This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft File: wFIM7LolHNN83zxNWrA2JVIruqw.mft (raw, json) Hash identifier: JT+K2OjV0/wczRpQ6nE4YqRv1bi83MHOEIYMuFlAGfo= Subject key identifier: 7D:C4:D4:A5:E0:87:1F:41:51:6B:56:CF:E3:C4:31:1A:0D:5C:03:60 Authority key identifier: C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC Certificate issuer: /CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac Certificate serial: 019B5072DDDD5861655B01337FE77931EA68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft Manifest number: 1796 Signing time: Wed 24 Dec 2025 13:01:03 +0000 Manifest this update: Wed 24 Dec 2025 13:01:03 +0000 Manifest next update: Thu 25 Dec 2025 13:01:03 +0000 Files and hashes: 1: aU__37kt8ckO_YJQdDxx1zfJXr4.roa (hash: G2q1R6crWsWgIzSolrfZ7On3iNyzuy0vug1zXtUIFQY=) 2: ahMDGxNyecqlZxcgrlYmGrrq9pU.roa (hash: h30GXSYF139afkSTNjFaEpPAUr9XbrAvQRMhITWnZY8=) 3: mIknYG3WTBISQkb0avBlTMQBHO0.roa (hash: iFjLxQXc/Bjp4mKvj7ItM6hlDfEhly4nMW0gLz+f1Fc=) 4: wFIM7LolHNN83zxNWrA2JVIruqw.crl (hash: 39tZAoeLOpegZDmHjHH89q7bzJd/ZhNF0MEvkeyq0nU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:dd:dd:58:61:65:5b:01:33:7f:e7:79:31:ea:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac Validity Not Before: Dec 24 13:01:03 2025 GMT Not After : Dec 25 13:01:03 2025 GMT Subject: CN=7dc4d4a5e0871f41516b56cfe3c4311a0d5c0360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:90:95:3c:77:75:b6:fb:8a:97:d0:6e:33:b3: a1:c4:43:8f:4a:12:a8:dc:18:e9:ca:0e:86:e9:36: 1d:44:26:e2:8a:ca:f8:4b:6f:50:f6:e9:7f:29:ac: 8e:0e:ec:62:d2:24:78:67:c0:ed:92:76:ff:8c:46: 1b:b5:f9:36:15:5d:f8:9b:de:ec:ce:33:4e:84:0e: de:99:72:e5:2b:fe:70:cd:fd:75:73:d1:b3:60:26: 14:05:de:62:5f:4a:45:89:cf:27:17:95:e0:4d:66: 85:78:0c:8a:f4:d2:0a:c7:cb:e4:79:f3:38:b9:8e: 6e:9e:03:0e:34:16:73:17:3b:6f:60:67:74:f2:20: fb:5b:4b:47:ea:45:9e:ef:3e:35:2a:61:b6:f9:60: 6a:89:cc:5f:00:88:a2:23:cf:11:5b:24:8a:91:27: 14:b4:91:93:d3:c9:5d:00:97:05:c3:32:36:b9:47: 14:21:93:87:0f:ee:c7:3d:2e:56:fb:b2:b0:23:9c: 81:bc:79:02:19:bd:6a:d9:b2:75:59:c4:0d:9a:81: f2:4e:b7:e0:28:92:45:8b:b3:72:bc:9b:9e:d4:75: f4:5a:ec:97:7e:16:d3:d2:94:50:c3:69:a4:84:ae: a9:6a:67:1c:de:47:ec:ba:a5:88:db:0b:9f:16:c4: 89:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C4:D4:A5:E0:87:1F:41:51:6B:56:CF:E3:C4:31:1A:0D:5C:03:60 X509v3 Authority Key Identifier: keyid:C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:30:08:f7:c5:73:fe:06:a3:5a:26:95:35:8c:fe:4e:d7:ce: c8:ca:4e:51:db:a4:7c:9d:1f:05:e2:4d:9e:1d:5f:1a:03:21: 3d:4e:1f:11:3b:d5:12:d4:4f:d9:8d:fc:c1:f8:ac:7c:75:a8: a3:97:63:d3:53:e7:fe:9a:d2:48:9f:53:c2:9f:cc:00:a6:32: e1:75:d5:b2:26:cc:bd:37:31:09:bb:bc:1d:66:17:86:2d:13: fc:79:6e:61:46:b5:d5:53:4c:a5:0d:2f:b2:4c:7d:5b:9a:2f: 9b:a7:cd:45:db:f1:fd:e1:6a:d9:76:0b:38:65:ce:eb:1f:73: 7f:50:fc:44:74:c2:6c:cf:6e:b6:39:e4:d8:21:eb:97:e0:b8: 8a:03:c7:71:b3:f8:9a:b7:6b:7a:55:8e:90:59:d2:cc:c8:b8: 36:63:95:f0:86:fc:a9:df:1b:23:3a:53:c9:40:eb:40:c6:a6: 04:79:32:bf:e2:df:d9:c4:6e:aa:e7:6d:80:bc:98:4b:a6:cf: 9c:40:58:c2:be:35:35:c7:d9:62:96:5f:88:d1:65:1c:18:34: ff:03:48:7d:f0:6c:8f:15:0c:3c:9b:37:bb:d5:ed:d2:d3:db: 40:7c:13:53:61:f7:04:44:ce:c2:ed:a1:55:87:51:c5:43:4b: 02:40:68:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQct3dWGFlWwEzf+d5MepoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNTIwY2VjYmEyNTFjZDM3Y2RmM2M0ZDVhYjAzNjI1NTIy YmJhYWMwHhcNMjUxMjI0MTMwMTAzWhcNMjUxMjI1MTMwMTAzWjAzMTEwLwYDVQQD Eyg3ZGM0ZDRhNWUwODcxZjQxNTE2YjU2Y2ZlM2M0MzExYTBkNWMwMzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppCVPHd1tvuKl9BuM7OhxEOPShKo 3Bjpyg6G6TYdRCbiisr4S29Q9ul/KayODuxi0iR4Z8Dtknb/jEYbtfk2FV34m97s zjNOhA7emXLlK/5wzf11c9GzYCYUBd5iX0pFic8nF5XgTWaFeAyK9NIKx8vkefM4 uY5ungMONBZzFztvYGd08iD7W0tH6kWe7z41KmG2+WBqicxfAIiiI88RWySKkScU tJGT08ldAJcFwzI2uUcUIZOHD+7HPS5W+7KwI5yBvHkCGb1q2bJ1WcQNmoHyTrfg KJJFi7NyvJue1HX0WuyXfhbT0pRQw2mkhK6pamcc3kfsuqWI2wufFsSJ/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3E1KXghx9BUWtWz+PEMRoNXANgMB8GA1UdIwQY MBaAFMBSDOy6JRzTfN88TVqwNiVSK7qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0ZJTTdMb2xITk44M3p4TldyQTJKVklydXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zNjFiYWUtYWIxNC00YWFiLWJiOGYt NzQxOGI5MmFhMjA5LzEvd0ZJTTdMb2xITk44M3p4TldyQTJKVklydXF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8zNjFiYWUtYWIxNC00YWFiLWJiOGYtNzQxOGI5MmFhMjA5 LzEvd0ZJTTdMb2xITk44M3p4TldyQTJKVklydXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArjAI98Vz /gajWiaVNYz+TtfOyMpOUdukfJ0fBeJNnh1fGgMhPU4fETvVEtRP2Y38wfisfHWo o5dj01Pn/prSSJ9Twp/MAKYy4XXVsibMvTcxCbu8HWYXhi0T/HluYUa11VNMpQ0v skx9W5ovm6fNRdvx/eFq2XYLOGXO6x9zf1D8RHTCbM9utjnk2CHrl+C4igPHcbP4 mrdrelWOkFnSzMi4NmOV8Ib8qd8bIzpTyUDrQMamBHkyv+Lf2cRuqudtgLyYS6bP nEBYwr41NcfZYpZfiNFlHBg0/wNIffBsjxUMPJs3u9Xt0tPbQHwTU2H3BETOwu2h VYdRxUNLAkBo9w== -----END CERTIFICATE-----Generated at Wed Dec 24 21:47:32 2025 by rpki-client