This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft File: wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft (raw, json) Hash identifier: K4ZQ/Wrr0/cN4betdMUdPr3NrUAd2zZbUSUqOhAC2xA= Subject key identifier: 04:92:DB:DD:E1:C0:48:8E:9A:B3:99:3C:CA:7D:A5:8A:F9:1A:D6:94 Authority key identifier: C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F Certificate issuer: /CN=c013d0505d07aa10d9117ac2fd56266d4890518f Certificate serial: 019B75C8DBA2B04DDF98BE5FDDCE95554750 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft Manifest number: 0CAF Signing time: Wed 31 Dec 2025 19:00:56 +0000 Manifest this update: Wed 31 Dec 2025 19:00:56 +0000 Manifest next update: Thu 01 Jan 2026 19:00:56 +0000 Files and hashes: 1: X7sxw7uNpouw4ILJQaZasQ1FOVw.roa (hash: 7K5qnvzu1jh/3cj6mY1PwjKcxXcNjjVrkTNjEwE3NGw=) 2: wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl (hash: TGB7In21r+8uytL/AbCqa6ch4LKUkl5CCpSpTULsbow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 19:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:c8:db:a2:b0:4d:df:98:be:5f:dd:ce:95:55:47:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c013d0505d07aa10d9117ac2fd56266d4890518f Validity Not Before: Dec 31 19:00:56 2025 GMT Not After : Jan 1 19:00:56 2026 GMT Subject: CN=0492dbdde1c0488e9ab3993cca7da58af91ad694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:15:79:4c:62:e3:97:66:c4:cf:d3:f0:15:60: 9e:ce:22:27:22:03:18:f8:11:07:29:7d:d3:29:cf: 9e:bd:fa:2f:f9:b3:29:49:04:1d:44:d3:36:34:21: 53:34:61:cf:6f:8f:c7:73:05:63:c7:a4:20:0d:0e: 84:b6:e5:9f:d2:a7:90:f6:01:d3:f2:32:8c:68:fc: c9:c1:fd:a5:a4:fe:67:50:ac:b6:1a:7b:74:b6:25: 94:f5:7b:1e:2e:cb:32:d1:bf:62:b7:7f:10:67:98: 46:12:c8:a8:f2:b1:c5:b5:db:42:59:e5:f6:8c:ea: 75:47:04:67:e8:8d:9c:6c:39:04:30:81:29:70:be: ae:33:8a:ec:04:d2:6d:72:9e:e5:0c:cb:a1:66:33: 42:9a:6d:15:1b:a3:66:a8:04:58:60:40:10:58:cf: b2:d5:4d:04:a4:46:f6:2e:f9:f0:f4:58:b9:3a:75: 3b:e9:9f:07:a7:bd:0d:7f:a7:4a:78:89:18:e9:af: d7:2d:ce:60:0e:74:d2:2d:30:b4:05:70:ff:12:02: 5f:74:57:02:78:a3:21:b4:88:29:7a:09:34:99:61: 43:4c:05:a7:3b:62:a0:47:69:fd:47:0e:2d:8a:1b: 61:d1:0b:56:c1:50:b2:68:d6:1a:ae:8f:ed:f0:f6: a5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:92:DB:DD:E1:C0:48:8E:9A:B3:99:3C:CA:7D:A5:8A:F9:1A:D6:94 X509v3 Authority Key Identifier: keyid:C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:17:65:85:27:f0:42:16:e2:23:a4:25:9b:60:c8:90:42:45: 