This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft File: wtwaJyuq59B3NPatRjevotLRsxI.mft (raw, json) Hash identifier: VB53PbNlKb8z0nzdY0p+3Peg7OM8ehJAozcFiQJyTwo= Subject key identifier: 96:D7:E1:49:CA:A0:D9:0E:0A:D8:CC:C6:3F:E4:86:01:B2:DC:BA:4C Authority key identifier: C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12 Certificate issuer: /CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312 Certificate serial: 019B3EDA5EDACEDB32FC41969B25815E7D60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft Manifest number: 0B75 Signing time: Sun 21 Dec 2025 03:00:56 +0000 Manifest this update: Sun 21 Dec 2025 03:00:56 +0000 Manifest next update: Mon 22 Dec 2025 03:00:56 +0000 Files and hashes: 1: RZAsu3ZzPjbXj9YVfQwdh_v0Wwo.roa (hash: WabOb6iYWPViHfgLBS9pTtVU1Jn9wGfO4xF3paFZqEI=) 2: wtwaJyuq59B3NPatRjevotLRsxI.crl (hash: WN3BeejsqHbMFkQH4s3POTRN67n+QG9XYSv5riv5dPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:5e:da:ce:db:32:fc:41:96:9b:25:81:5e:7d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312 Validity Not Before: Dec 21 03:00:56 2025 GMT Not After : Dec 22 03:00:56 2025 GMT Subject: CN=96d7e149caa0d90e0ad8ccc63fe48601b2dcba4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e7:e4:3a:77:53:3a:df:c2:c1:3a:a6:0e:02: 51:84:97:4c:5f:17:1e:61:47:ae:f0:4a:e0:59:da: 82:86:8e:19:86:1e:ca:fd:ee:55:6d:41:69:7b:49: c5:f3:a4:67:66:ea:f6:1c:e2:3a:c2:eb:72:be:e3: 9f:2a:2f:8d:23:6c:96:56:6c:9d:b7:2f:b9:06:f3: 62:d8:8c:95:64:23:1b:a3:87:33:a8:07:fe:98:ab: 7c:59:b2:51:98:fd:28:85:0f:75:a4:10:5d:c7:04: c2:e2:99:78:af:de:39:b8:79:70:b8:32:f7:f0:1d: 18:20:4a:bf:9b:32:a6:8f:24:79:04:3d:fa:f2:d9: b1:d8:7a:9f:4c:82:43:57:79:d0:c7:3f:ba:b8:f7: 8e:75:d4:a2:4f:47:4d:61:38:2c:f6:f2:75:83:d9: fd:7e:91:a1:8b:eb:65:1f:66:89:69:9b:3d:c3:14: 87:ba:67:7d:27:e7:40:20:73:76:08:da:a4:22:3a: 86:27:19:df:a2:26:a7:1e:d1:ae:24:15:d8:6b:a4: 10:9d:3e:fc:68:fa:f2:ba:c8:d8:05:04:c5:75:e8: 7c:99:e0:a9:a0:e1:e9:54:87:d9:c2:44:29:04:97: c3:19:54:4e:c5:d0:a8:74:ea:59:16:81:c0:c4:32: ba:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D7:E1:49:CA:A0:D9:0E:0A:D8:CC:C6:3F:E4:86:01:B2:DC:BA:4C X509v3 Authority Key Identifier: keyid:C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:50:41:01:45:f5:1a:fe:35:09:93:20:3b:63:cb:a4:c8:92: 24:79:06:16:8a:f5:9d:51:66:78:50:1f:d2:00:88:71:d3:7d: 