This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft File: wg5lyt2-zUjS-HeHmTEThCvfzl0.mft (raw, json) Hash identifier: rYn9gXS0f7U7tP7SU2NlB2AAMq2TddQHG6zxrQG/dJ0= Subject key identifier: CB:77:F3:56:54:FA:8C:4B:06:D1:1E:64:52:88:7B:25:3A:53:51:91 Authority key identifier: C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D Certificate issuer: /CN=c20e65caddbecd48d2f87787993113842bdfce5d Certificate serial: 019B3CEBA7CBAA87F87C273F77F2427A0D69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft Manifest number: 1210 Signing time: Sat 20 Dec 2025 18:00:35 +0000 Manifest this update: Sat 20 Dec 2025 18:00:35 +0000 Manifest next update: Sun 21 Dec 2025 18:00:35 +0000 Files and hashes: 1: 7kdmagU4QbQazPFAKJN_jh3ESjI.roa (hash: UKie7fx67vGuUXCr+OJM9sf2md8+FYbcDpZ0gOMQ3f0=) 2: oMWup55nUaojGXh2IYtrkxVaIxk.roa (hash: IgvfZQFj2syunyqqYTcXoGNSKYWlXxrN3iDEjFeptJ0=) 3: wg5lyt2-zUjS-HeHmTEThCvfzl0.crl (hash: HTMfjPE6fKVkGF78pclsqrhmOQgbvrglGg12u46N70k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:a7:cb:aa:87:f8:7c:27:3f:77:f2:42:7a:0d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c20e65caddbecd48d2f87787993113842bdfce5d Validity Not Before: Dec 20 18:00:35 2025 GMT Not After : Dec 21 18:00:35 2025 GMT Subject: CN=cb77f35654fa8c4b06d11e6452887b253a535191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:01:50:43:b3:ec:53:89:b4:02:c1:b1:01:7d: 37:48:52:d8:33:ac:0f:13:2d:2f:60:32:7b:6d:99: f1:d2:01:18:c9:b4:6e:1d:6c:f5:ab:2d:ea:52:73: 08:f4:f8:57:90:73:0d:db:7a:3c:5f:19:c5:14:d4: 11:d8:bc:f8:3f:be:b4:57:41:d1:97:e4:8a:38:20: 39:4d:c2:65:47:e5:90:44:9d:d9:cd:f9:07:65:a7: 58:90:d4:10:3e:0f:95:90:bd:cb:24:ef:01:56:18: d8:b0:bc:04:7d:ac:2d:30:6d:0c:cd:3c:08:31:c5: 98:af:0a:94:93:90:05:16:15:c5:71:a0:cc:fc:ec: fa:63:cc:4a:b8:76:a7:a4:92:c7:d7:f9:21:cd:6d: 2e:0b:e0:43:61:37:1b:2d:3a:af:82:be:77:14:43: ce:44:ad:37:7d:f2:ea:75:e2:19:23:88:1c:e0:cd: 3a:d0:c2:34:16:4d:c4:08:6a:83:40:1a:6d:c0:58: 47:2f:7d:f1:d2:f3:94:ce:e6:d5:ee:f3:ff:5a:02: 88:15:86:2f:a1:cd:7b:d9:f2:14:04:e7:e0:9f:fc: 66:ab:05:0a:f4:3e:42:8e:4b:6a:e2:6d:54:74:9a: b6:09:4a:ad:00:d1:b2:bf:5f:ad:15:27:bc:d4:18: ce:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:77:F3:56:54:FA:8C:4B:06:D1:1E:64:52:88:7B:25:3A:53:51:91 X509v3 Authority Key Identifier: