This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft File: wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft (raw, json) Hash identifier: q95abqYHeK8mCOUhU55QUeWksDeNC0/7CcCgBM2AwDE= Subject key identifier: 58:70:F6:DE:BC:6F:D7:93:D4:C3:63:1E:3D:5D:AF:85:32:A0:14:1C Authority key identifier: C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F Certificate issuer: /CN=c013d0505d07aa10d9117ac2fd56266d4890518f Certificate serial: 019B4B4C4739A1DDDC60D020D607128A1E38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft Manifest number: 0C99 Signing time: Tue 23 Dec 2025 13:00:48 +0000 Manifest this update: Tue 23 Dec 2025 13:00:48 +0000 Manifest next update: Wed 24 Dec 2025 13:00:48 +0000 Files and hashes: 1: X7sxw7uNpouw4ILJQaZasQ1FOVw.roa (hash: 7K5qnvzu1jh/3cj6mY1PwjKcxXcNjjVrkTNjEwE3NGw=) 2: wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl (hash: b4ol7avuckWZLE/0IqZUy7/EvGZaWTZoDzeZzhRt2EQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4c:47:39:a1:dd:dc:60:d0:20:d6:07:12:8a:1e:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c013d0505d07aa10d9117ac2fd56266d4890518f Validity Not Before: Dec 23 13:00:48 2025 GMT Not After : Dec 24 13:00:48 2025 GMT Subject: CN=5870f6debc6fd793d4c3631e3d5daf8532a0141c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:42:2a:2b:82:56:69:89:77:57:d2:8c:79:64: c2:67:24:8c:b9:29:60:95:c6:66:6a:4f:2b:78:7c: f6:dc:ea:5c:d4:fa:dc:e2:ce:cd:1e:f4:5d:5e:02: 65:2c:d0:ce:36:cc:41:95:43:b5:f7:68:af:98:89: d5:bf:c1:f8:86:1f:25:50:b7:2c:06:fe:40:e9:1d: 6f:84:c1:ac:04:59:cd:d9:0b:89:1d:ef:e2:4c:8a: 12:b5:3d:8e:99:e5:f5:7d:d3:5d:7d:29:35:1c:9d: 58:4c:53:27:ab:c1:d4:68:2e:26:41:f4:cd:53:2b: 39:b7:b3:a8:bf:76:8a:5a:c8:a2:da:d9:3f:cf:8e: 02:5b:73:14:81:71:89:6b:dc:d1:f1:39:d9:9c:62: 03:67:42:13:52:b1:4a:62:bf:e3:80:f3:ce:c8:ec: 32:dc:b0:d3:46:df:08:6b:64:96:8b:d5:da:df:f3: 73:3a:5d:50:ba:6b:97:1f:bf:ef:5e:4c:8c:a9:ed: 5b:0b:cc:33:b0:07:7b:5d:78:9d:a5:72:08:df:dd: c7:00:38:95:e0:79:91:98:b4:d6:14:65:f0:c6:e4: 55:9d:fd:76:5f:8f:f0:9e:bb:71:0a:ea:15:e3:61: 6f:02:ee:b7:ac:ec:3f:82:c2:56:76:4c:a3:1a:5e: 1f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:70:F6:DE:BC:6F:D7:93:D4:C3:63:1E:3D:5D:AF:85:32:A0:14:1C X509v3 Authority Key Identifier: keyid:C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:51:72:74:69:b5:72:e9:90:12:94:11:87:05:89:94:ea:00: 