This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft File: Wu6ShG_jj96OD2KUjKmIPBopt1U.mft (raw, json) Hash identifier: lsgh4NOYK6d54fKXhz8kaLLlGd48KHTMKWwD9rtWrHM= Subject key identifier: 6E:5D:FB:8C:9C:95:34:5E:31:AE:D3:55:11:98:E9:F5:B8:01:84:59 Authority key identifier: 5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55 Certificate issuer: /CN=5aee92846fe38fde8e0f62948ca9883c1a29b755 Certificate serial: 019B3AFDD4121C3D3F239E693DCAE9610CCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft Manifest number: 0BC8 Signing time: Sat 20 Dec 2025 09:01:11 +0000 Manifest this update: Sat 20 Dec 2025 09:01:11 +0000 Manifest next update: Sun 21 Dec 2025 09:01:11 +0000 Files and hashes: 1: QnsXwvgDL1vpnE_nHW7cZ8l-yys.roa (hash: VNqFUdRBsRfrCU4DQ7mXN2LJBOfMOJgZg+HVbNE534A=) 2: Wu6ShG_jj96OD2KUjKmIPBopt1U.crl (hash: eO6QEROSphYVRvi2YjPxF5Vzsyy1yBfAOxYqBrUwQOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:d4:12:1c:3d:3f:23:9e:69:3d:ca:e9:61:0c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aee92846fe38fde8e0f62948ca9883c1a29b755 Validity Not Before: Dec 20 09:01:11 2025 GMT Not After : Dec 21 09:01:11 2025 GMT Subject: CN=6e5dfb8c9c95345e31aed3551198e9f5b8018459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1d:12:c1:d1:94:64:20:14:b3:1f:8f:91:2c: 0d:23:9b:05:69:42:c0:11:aa:1e:ba:4e:9c:79:e2: 05:75:5a:3a:a5:38:9f:93:86:57:9e:ad:fe:55:ad: ae:96:72:04:d5:6e:00:ea:a3:43:6b:9c:7b:3f:8c: 1a:43:cf:80:c4:e2:af:65:85:28:10:46:5b:fd:c8: 7a:80:d3:01:7c:db:40:0c:b0:39:49:24:8a:a0:82: 74:6b:0a:ea:38:f7:26:cd:26:f2:b8:8a:e2:36:4d: a8:74:33:eb:cb:75:e1:77:23:34:86:6d:46:d9:91: a0:a5:8f:56:59:b2:9e:30:71:10:1a:29:0a:ab:0d: b6:ae:08:ab:97:cd:74:1b:0f:b8:da:e0:98:cb:4d: 75:b2:4b:77:25:30:36:97:15:27:d4:f3:78:0e:6e: 3b:e0:1c:e3:b5:78:1a:0f:7d:b5:12:fc:2a:27:6f: a4:f8:a1:14:44:ee:20:85:ec:e9:bd:07:d1:d9:09: 34:19:15:bf:9d:e9:34:05:b9:eb:8b:d4:67:f9:12: 82:7d:f6:04:0f:4a:eb:22:5e:9d:2b:14:e1:1b:b4: ba:67:e6:81:ca:08:b0:01:5b:c2:0c:f2:24:aa:94: e9:38:d0:20:f7:4a:3c:42:42:d4:ac:5c:34:f2:01: 90:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:5D:FB:8C:9C:95:34:5E:31:AE:D3:55:11:98:E9:F5:B8:01:84:59 X509v3 Authority Key Identifier: keyid:5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a5:6f:c5:e6:af:f1:bb:c6:00:1b:92:30:10:5b:24:0b:71: ea:b1:fb:32:61:4e:f8:91:88:48:f5:ac:a1:87:9e:59:b4:bc: