This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft File: wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft (raw, json) Hash identifier: xJ8A7nHKIzETcPnsHkZ29RKDv7Iimj6iVRAn/yL7NAg= Subject key identifier: C5:18:31:16:F6:19:C9:76:D4:7B:E9:B0:79:8A:8B:2F:15:A0:07:5E Authority key identifier: C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F Certificate issuer: /CN=c013d0505d07aa10d9117ac2fd56266d4890518f Certificate serial: 019B6843E413CF16B1AD66AAFE705975D1CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft Manifest number: 0CA8 Signing time: Mon 29 Dec 2025 04:00:38 +0000 Manifest this update: Mon 29 Dec 2025 04:00:38 +0000 Manifest next update: Tue 30 Dec 2025 04:00:38 +0000 Files and hashes: 1: X7sxw7uNpouw4ILJQaZasQ1FOVw.roa (hash: 7K5qnvzu1jh/3cj6mY1PwjKcxXcNjjVrkTNjEwE3NGw=) 2: wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl (hash: 1VC6DVW+zcGjJwwsn091DauKtg46N7u7iBiNCase7dg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:43:e4:13:cf:16:b1:ad:66:aa:fe:70:59:75:d1:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c013d0505d07aa10d9117ac2fd56266d4890518f Validity Not Before: Dec 29 04:00:38 2025 GMT Not After : Dec 30 04:00:38 2025 GMT Subject: CN=c5183116f619c976d47be9b0798a8b2f15a0075e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:e0:30:2f:77:2d:fe:8e:c3:b5:ec:8e:f8: 0b:71:c1:9a:f7:19:1d:8e:42:83:44:77:47:b9:c2: ff:98:72:f1:94:82:22:9a:5b:87:45:e7:4e:de:ca: 8f:54:61:0c:05:5d:f5:a8:cf:62:0d:b2:8c:bc:e7: 95:fc:c3:e4:dc:10:ce:be:1e:9f:2b:9e:f8:c2:42: 17:68:78:23:b0:4b:5b:08:6c:27:36:69:b0:7b:2b: a3:6a:2b:a5:05:40:5e:a5:10:2f:f0:2d:91:f0:d1: a0:eb:7d:d9:ee:c8:b3:78:be:dd:e8:b3:2b:c7:5d: dc:b9:bf:a9:b2:8f:d9:da:e6:d2:aa:e6:06:1d:a9: 27:5f:86:dc:10:32:73:79:56:be:78:6c:a4:92:c1: b1:11:af:85:3d:db:ee:c0:a5:b8:f9:5e:1d:18:6e: ca:19:dc:6e:97:83:49:cd:6c:82:bc:47:7e:cb:0d: 2b:f5:e9:dc:30:67:7f:8d:f5:6e:ec:ac:2f:62:b4: e1:eb:09:fe:d9:24:6d:2c:ab:86:31:f0:0f:59:ea: 5b:27:84:dc:0e:c7:40:47:8b:6e:fb:41:12:b6:8a: 08:81:78:a0:2a:2a:43:07:68:d1:e5:b0:a8:b2:ed: e5:0e:9a:fc:4e:f3:78:92:53:b3:7f:dc:c0:ea:1b: fc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:18:31:16:F6:19:C9:76:D4:7B:E9:B0:79:8A:8B:2F:15:A0:07:5E X509v3 Authority Key Identifier: keyid:C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:01:bb:8f:93:41:11:95:8a:ff:d3:9f:6c:15:3c:93:46:ac: