This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft File: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft (raw, json) Hash identifier: 7GLVH6fsVR/EhBEV5b5II/WOa4zMabfRK5tzydxND5A= Subject key identifier: 8E:FF:BF:D8:4E:1A:E6:D8:59:EE:1A:97:76:14:9A:AF:A4:6F:63:BE Authority key identifier: 5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C Certificate issuer: /CN=5aae19678aa37525512229a94e7890147183273c Certificate serial: 019B69C4F9813118606A898F9EF3C9B63B41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft Manifest number: 1774 Signing time: Mon 29 Dec 2025 11:01:15 +0000 Manifest this update: Mon 29 Dec 2025 11:01:15 +0000 Manifest next update: Tue 30 Dec 2025 11:01:15 +0000 Files and hashes: 1: 0ehbELwlxIROAJUXnHI7q0hHZvU.roa (hash: I3OhyXjmUaPoDinsu8stBnr83W6cuJYkPeqcRDRwksw=) 2: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl (hash: yVWVWvpYCVGxWAj6KBXlvDgddIoMuI9cV/2P/nkNUnY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 11:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:c4:f9:81:31:18:60:6a:89:8f:9e:f3:c9:b6:3b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aae19678aa37525512229a94e7890147183273c Validity Not Before: Dec 29 11:01:15 2025 GMT Not After : Dec 30 11:01:15 2025 GMT Subject: CN=8effbfd84e1ae6d859ee1a9776149aafa46f63be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7c:c7:05:83:93:0f:fa:2c:f5:9b:17:74:e8: 84:6a:23:37:7e:c4:4f:3a:95:73:8c:ea:f7:f1:84: 88:e0:38:df:51:8a:1a:6a:5e:ea:e6:2d:57:1d:46: e3:f4:08:91:c0:52:70:85:73:ff:42:98:5e:a1:94: 44:d3:13:15:fd:16:8d:77:e4:53:f0:92:ce:0d:98: a9:1f:7b:23:08:2b:c4:f0:c4:ae:52:9f:30:2f:fe: 47:ad:ab:ca:cc:8e:9c:3f:c4:9e:95:6a:0e:1a:f6: 16:f8:5d:df:bc:c5:b3:eb:a5:ec:8b:8f:15:80:8e: 46:fc:23:d7:a5:98:44:c7:06:5c:c4:0d:05:64:17: 97:1e:6b:b6:cb:34:d8:6c:42:34:5c:84:c4:90:94: 03:7b:f6:41:d4:a6:d0:83:9a:5b:57:e4:42:f1:78: 21:d0:58:31:a9:15:f0:d3:50:eb:a4:ca:71:b9:e8: df:5f:ba:43:be:81:d2:a5:3e:64:09:32:3f:de:18: 02:44:91:96:b1:69:e9:36:6a:de:ba:61:f4:e2:12: 05:f4:a0:3d:80:93:c0:3c:b1:89:0c:11:2c:d4:ba: eb:4f:f9:9b:16:54:5d:b0:f4:ed:36:c4:90:da:52: f4:73:07:d3:b9:ce:5e:09:1b:93:2a:3f:ae:8e:d8: fa:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:FF:BF:D8:4E:1A:E6:D8:59:EE:1A:97:76:14:9A:AF:A4:6F:63:BE X509v3 Authority Key Identifier: keyid:5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:79:0c:b6:83:d7:c2:ee:98:27:8e:93:41:ce:17:d5:8f:db: 