This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft File: Wik9777xDXPPEfK-hlVYjtpopEw.mft (raw, json) Hash identifier: jiRDBtx3TTI8LTra91KDOzacRhAo1/nIMZuJOd8ko2U= Subject key identifier: A2:16:7F:87:7B:E6:06:45:9C:19:E1:8B:57:B4:60:8B:31:68:26:4F Authority key identifier: 5A:29:3D:EF:BE:F1:0D:73:CF:11:F2:BE:86:55:58:8E:DA:68:A4:4C Certificate issuer: /CN=5a293defbef10d73cf11f2be8655588eda68a44c Certificate serial: 019B56ABA3659A625DB111DCF1A873DB186D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft Manifest number: 02B5 Signing time: Thu 25 Dec 2025 18:00:47 +0000 Manifest this update: Thu 25 Dec 2025 18:00:47 +0000 Manifest next update: Fri 26 Dec 2025 18:00:47 +0000 Files and hashes: 1: Wik9777xDXPPEfK-hlVYjtpopEw.crl (hash: 1L7kGTAPzdjvSTtL0H/Nh0t972KEmF0hBk7rbj0INmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.crl rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 18:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:ab:a3:65:9a:62:5d:b1:11:dc:f1:a8:73:db:18:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a293defbef10d73cf11f2be8655588eda68a44c Validity Not Before: Dec 25 18:00:47 2025 GMT Not After : Dec 26 18:00:47 2025 GMT Subject: CN=a2167f877be606459c19e18b57b4608b3168264f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:61:ee:98:43:56:1f:1d:61:63:b3:80:03:4b: 06:d8:43:6d:7f:30:10:a9:55:05:fd:49:24:df:83: 2f:55:5d:3b:e1:80:1b:54:5f:4f:5a:e5:3e:63:1b: 64:03:63:3c:13:eb:00:38:c7:96:8e:c1:af:8e:3a: 4a:72:5f:4f:3d:50:12:59:d0:3c:59:0a:4c:df:03: 23:81:66:31:3b:da:54:59:4c:e6:28:a4:69:84:e6: b0:96:64:1b:00:db:00:55:7b:09:73:44:48:3d:b5: 18:36:fc:6e:b4:c9:b4:b3:a3:fd:02:b7:80:a4:eb: 91:59:43:b7:14:98:a7:8f:db:c2:a8:49:f0:c1:ba: 9a:55:09:6b:7f:a8:06:b8:c1:16:47:fa:a7:b2:46: 88:c1:92:a6:49:69:7b:1f:15:4f:ce:a3:ed:49:28: 73:7a:e6:33:9e:36:a9:82:3c:06:74:06:1c:f4:98: ae:58:58:30:ee:34:9f:aa:5f:f0:e3:bf:0c:e5:2d: 9f:ba:9e:0b:f1:3f:10:31:24:b9:93:7a:41:1c:e0: 3c:36:9c:1d:b3:66:75:3c:e3:8e:cd:9a:02:6f:9f: 61:42:ce:2d:c9:bb:ca:d2:99:a4:aa:87:55:e3:64: 52:e3:ec:56:f8:ae:10:6d:c9:c0:f3:e8:02:d7:d4: b3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:16:7F:87:7B:E6:06:45:9C:19:E1:8B:57:B4:60:8B:31:68:26:4F X509v3 Authority Key Identifier: keyid:5A:29:3D:EF:BE:F1:0D:73:CF:11:F2:BE:86:55:58:8E:DA:68:A4:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wik9777xDXPPEfK-hlVYjtpopEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0fe53e-0ca3-4c61-b297-543e21426908/1/Wik9777xDXPPEfK-hlVYjtpopEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:6e:f1:a8:87:48:18:39:92:33:2d:62:f1:5c:56:cd:28:a1: