifier: F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5 Certificate issuer: /CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5 Certificate serial: 019B3EDA65FABE293D699FC840F10F9CF9EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft Manifest number: 12B3 Signing time: Sun 21 Dec 2025 03:00:58 +0000 Manifest this update: Sun 21 Dec 2025 03:00:58 +0000 Manifest next update: Mon 22 Dec 2025 03:00:58 +0000 Files and hashes: 1: 85-Wwg4Q928D7UeBW3pqXv2-A9U.crl (hash: HsZ2LnlwQ2ID2EjCiHmv+KMG0vxKvXZErtBt+Tc76XE=) 2: mG96Y715wDIwvEKSq5Z-71rWs6M.roa (hash: Y3E3/3Utv7uEbR1MqLWFqsWoMU44kmtfUjplzEpgK2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:65:fa:be:29:3d:69:9f:c8:40:f1:0f:9c:f9:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5 Validity Not Before: Dec 21 03:00:58 2025 GMT Not After : Dec 22 03:00:58 2025 GMT Subject: CN=deb27b5ce13da612e3d339c5ceacf3c90aaf9c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:21:46:7d:fd:fd:38:e7:62:92:95:3f:20:2c: a1:61:d2:6d:3d:9e:b2:5c:28:28:29:97:4d:52:74: 5c:5d:46:9c:42:65:f9:5e:83:50:48:77:fc:99:f9: dc:20:3f:7d:d7:a2:b7:c4:dd:4b:1f:d6:ca:e6:dc: 27:90:18:fd:2e:57:2d:58:d5:b8:63:05:92:eb:6c: 5b:15:e8:d4:6d:38:95:52:0d:34:d4:88:6a:37:41: 30:1f:67:44:a5:50:82:55:e1:e1:0a:92:da:f4:52: b2:1c:df:64:78:39:18:c1:21:9a:da:e3:df:4e:a4: 35:67:a5:05:a2:30:84:f2:c6:0a:24:5f:29:9a:a2: f8:ff:19:e9:9d:fa:eb:c8:41:de:08:38:ed:6c:be: f1:0a:b9:8f:0f:28:96:b5:9d:90:d9:b5:a5:91:b5: e1:b5:d3:b2:dd:63:4f:55:5b:6c:61:80:da:fc:1d: e2:25:ab:0e:81:47:b7:0c:21:57:b5:91:13:aa:8a: 01:ca:52:20:f0:f2:53:17:e4:45:58:ad:d4:c1:a0: 92:7d:1b:d6:55:76:fb:dc:d8:3f:32:b4:9a:d2:5a: 67:f7:ea:dd:f0:31:6e:d7:2a:c7:02:ce:d4:d2:1b: a0:50:ad:9c:cc:01:3d:ba:b7:0d:04:a8:41:0b:d3: db:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B2:7B:5C:E1:3D:A6:12:E3:D3:39:C5:CE:AC:F3:C9:0A:AF:9C:0C X509v3 Authority Key Identifier: keyid:F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:7a:c9:b5:8e:2f:93:16:db:d4:f6:e9:cc:98:78:63:22:19: e7:b4:a6:99:34:37:7a:75:e1:16:17:af:15:64:16:90:e1:9b: 67:e1:47:75:60:f2:39:c0:90:67:e4:b1:8f:01:cb:b7:5e:f9: ef:53:79:8a:13:df:5a:96:16:9c:68:27:bc:61:31:ae:3e:2b: 52:77:04:b9:c6:0f:51:5e:2c:52:e7:bc:e3:c6:6f:08:b6:d2: 68:5b:06:4c:98:cc:c8:37:f0:5f:b9:bf:5f:f1:75:6d:55:3a: 5c:c2:1b:4b:29:4a:af:b7:4b:49:dc:ec:e1:6a:58:9b:36:ee: 16:44:cf:2f:70:a3:28:04:c7:c8:b3:2c:a7:c3:11:f3:ab:a9: 1a:c3:54:f4:43:63:d4:63:0b:52:80:0b:97:38:6c:cc:2f:84: 90:52:46:33:00:37:08:d5:ad:b3:6b:75:50:ee:5c:3d:dc:a5: b1:81:24:1c:9a:de:33:d0:78:9d:86:5d:ec:5d:67:15:7e:58: b3:0e:73:3a:aa:d8:68:1e:8e:2a:22:f0:b4:2a:1a:c4:d0:a5: 83:2b:57:47:16:a0:5e:a5:bc:f8:45:58:40:e8:dc:1a:a1:b2: 82:20:c4:00:e4:33:72:7c:3c:59:cc:4e:76:d7:ec:d1:b7:1d: 09:76:0b:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2mX6vik9aZ/IQPEPnPnqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzOWY5NmMyMGUxMGY3NmYwM2VkNDc4MTViN2E2YTVlZmRi ZTAzZDUwHhcNMjUxMjIxMDMwMDU4WhcNMjUxMjIyMDMwMDU4WjAzMTEwLwYDVQQD EyhkZWIyN2I1Y2UxM2RhNjEyZTNkMzM5YzVjZWFjZjNjOTBhYWY5YzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiFGff39OOdikpU/ICyhYdJtPZ6y XCgoKZdNUnRcXUacQmX5XoNQSHf8mfncID9916K3xN1LH9bK5twnkBj9LlctWNW4 YwWS62xbFejUbTiVUg001IhqN0EwH2dEpVCCVeHhCpLa9FKyHN9keDkYwSGa2uPf TqQ1Z6UFojCE8sYKJF8pmqL4/xnpnfrryEHeCDjtbL7xCrmPDyiWtZ2Q2bWlkbXh tdOy3WNPVVtsYYDa/B3iJasOgUe3DCFXtZETqooBylIg8PJTF+RFWK3UwaCSfRvW VXb73Ng/MrSa0lpn9+rd8DFu1yrHAs7U0hugUK2czAE9urcNBKhBC9PbuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6ye1zhPaYS49M5xc6s88kKr5wMMB8GA1UdIwQY MBaAFPOflsIOEPdvA+1HgVt6al79vgPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODUtV3dnNFE5MjhEN1VlQlczcHFYdjItQTlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wYjQ1ZTktM2Y0YS00YmQ4LWJhYjkt ZmI5MDgxYTE2MTM5LzEvODUtV3dnNFE5MjhEN1VlQlczcHFYdjItQTlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8wYjQ1ZTktM2Y0YS00YmQ4LWJhYjktZmI5MDgxYTE2MTM5 LzEvODUtV3dnNFE5MjhEN1VlQlczcHFYdjItQTlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnrJtY4v kxbb1PbpzJh4YyIZ57SmmTQ3enXhFhevFWQWkOGbZ+FHdWDyOcCQZ+SxjwHLt175 71N5ihPfWpYWnGgnvGExrj4rUncEucYPUV4sUue848ZvCLbSaFsGTJjMyDfwX7m/ X/F1bVU6XMIbSylKr7dLSdzs4WpYmzbuFkTPL3CjKATHyLMsp8MR86upGsNU9ENj 1GMLUoALlzhszC+EkFJGMwA3CNWts2t1UO5cPdylsYEkHJreM9B4nYZd7F1nFX5Y sw5zOqrYaB6OKiLwtCoaxNClgytXRxagXqW8+EVYQOjcGqGygiDEAOQzcnw8WcxO dtfs0bcdCXYL+w== -----END CERTIFICATE-----Generated at Sun Dec 21 09:35:45 2025 by rpki-client