This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft File: WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft (raw, json) Hash identifier: z5NKB0dVlJLg9X71qE1ciZ4HFSGI7tcJpkB+J+q9/yY= Subject key identifier: 50:6C:E0:A5:BF:93:8A:74:96:13:A8:46:83:BB:E2:C0:D8:38:F0:DD Authority key identifier: 5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16 Certificate issuer: /CN=5a68d699d1a9457c78acfbec004f98677aa4cc16 Certificate serial: 019B71B4E8A1D7F0AE8D39BB6DD353CCB3B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft Manifest number: 17AA Signing time: Wed 31 Dec 2025 00:00:39 +0000 Manifest this update: Wed 31 Dec 2025 00:00:39 +0000 Manifest next update: Thu 01 Jan 2026 00:00:39 +0000 Files and hashes: 1: KOtOprlo9eWM-S3ee18Bkra0s7U.roa (hash: YzsVJr77Droy7DJXTIqItUpDk3Xa+3GyD3WsTRtaj84=) 2: PnDAeBphB2kiD9o4b1TlFW_oiEw.roa (hash: 80HIEeMh1J7mTJAl8xWdqZV3GTcdBhba2s3G/UCvDhk=) 3: VJASrMOyLg85AblR9YiVSWxHxZs.roa (hash: REvGVujT8OfpbkY6GeJPSg8UwmOkMcFqkev3bGvsPwQ=) 4: WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl (hash: gwfoEtzC7bX1hgfwveEZhI/E/l1YTuwWjUO/GOTw8lc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:b4:e8:a1:d7:f0:ae:8d:39:bb:6d:d3:53:cc:b3:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a68d699d1a9457c78acfbec004f98677aa4cc16 Validity Not Before: Dec 31 00:00:39 2025 GMT Not After : Jan 1 00:00:39 2026 GMT Subject: CN=506ce0a5bf938a749613a84683bbe2c0d838f0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fc:c6:24:ed:7a:b0:33:2e:bf:c4:62:7c:f0: 35:0d:be:82:b7:fc:ea:7e:cc:f5:3b:ce:78:f2:c7: c1:40:2f:be:e3:a9:de:92:e0:d2:97:de:5c:0b:1c: e9:46:1e:e2:c1:7b:be:c9:5e:02:48:61:4b:53:b5: 71:6f:69:08:a9:4c:97:75:33:93:50:0a:0e:24:bf: 96:1b:d3:75:90:91:d8:17:06:bd:4f:b9:6e:cf:59: 28:74:31:ca:40:23:40:54:e1:e2:a9:ad:4d:4f:60: ea:c8:07:fd:9b:4e:0e:88:cd:f9:5c:22:d2:39:b5: bd:18:3e:7b:ed:a7:6f:98:2f:72:82:3e:97:25:73: 13:d3:68:fe:94:85:2a:bd:ed:49:e4:00:9f:68:a3: cd:15:45:fe:45:64:1f:8e:e7:27:99:2b:5b:54:0e: e1:8a:b0:17:25:b6:17:8a:ac:f4:7f:11:b6:48:9e: 40:84:70:47:20:62:50:9c:b4:4e:62:94:48:03:dd: 2b:9a:3f:7a:a5:a9:d0:5f:30:64:9e:c3:fe:9b:bb: 25:7b:9e:8e:aa:94:19:f7:8b:d5:87:8e:b1:7f:13: ee:f7:1f:2a:42:50:3c:53:10:44:68:96:a0:1f:b3: 3c:c8:50:3f:a8:11:51:a6:e5:47:ec:a9:ae:3a:ad: 7f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6C:E0:A5:BF:93:8A:74:96:13:A8:46:83:BB:E2:C0:D8:38:F0:DD X509v3 Authority Key Identifier: keyid:5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:02:a1:a5:ef:c9:41:f4:da:d2:7b:82:01:36:b0:b0:be:b1: 4d:c2:67:7e:2d:72:3a:a3:e7:45:38:44:bc:7a:0e:83:85:ce: 47:22:2e:9c:e0:39:0b:80:cb:9a:fb:8c:83:03:d5:f8:e6:47: 83:fc:b3:9d:86:b3:21:eb:58:c6:a3:cc:2b:e7:f3:c6:b5:a9: 86:02:e5:d7:15:c7:ae:dd:5d:3c:a1:c6:c1:96:1c:3e:1e:7d: b9:4f:bd:ca:9d:0c:d6:3b:29:06:39:ee:c0:97:6e:ae:e8:ea: a2:d5:67:13:8e:36:74:22:37:46:c3:c9:d1:ce:2d:07:f1:d5: c9:f4:f7:1f:bb:8b:62:44:67:a3:ea:30:50:96:2d:a5:73:10: 83:a1:6a:48:19:a1:c7:fc:b7:86:bf:c4:51:78:4d:bf:7f:81: 9b:a5:2e:8b:34:9f:3f:ed:14:04:cc:a0:30:45:6a:3e:ea:34: 0b:ba:9f:91:4a:8b:f0:e1:d1:1e:9e:00:e2:56:70:50:0e:3f: 7f:9b:af:bd:65:eb:58:72:19:41:fa:21:44:dd:e3:ae:33:d2: cf:47:41:98:e6:e2:94:58:db:98:d5:cd:8e:c4:6c:cf:e5:8f: 95:6b:e0:a7:2e:cd:95:50:7c:7f:15:08:ba:e9:fe:d1:ca:51: fd:15:9c:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxtOih1/CujTm7bdNTzLOxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNjhkNjk5ZDFhOTQ1N2M3OGFjZmJlYzAwNGY5ODY3N2Fh NGNjMTYwHhcNMjUxMjMxMDAwMDM5WhcNMjYwMTAxMDAwMDM5WjAzMTEwLwYDVQQD Eyg1MDZjZTBhNWJmOTM4YTc0OTYxM2E4NDY4M2JiZTJjMGQ4MzhmMGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvzGJO16sDMuv8RifPA1Db6Ct/zq fsz1O8548sfBQC++46nekuDSl95cCxzpRh7iwXu+yV4CSGFLU7Vxb2kIqUyXdTOT UAoOJL+WG9N1kJHYFwa9T7luz1kodDHKQCNAVOHiqa1NT2DqyAf9m04OiM35XCLS ObW9GD577advmC9ygj6XJXMT02j+lIUqve1J5ACfaKPNFUX+RWQfjucnmStbVA7h irAXJbYXiqz0fxG2SJ5AhHBHIGJQnLROYpRIA90rmj96panQXzBknsP+m7sle56O qpQZ94vVh46xfxPu9x8qQlA8UxBEaJagH7M8yFA/qBFRpuVH7KmuOq1/LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBs4KW/k4p0lhOoRoO74sDYOPDdMB8GA1UdIwQY MBaAFFpo1pnRqUV8eKz77ABPmGd6pMwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV21qV21kR3BSWHg0clB2c0FFLVlaM3FrekJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lMjhiYTYtYWFhZi00ZDMzLWI4ZGMt MGFlZTM2MGIwYmE0LzEvV21qV21kR3BSWHg0clB2c0FFLVlaM3FrekJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lMjhiYTYtYWFhZi00ZDMzLWI4ZGMtMGFlZTM2MGIwYmE0 LzEvV21qV21kR3BSWHg0clB2c0FFLVlaM3FrekJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAKhpe/J QfTa0nuCATawsL6xTcJnfi1yOqPnRThEvHoOg4XORyIunOA5C4DLmvuMgwPV+OZH g/yznYazIetYxqPMK+fzxrWphgLl1xXHrt1dPKHGwZYcPh59uU+9yp0M1jspBjnu wJdurujqotVnE442dCI3RsPJ0c4tB/HVyfT3H7uLYkRno+owUJYtpXMQg6FqSBmh x/y3hr/EUXhNv3+Bm6UuizSfP+0UBMygMEVqPuo0C7qfkUqL8OHRHp4A4lZwUA4/ f5uvvWXrWHIZQfohRN3jrjPSz0dBmObilFjbmNXNjsRsz+WPlWvgpy7NlVB8fxUI uun+0cpR/RWc5w== -----END CERTIFICATE-----Generated at Wed Dec 31 09:02:58 2025 by rpki-client