78:00:75:43:e0:84:46:23:8c:39:4c:2e:11:d6:c3:74:90:e5: 1b:81:b5:d4:f0:92:47:e7:51:1b:ae:bb:75:7c:3a:10:b1:00: f9:c2:af:ef:b6:65:f1:39:41:ea:53:8a:0f:8f:14:29:ed:d2: 4e:22:b2:32:81:6f:1c:76:23:d6:d5:61:c7:ed:78:60:ab:f6: 60:6a:01:f7:89:f0:e6:7d:50:86:17:f6:1f:6c:16:6a:64:1d: 08:2f:11:9a:e9:34:1c:b0:2b:7a:eb:b3:20:7c:7c:a3:a1:9c: 36:ae:7b:69:84:99:79:56:85:2f:da:40:82:55:12:10:b1:11: 50:b0:be:83:03:bf:a9:9b:0e:c0:40:a0:71:c3:c9:7d:41:ad: 6b:78:40:db:cd:c9:e1:e5:13:81:2d:97:ff:97:b8:08:0d:52: 1c:8c:e1:86:f2:e3:82:ea:62:62:47:80:d7:46:a5:59:10:15: 5f:7c:b7:98:43:75:60:60:d4:dc:9c:f9:a1:0f:b4:e3:fc:b0: ef:b4:10:73:af:77:e9:c5:82:0f:1d:d4:cf:39:27:ea:37:fb: 05:e8:aa:86:ff:67:fe:1a:d2:b4:d4:d9:4f:41:32:5e:71:e3: d9:6c:46:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTEc5od3cYNAg1gcSih44MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTNkMDUwNWQwN2FhMTBkOTExN2FjMmZkNTYyNjZkNDg5 MDUxOGYwHhcNMjUxMjIzMTMwMDQ4WhcNMjUxMjI0MTMwMDQ4WjAzMTEwLwYDVQQD Eyg1ODcwZjZkZWJjNmZkNzkzZDRjMzYzMWUzZDVkYWY4NTMyYTAxNDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EIqK4JWaYl3V9KMeWTCZySMuSlg lcZmak8reHz23Opc1Prc4s7NHvRdXgJlLNDONsxBlUO192ivmInVv8H4hh8lULcs Bv5A6R1vhMGsBFnN2QuJHe/iTIoStT2OmeX1fdNdfSk1HJ1YTFMnq8HUaC4mQfTN Uys5t7Oov3aKWsii2tk/z44CW3MUgXGJa9zR8TnZnGIDZ0ITUrFKYr/jgPPOyOwy 3LDTRt8Ia2SWi9Xa3/NzOl1QumuXH7/vXkyMqe1bC8wzsAd7XXidpXII393HADiV 4HmRmLTWFGXwxuRVnf12X4/wnrtxCuoV42FvAu63rOw/gsJWdkyjGl4fUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhw9t68b9eT1MNjHj1dr4UyoBQcMB8GA1UdIwQY MBaAFMAT0FBdB6oQ2RF6wv1WJm1IkFGPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0JQUVVGMEhxaERaRVhyQ19WWW1iVWlRVVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8xOTgzOTYtZjQ4ZS00YTJjLWJhNWEt NmQyMTBmZDQyZDc3LzEvd0JQUVVGMEhxaERaRVhyQ19WWW1iVWlRVVk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8xOTgzOTYtZjQ4ZS00YTJjLWJhNWEtNmQyMTBmZDQyZDc3 LzEvd0JQUVVGMEhxaERaRVhyQ19WWW1iVWlRVVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFFydGm1 cumQEpQRhwWJlOoAeAB1Q+CERiOMOUwuEdbDdJDlG4G11PCSR+dRG667dXw6ELEA +cKv77Zl8TlB6lOKD48UKe3STiKyMoFvHHYj1tVhx+14YKv2YGoB94nw5n1Qhhf2 H2wWamQdCC8Rmuk0HLAreuuzIHx8o6GcNq57aYSZeVaFL9pAglUSELERULC+gwO/ qZsOwECgccPJfUGta3hA283J4eUTgS2X/5e4CA1SHIzhhvLjgupiYkeA10alWRAV X3y3mEN1YGDU3Jz5oQ+04/yw77QQc6936cWCDx3Uzzkn6jf7Beiqhv9n/hrStNTZ T0EyXnHj2WxGUg== -----END CERTIFICATE-----Generated at Tue Dec 23 22:39:36 2025 by rpki-client