This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft File: WXWCvD8LrbZhpp-5pIOzfskFgn4.mft (raw, json) Hash identifier: KS/v1qX3zaMBegXmeG44m4BCnNoYW2U4taR1587QEtI= Subject key identifier: 4E:CA:CE:2F:31:66:3E:8D:81:06:43:9E:17:A6:10:7B:E5:8D:F7:98 Authority key identifier: 59:75:82:BC:3F:0B:AD:B6:61:A6:9F:B9:A4:83:B3:7E:C9:05:82:7E Certificate issuer: /CN=597582bc3f0badb661a69fb9a483b37ec905827e Certificate serial: 019B37216394AD0124A2D6463F2E2009B77D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft Manifest number: 0919 Signing time: Fri 19 Dec 2025 15:01:33 +0000 Manifest this update: Fri 19 Dec 2025 15:01:33 +0000 Manifest next update: Sat 20 Dec 2025 15:01:33 +0000 Files and hashes: 1: WXWCvD8LrbZhpp-5pIOzfskFgn4.crl (hash: Xq+WXSOtAXoYN7AbkDlFY/Q6h6LJT+GM85jgr800hx4=) 2: znM5PqUezkFDKWgZEHXhAygqSEg.roa (hash: rSr63BYEqjq/FlyGA7frAkMF1kFl0699EpH0gvi204o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.crl rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:63:94:ad:01:24:a2:d6:46:3f:2e:20:09:b7:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597582bc3f0badb661a69fb9a483b37ec905827e Validity Not Before: Dec 19 15:01:33 2025 GMT Not After : Dec 20 15:01:33 2025 GMT Subject: CN=4ecace2f31663e8d8106439e17a6107be58df798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f5:35:c2:b2:73:82:38:7b:1b:9f:c5:74:4a: a6:7d:c2:5e:08:06:77:54:2e:23:09:19:48:95:f5: 75:ba:b3:3f:49:67:3e:60:f4:40:9d:f9:a1:91:95: eb:65:5d:62:48:d9:b5:8d:9e:14:e2:8d:b8:0c:b3: 61:ae:70:55:2c:56:60:bb:25:07:73:95:c9:9d:31: d0:b5:ed:f8:6a:41:31:68:a4:ca:d2:5d:f2:58:98: c6:21:5f:e3:3d:88:11:67:da:9d:8d:ae:29:81:b1: df:d2:09:8a:e0:ee:0a:c4:9e:ae:5b:fa:49:36:f6: 52:62:64:c8:16:8b:48:e8:07:1e:c5:71:df:ae:2b: d8:e4:7f:51:e3:ca:3a:8f:a9:e4:bc:ef:ae:45:4f: 11:5e:23:04:ef:a9:9b:9e:60:cd:da:19:ee:4a:12: 42:92:2b:2e:90:17:73:03:cb:04:44:38:b4:c5:59: fe:ba:bb:08:48:0e:4a:52:a3:40:20:32:41:df:d0: 45:92:25:89:b8:a4:f5:3a:22:18:07:62:7b:f4:bb: b8:7d:96:33:ff:b9:8b:2a:8d:f8:2b:4f:74:d8:ae: 5f:00:ff:56:41:ea:e0:c6:6b:3a:1e:f4:11:01:c8: e1:d7:14:84:e9:3b:d5:42:e2:e7:0b:1e:37:ee:7c: 0f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CA:CE:2F:31:66:3E:8D:81:06:43:9E:17:A6:10:7B:E5:8D:F7:98 X509v3 Authority Key Identifier: keyid:59:75:82:BC:3F:0B:AD:B6:61:A6:9F:B9:A4:83:B3:7E:C9:05:82:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:cc:f9:63:38:ff:57:ec:5a:d2:84:5a:43:9e:fb:df:09:d5: ae:be:2c:b0:b5:34:ad:d7:44:5a:3c:b8:6e:c6:de:00:97:44: 6a:d9:64:8c:40:fb:11:5a:9c:c6:71:25:58:62:9f:3a:57:81: 9b:e1:34:b9:7d:11:19:6b:16:c1:ae:3f:18:59:8f:cd:c7:7a: 88:9a:d3:ff:e8:00:b0:ce:20:db:fb:cf:37:02:a6:71:7d:f7: d4:77:c5:4b:c9:5f:29:38:71:c1:02:64:e1:7f:0f:c2:fb:f7: c8:71:2d:14:b5:19:8e:60:53:17:15:1a:3c:2a:54:99:ef:f2: 49:0b:99:38:aa:52:a5:87:ef:c0:f4:3b:23:82:b0:cb:2e:53: 42:37:13:18:44:14:3b:f3:68:db:f6:0e:3c:40:06:85:77:09: b9:84:d5:07:48:f8:e6:1a:df:36:5d:f2:05:32:88:01:b4:99: 7c:61:8e:6c:de:a0:7f:ee:16:79:9d:e4:aa:49:7e:7d:f8:74: 89:27:b6:55:d1:c8:f8:09:f2:fc:eb:34:f7:40:c7:55:dc:7b: c5:41:5c:1d:a3:d0:4b:88:75:30:da:32:17:c2:95:9b:81:5a: 37:8b:b4:0b:f2:b6:75:b9:fc:07:8a:e1:f9:0e:9e:38:65:e1: af:c9:1f:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IWOUrQEkotZGPy4gCbd9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzU4MmJjM2YwYmFkYjY2MWE2OWZiOWE0ODNiMzdlYzkw NTgyN2UwHhcNMjUxMjE5MTUwMTMzWhcNMjUxMjIwMTUwMTMzWjAzMTEwLwYDVQQD Eyg0ZWNhY2UyZjMxNjYzZThkODEwNjQzOWUxN2E2MTA3YmU1OGRmNzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/U1wrJzgjh7G5/FdEqmfcJeCAZ3 VC4jCRlIlfV1urM/SWc+YPRAnfmhkZXrZV1iSNm1jZ4U4o24DLNhrnBVLFZguyUH c5XJnTHQte34akExaKTK0l3yWJjGIV/jPYgRZ9qdja4pgbHf0gmK4O4KxJ6uW/pJ NvZSYmTIFotI6AcexXHfrivY5H9R48o6j6nkvO+uRU8RXiME76mbnmDN2hnuShJC kisukBdzA8sERDi0xVn+ursISA5KUqNAIDJB39BFkiWJuKT1OiIYB2J79Lu4fZYz /7mLKo34K0902K5fAP9WQergxms6HvQRAcjh1xSE6TvVQuLnCx437nwPFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7Kzi8xZj6NgQZDnhemEHvljfeYMB8GA1UdIwQY MBaAFFl1grw/C622YaafuaSDs37JBYJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hXQ3ZEOExyYlpocHAtNXBJT3pmc2tGZ240LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80ODg5OGItZjliNC00NWI0LTk5M2Yt ZThhMWRjOGUzZmZjLzEvV1hXQ3ZEOExyYlpocHAtNXBJT3pmc2tGZ240Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC80ODg5OGItZjliNC00NWI0LTk5M2YtZThhMWRjOGUzZmZj LzEvV1hXQ3ZEOExyYlpocHAtNXBJT3pmc2tGZ240LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAosz5Yzj/ V+xa0oRaQ5773wnVrr4ssLU0rddEWjy4bsbeAJdEatlkjED7EVqcxnElWGKfOleB m+E0uX0RGWsWwa4/GFmPzcd6iJrT/+gAsM4g2/vPNwKmcX331HfFS8lfKThxwQJk 4X8Pwvv3yHEtFLUZjmBTFxUaPCpUme/ySQuZOKpSpYfvwPQ7I4Kwyy5TQjcTGEQU O/No2/YOPEAGhXcJuYTVB0j45hrfNl3yBTKIAbSZfGGObN6gf+4WeZ3kqkl+ffh0 iSe2VdHI+Any/Os090DHVdx7xUFcHaPQS4h1MNoyF8KVm4FaN4u0C/K2dbn8B4rh +Q6eOGXhr8kfuQ== -----END CERTIFICATE-----Generated at Fri Dec 19 17:28:55 2025 by rpki-client