56:ac:2e:31:97:7c:eb:8f:0a:ff:ce:95:1a:bd:74:26:13:75: 81:30:2b:b4:f2:93:71:95:3e:c0:41:61:5d:44:53:40:44:23: c9:6b:4a:e1:ac:c4:a4:79:2e:4b:0a:62:3f:5d:53:52:4c:1c: a0:cb:4c:ce:9b:de:e7:3d:d6:94:6f:3a:d4:26:78:72:b2:cf: d9:ed:79:c6:ac:76:97:bf:00:38:d6:1d:58:74:40:94:47:09: bb:b6:86:52:37:15:8e:4a:15:ad:14:b0:74:59:e8:78:57:95: bd:9f:c7:b1:c8:17:24:24:f8:a1:7a:0c:e8:04:1c:6a:e6:05: c5:5d:4e:21:ac:22:d3:1f:f3:fa:de:f4:24:e2:d1:64:ee:d1: bb:57:2e:47:3b:94:a8:1f:bb:67:db:20:40:37:39:75:87:3c: 64:b3:4c:ee:d5:08:0f:1d:3d:2d:bf:78:4d:c9:5b:4e:f2:7f: 72:ea:6e:08:b9:55:ff:83:a1:2d:18:56:96:bd:63:ad:c3:ba: e5:13:78:52:28:22:d0:03:ca:ff:1b:1e:23:96:fa:ad:86:41: e5:13:ab:80:f7:a7:6f:2e:de:7e:93:37:80:b8:bb:8a:94:64: 65:53:2a:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpxPmBMRhgaomPnvPJtjtBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYWUxOTY3OGFhMzc1MjU1MTIyMjlhOTRlNzg5MDE0NzE4 MzI3M2MwHhcNMjUxMjI5MTEwMTE1WhcNMjUxMjMwMTEwMTE1WjAzMTEwLwYDVQQD Eyg4ZWZmYmZkODRlMWFlNmQ4NTllZTFhOTc3NjE0OWFhZmE0NmY2M2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHzHBYOTD/os9ZsXdOiEaiM3fsRP OpVzjOr38YSI4DjfUYoaal7q5i1XHUbj9AiRwFJwhXP/QpheoZRE0xMV/RaNd+RT 8JLODZipH3sjCCvE8MSuUp8wL/5HravKzI6cP8SelWoOGvYW+F3fvMWz66Xsi48V gI5G/CPXpZhExwZcxA0FZBeXHmu2yzTYbEI0XITEkJQDe/ZB1KbQg5pbV+RC8Xgh 0FgxqRXw01DrpMpxuejfX7pDvoHSpT5kCTI/3hgCRJGWsWnpNmreumH04hIF9KA9 gJPAPLGJDBEs1LrrT/mbFlRdsPTtNsSQ2lL0cwfTuc5eCRuTKj+ujtj6ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7/v9hOGubYWe4al3YUmq+kb2O+MB8GA1UdIwQY MBaAFFquGWeKo3UlUSIpqU54kBRxgyc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3E0Wlo0cWpkU1ZSSWltcFRuaVFGSEdESnp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84YTkwZDktOTQ4YS00NmMyLTk3N2Et NjQzZjAyZGFlYjllLzEvV3E0Wlo0cWpkU1ZSSWltcFRuaVFGSEdESnp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84YTkwZDktOTQ4YS00NmMyLTk3N2EtNjQzZjAyZGFlYjll LzEvV3E0Wlo0cWpkU1ZSSWltcFRuaVFGSEdESnp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnkMtoPX wu6YJ46TQc4X1Y/bVqwuMZd8648K/86VGr10JhN1gTArtPKTcZU+wEFhXURTQEQj yWtK4azEpHkuSwpiP11TUkwcoMtMzpve5z3WlG861CZ4crLP2e15xqx2l78AONYd WHRAlEcJu7aGUjcVjkoVrRSwdFnoeFeVvZ/HscgXJCT4oXoM6AQcauYFxV1OIawi 0x/z+t70JOLRZO7Ru1cuRzuUqB+7Z9sgQDc5dYc8ZLNM7tUIDx09Lb94TclbTvJ/ cupuCLlV/4OhLRhWlr1jrcO65RN4Uigi0APK/xseI5b6rYZB5ROrgPenby7efpM3 gLi7ipRkZVMq6w== -----END CERTIFICATE-----Generated at Mon Dec 29 19:38:00 2025 by rpki-client