c3:c5:05:c5:a6:2f:a2:54:f3:b1:92:03:87:40:a8:d8:57:10: 87:44:75:df:e8:d1:48:dd:a5:97:98:20:af:c6:73:da:4f:e2: a2:e7:6b:1d:c8:9a:4e:95:a7:e1:d9:fd:c4:07:dd:af:f4:ec: 68:1c:33:b6:67:ae:2f:6e:74:fa:42:3c:a8:ee:de:a6:2f:33: 01:22:f5:4e:80:50:2f:97:38:b5:13:42:2f:69:4d:d2:58:30: 98:e0:92:4b:64:bf:91:a1:14:31:16:b6:70:7c:65:1e:41:01: f0:3a:88:35:b9:11:e4:e8:d8:a9:10:6c:4f:1a:e7:9c:06:04: ae:da:64:43:bd:83:bb:c7:54:98:e8:8b:89:3d:d8:e1:86:43: 4a:d3:f5:89:24:b7:b8:8a:7e:60:9c:b0:d8:09:d1:3e:fa:03: 0d:2f:06:e3:9a:16:cb:f8:07:2e:85:7a:be:07:8e:39:94:bc: 26:3c:a5:be:f9:6d:d0:4c:0f:ab:2d:50:18:ff:52:6d:d0:83: 9d:bd:a5:2e:23:d2:82:00:84:cc:5f:b8:72:56:2b:a1:88:2c: 0c:12:dc:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/dQSHD0/I55pPcrpYQzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZWU5Mjg0NmZlMzhmZGU4ZTBmNjI5NDhjYTk4ODNjMWEy OWI3NTUwHhcNMjUxMjIwMDkwMTExWhcNMjUxMjIxMDkwMTExWjAzMTEwLwYDVQQD Eyg2ZTVkZmI4YzljOTUzNDVlMzFhZWQzNTUxMTk4ZTlmNWI4MDE4NDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx0SwdGUZCAUsx+PkSwNI5sFaULA Eaoeuk6ceeIFdVo6pTifk4ZXnq3+Va2ulnIE1W4A6qNDa5x7P4waQ8+AxOKvZYUo EEZb/ch6gNMBfNtADLA5SSSKoIJ0awrqOPcmzSbyuIriNk2odDPry3XhdyM0hm1G 2ZGgpY9WWbKeMHEQGikKqw22rgirl810Gw+42uCYy011skt3JTA2lxUn1PN4Dm47 4BzjtXgaD321EvwqJ2+k+KEURO4ghezpvQfR2Qk0GRW/nek0Bbnri9Rn+RKCffYE D0rrIl6dKxThG7S6Z+aBygiwAVvCDPIkqpTpONAg90o8QkLUrFw08gGQvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5d+4yclTReMa7TVRGY6fW4AYRZMB8GA1UdIwQY MBaAFFrukoRv44/ejg9ilIypiDwaKbdVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3U2U2hHX2pqOTZPRDJLVWpLbUlQQm9wdDFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8xZGIwY2ItNzlmZC00ZDY5LTk1MTUt NDJmY2ZiNzU1NzQ0LzEvV3U2U2hHX2pqOTZPRDJLVWpLbUlQQm9wdDFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8xZGIwY2ItNzlmZC00ZDY5LTk1MTUtNDJmY2ZiNzU1NzQ0 LzEvV3U2U2hHX2pqOTZPRDJLVWpLbUlQQm9wdDFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqVvxeav 8bvGABuSMBBbJAtx6rH7MmFO+JGISPWsoYeeWbS8w8UFxaYvolTzsZIDh0Co2FcQ h0R13+jRSN2ll5ggr8Zz2k/ioudrHciaTpWn4dn9xAfdr/TsaBwztmeuL250+kI8 qO7epi8zASL1ToBQL5c4tRNCL2lN0lgwmOCSS2S/kaEUMRa2cHxlHkEB8DqINbkR 5OjYqRBsTxrnnAYErtpkQ72Du8dUmOiLiT3Y4YZDStP1iSS3uIp+YJyw2AnRPvoD DS8G45oWy/gHLoV6vgeOOZS8Jjylvvlt0EwPqy1QGP9SbdCDnb2lLiPSggCEzF+4 clYroYgsDBLcUw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:04:47 2025 by rpki-client