9b:44:a7:d2:78:63:77:48:48:d1:b5:95:0f:a3:ae:b7:25:8f: 9b:6a:50:38:51:0a:40:28:52:96:64:19:b7:1b:c7:f7:c5:9f: ca:77:d7:14:10:45:34:06:70:eb:72:22:57:77:30:39:e0:87: be:81:bf:41:1a:27:12:cb:5f:b7:87:fd:5a:b8:88:4e:27:77: 97:c1:87:20:5c:fb:74:4a:e8:73:ec:3f:47:08:36:70:48:29: e6:a6:60:c1:cc:e8:82:03:f9:0f:0c:f6:05:76:86:d2:03:8c: 38:96:b6:ab:6a:de:8f:d6:02:54:ae:52:17:39:d0:25:bf:c0: ba:e8:61:37:9d:5b:0e:05:ad:21:b2:03:30:fc:3e:d2:bf:05: 0b:a4:ba:2c:25:94:d1:b5:a4:bf:bb:66:aa:a4:3d:20:31:46: 42:89:63:9f:2b:46:f2:9a:a3:74:63:d5:2f:bc:56:ca:22:81: 90:56:7c:b0:89:e4:56:8e:f2:93:d1:d6:8c:54:ca:e9:8d:36: 52:aa:46:3b:87:6d:2c:4b:3b:2e:28:b0:d3:26:48:b4:3c:ef: 62:46:16:17:a5:19:6d:9f:8a:f9:88:bc:66:1f:35:f7:f5:67: 2e:dd:29:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1yNuisE3fmL5f3c6VVUdQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTNkMDUwNWQwN2FhMTBkOTExN2FjMmZkNTYyNjZkNDg5 MDUxOGYwHhcNMjUxMjMxMTkwMDU2WhcNMjYwMTAxMTkwMDU2WjAzMTEwLwYDVQQD EygwNDkyZGJkZGUxYzA0ODhlOWFiMzk5M2NjYTdkYTU4YWY5MWFkNjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBV5TGLjl2bEz9PwFWCeziInIgMY +BEHKX3TKc+evfov+bMpSQQdRNM2NCFTNGHPb4/HcwVjx6QgDQ6EtuWf0qeQ9gHT 8jKMaPzJwf2lpP5nUKy2Gnt0tiWU9XseLssy0b9it38QZ5hGEsio8rHFtdtCWeX2 jOp1RwRn6I2cbDkEMIEpcL6uM4rsBNJtcp7lDMuhZjNCmm0VG6NmqARYYEAQWM+y 1U0EpEb2Lvnw9Fi5OnU76Z8Hp70Nf6dKeIkY6a/XLc5gDnTSLTC0BXD/EgJfdFcC eKMhtIgpegk0mWFDTAWnO2KgR2n9Rw4tihth0QtWwVCyaNYaro/t8PalswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASS293hwEiOmrOZPMp9pYr5GtaUMB8GA1UdIwQY MBaAFMAT0FBdB6oQ2RF6wv1WJm1IkFGPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0JQUVVGMEhxaERaRVhyQ19WWW1iVWlRVVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8xOTgzOTYtZjQ4ZS00YTJjLWJhNWEt NmQyMTBmZDQyZDc3LzEvd0JQUVVGMEhxaERaRVhyQ19WWW1iVWlRVVk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8xOTgzOTYtZjQ4ZS00YTJjLWJhNWEtNmQyMTBmZDQyZDc3 LzEvd0JQUVVGMEhxaERaRVhyQ19WWW1iVWlRVVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBdlhSfw QhbiI6Qlm2DIkEJFm0Sn0nhjd0hI0bWVD6OutyWPm2pQOFEKQChSlmQZtxvH98Wf ynfXFBBFNAZw63IiV3cwOeCHvoG/QRonEstft4f9WriITid3l8GHIFz7dEroc+w/ Rwg2cEgp5qZgwczoggP5Dwz2BXaG0gOMOJa2q2rej9YCVK5SFznQJb/AuuhhN51b DgWtIbIDMPw+0r8FC6S6LCWU0bWkv7tmqqQ9IDFGQoljnytG8pqjdGPVL7xWyiKB kFZ8sInkVo7yk9HWjFTK6Y02UqpGO4dtLEs7Liiw0yZItDzvYkYWF6UZbZ+K+Yi8 Zh819/VnLt0poA== -----END CERTIFICATE-----Generated at Thu Jan 1 03:54:01 2026 by rpki-client