This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft File: wXLnuWJS7qhzJjPTulGpsFWDp7M.mft (raw, json) Hash identifier: Y+pBD0ihmAUlKtsF/RqzyssCIz4wtnRBpW6tWruBiPg= Subject key identifier: C4:83:AA:D1:C0:DB:C0:68:37:E4:A1:35:4B:BE:9E:1E:D3:8F:2A:92 Authority key identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3 Certificate issuer: /CN=c172e7b96252eea8732633d3ba51a9b05583a7b3 Certificate serial: 019B5D5298783FCC0756AD6140626EE206B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft Manifest number: 0E7B Signing time: Sat 27 Dec 2025 01:00:52 +0000 Manifest this update: Sat 27 Dec 2025 01:00:52 +0000 Manifest next update: Sun 28 Dec 2025 01:00:52 +0000 Files and hashes: 1: W1KkGv3sjtsEadnyDnbZKiSJ0W4.roa (hash: Hwc+g3pqAXEzqdnTsf6BwWsSvsLJSB5kNUhL8qZNZ1g=) 2: wXLnuWJS7qhzJjPTulGpsFWDp7M.crl (hash: nDPtZC78xS+roI06MTmWf3HSNhfL2BcEGOD/9IJbC+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 01:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:52:98:78:3f:cc:07:56:ad:61:40:62:6e:e2:06:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c172e7b96252eea8732633d3ba51a9b05583a7b3 Validity Not Before: Dec 27 01:00:52 2025 GMT Not After : Dec 28 01:00:52 2025 GMT Subject: CN=c483aad1c0dbc06837e4a1354bbe9e1ed38f2a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:43:c6:dd:ff:4a:92:21:7e:54:a8:d5:26:e8: 1c:3b:48:87:43:0a:f7:9f:0b:f6:2b:80:fc:8e:8c: 4d:15:82:ab:b6:ef:eb:57:4f:90:95:5c:19:6d:51: c6:f6:e0:db:53:ad:8e:b9:74:a1:c0:f0:b9:7c:5e: c3:69:cb:f3:bc:f6:ac:68:58:a3:d2:79:df:88:52: a5:51:7f:87:2f:5e:8b:99:67:05:3d:4e:60:1a:a6: 3a:ce:78:bb:98:c5:c8:f1:a2:99:17:75:8a:72:cc: 0d:2e:80:2d:a9:0a:a3:e7:d2:e6:9b:81:5b:0d:39: 9a:cd:04:de:30:d6:0e:49:55:ce:49:75:12:91:b6: ed:79:50:f4:a5:5c:6c:57:c7:49:b4:3c:98:f7:1b: d8:99:50:6b:1c:18:a2:71:1f:17:5a:fd:b3:1e:b1: 6a:59:c9:51:7b:47:bd:9e:8e:7c:0c:d7:72:c3:2e: 3c:0f:9c:f5:ff:17:d4:a6:2c:a3:84:ec:9f:ac:ec: 8b:b7:3c:9b:f6:34:55:eb:ff:5c:21:37:a1:70:3b: 51:15:88:00:15:1d:dc:08:de:50:1f:63:c1:b6:c1: 06:d0:84:7f:fa:99:c6:01:83:d2:47:01:f0:fa:d6: 00:45:03:1c:d6:d1:59:fb:36:68:6f:f8:c7:d5:64: 6f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:83:AA:D1:C0:DB:C0:68:37:E4:A1:35:4B:BE:9E:1E:D3:8F:2A:92 X509v3 Authority Key Identifier: keyid:C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:78:35:3f:4e:03:24:14:7a:f6:bc:1f:91:ff:21:6a:ca:d9: 56:87:34:59:bd:35:8e:24:53:d4:9c:08:08:5a:45:f6:a3:8d: f3:6a:b6:c0:94:35:82:7f:2c:6c:8c:ce:d4:ba:66:5a:b6:53: 0d:90:70:33:a3:f6:54:8f:6e:f1:20:b0:e0:bf:33:07:0a:3d: 0e:bb:90:36:60:d0:d4:ce:42:48:46:e1:76:90:60:03:4a:fa: 83:31:f1:8c:5f:d7:95:03:79:bb:70:89:83:32:e1:60:43:ac: 1a:b5:2f:d2:74:00:18:56:76:56:50:d9:71:4e:ba:e5:82:99: 18:7b:50:a2:10:89:5c:fd:bb:9e:ab:84:13:c0:aa:49:10:2e: 22:c0:65:cc:a8:a1:9b:c1:59:ca:ea:47:21:d7:a1:e3:0e:40: d8:82:90:b2:eb:3d:6f:5e:42:47:4a:c7:5c:f0:00:7d:71:05: 21:73:74:6e:d3:aa:be:52:6a:f3:9f:15:79:3e:f3:0f:e7:43: 30:e4:fe:ac:1d:3e:7a:6c:20:e2:c7:06:64:ea:84:39:75:5d: 30:1c:6b:25:0a:4a:c3:d7:68:ca:7b:a0:9f:29:7c:73:87:45: cd:9c:fc:42:78:9b:13:bf:3d:15:88:e5:b6:c5:af:ee:d0:a3: 1d:a6:7a:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdUph4P8wHVq1hQGJu4gaxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNzJlN2I5NjI1MmVlYTg3MzI2MzNkM2JhNTFhOWIwNTU4 M2E3YjMwHhcNMjUxMjI3MDEwMDUyWhcNMjUxMjI4MDEwMDUyWjAzMTEwLwYDVQQD EyhjNDgzYWFkMWMwZGJjMDY4MzdlNGExMzU0YmJlOWUxZWQzOGYyYTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0PG3f9KkiF+VKjVJugcO0iHQwr3 nwv2K4D8joxNFYKrtu/rV0+QlVwZbVHG9uDbU62OuXShwPC5fF7DacvzvPasaFij 0nnfiFKlUX+HL16LmWcFPU5gGqY6zni7mMXI8aKZF3WKcswNLoAtqQqj59Lmm4Fb DTmazQTeMNYOSVXOSXUSkbbteVD0pVxsV8dJtDyY9xvYmVBrHBiicR8XWv2zHrFq WclRe0e9no58DNdywy48D5z1/xfUpiyjhOyfrOyLtzyb9jRV6/9cITehcDtRFYgA FR3cCN5QH2PBtsEG0IR/+pnGAYPSRwHw+tYARQMc1tFZ+zZob/jH1WRvqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSDqtHA28BoN+ShNUu+nh7TjyqSMB8GA1UdIwQY MBaAFMFy57liUu6ocyYz07pRqbBVg6ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNmVjNzEtMTZlNS00MTYzLWEwNDIt MzE3ZGI0MjMyZjNiLzEvd1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hNmVjNzEtMTZlNS00MTYzLWEwNDItMzE3ZGI0MjMyZjNi LzEvd1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJng1P04D JBR69rwfkf8hasrZVoc0Wb01jiRT1JwICFpF9qON82q2wJQ1gn8sbIzO1LpmWrZT DZBwM6P2VI9u8SCw4L8zBwo9DruQNmDQ1M5CSEbhdpBgA0r6gzHxjF/XlQN5u3CJ gzLhYEOsGrUv0nQAGFZ2VlDZcU665YKZGHtQohCJXP27nquEE8CqSRAuIsBlzKih m8FZyupHIdeh4w5A2IKQsus9b15CR0rHXPAAfXEFIXN0btOqvlJq858VeT7zD+dD MOT+rB0+emwg4scGZOqEOXVdMBxrJQpKw9doynugnyl8c4dFzZz8QnibE789FYjl tsWv7tCjHaZ6Pg== -----END CERTIFICATE-----Generated at Sat Dec 27 10:52:14 2025 by rpki-client