This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft File: WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft (raw, json) Hash identifier: LDrACZhFsFz3eqIgnlM5wNOoMqy7s36ihmXguTvcS/Y= Subject key identifier: 2C:FF:E4:4A:C3:34:02:7C:C4:52:40:CF:2D:A8:13:6A:5B:89:BD:8C Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B Certificate issuer: /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b Certificate serial: 019B397D0D70DC6FA11F6ACD3FD815CE404C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft Manifest number: 0856 Signing time: Sat 20 Dec 2025 02:00:55 +0000 Manifest this update: Sat 20 Dec 2025 02:00:55 +0000 Manifest next update: Sun 21 Dec 2025 02:00:55 +0000 Files and hashes: 1: Vm3FZcwyN5QxEii_ssxb-za5Fkk.roa (hash: InHAGmxk/rpqwiHkXwhjwEsvW1iLiHdwr3I++HGignQ=) 2: WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl (hash: 6H/DAXOaxYjOtrOFIEidYneZ5c7dp58qNk03exk8llk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:0d:70:dc:6f:a1:1f:6a:cd:3f:d8:15:ce:40:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b Validity Not Before: Dec 20 02:00:55 2025 GMT Not After : Dec 21 02:00:55 2025 GMT Subject: CN=2cffe44ac334027cc45240cf2da8136a5b89bd8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:84:e0:6a:78:e1:d4:37:e3:17:0e:a1:29:50: b5:6e:51:ef:d1:de:40:65:d5:fe:7b:13:63:38:91: 43:fa:9f:8f:ef:c8:19:19:78:bc:eb:5f:cb:ec:9a: af:d6:6c:83:3d:ac:d2:b3:61:f3:8c:5f:a5:79:e5: 12:26:a5:a5:13:a7:d0:69:86:39:f8:d1:83:d2:96: 67:5f:64:d5:63:b4:b6:ab:ab:37:a0:17:01:92:68: 74:17:d0:47:fa:23:cf:f1:fd:1e:6e:86:bd:c1:5f: 21:7c:89:95:e2:06:81:3b:1c:82:d7:d5:73:a0:13: a9:91:02:eb:0b:0e:5f:d2:4c:72:af:ed:63:ec:28: 63:ca:06:d2:78:b7:56:12:ae:26:68:4e:2a:50:58: 09:7a:f4:9c:ee:88:18:b4:2b:0e:89:cd:17:88:95: f5:d4:3e:8c:96:16:e1:a7:59:1a:2a:31:e5:88:95: 3e:8a:c0:e3:f9:e1:5f:83:00:b3:7e:c1:fc:d8:7b: f5:08:d1:33:58:22:aa:48:71:86:68:f4:69:12:f4: a4:c8:26:18:f4:e6:56:6c:e1:80:3b:bf:64:09:df: 37:9f:e6:1a:63:32:39:b7:f2:26:14:77:47:45:72: 1c:64:a0:0c:c4:5d:5e:6c:82:86:b4:7b:e9:7d:75: a0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:FF:E4:4A:C3:34:02:7C:C4:52:40:CF:2D:A8:13:6A:5B:89:BD:8C X509v3 Authority Key Identifier: keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:ce:ec:91:36:1b:8e:fc:86:dd:3b:e9:94:01:da:4a:b4:a1: 8e:09:d6:ac:13:10:c2:c6:f4:21:e1:03:d0:aa:8c:e4:20:4d: 21:1e:69:90:d8:7c:67:00:0a:6f:b4:e6:a4:94:cf:c9:b0:f0: fc:b3:06:5a:52:39:f5:bd:f9:77:a9:4f:89:bd:08:01:e5:7e: b8:a3:50:44:16:d8:e9:7d:5b:c4:f9:28:54:11:1b:aa:13:91: ae:65:41:2d:46:c1:ee:0a:38:46:d8:7f:6c:18:97:bb:3c:b0: 2a:9f:d7:46:c5:f7:9a:c8:70:8d:96:04:2d:06:4a:37:37:b1: ec:7b:dd:7f:8c:1a:d0:6d:3a:51:6a:d5:f8:60:dd:eb:84:c9: 9f:2c:8c:4d:bc:cd:eb:93:7b:fd:1c:1c:01:d3:a1:af:7a:50: 04:0b:98:b6:e9:e2:d2:97:c5:f9:2f:7b:dd:33:af:f8:42:b5: 61:19:db:02:8e:a2:ae:0d:f0:ec:cf:21:de:95:1d:af:36:e0: 75:35:12:a2:c3:5d:0a:9b:51:20:da:6d:fc:ea:20:9c:48:65: a3:f6:1f:23:6b:8b:e0:7a:02:e3:20:14:1f:d5:ff:4d:88:d8: df:87:e4:08:1e:6b:17:b2:57:3f:25:44:27:48:1a:ae:e9:b6: 93:50:18:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fQ1w3G+hH2rNP9gVzkBMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NDU3YzY4NWM1YjE1YzNhZjRkNDNiNjBlNGQ0YzBhMGVl ZWQ2OGIwHhcNMjUxMjIwMDIwMDU1WhcNMjUxMjIxMDIwMDU1WjAzMTEwLwYDVQQD EygyY2ZmZTQ0YWMzMzQwMjdjYzQ1MjQwY2YyZGE4MTM2YTViODliZDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oTganjh1DfjFw6hKVC1blHv0d5A ZdX+exNjOJFD+p+P78gZGXi861/L7Jqv1myDPazSs2HzjF+leeUSJqWlE6fQaYY5 +NGD0pZnX2TVY7S2q6s3oBcBkmh0F9BH+iPP8f0eboa9wV8hfImV4gaBOxyC19Vz oBOpkQLrCw5f0kxyr+1j7ChjygbSeLdWEq4maE4qUFgJevSc7ogYtCsOic0XiJX1 1D6Mlhbhp1kaKjHliJU+isDj+eFfgwCzfsH82Hv1CNEzWCKqSHGGaPRpEvSkyCYY 9OZWbOGAO79kCd83n+YaYzI5t/ImFHdHRXIcZKAMxF1ebIKGtHvpfXWgowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCz/5ErDNAJ8xFJAzy2oE2pbib2MMB8GA1UdIwQY MBaAFFlFfGhcWxXDr01Dtg5NTAoO7taLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2Qt MGJmMmExYjJjY2NiLzEvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2QtMGJmMmExYjJjY2Ni LzEvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMc7skTYb jvyG3TvplAHaSrShjgnWrBMQwsb0IeED0KqM5CBNIR5pkNh8ZwAKb7TmpJTPybDw /LMGWlI59b35d6lPib0IAeV+uKNQRBbY6X1bxPkoVBEbqhORrmVBLUbB7go4Rth/ bBiXuzywKp/XRsX3mshwjZYELQZKNzex7Hvdf4wa0G06UWrV+GDd64TJnyyMTbzN 65N7/RwcAdOhr3pQBAuYtuni0pfF+S973TOv+EK1YRnbAo6irg3w7M8h3pUdrzbg dTUSosNdCptRINpt/OognEhlo/YfI2uL4HoC4yAUH9X/TYjY34fkCB5rF7JXPyVE J0garum2k1AYjA== -----END CERTIFICATE-----Generated at Sat Dec 20 06:52:31 2025 by rpki-client