This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft File: wTyftZyZzftKbYQpzYNwWQYBKxE.mft (raw, json) Hash identifier: kEN/VhVutBecrKMyf24ts8M9tooJGESSGxFbP7PMjP0= Subject key identifier: E3:31:1E:05:33:A2:E0:06:BB:25:9E:8C:00:3A:45:C3:DA:D8:58:4F Authority key identifier: C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11 Certificate issuer: /CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11 Certificate serial: 019B3C7F326F2DEDAB959797D90790D167AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft Manifest number: 14FD Signing time: Sat 20 Dec 2025 16:02:07 +0000 Manifest this update: Sat 20 Dec 2025 16:02:07 +0000 Manifest next update: Sun 21 Dec 2025 16:02:07 +0000 Files and hashes: 1: wTyftZyZzftKbYQpzYNwWQYBKxE.crl (hash: 4QZ7aUSjsv36LLMtCT9X8xK98+8yrSaZJy7ajXB8Td4=) 2: wm9tUTBVefniioWBZrb7irgwhJc.asa (hash: F8sAZqeufIvBYN41vgHg6M8nR40JgfypfcChyBwM9Rk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:32:6f:2d:ed:ab:95:97:97:d9:07:90:d1:67:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11 Validity Not Before: Dec 20 16:02:07 2025 GMT Not After : Dec 21 16:02:07 2025 GMT Subject: CN=e3311e0533a2e006bb259e8c003a45c3dad8584f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bd:3e:06:b1:1a:cc:30:e2:54:ed:e3:4e:dd: 99:5e:8f:38:30:d4:89:e9:1d:6f:4f:28:9c:cf:cc: 60:67:42:56:d5:ae:97:a5:9e:17:5c:8f:c5:a4:15: 49:db:7a:3f:43:3c:b1:5e:fb:8b:3f:3d:e6:22:cb: c0:c9:3c:8a:08:95:71:65:4c:0b:3a:44:88:1a:b2: bb:af:69:c7:8a:af:76:a4:7d:98:f9:9c:25:fa:f9: 40:cb:3c:96:a1:4b:08:7a:bf:d7:8c:8f:b8:a5:d7: de:48:9a:49:c6:11:b6:6a:ff:bc:34:15:8d:1c:96: c2:3f:5b:97:7f:0f:56:30:7d:92:08:bd:a2:fe:36: 8f:fd:d6:50:52:4f:70:d1:df:7c:51:0e:e6:67:2b: 62:85:85:48:09:1d:b7:4c:71:a6:ac:ad:5c:0d:79: 90:45:66:39:4d:c6:8b:c0:e8:65:cc:5b:15:58:29: ce:59:3b:ea:ce:48:97:94:ce:81:4b:04:0d:f6:b3: b1:42:7e:5f:78:6b:65:e1:c4:11:be:e5:a7:88:c7: d9:b7:58:b5:4e:bc:59:52:96:be:3c:96:de:a8:03: b8:43:7a:da:2c:ec:78:5d:d8:34:e3:9f:f6:f6:44: 5f:7b:92:b1:44:12:08:61:70:f2:bd:d3:f3:6a:94: bd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:31:1E:05:33:A2:E0:06:BB:25:9E:8C:00:3A:45:C3:DA:D8:58:4F X509v3 Authority Key Identifier: keyid:C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f2:20:18:bb:a0:8b:d0:97:97:ef:70:f8:da:f6:02:da:71: c3:82:30:f3:6e:cc:80:45:c7:53:51:be:c0:3d:0f:77:15:d0: e3:00:c8:ed:75:57:9d:53:db:a4:94:7d:88:16:fc:6e:84:62: d1:eb:21:09:5a:b3:21:1b:c2:29:64:25:36:77:ce:87:66:89: d2:2d:2a:7d:2f:5a:91:c2:06:f3:f3:6c:17:0f:ac:d0:db:55: 9f:7d:ae:36:15:76:ba:b5:99:6c:51:95:3c:72:d7:5e:17:d3: 01:5b:32:26:7b:f9:fd:f4:ed:b4:6a:a1:01:d4:d7:5f:89:87: bd:be:d0:b5:61:ff:56:7a:89:5d:f3:af:96:a2:fc:a6:c8:77: 21:de:1e:2f:b0:04:95:c6:65:e1:e7:39:0d:97:0a:42:e3:80: bf:27:68:64:16:76:d6:3a:6a:dc:60:c6:4d:50:7c:b2:f4:e3: 12:09:2d:f8:56:19:06:db:d7:8a:f5:11:58:c2:c0:55:98:90: b5:65:91:b7:ee:8f:94:ca:95:86:bd:ca:7b:c3:32:6c:d4:a9: bf:64:4a:df:e7:2e:f5:ff:fa:ad:4e:d2:3e:0b:f9:f6:b4:ab: d1:c5:04:eb:28:60:31:c6:93:54:96:9a:3b:4d:d9:14:31:0e: cb:2a:4a:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fzJvLe2rlZeX2QeQ0WerMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxM2M5ZmI1OWM5OWNkZmI0YTZkODQyOWNkODM3MDU5MDYw MTJiMTEwHhcNMjUxMjIwMTYwMjA3WhcNMjUxMjIxMTYwMjA3WjAzMTEwLwYDVQQD EyhlMzMxMWUwNTMzYTJlMDA2YmIyNTllOGMwMDNhNDVjM2RhZDg1ODRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L0+BrEazDDiVO3jTt2ZXo84MNSJ 6R1vTyicz8xgZ0JW1a6XpZ4XXI/FpBVJ23o/QzyxXvuLPz3mIsvAyTyKCJVxZUwL OkSIGrK7r2nHiq92pH2Y+Zwl+vlAyzyWoUsIer/XjI+4pdfeSJpJxhG2av+8NBWN HJbCP1uXfw9WMH2SCL2i/jaP/dZQUk9w0d98UQ7mZytihYVICR23THGmrK1cDXmQ RWY5TcaLwOhlzFsVWCnOWTvqzkiXlM6BSwQN9rOxQn5feGtl4cQRvuWniMfZt1i1 TrxZUpa+PJbeqAO4Q3raLOx4Xdg045/29kRfe5KxRBIIYXDyvdPzapS9cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMxHgUzouAGuyWejAA6RcPa2FhPMB8GA1UdIwQY MBaAFME8n7Wcmc37Sm2EKc2DcFkGASsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1R5ZnRaeVp6ZnRLYllRcHpZTndXUVlCS3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9hNzFkMDYtYjE0MC00Njk1LTg5MWMt YWRlYzA3ZDIyZjQ2LzEvd1R5ZnRaeVp6ZnRLYllRcHpZTndXUVlCS3hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9hNzFkMDYtYjE0MC00Njk1LTg5MWMtYWRlYzA3ZDIyZjQ2 LzEvd1R5ZnRaeVp6ZnRLYllRcHpZTndXUVlCS3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfIgGLug i9CXl+9w+Nr2Atpxw4Iw827MgEXHU1G+wD0PdxXQ4wDI7XVXnVPbpJR9iBb8boRi 0eshCVqzIRvCKWQlNnfOh2aJ0i0qfS9akcIG8/NsFw+s0NtVn32uNhV2urWZbFGV PHLXXhfTAVsyJnv5/fTttGqhAdTXX4mHvb7QtWH/VnqJXfOvlqL8psh3Id4eL7AE lcZl4ec5DZcKQuOAvydoZBZ21jpq3GDGTVB8svTjEgkt+FYZBtvXivURWMLAVZiQ tWWRt+6PlMqVhr3Ke8MybNSpv2RK3+cu9f/6rU7SPgv59rSr0cUE6yhgMcaTVJaa O03ZFDEOyypKLQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:37:02 2025 by rpki-client