This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft File: WUmzHrtuTLvQzHcMxvTVD3jw63s.mft (raw, json) Hash identifier: xUeNgQdZKtrszSFprk6aydnZ5rMUEstpaY5O5socaxM= Subject key identifier: 2C:E1:A3:67:00:94:BA:39:9D:CE:23:64:1E:69:48:ED:36:8E:DE:F1 Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B Certificate issuer: /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b Certificate serial: 019B37FCAFE44D6B42D1E7497F79F3C1F0B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 19:01:05 +0000 Manifest this update: Fri 19 Dec 2025 19:01:05 +0000 Manifest next update: Sat 20 Dec 2025 19:01:05 +0000 Files and hashes: 1: IopWMeRqXOypB_fRacr3ZaxFtQI.roa (hash: FppOmUQRJ7eFBYEwXngpnxhSpl+Hc5qsOfWlbbkaJzw=) 2: Jr5TTPsXLbcmeb3jXm4kwRQ-J5g.roa (hash: 7oDZ/1zx1zR8r5+3OuEyrGxtjVcipWg0/FsvL6uuU3M=) 3: OL6yc8ZRNNzUrmUlMJiUidDHuh8.roa (hash: yRgWUM0pwyoXJeRdU0MzJI562R7I/kz9Vz80Sl7k9NU=) 4: WUmzHrtuTLvQzHcMxvTVD3jw63s.crl (hash: 1CgzPP1sRjhdwpoeljuxZI5aaKnbV6thQEpbfTOQ7ew=) 5: s4RqD1BS5l0_C1DY6qiIvroBiqY.roa (hash: zMF8j8B+bWyi3iOyQzBoW2FngUlQmNbr8zpHXcZBvR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:af:e4:4d:6b:42:d1:e7:49:7f:79:f3:c1:f0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b Validity Not Before: Dec 19 19:01:05 2025 GMT Not After : Dec 20 19:01:05 2025 GMT Subject: CN=2ce1a3670094ba399dce23641e6948ed368edef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ec:7c:21:04:99:fc:b7:a1:64:62:33:e8:f1: 9e:a4:f4:1a:d8:8d:58:59:2a:65:08:dc:3d:8f:ed: 4c:5c:85:91:74:26:b8:30:48:14:01:12:53:42:91: 9d:c1:fd:f5:fb:3e:1d:2f:3d:8b:92:98:4f:07:13: a1:63:0b:d6:35:73:0c:d3:0e:d1:69:97:ca:85:b3: 5e:e9:9d:cc:a6:25:a8:20:7b:8b:af:52:35:ab:73: 6b:4e:90:65:9a:c6:b8:d0:e9:93:d4:2f:99:49:d8: 1c:7f:78:ba:1e:e3:9b:84:fe:cb:db:c4:b3:3d:ef: e2:90:09:e4:5e:f7:6b:1d:e0:1f:e4:94:5f:f7:6d: c4:f2:39:14:88:db:76:76:69:0a:59:87:49:94:f2: 9b:9d:49:a0:14:0d:70:22:0d:3e:b5:3f:77:e1:ca: 31:38:77:61:66:d2:b3:60:a5:10:d2:42:06:aa:65: ab:ca:b2:c4:47:23:5d:3b:32:cd:f3:21:72:46:98: 25:68:87:27:9a:f0:70:21:2d:d6:75:e6:16:be:22: 40:77:15:dd:28:66:f1:62:57:97:58:ba:5a:70:02: 14:01:15:a3:89:8b:6f:ea:47:eb:ae:0d:91:ca:3c: ac:92:8b:9d:72:6d:d5:ab:be:ec:8f:78:e2:bb:c4: bf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E1:A3:67:00:94:BA:39:9D:CE:23:64:1E:69:48:ED:36:8E:DE:F1 X509v3 