fe:71:11:95:30:49:a2:3e:24:30:13:44:65:ee:21:1d:d0:f7: c9:00:0c:23:e5:68:fb:b3:c7:f6:72:40:cf:d5:96:aa:e2:5b: 95:4d:b0:ff:3f:d5:77:94:cc:7f:89:26:e5:9c:4b:28:b2:99: 0a:68:2e:51:40:8f:ff:41:c6:3a:c6:ba:2e:45:f9:9a:4c:88: 1b:ed:7f:d6:3e:e6:e4:b4:35:70:02:31:a6:16:a7:96:7f:53: 38:87:8b:d5:a3:33:ec:e6:25:a5:dc:7e:c7:13:a7:08:71:fc: ab:64:81:5a:e6:da:05:c0:59:82:83:57:f5:0b:d2:b1:07:fb: 23:d8:b8:95:c8:2d:ce:5b:d7:1d:4c:1e:42:75:51:0b:16:8f: e0:e5:8b:1a:c0:7a:9e:5d:c7:72:58:59:41:4d:a3:90:bf:7d: 16:9c:b9:92:2b:23:3d:82:92:6a:d1:07:59:db:0e:a9:7d:96: 8c:37:83:a1:c0:8d:3f:6c:79:77:02:94:d5:32:92:b8:6b:d5: be:f0:53:32:a4:91:3e:b4:d2:68:d8:ae:89:c4:8f:af:a1:6e: ec:2c:c3:82:0a:8a:e4:41:6c:a6:16:0e:29:84:60:10:43:6e: 39:02:19:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoQ+QTzxaxrWaq/nBZddHLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTNkMDUwNWQwN2FhMTBkOTExN2FjMmZkNTYyNjZkNDg5 MDUxOGYwHhcNMjUxMjI5MDQwMDM4WhcNMjUxMjMwMDQwMDM4WjAzMTEwLwYDVQQD EyhjNTE4MzExNmY2MTljOTc2ZDQ3YmU5YjA3OThhOGIyZjE1YTAwNzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQfgMC93Lf6Ow7XsjvgLccGa9xkd jkKDRHdHucL/mHLxlIIimluHRedO3sqPVGEMBV31qM9iDbKMvOeV/MPk3BDOvh6f K574wkIXaHgjsEtbCGwnNmmweyujaiulBUBepRAv8C2R8NGg633Z7sizeL7d6LMr x13cub+pso/Z2ubSquYGHaknX4bcEDJzeVa+eGykksGxEa+FPdvuwKW4+V4dGG7K Gdxul4NJzWyCvEd+yw0r9encMGd/jfVu7KwvYrTh6wn+2SRtLKuGMfAPWepbJ4Tc DsdAR4tu+0EStooIgXigKipDB2jR5bCosu3lDpr8TvN4klOzf9zA6hv8DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUYMRb2Gcl21HvpsHmKiy8VoAdeMB8GA1UdIwQY MBaAFMAT0FBdB6oQ2RF6wv1WJm1IkFGPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0JQUVVGMEhxaERaRVhyQ19WWW1iVWlRVVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8xOTgzOTYtZjQ4ZS00YTJjLWJhNWEt NmQyMTBmZDQyZDc3LzEvd0JQUVVGMEhxaERaRVhyQ19WWW1iVWlRVVk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8xOTgzOTYtZjQ4ZS00YTJjLWJhNWEtNmQyMTBmZDQyZDc3 LzEvd0JQUVVGMEhxaERaRVhyQ19WWW1iVWlRVVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwG7j5NB EZWK/9OfbBU8k0as/nERlTBJoj4kMBNEZe4hHdD3yQAMI+Vo+7PH9nJAz9WWquJb lU2w/z/Vd5TMf4km5ZxLKLKZCmguUUCP/0HGOsa6LkX5mkyIG+1/1j7m5LQ1cAIx phanln9TOIeL1aMz7OYlpdx+xxOnCHH8q2SBWubaBcBZgoNX9QvSsQf7I9i4lcgt zlvXHUweQnVRCxaP4OWLGsB6nl3HclhZQU2jkL99Fpy5kisjPYKSatEHWdsOqX2W jDeDocCNP2x5dwKU1TKSuGvVvvBTMqSRPrTSaNiuicSPr6Fu7CzDggqK5EFsphYO KYRgEENuOQIZAw== -----END CERTIFICATE-----Generated at Mon Dec 29 06:51:59 2025 by rpki-client