1f:51:ba:6e:52:01:50:65:7c:48:f4:23:ff:7a:7c:0b:1b:f4: 3b:53:27:8e:fe:8d:68:d6:8a:c6:49:80:e5:86:09:23:30:7d: 18:58:08:27:43:a8:8f:c4:89:77:4f:3c:9d:54:e4:ec:0e:a8: 2d:2b:37:58:5b:62:8c:26:04:29:49:15:9d:b9:a5:b8:9b:53: dc:a0:f4:e7:0b:0d:dd:d6:f0:54:3a:fd:37:08:4d:fb:04:42: 86:72:4c:6a:3b:8b:27:87:8c:a8:13:f3:61:44:c9:25:63:67: 0d:86:76:fa:8f:d1:88:7a:f7:2a:a4:9b:c3:27:73:8d:ad:f2: cb:22:1d:b6:d6:a1:c8:67:e4:25:76:5c:db:87:61:56:bf:1d: 92:3b:b6:49:a1:dc:7e:21:c7:0f:1d:8f:e1:3e:4c:61:15:a4: 32:24:1f:df:1a:15:b3:d8:22:44:55:49:b0:25:75:dd:b3:f2: 1e:50:c8:66:b4:2e:24:2a:09:b9:14:41:5a:83:89:9d:86:5c: c1:a2:7b:73:03:eb:6b:be:f0:ec:f9:30:ad:db:71:e7:98:57: b0:67:51:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2l7aztsy/EGWmyWBXn1gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZGMxYTI3MmJhYWU3ZDA3NzM0ZjZhZDQ2MzdhZmEyZDJk MWIzMTIwHhcNMjUxMjIxMDMwMDU2WhcNMjUxMjIyMDMwMDU2WjAzMTEwLwYDVQQD Eyg5NmQ3ZTE0OWNhYTBkOTBlMGFkOGNjYzYzZmU0ODYwMWIyZGNiYTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+fkOndTOt/CwTqmDgJRhJdMXxce YUeu8ErgWdqCho4Zhh7K/e5VbUFpe0nF86RnZur2HOI6wutyvuOfKi+NI2yWVmyd ty+5BvNi2IyVZCMbo4czqAf+mKt8WbJRmP0ohQ91pBBdxwTC4pl4r945uHlwuDL3 8B0YIEq/mzKmjyR5BD368tmx2HqfTIJDV3nQxz+6uPeOddSiT0dNYTgs9vJ1g9n9 fpGhi+tlH2aJaZs9wxSHumd9J+dAIHN2CNqkIjqGJxnfoianHtGuJBXYa6QQnT78 aPryusjYBQTFdeh8meCpoOHpVIfZwkQpBJfDGVROxdCodOpZFoHAxDK6ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbX4UnKoNkOCtjMxj/khgGy3LpMMB8GA1UdIwQY MBaAFMLcGicrqufQdzT2rUY3r6LS0bMSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3R3YUp5dXE1OUIzTlBhdFJqZXZvdExSc3hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8wZTkzZDMtZTcyZC00NWY5LThlZjUt OTRiZThkMzNiOWQzLzEvd3R3YUp5dXE1OUIzTlBhdFJqZXZvdExSc3hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8wZTkzZDMtZTcyZC00NWY5LThlZjUtOTRiZThkMzNiOWQz LzEvd3R3YUp5dXE1OUIzTlBhdFJqZXZvdExSc3hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1BBAUX1 Gv41CZMgO2PLpMiSJHkGFor1nVFmeFAf0gCIcdN9H1G6blIBUGV8SPQj/3p8Cxv0 O1Mnjv6NaNaKxkmA5YYJIzB9GFgIJ0Ooj8SJd088nVTk7A6oLSs3WFtijCYEKUkV nbmluJtT3KD05wsN3dbwVDr9NwhN+wRChnJMajuLJ4eMqBPzYUTJJWNnDYZ2+o/R iHr3KqSbwydzja3yyyIdttahyGfkJXZc24dhVr8dkju2SaHcfiHHDx2P4T5MYRWk MiQf3xoVs9giRFVJsCV13bPyHlDIZrQuJCoJuRRBWoOJnYZcwaJ7cwPra77w7Pkw rdtx55hXsGdR0A== -----END CERTIFICATE-----Generated at Sun Dec 21 10:17:24 2025 by rpki-client