e9:47:36:12:92:7e:b6:69:1d:a9:91:37:85:fa:d2:34:32:21: f2:20:74:04:6a:26:62:f6:87:0b:18:14:c0:78:01:bd:53:a5: 3b:8c:c7:bf:30:e9:7a:06:74:00:ac:83:1b:5d:90:89:5f:78: f1:fb:4c:5a:f4:26:f1:67:74:81:4a:2b:ea:8c:ec:9c:dd:5c: 02:74:43:82:6f:8d:6d:28:96:39:d8:cb:29:fc:c4:b9:f1:60: d7:87:45:aa:58:ec:07:fa:f9:27:1d:3e:48:95:84:dc:6c:7e: 81:7d:ae:b7:a5:84:69:5f:fa:f4:d9:b8:1a:79:e4:e5:fd:85: b9:84:b4:63:c3:98:86:1d:5e:81:62:47:94:49:54:00:81:10: bd:49:e9:37:80:5f:90:04:58:69:30:9c:4b:a4:a2:3f:20:1b: 72:bc:d5:78:58:9e:65:70:7d:6c:97:94:d5:87:0e:f9:c1:7b: 55:b3:cc:41:b5:f3:f6:e3:1a:5d:d0:97:f3:f7:da:91:81:0f: 91:c9:32:c9:2f:62:94:0f:21:7b:d3:b9:6b:36:c1:21:61:e4: 1b:fc:36:1a:24:e9:dc:7f:51:ce:51:fd:15:c2:dd:da:47:fc: c5:57:55:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWq6NlmmJdsRHc8ahz2xhtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMjkzZGVmYmVmMTBkNzNjZjExZjJiZTg2NTU1ODhlZGE2 OGE0NGMwHhcNMjUxMjI1MTgwMDQ3WhcNMjUxMjI2MTgwMDQ3WjAzMTEwLwYDVQQD EyhhMjE2N2Y4NzdiZTYwNjQ1OWMxOWUxOGI1N2I0NjA4YjMxNjgyNjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmHumENWHx1hY7OAA0sG2ENtfzAQ qVUF/Ukk34MvVV074YAbVF9PWuU+YxtkA2M8E+sAOMeWjsGvjjpKcl9PPVASWdA8 WQpM3wMjgWYxO9pUWUzmKKRphOawlmQbANsAVXsJc0RIPbUYNvxutMm0s6P9AreA pOuRWUO3FJinj9vCqEnwwbqaVQlrf6gGuMEWR/qnskaIwZKmSWl7HxVPzqPtSShz euYznjapgjwGdAYc9JiuWFgw7jSfql/w478M5S2fup4L8T8QMSS5k3pBHOA8Npwd s2Z1POOOzZoCb59hQs4tybvK0pmkqodV42RS4+xW+K4QbcnA8+gC19SzVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIWf4d75gZFnBnhi1e0YIsxaCZPMB8GA1UdIwQY MBaAFFopPe++8Q1zzxHyvoZVWI7aaKRMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2lrOTc3N3hEWFBQRWZLLWhsVllqdHBvcEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wZmU1M2UtMGNhMy00YzYxLWIyOTct NTQzZTIxNDI2OTA4LzEvV2lrOTc3N3hEWFBQRWZLLWhsVllqdHBvcEV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8wZmU1M2UtMGNhMy00YzYxLWIyOTctNTQzZTIxNDI2OTA4 LzEvV2lrOTc3N3hEWFBQRWZLLWhsVllqdHBvcEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJW7xqIdI GDmSMy1i8VxWzSih6Uc2EpJ+tmkdqZE3hfrSNDIh8iB0BGomYvaHCxgUwHgBvVOl O4zHvzDpegZ0AKyDG12QiV948ftMWvQm8Wd0gUor6ozsnN1cAnRDgm+NbSiWOdjL KfzEufFg14dFqljsB/r5Jx0+SJWE3Gx+gX2ut6WEaV/69Nm4Gnnk5f2FuYS0Y8OY hh1egWJHlElUAIEQvUnpN4BfkARYaTCcS6SiPyAbcrzVeFieZXB9bJeU1YcO+cF7 VbPMQbXz9uMaXdCX8/fakYEPkckyyS9ilA8he9O5azbBIWHkG/w2GiTp3H9RzlH9 FcLd2kf8xVdVZA== -----END CERTIFICATE-----Generated at Thu Dec 25 22:15:51 2025 by rpki-client