keyid:C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d6:7e:c7:2f:a2:cf:01:06:9b:66:3b:35:3e:34:ac:b8:b4: b4:14:19:d7:36:65:72:be:15:ae:fc:e7:b5:6b:00:2e:7a:5d: 05:cb:5c:44:9f:0c:47:31:cc:c7:46:0c:17:39:71:e4:d1:1c: b4:a2:b0:2e:95:7b:a3:c8:53:49:45:c2:7b:bc:0c:28:b7:68: 01:b1:e7:34:37:24:0a:bd:af:b0:bc:3c:2f:22:38:e6:b9:b6: 00:3d:b5:13:e7:09:ab:0d:ba:be:0f:e8:6e:71:95:15:d7:8d: c3:39:e3:cd:fb:56:de:8b:45:65:5a:d2:8d:ae:1d:27:82:a4: db:c6:e2:db:f1:33:6f:c6:c6:2c:58:d8:e1:bd:dc:e6:6b:8f: c1:ca:34:34:86:27:06:ff:48:93:1a:85:a9:a0:ed:8b:73:5b: 94:98:c2:b7:06:2d:ed:c4:84:d7:a9:94:59:08:b0:04:77:fd: 9c:85:8a:c4:72:10:6e:97:e3:bc:bf:20:d4:3c:ec:b4:01:05: 0f:50:3a:00:bd:45:8c:0c:b3:f4:ee:f8:a1:f7:98:0a:76:29: dc:4a:b7:c0:11:2d:4c:ca:56:ce:54:1b:6f:af:b9:87:d6:5d: ab:78:6b:59:c7:e2:e3:5c:41:67:d1:99:f9:4d:05:6c:a1:d1: 66:da:20:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs866fLqof4fCc/d/JCeg1pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMGU2NWNhZGRiZWNkNDhkMmY4Nzc4Nzk5MzExMzg0MmJk ZmNlNWQwHhcNMjUxMjIwMTgwMDM1WhcNMjUxMjIxMTgwMDM1WjAzMTEwLwYDVQQD EyhjYjc3ZjM1NjU0ZmE4YzRiMDZkMTFlNjQ1Mjg4N2IyNTNhNTM1MTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywFQQ7PsU4m0AsGxAX03SFLYM6wP Ey0vYDJ7bZnx0gEYybRuHWz1qy3qUnMI9PhXkHMN23o8XxnFFNQR2Lz4P760V0HR l+SKOCA5TcJlR+WQRJ3ZzfkHZadYkNQQPg+VkL3LJO8BVhjYsLwEfawtMG0MzTwI McWYrwqUk5AFFhXFcaDM/Oz6Y8xKuHanpJLH1/khzW0uC+BDYTcbLTqvgr53FEPO RK03ffLqdeIZI4gc4M060MI0Fk3ECGqDQBptwFhHL33x0vOUzubV7vP/WgKIFYYv oc172fIUBOfgn/xmqwUK9D5Cjktq4m1UdJq2CUqtANGyv1+tFSe81BjO0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMt381ZU+oxLBtEeZFKIeyU6U1GRMB8GA1UdIwQY MBaAFMIOZcrdvs1I0vh3h5kxE4Qr385dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zNWVhZDItNGFhNC00ZmYwLWI1Y2It N2VmYWE0YTc0Zjk3LzEvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8zNWVhZDItNGFhNC00ZmYwLWI1Y2ItN2VmYWE0YTc0Zjk3 LzEvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtZ+xy+i zwEGm2Y7NT40rLi0tBQZ1zZlcr4VrvzntWsALnpdBctcRJ8MRzHMx0YMFzlx5NEc tKKwLpV7o8hTSUXCe7wMKLdoAbHnNDckCr2vsLw8LyI45rm2AD21E+cJqw26vg/o bnGVFdeNwznjzftW3otFZVrSja4dJ4Kk28bi2/Ezb8bGLFjY4b3c5muPwco0NIYn Bv9IkxqFqaDti3NblJjCtwYt7cSE16mUWQiwBHf9nIWKxHIQbpfjvL8g1DzstAEF D1A6AL1FjAyz9O74ofeYCnYp3Eq3wBEtTMpWzlQbb6+5h9Zdq3hrWcfi41xBZ9GZ +U0FbKHRZtogkA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:07:53 2025 by rpki-client