Authority Key Identifier: keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:2c:0f:43:6a:6d:4f:2c:f4:dc:81:3c:e2:a4:d5:da:0d:09: 1d:08:8e:eb:c6:b3:1b:12:de:71:51:54:c4:15:14:3a:69:32: d0:ba:a8:69:9d:a9:15:4e:6f:23:88:97:4e:de:09:38:8b:6c: 96:9b:9e:98:bc:30:7c:03:b2:2b:40:14:92:a8:aa:d4:e5:82: 23:06:27:fb:d7:4c:95:9e:3c:13:ed:7d:a3:5b:b2:f1:49:19: d7:df:99:d5:31:e1:e7:26:b2:ad:5d:e5:f2:73:d6:bb:81:ec: b1:96:91:2a:47:fd:48:95:0d:f0:ab:45:67:5f:03:28:43:a4: 8d:86:df:6f:65:05:29:68:5d:4c:31:f4:08:ba:64:c8:99:9f: 16:90:c2:c1:44:2f:ea:67:6f:2b:0d:0f:8f:fd:1b:a7:89:b7: 7d:eb:3b:9d:01:28:17:5d:90:58:49:11:72:79:67:a2:d0:90: 9d:01:07:b0:d0:50:4e:13:d1:57:35:f9:26:16:46:ec:3f:f2: 51:8e:70:a4:f0:52:97:78:98:73:56:25:ed:b6:23:da:0e:92: ee:7c:24:c7:75:15:70:17:fb:d6:ac:f4:e3:5d:0e:9d:d6:29: e8:d0:ae:f2:67:e7:6d:1f:0e:19:90:39:3b:2a:4b:8a:ba:8d: 44:e4:13:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/K/kTWtC0edJf3nzwfCxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NDliMzFlYmI2ZTRjYmJkMGNjNzcwY2M2ZjRkNTBmNzhm MGViN2IwHhcNMjUxMjE5MTkwMTA1WhcNMjUxMjIwMTkwMTA1WjAzMTEwLwYDVQQD EygyY2UxYTM2NzAwOTRiYTM5OWRjZTIzNjQxZTY5NDhlZDM2OGVkZWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxux8IQSZ/LehZGIz6PGepPQa2I1Y WSplCNw9j+1MXIWRdCa4MEgUARJTQpGdwf31+z4dLz2LkphPBxOhYwvWNXMM0w7R aZfKhbNe6Z3MpiWoIHuLr1I1q3NrTpBlmsa40OmT1C+ZSdgcf3i6HuObhP7L28Sz Pe/ikAnkXvdrHeAf5JRf923E8jkUiNt2dmkKWYdJlPKbnUmgFA1wIg0+tT934cox OHdhZtKzYKUQ0kIGqmWryrLERyNdOzLN8yFyRpglaIcnmvBwIS3WdeYWviJAdxXd KGbxYleXWLpacAIUARWjiYtv6kfrrg2Ryjyskoudcm3Vq77sj3jiu8S/6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCzho2cAlLo5nc4jZB5pSO02jt7xMB8GA1UdIwQY MBaAFFlJsx67bky70Mx3DMb01Q948Ot7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTkt MzE4MGFlNDI3NGYzLzEvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTktMzE4MGFlNDI3NGYz LzEvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICwPQ2pt Tyz03IE84qTV2g0JHQiO68azGxLecVFUxBUUOmky0LqoaZ2pFU5vI4iXTt4JOIts lpuemLwwfAOyK0AUkqiq1OWCIwYn+9dMlZ48E+19o1uy8UkZ19+Z1THh5yayrV3l 8nPWu4HssZaRKkf9SJUN8KtFZ18DKEOkjYbfb2UFKWhdTDH0CLpkyJmfFpDCwUQv 6mdvKw0Pj/0bp4m3fes7nQEoF12QWEkRcnlnotCQnQEHsNBQThPRVzX5JhZG7D/y UY5wpPBSl3iYc1Yl7bYj2g6S7nwkx3UVcBf71qz0410OndYp6NCu8mfnbR8OGZA5 OypLirqNROQT7A== -----END CERTIFICATE-----Generated at Sat Dec 20 01:31:52 2025 by rpki-client